, 0x200003, 0x0) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x50}}}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4044895}, 0x48005) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, r1, 0x0, [0x47, 0x7fff]}, {0x80000000, 0x0, 0x6, [0x1, 0xff]}, 0x4, [0x1fb, 0x8]}) (async) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14, 0x80000) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000005c0)=@req={0x80000000, 0x6, 0x1f, 0x6}, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000500)) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) 00:20:47 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040)=[{0x80000000}], &(0x7f0000000080)=[{{0x80000000}}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000140)={r1}) (async) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000280)) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000240)={{r5, r2, 0x7, [0x2, 0xfffffff8]}, {r0, 0x0, 0x1, [0x3, 0x4]}, 0x0, [0x7c, 0x9b]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0x5450, 0x0) 00:20:47 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x8, 0x420800) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x6, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, &(0x7f00000005c0)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x541b, 0x0) syz_open_dev$media(&(0x7f0000000180), 0x8046, 0x40203) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r4, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000240)}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000000)={{r6, 0x0, 0x5, [0x7, 0x5]}, {0x80000000, 0x0, 0x1, [0xd274, 0x4]}, 0x10000000, [0xffffff01, 0x1]}) 00:20:47 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/b2c2_flexcop', 0x400042, 0x108) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) bind$bt_sco(r1, &(0x7f0000000080), 0x8) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="2a785c1a64376ac8128862c36168566e47df745459a65b6ea89ad7746d95d9fe322776e5467d583d4109cdad9e1f332fef7da2a49b66ebf2ef4c99630835f1f126fe3f02ed6340b5ac62817b60a8378c40bcd2b4293871f94d6f9ac9296bbad8f9154789f688dd05621f885fdf83a12f6f95aa8bdbad80f5af2d59008297eda588243a1d03", 0x85, 0x800, &(0x7f0000000200)={0x11, 0x1, 0x0, 0x1, 0x17, 0x6, @broadcast}, 0x14) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/b2c2_flexcop', 0x400042, 0x108) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) (async) bind$bt_sco(r1, &(0x7f0000000080), 0x8) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="2a785c1a64376ac8128862c36168566e47df745459a65b6ea89ad7746d95d9fe322776e5467d583d4109cdad9e1f332fef7da2a49b66ebf2ef4c99630835f1f126fe3f02ed6340b5ac62817b60a8378c40bcd2b4293871f94d6f9ac9296bbad8f9154789f688dd05621f885fdf83a12f6f95aa8bdbad80f5af2d59008297eda588243a1d03", 0x85, 0x800, &(0x7f0000000200)={0x11, 0x1, 0x0, 0x1, 0x17, 0x6, @broadcast}, 0x14) (async) 00:20:47 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:47 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x44300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) write$tcp_mem(r1, &(0x7f0000000040)={0x5f2, 0x20, 0x7fffffffffffffff, 0x20, 0x58}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x301100, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r1, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x7f81}, @broadcast, @random="111eb721ea0d"}}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x8, 0x0, 0xf0f0f0f0}) 00:20:47 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x8, 0x420800) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x6, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, &(0x7f00000005c0)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x541b, 0x0) syz_open_dev$media(&(0x7f0000000180), 0x8046, 0x40203) (async) syz_open_dev$media(&(0x7f0000000180), 0x8046, 0x40203) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r4, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000240)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000240)}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) (async) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000000)={{r6, 0x0, 0x5, [0x7, 0x5]}, {0x80000000, 0x0, 0x1, [0xd274, 0x4]}, 0x10000000, [0xffffff01, 0x1]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000000)={{r6, 0x0, 0x5, [0x7, 0x5]}, {0x80000000, 0x0, 0x1, [0xd274, 0x4]}, 0x10000000, [0xffffff01, 0x1]}) 00:20:47 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:47 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/b2c2_flexcop', 0x400042, 0x108) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) bind$bt_sco(r1, &(0x7f0000000080), 0x8) (async) bind$bt_sco(r1, &(0x7f0000000080), 0x8) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="2a785c1a64376ac8128862c36168566e47df745459a65b6ea89ad7746d95d9fe322776e5467d583d4109cdad9e1f332fef7da2a49b66ebf2ef4c99630835f1f126fe3f02ed6340b5ac62817b60a8378c40bcd2b4293871f94d6f9ac9296bbad8f9154789f688dd05621f885fdf83a12f6f95aa8bdbad80f5af2d59008297eda588243a1d03", 0x85, 0x800, &(0x7f0000000200)={0x11, 0x1, 0x0, 0x1, 0x17, 0x6, @broadcast}, 0x14) 00:20:47 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x44300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) write$tcp_mem(r1, &(0x7f0000000040)={0x5f2, 0x20, 0x7fffffffffffffff, 0x20, 0x58}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x301100, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r1, 0x1) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x7f81}, @broadcast, @random="111eb721ea0d"}}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc000) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x8, 0x0, 0xf0f0f0f0}) 00:20:47 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xa, 0x99, {0x2, 0x28}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x854) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x70, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x72}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_PMK={0x20, 0xfe, "6b927586f8b3d3a8906a4603c06368d45c5f986a9c7d0f463195b950"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0b]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r3}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r3}) 00:20:47 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = socket$isdn(0x22, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000003180)={'wg2\x00'}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2100e400", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e060006004e230000"], 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x84) accept4$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000140), 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xfbfbfbfb}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000003180)={'wg0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) bind$isdn(r1, &(0x7f0000000180)={0x22, 0x6, 0x3, 0x0, 0x1c}, 0x6) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000100)={0x1ff}) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300), &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x1, 0x5, 0x3}) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000001, 0x12, 0xffffffffffffffff, 0x61000) 00:20:47 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x8, 0x420800) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x6, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, &(0x7f00000005c0)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x541b, 0x0) (async) syz_open_dev$media(&(0x7f0000000180), 0x8046, 0x40203) (async) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r4, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000240)}) (async) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) (async) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000000)={{r6, 0x0, 0x5, [0x7, 0x5]}, {0x80000000, 0x0, 0x1, [0xd274, 0x4]}, 0x10000000, [0xffffff01, 0x1]}) 00:20:47 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x400002) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:47 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x44300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) write$tcp_mem(r1, &(0x7f0000000040)={0x5f2, 0x20, 0x7fffffffffffffff, 0x20, 0x58}, 0x48) (async) write$tcp_mem(r1, &(0x7f0000000040)={0x5f2, 0x20, 0x7fffffffffffffff, 0x20, 0x58}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x301100, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x301100, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r1, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x7f81}, @broadcast, @random="111eb721ea0d"}}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc000) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x7f81}, @broadcast, @random="111eb721ea0d"}}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x8, 0x0, 0xf0f0f0f0}) 00:20:47 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:47 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xa, 0x99, {0x2, 0x28}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x854) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x70, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x72}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_PMK={0x20, 0xfe, "6b927586f8b3d3a8906a4603c06368d45c5f986a9c7d0f463195b950"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0b]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r3}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r3}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xa, 0x99, {0x2, 0x28}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x854) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x70, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x72}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_PMK={0x20, 0xfe, "6b927586f8b3d3a8906a4603c06368d45c5f986a9c7d0f463195b950"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0b]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) (async) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) (async) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r3}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r3}) (async) 00:20:47 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x608400) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) 00:20:47 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x400002) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:47 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x2, 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:47 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0xd2002) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='memory.oom.group\x00', 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{0x80000000}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000280), 0x2, 0x0, &(0x7f0000000440)=[{}, {}], 0x7, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000700)={r2, &(0x7f0000000640), &(0x7f0000000680)}) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f00000007c0)=""/20, &(0x7f0000000800)=0x14) 00:20:47 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xa, 0x99, {0x2, 0x28}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x854) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x70, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x72}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_PMK={0x20, 0xfe, "6b927586f8b3d3a8906a4603c06368d45c5f986a9c7d0f463195b950"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0b]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x70, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x72}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_PMK={0x20, 0xfe, "6b927586f8b3d3a8906a4603c06368d45c5f986a9c7d0f463195b950"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0b]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r3}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r3}) 00:20:47 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x608400) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x608400) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) (async) 00:20:47 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x400002) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:47 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x2, 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:47 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = socket$isdn(0x22, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000003180)={'wg2\x00'}) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2100e400", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e060006004e230000"], 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x84) (async) accept4$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) (async) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000140), 0x4) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xfbfbfbfb}) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000003180)={'wg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) (async) bind$isdn(r1, &(0x7f0000000180)={0x22, 0x6, 0x3, 0x0, 0x1c}, 0x6) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000100)={0x1ff}) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300), &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x1, 0x5, 0x3}) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000001, 0x12, 0xffffffffffffffff, 0x61000) 00:20:47 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0xd2002) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='memory.oom.group\x00', 0x2, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{0x80000000}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000280), 0x2, 0x0, &(0x7f0000000440)=[{}, {}], 0x7, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000700)={r2, &(0x7f0000000640), &(0x7f0000000680)}) (async) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f00000007c0)=""/20, &(0x7f0000000800)=0x14) 00:20:47 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:47 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x2, 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:47 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x608400) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (rerun: 32) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) 00:20:47 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0xd2002) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='memory.oom.group\x00', 0x2, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{0x80000000}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000280), 0x2, 0x0, &(0x7f0000000440)=[{}, {}], 0x7, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000700)={r2, &(0x7f0000000640), &(0x7f0000000680)}) (async) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f00000007c0)=""/20, &(0x7f0000000800)=0x14) 00:20:47 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000080)) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000880)={0x0, 0x8, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000640)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}]}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000900)={{r2, r4, 0x4, [0x3, 0x8000]}, {r6, 0x0, 0x0, [0x7]}, 0x4, [0x6, 0x7]}) 00:20:47 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:47 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:47 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000080)) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000880)={0x0, 0x8, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000640)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}]}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) (async) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000900)={{r2, r4, 0x4, [0x3, 0x8000]}, {r6, 0x0, 0x0, [0x7]}, 0x4, [0x6, 0x7]}) 00:20:47 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000180)={r1}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 00:20:47 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000080)) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000880)={0x0, 0x8, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000880)={0x0, 0x8, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000640)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}]}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) (async) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000900)={{r2, r4, 0x4, [0x3, 0x8000]}, {r6, 0x0, 0x0, [0x7]}, 0x4, [0x6, 0x7]}) 00:20:47 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = socket$isdn(0x22, 0x3, 0x2) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000003180)={'wg2\x00'}) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2100e400", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e060006004e230000"], 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x84) (async, rerun: 64) accept4$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x80800) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) (async) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000140), 0x4) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xfbfbfbfb}) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000003180)={'wg0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) bind$isdn(r1, &(0x7f0000000180)={0x22, 0x6, 0x3, 0x0, 0x1c}, 0x6) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000100)={0x1ff}) (async) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300), &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x1, 0x5, 0x3}) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000001, 0x12, 0xffffffffffffffff, 0x61000) 00:20:47 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x5421, 0x0) 00:20:47 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:47 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:47 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000180)={r1}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000180)={r1}) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) 00:20:47 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffffe, 0x28082) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xaa}}, './file0\x00'}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000080)) 00:20:47 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x5421, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7c) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x5421, 0x0) (async) 00:20:47 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:47 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x3, @local}}, 0x1e) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:47 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000180)={r1}) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 00:20:47 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7c) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x5421, 0x0) 00:20:47 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='bic\x00', 0x4) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) 00:20:50 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1f000000000000002e2f666936092acf4b576c653000"]) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000500)="5771a93a46e415b420a634c2d24c6a55ee2e250dbe8085877429c969bac80cbbe2bca3251c159452566ac9ac2f0faae6c2f618487434a6b2c981217be92dc02d1df22e31951cc2b3dce17eaf1bbba50229300465b4e1da5d2dd1cd6853e6f9b826a639a0afad8ae6b9af901f4d98a8722f1f1d552175", 0x76}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000400)=""/229, &(0x7f0000000300)=0xe5) io_uring_setup(0x5d2b, &(0x7f0000000580)={0x0, 0xfdb, 0x20, 0x1, 0x3c7, 0x0, r3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x1, r2, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r5, 0x0, r2], 0x3, 0x100000}) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000040)) 00:20:50 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffffe, 0x28082) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xaa}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xaa}}, './file0\x00'}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000080)) 00:20:50 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x9, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:50 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='bic\x00', 0x4) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) (async) write$tcp_congestion(r0, &(0x7f0000000040)='bic\x00', 0x4) (async) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) (async) 00:20:50 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8000000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 00:20:50 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x3, @local}}, 0x1e) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:50 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8000000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 00:20:50 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffffe, 0x28082) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xaa}}, './file0\x00'}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000080)) 00:20:50 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x9, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:50 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1f000000000000002e2f666936092acf4b576c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1f000000000000002e2f666936092acf4b576c653000"]) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000500)="5771a93a46e415b420a634c2d24c6a55ee2e250dbe8085877429c969bac80cbbe2bca3251c159452566ac9ac2f0faae6c2f618487434a6b2c981217be92dc02d1df22e31951cc2b3dce17eaf1bbba50229300465b4e1da5d2dd1cd6853e6f9b826a639a0afad8ae6b9af901f4d98a8722f1f1d552175", 0x76}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000400)=""/229, &(0x7f0000000300)=0xe5) io_uring_setup(0x5d2b, &(0x7f0000000580)={0x0, 0xfdb, 0x20, 0x1, 0x3c7, 0x0, r3}) (async) io_uring_setup(0x5d2b, &(0x7f0000000580)={0x0, 0xfdb, 0x20, 0x1, 0x3c7, 0x0, r3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x1, r2, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r5, 0x0, r2], 0x3, 0x100000}) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000040)) 00:20:50 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x3, @local}}, 0x1e) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:50 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='bic\x00', 0x4) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) (async) write$tcp_congestion(r0, &(0x7f0000000040)='bic\x00', 0x4) (async) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) (async) 00:20:50 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x9, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x9, 0x4000) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) 00:20:50 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8000000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 00:20:50 executing program 4: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x200022, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x5450, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001040)={&(0x7f0000000040)=""/4096, 0x17a000, 0x0, 0x6, 0x1}, 0x20) 00:20:50 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1f000000000000002e2f666936092acf4b576c653000"]) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000500)="5771a93a46e415b420a634c2d24c6a55ee2e250dbe8085877429c969bac80cbbe2bca3251c159452566ac9ac2f0faae6c2f618487434a6b2c981217be92dc02d1df22e31951cc2b3dce17eaf1bbba50229300465b4e1da5d2dd1cd6853e6f9b826a639a0afad8ae6b9af901f4d98a8722f1f1d552175", 0x76}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000400)=""/229, &(0x7f0000000300)=0xe5) io_uring_setup(0x5d2b, &(0x7f0000000580)={0x0, 0xfdb, 0x20, 0x1, 0x3c7, 0x0, r3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x1, r2, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r5, 0x0, r2], 0x3, 0x100000}) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000040)) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1f000000000000002e2f666936092acf4b576c653000"]) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000500)="5771a93a46e415b420a634c2d24c6a55ee2e250dbe8085877429c969bac80cbbe2bca3251c159452566ac9ac2f0faae6c2f618487434a6b2c981217be92dc02d1df22e31951cc2b3dce17eaf1bbba50229300465b4e1da5d2dd1cd6853e6f9b826a639a0afad8ae6b9af901f4d98a8722f1f1d552175", 0x76}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000400)=""/229, &(0x7f0000000300)=0xe5) (async) io_uring_setup(0x5d2b, &(0x7f0000000580)={0x0, 0xfdb, 0x20, 0x1, 0x3c7, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x1, r2, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r5, 0x0, r2], 0x3, 0x100000}) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000040)) (async) 00:20:50 executing program 4: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x200022, 0x4) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x5450, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001040)={&(0x7f0000000040)=""/4096, 0x17a000, 0x0, 0x6, 0x1}, 0x20) 00:20:50 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000040), 0x800002, 0x12041) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:50 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8) 00:20:50 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x414000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/memstick', 0x2, 0x8) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:50 executing program 4: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x200022, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x5450, 0x0) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001040)={&(0x7f0000000040)=""/4096, 0x17a000, 0x0, 0x6, 0x1}, 0x20) 00:20:50 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000040), 0x800002, 0x12041) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:50 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async, rerun: 64) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8) (rerun: 64) 00:20:50 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x414000) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x414000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/memstick', 0x2, 0x8) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:50 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x6, [0x10001, 0x200]}, {r5, 0x0, 0x0, [0xffff]}, 0x0, [0xe3, 0x4]}) 00:20:50 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffffb, 0x100000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:50 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000040), 0x800002, 0x12041) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x800002, 0x12041) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) (async) 00:20:50 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f00000008c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000880)={r2, &(0x7f00000007c0), &(0x7f0000000800)}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r4, 0x0], 0x2, 0x80000}) r5 = syz_open_dev$media(&(0x7f0000000180), 0x6, 0x80000) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000740)={0x0, 0x6, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000400)=[{}, {}], 0xa, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}]}) 00:20:50 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) (async) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) (async) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x6, [0x10001, 0x200]}, {r5, 0x0, 0x0, [0xffff]}, 0x0, [0xe3, 0x4]}) 00:20:50 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8) 00:20:50 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffffb, 0x100000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:50 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x414000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/memstick', 0x2, 0x8) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:50 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f00000008c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000880)={r2, &(0x7f00000007c0), &(0x7f0000000800)}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r4, 0x0], 0x2, 0x80000}) r5 = syz_open_dev$media(&(0x7f0000000180), 0x6, 0x80000) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000740)={0x0, 0x6, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000400)=[{}, {}], 0xa, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}]}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) (async) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f00000008c0)) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000880)={r2, &(0x7f00000007c0), &(0x7f0000000800)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xdededede}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r4, 0x0], 0x2, 0x80000}) (async) syz_open_dev$media(&(0x7f0000000180), 0x6, 0x80000) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000740)={0x0, 0x6, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000400)=[{}, {}], 0xa, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}]}) (async) 00:20:50 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='/dev/media#\x00', &(0x7f0000000080)="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", 0x1000) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:51 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4882c0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}]}, 0x38}}, 0x20000000) 00:20:51 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) (async, rerun: 32) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) (async) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x6, [0x10001, 0x200]}, {r5, 0x0, 0x0, [0xffff]}, 0x0, [0xe3, 0x4]}) 00:20:51 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffffb, 0x100000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) 00:20:51 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) (async) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f00000008c0)) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000880)={r2, &(0x7f00000007c0), &(0x7f0000000800)}) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xdededede}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r4, 0x0], 0x2, 0x80000}) (async) r5 = syz_open_dev$media(&(0x7f0000000180), 0x6, 0x80000) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000740)={0x0, 0x6, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000400)=[{}, {}], 0xa, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}]}) 00:20:51 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4882c0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}]}, 0x38}}, 0x20000000) 00:20:51 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='/dev/media#\x00', &(0x7f0000000080)="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", 0x1000) 00:20:51 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000540)='@\xd6%$}-^.(\\{+:\'{-:\x00', 0x0, r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x28}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x854) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x1f08, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @random="e1b6d6651617", {0x0, 0xc0}}, 0x3, @val={0x8c, 0x18, {0x594, "a04a92a1b807", @long="bc589c78d668c4c3f3e4432d0636b265"}}}}, @NL80211_ATTR_FRAME={0x14ba, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {}, @device_a, @broadcast, @device_b, {0x8, 0x5}}, @a_msdu=[{@device_b, @broadcast}, {@device_a, @device_a, 0x1000, "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"}, {@device_a, @device_a, 0xe0, "58ea6edb60427df71ce8703a4f4b564fcc1e5f8f28bb04dc0329a28fcc170a0e37c0ad6c4a7fabb8bb3138c10d62b3d6a765d91a5055e58219313c35b8b0b3275d1b87fe116a60fe3de01848cd5511e8b523f354a125f31d527e702278191512acbd484c64252d365fa5562a3de672972aa4da632caf383158d5617db55c35e1eb4a0dd566e6a67e3c779e9fd339d8f86e5dd52036d09cad932d5ee4a4d0109384dfe413fdb8e255b930d65471c8b4c074e8a73eb47e336b6393b5ff9515775cf0cb73fb5dd57ae1088107d9a9bd0bb42481d6c1f1c397eda3c4b892eb2c9447"}, {@device_a, @broadcast, 0x44, "872155605485054745625bcaf931e92f9f79a3310167367377ec998f2f06e760e036b6224f57fcc0354e75728d6dc651c9be8f0650f4ecd9479f03ed744cf8253d975405"}, {@device_a, @device_b, 0x40, "34dbce140bc41d234de903828ed92ef17c00180a6e5991a36a33d1176a3595ee68c07648182efd5f4ae4dcb19557cc0da27f6d7364310b7d9ed37fb0b94a56eb"}, {@device_b, @broadcast, 0x16, "9a49ae7d6c94708e5d70770eb04f23142ce30dd2e465"}, {@device_b, @device_b, 0x95, "8c0aa3ca906495fe92d46ccf5cc00361fd53fc45d5ad29436a4da5b457bcfadd48bac4f2192b4bc21d09cfb5e1803dc0cbdc44c736b67617b08d156eabf288b751dfb3a6128fbbe545f5183c270e840ea39a644e00cdcd28d6fd3b22e9fc16e585c0e35a48ff4f08eca4b926b17601032ad2b0012349dc3e676c2e54d9457d723b2491ebf15cb27a7b3c155e06e25c368ce3164943"}, {@device_b, @device_b, 0x72, "0ff4bcfaac435f013944c10aa65f8cbfc2f6706917d93c422de88af04b8d6804c4de45073be1d29412b20cb136e5cef5fd3fedf6bb79108e67481860b6f38e3fdc4200c521cfa61764f24b8cd2f45ac6817ad6a85348176df5078f3d2382e4c85a3628c6a84f6bd22ae557b5fd2f7d38f354"}, {@device_b, @broadcast, 0xe5, "45403201e61862a769f2d2a9b07508d1b60f3bb269c801ca685d6bf732c8de72f75ecc71af6177b0e84b3f2f5a38ab7aa63e736e6b1019a2c6e8be6d430c6f3e1386c09ef11f6522cceb7454b3c5ae58487c93d3abd6ee03f872abcf5047e0bbb59553673a2c134cc1cefa735687ca72cbdf9224e9ca8790bc9bd791e78e441387b38082b664571050f61e1de00dbc05f497973bcb1a6027aa09fd9781b33e2e8b95806e8afdd1a314e11856c5ef1c2082a488b2832235bd077e6710466f71554a80ab423bb71e46af2cb4623c4db83945dcddbba6ce7d4558fe6c4851ba0ea8eeb767dfc0"}, {@device_a, @device_b, 0x98, "5ed67f583a80894c49c41b9b0240a632b15eb8b7a0d741e7d342efc50f8ed2e86cc46b68cbcd874e05b67a191515c2f24dce833e07411673367dae179bd47e683bdc1bb07d1eca6b4fdb42874aaa262e55e0b0beb8a82289578d978398f32775ab4eb9d170a1fb49b6515102871ef7f738bbd015b627acab45c16880d51958519e27028b4a2529757a876d9286ef31569184dcf39347964f"}]}}, @NL80211_ATTR_FRAME={0x583, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x65}, @device_b, @device_b, @from_mac=@broadcast, {0xc, 0x6}}, {0x1, 0x0, 0x2, 0x0, 0x5}}, {@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x396}, @device_b, @from_mac, @initial, {0x9, 0xe09}}, {0x4, 0x0, 0x1, 0x1, 0x75}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x444, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xba2}, @device_a, @device_b, @initial, {0xe}}, 0x9f, @random=0x3, 0x2001, @void, @val={0x1, 0x5, [{0x4, 0x1}, {0x5, 0x1}, {0x9}, {0x9}, {0xd946ed5610544a33}]}, @void, @val={0x4, 0x6, {0x73, 0x7f, 0x9, 0x8}}, @val={0x6, 0x2, 0x81}, @val={0x2d, 0x1a, {0xc, 0x2, 0x3, 0x0, {0x5, 0x7f, 0x0, 0x81, 0x0, 0x0, 0x1}, 0x6, 0x8, 0x20}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x61}}, [{0xdd, 0x84, "be1b9752806916dfec46ca1bdc65e0b22e756b6acb6d65b64b9a7fb60e8190112866fcd96806dec8cc040a9d0c819731d39c8373deca933f38f51a789ba1fba327d83eac0a7a8bb2753924e4bbfc948ad761e552595e20eda98917c28772596e629bc44ba3de7d0a24428a0dfda8db8a684b9acf589c4ffa73fd96a99ae5b51f3fff9156"}, {0xdd, 0xd3, "e120baf92ce438806d685bf0b32161d5f20441f56a36b17910719e475440ab3671eb1e44b06a6e690a19f2280e7e2441d3ab340aaa0cf196e1373eff4f3300c1c64b99e76c6abfc401c3e5a253ab2495946beb2f6aed51827929b9a33ae5aa51f7e381b0dd87504d41bced6b5d9c7b23d6eefffb59b78acd288b6b67279416d684b53196e31aa7eecfed915d72d23e69b9502df3c57743fb07f563a4b8a31a88f0aa258ba7bc43ef10e742554bdac600a3032da29ce04d6d353d95e49ae251a417d4c5be17c4e06efd86ec9e850ba7b539c112"}, {0xdd, 0x85, "a9fc1b90334050abc577bd2ce8ab6746c0d58ab2615f6d5d2bec4e6ea51071fc0d7c518a71f32d2f8c1c8c6134328d6fdee52b7e33c24148ccb25af9a7a66a9b602ea25768a9a44d0275448a1097057d766379964db6b0fb139936b902188311675acf33aeda881a12334f1f7ebd0963c93ce35326da072691f5a7c6c778b26d6f720107ee"}, {0xdd, 0x2c, "b7a425b6d190809307b4f92e07138940e04311a516ac247110ae7f6c00201b6a728fa718a39cee1b519706af"}, {0xdd, 0x15, "9341c9dc72fc5b2c087aa8cbdc3af0938fbb54b4de"}, {0xdd, 0xa0, "eea8284eb49270e45b901c00441a44a341b76c399f691a8682f1b4673479f7fcb910598b789dcb35f8d25832092717338b2bd22d181d3f1eef2287a17f8c2ef9a9fd5c2b91fb9d0bbe117bc257ab9ebae8d6d1fef1af3ac8743bf3b85379421df3933f4fed0de4d1f8c3cb55817cadcd2e6a810d04bce0cdbcd37e28931d8b62672fea06033cba02026def1fcea1d31f77d6e5c5145a995a8e791dbd79431015"}, {0xdd, 0x3d, "c21bcd7d3325690da64cb52758ee19e97be3e47d938c47721661bff35ceaeedcdb5df7a104aa6caaa966ab3bc6310c172598755b543476512f30eac616"}, {0xdd, 0xd2, "c872940f9e3fab453bdb234ea8dfb232cf44ae828684550815765968c5eccd7b6bb17f8d9bb82450bfa00d69a7387021510857cc558fad87ff81f4f8cbf48ef928260ac6b701a5c7a36730d2ae868638e4f6dfc5604bcf560e63a00b31da79fac0be7690115d58dcd7cf7251a53da505518e35b44126460126e8e3535bfed8e6b94147fa158e75dff7e5f515226b60c87ce5d2a8c7239ddaa01a409371ad9d6708faa242eb75710d403ab161a90c644a7b39438d66c77a2b1b07790919e04d61982773c8f6857bc78c6389b50c23a83e7b33"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1f08}, 0x1, 0x0, 0x0, 0x20004000}, 0x8880) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000380)={0x80000000, &(0x7f00000002c0)=[{0x80000000}], &(0x7f0000000300)}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000003c0)={{0x80000000, r4, 0x3, [0x0, 0x8]}, {r5, 0x0, 0x4, [0x8, 0x3]}, 0x2, [0x4, 0x800]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x59}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x1, 0x0, {0x5f5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x30000000, 0x7f}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_KEK={0x2c, 0xf2, "3418203cde72aaf1b1c51113d8647ee877f965251a66a0f0e692a94db6b47902b4c4ccc260d0dabd"}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x80}}, 0x40840) r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0x5450, 0x0) 00:20:51 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r3, 0x105, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) 00:20:51 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4882c0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}]}, 0x38}}, 0x20000000) 00:20:51 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='/dev/media#\x00', &(0x7f0000000080)="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", 0x1000) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='/dev/media#\x00', &(0x7f0000000080)="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", 0x1000) (async) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:51 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x32) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f00000001c0)=0x5) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) 00:20:51 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) (rerun: 32) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000540)='@\xd6%$}-^.(\\{+:\'{-:\x00', 0x0, r0) (async, rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x28}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x854) (rerun: 64) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x1f08, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @random="e1b6d6651617", {0x0, 0xc0}}, 0x3, @val={0x8c, 0x18, {0x594, "a04a92a1b807", @long="bc589c78d668c4c3f3e4432d0636b265"}}}}, @NL80211_ATTR_FRAME={0x14ba, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {}, @device_a, @broadcast, @device_b, {0x8, 0x5}}, @a_msdu=[{@device_b, @broadcast}, {@device_a, @device_a, 0x1000, "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"}, {@device_a, @device_a, 0xe0, "58ea6edb60427df71ce8703a4f4b564fcc1e5f8f28bb04dc0329a28fcc170a0e37c0ad6c4a7fabb8bb3138c10d62b3d6a765d91a5055e58219313c35b8b0b3275d1b87fe116a60fe3de01848cd5511e8b523f354a125f31d527e702278191512acbd484c64252d365fa5562a3de672972aa4da632caf383158d5617db55c35e1eb4a0dd566e6a67e3c779e9fd339d8f86e5dd52036d09cad932d5ee4a4d0109384dfe413fdb8e255b930d65471c8b4c074e8a73eb47e336b6393b5ff9515775cf0cb73fb5dd57ae1088107d9a9bd0bb42481d6c1f1c397eda3c4b892eb2c9447"}, {@device_a, @broadcast, 0x44, "872155605485054745625bcaf931e92f9f79a3310167367377ec998f2f06e760e036b6224f57fcc0354e75728d6dc651c9be8f0650f4ecd9479f03ed744cf8253d975405"}, {@device_a, @device_b, 0x40, "34dbce140bc41d234de903828ed92ef17c00180a6e5991a36a33d1176a3595ee68c07648182efd5f4ae4dcb19557cc0da27f6d7364310b7d9ed37fb0b94a56eb"}, {@device_b, @broadcast, 0x16, "9a49ae7d6c94708e5d70770eb04f23142ce30dd2e465"}, {@device_b, @device_b, 0x95, "8c0aa3ca906495fe92d46ccf5cc00361fd53fc45d5ad29436a4da5b457bcfadd48bac4f2192b4bc21d09cfb5e1803dc0cbdc44c736b67617b08d156eabf288b751dfb3a6128fbbe545f5183c270e840ea39a644e00cdcd28d6fd3b22e9fc16e585c0e35a48ff4f08eca4b926b17601032ad2b0012349dc3e676c2e54d9457d723b2491ebf15cb27a7b3c155e06e25c368ce3164943"}, {@device_b, @device_b, 0x72, "0ff4bcfaac435f013944c10aa65f8cbfc2f6706917d93c422de88af04b8d6804c4de45073be1d29412b20cb136e5cef5fd3fedf6bb79108e67481860b6f38e3fdc4200c521cfa61764f24b8cd2f45ac6817ad6a85348176df5078f3d2382e4c85a3628c6a84f6bd22ae557b5fd2f7d38f354"}, {@device_b, @broadcast, 0xe5, "45403201e61862a769f2d2a9b07508d1b60f3bb269c801ca685d6bf732c8de72f75ecc71af6177b0e84b3f2f5a38ab7aa63e736e6b1019a2c6e8be6d430c6f3e1386c09ef11f6522cceb7454b3c5ae58487c93d3abd6ee03f872abcf5047e0bbb59553673a2c134cc1cefa735687ca72cbdf9224e9ca8790bc9bd791e78e441387b38082b664571050f61e1de00dbc05f497973bcb1a6027aa09fd9781b33e2e8b95806e8afdd1a314e11856c5ef1c2082a488b2832235bd077e6710466f71554a80ab423bb71e46af2cb4623c4db83945dcddbba6ce7d4558fe6c4851ba0ea8eeb767dfc0"}, {@device_a, @device_b, 0x98, "5ed67f583a80894c49c41b9b0240a632b15eb8b7a0d741e7d342efc50f8ed2e86cc46b68cbcd874e05b67a191515c2f24dce833e07411673367dae179bd47e683bdc1bb07d1eca6b4fdb42874aaa262e55e0b0beb8a82289578d978398f32775ab4eb9d170a1fb49b6515102871ef7f738bbd015b627acab45c16880d51958519e27028b4a2529757a876d9286ef31569184dcf39347964f"}]}}, @NL80211_ATTR_FRAME={0x583, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x65}, @device_b, @device_b, @from_mac=@broadcast, {0xc, 0x6}}, {0x1, 0x0, 0x2, 0x0, 0x5}}, {@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x396}, @device_b, @from_mac, @initial, {0x9, 0xe09}}, {0x4, 0x0, 0x1, 0x1, 0x75}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x444, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xba2}, @device_a, @device_b, @initial, {0xe}}, 0x9f, @random=0x3, 0x2001, @void, @val={0x1, 0x5, [{0x4, 0x1}, {0x5, 0x1}, {0x9}, {0x9}, {0xd946ed5610544a33}]}, @void, @val={0x4, 0x6, {0x73, 0x7f, 0x9, 0x8}}, @val={0x6, 0x2, 0x81}, @val={0x2d, 0x1a, {0xc, 0x2, 0x3, 0x0, {0x5, 0x7f, 0x0, 0x81, 0x0, 0x0, 0x1}, 0x6, 0x8, 0x20}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x61}}, [{0xdd, 0x84, "be1b9752806916dfec46ca1bdc65e0b22e756b6acb6d65b64b9a7fb60e8190112866fcd96806dec8cc040a9d0c819731d39c8373deca933f38f51a789ba1fba327d83eac0a7a8bb2753924e4bbfc948ad761e552595e20eda98917c28772596e629bc44ba3de7d0a24428a0dfda8db8a684b9acf589c4ffa73fd96a99ae5b51f3fff9156"}, {0xdd, 0xd3, "e120baf92ce438806d685bf0b32161d5f20441f56a36b17910719e475440ab3671eb1e44b06a6e690a19f2280e7e2441d3ab340aaa0cf196e1373eff4f3300c1c64b99e76c6abfc401c3e5a253ab2495946beb2f6aed51827929b9a33ae5aa51f7e381b0dd87504d41bced6b5d9c7b23d6eefffb59b78acd288b6b67279416d684b53196e31aa7eecfed915d72d23e69b9502df3c57743fb07f563a4b8a31a88f0aa258ba7bc43ef10e742554bdac600a3032da29ce04d6d353d95e49ae251a417d4c5be17c4e06efd86ec9e850ba7b539c112"}, {0xdd, 0x85, "a9fc1b90334050abc577bd2ce8ab6746c0d58ab2615f6d5d2bec4e6ea51071fc0d7c518a71f32d2f8c1c8c6134328d6fdee52b7e33c24148ccb25af9a7a66a9b602ea25768a9a44d0275448a1097057d766379964db6b0fb139936b902188311675acf33aeda881a12334f1f7ebd0963c93ce35326da072691f5a7c6c778b26d6f720107ee"}, {0xdd, 0x2c, "b7a425b6d190809307b4f92e07138940e04311a516ac247110ae7f6c00201b6a728fa718a39cee1b519706af"}, {0xdd, 0x15, "9341c9dc72fc5b2c087aa8cbdc3af0938fbb54b4de"}, {0xdd, 0xa0, "eea8284eb49270e45b901c00441a44a341b76c399f691a8682f1b4673479f7fcb910598b789dcb35f8d25832092717338b2bd22d181d3f1eef2287a17f8c2ef9a9fd5c2b91fb9d0bbe117bc257ab9ebae8d6d1fef1af3ac8743bf3b85379421df3933f4fed0de4d1f8c3cb55817cadcd2e6a810d04bce0cdbcd37e28931d8b62672fea06033cba02026def1fcea1d31f77d6e5c5145a995a8e791dbd79431015"}, {0xdd, 0x3d, "c21bcd7d3325690da64cb52758ee19e97be3e47d938c47721661bff35ceaeedcdb5df7a104aa6caaa966ab3bc6310c172598755b543476512f30eac616"}, {0xdd, 0xd2, "c872940f9e3fab453bdb234ea8dfb232cf44ae828684550815765968c5eccd7b6bb17f8d9bb82450bfa00d69a7387021510857cc558fad87ff81f4f8cbf48ef928260ac6b701a5c7a36730d2ae868638e4f6dfc5604bcf560e63a00b31da79fac0be7690115d58dcd7cf7251a53da505518e35b44126460126e8e3535bfed8e6b94147fa158e75dff7e5f515226b60c87ce5d2a8c7239ddaa01a409371ad9d6708faa242eb75710d403ab161a90c644a7b39438d66c77a2b1b07790919e04d61982773c8f6857bc78c6389b50c23a83e7b33"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1f08}, 0x1, 0x0, 0x0, 0x20004000}, 0x8880) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000380)={0x80000000, &(0x7f00000002c0)=[{0x80000000}], &(0x7f0000000300)}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000003c0)={{0x80000000, r4, 0x3, [0x0, 0x8]}, {r5, 0x0, 0x4, [0x8, 0x3]}, 0x2, [0x4, 0x800]}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x59}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x1, 0x0, {0x5f5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x30000000, 0x7f}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_KEK={0x2c, 0xf2, "3418203cde72aaf1b1c51113d8647ee877f965251a66a0f0e692a94db6b47902b4c4ccc260d0dabd"}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x80}}, 0x40840) (async) r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0x5450, 0x0) 00:20:51 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x40041) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}]}, 0x58}}, 0x800) r3 = syz_open_dev$media(&(0x7f0000000000), 0x400, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0x541b, 0x0) 00:20:51 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x9, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000600)}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0x180000000) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000840)={{0x80000000, 0x0, 0x3, [0x81, 0x100]}, {r2, 0x0, 0x2, [0x4, 0x1b66]}, 0x1, [0x967c, 0x4]}) 00:20:51 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r3, 0x105, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:51 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r3, 0x105, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) 00:20:51 executing program 0: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000640)={0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x80000000}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, &(0x7f00000005c0)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000140)}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}, {{0x80000000, 0x0}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x9, 0x0, &(0x7f0000000780)=[{}, {}, {0x80000000}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x4, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x6, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000200)={{r0, r1, 0x0, [0x80, 0x200]}, {r4, r8, 0x4, [0x2, 0x1000]}, 0x1, [0x2, 0xe79]}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000006c0)={0x1, 0x100}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r11, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000700)={r7, &(0x7f0000000600), &(0x7f0000000b80)=[{}, {{0x80000000}}]}) r13 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r13, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r15 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r15, 0xc1007c01, &(0x7f0000000080)={r14}) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000000c00)={{r12, r9, 0x0, [0x520, 0x7]}, {r14, r5, 0x1, [0x0, 0x9d1]}, 0x2, [0x1, 0x7]}) r16 = openat$cgroup_type(r10, &(0x7f0000000740), 0x2, 0x0) r17 = fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r17, 0x5, &(0x7f00000000c0)='/dev/media#\x00', 0x0, r16) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0x1, 0x20, 0x80, 0x20, 0x1}, 0x48) ioctl$VHOST_SET_VRING_ENDIAN(r10, 0x4008af13, &(0x7f0000000040)={0x0, 0x3}) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) 00:20:51 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000540)='@\xd6%$}-^.(\\{+:\'{-:\x00', 0x0, r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x28}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x854) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x1f08, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @random="e1b6d6651617", {0x0, 0xc0}}, 0x3, @val={0x8c, 0x18, {0x594, "a04a92a1b807", @long="bc589c78d668c4c3f3e4432d0636b265"}}}}, @NL80211_ATTR_FRAME={0x14ba, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {}, @device_a, @broadcast, @device_b, {0x8, 0x5}}, @a_msdu=[{@device_b, @broadcast}, {@device_a, @device_a, 0x1000, "e7c7ce304c444e3bdce1ca4889b0f84eb03c5567f131b9e3f3f4ba6de0f0a2194dc01318ac74b890b055bd2fb9f8ffcdbd70f0db2aaefedbdc8a64ad4c9060bbe1fbef696dab55821bf28111a343e06ea7f3fd9e84dc8d3f6c0c5d4a0e04d9f076c1d03ad21acca42fc7c9bfba4c5d74b8ecac905d83df5c7666b204bc078ec33f9450f8b164141e85558144c0df1f5ba8248d745e91ffeeb7ac6cf8638b96aa64d6c922d416d88c0df418863b1bbd2d90a18fe0195020d25ebf706eed9dacf8aec7a6d660eb400cc1f8f68e731255def19a26c26e7391e5563ef2ec9502d85fa2d3e212b9befb67fefa81e01b8e0a0c0a970b7ddda7b3de956ede2dc39a855a87e42a996d2e542d76f30c10ec9fca4aa54961bc2a31279a7956941000ccfafb6aaf84a4d3bfd4b19e3e9a9fd470bfb11705820daebb414379731bd53e8e5a8e9cb3d380c4b41958df4afda55c28ea22a27ab8f04314f238409b6aff69e13da662197bea1d4494df06d4c52222e941236d710dad3b8d178cde12b7d5758571ea1b95fbc42831df864c4959ed96e340f19cd72ba23910d1db8719c07dece3731062918f83ce3e7ecd92f2e16c8c4783ab1d670fdaf47491b7f0091e611da4dd5ec4c535b85a7386c5e50d1da48bab76a9ef54a24b008a7e20ee78ce5ba48b774cf08a0568fc0d9ca5713cfcd883e0b2e62e63d1d2499002d232989acb73bd4612c04d840b3936442cb4fe33a121a8ddb360be9690ac988f112cc5c7a86602ebb00d6f93a552ce1bb88c36cbdc60e26dad49839512b3605005293b6d07db77ae2604a7f749f5e8100c72e8877e2915fd1296ed8123b93b875e7dff66a7bf9b82d2ea71aa04359250ce190ae4f3b06130ede3b7816c1bd62787d4c142a613c4028fe48089b921f31ec8e19c4171cd75532f5b0b712672260dbc10b1f6a67ef69f22ed8b40994d8f93eccd092b64c0cd521a045f3013605b7eebd9ef3def716638f96ceda1e1f4c018c07ebac8d8ad7b19964a7156923b39d0fc2b9712daac196eb53e404c53b015a803766fbd8e3bc3e61f707dfe64fafcfb5351dd3560631a8b17bdf785a6e9211c10c64b1fd6e730ead6b3502d9e5b5a08a2eb256d203fcda08c7a0794f67beda5510922533bbbbce0dc4b33310218e4b371f67e2360df38420f812b954ed1afc84e00aa1c8895e684b9be1025d4f0a8c6a67a50164b18af7085f6c187ee520d69fd52890f53468ae6281b4b2dd4365c2dc924ad1be5c0aa5c9a9c675c552cf088c5c66f611617d2761994678e38746337983cfd7180ff2803efe22f8c35db8b7eed070e5752ce6919429ca57c84ad40c7d38837089446fd74b4347f494d57f43b85c09f125fd8b38aa66b7a9add6f0b4df6d236903e5d1f65352c45367ec41bc01d458584a8beed0b0a8c69e3866481f0301d37ecaa72aed348b1ff01cca379ca8d46334ac1a8e6c5a97eccd1791a7bd90d19e5ac3d7bc58eaf9ce8098712e11fedb009caf8cbb57790e01d539581f90e93cad77ef7c63208d067519c2e10b48925aef356a641921e707252fedfded381fbe79a769045dbf84406421b5e0b34d47ba5aef237f4f662d0438d513487e21e95c319327655323bf397aff080a25115b900ef8a7bc72d58a61d327a0fb67cf6b10133763c8ec5f97ac18bb08320856fa980c47c9a96fd3b9adc6452457162eafbec6eb617ee513b03b346aab116fe0fe1de6c2bb8f676eb586cb6ec65247f7c0f4602462523db426e26f433bcd18dd42f9214a75eb3b14ec1419d6ca8a5d1d8d1cf3c2b029f5d0ff896cd033115f76dbe39489bad78c4c9d8a8e11361282264a47d8322bb28e0e0319620aec53a323b57c8e2bd59b8945bd921f37b45c1e2dd4b84c3e376123a6bb5d12d7003aa2afd84038766b9bbad51794e65b6972b0b08db02e353b9c0cca9dc68f8f8e801fae4484706715ec030b2ac9533e176b914d7c0a112cf32059582ddd8d884cd212c3427b81655ed32360f8627c9b2096456c30c3723506ab40a3cd9d2b3804cbf7fcbf65c1dbc0b23127fb78be660a12ce62ceafa960f954a0683325c6452a552da603c84fcc1fda2d479574ee11be00e43c8338ff951eb63531088c0c80b1856ac44427ea7195df89af5d7d5b52ca81f0825102d0495a786b7a031f0cdd3473423bfe0e0268ef96cb89fab9e1252b071dccaf6f642dce2aaec79fd57f12e6b5664a7244390e2fb6eb2864bac31fe1dd188290e8d58201b791ec9881f57713f6081ff23d0096ba1641d45f81fb4b3d4849b5a1abcf031d8678ff6027950325910f5994e0e4da5fca0867528a839721363da08fd2df444ec234fdf4e959ebbf358d80188c96b0a9ae77c2563fa2b6d05c62fc0feff370e1c203b0776d7c3f8c2beee7c72ff8dca91fdd37aaf2cd0925e20407bb291d3ad01e71b5785faa6456cd50162d198edce038bacd7c6bfad98da8771702355b672162fddc811073f62be3223fdc82319751818bcf92eba3ad8c1944c5e4676f5e4a723f115b66386394d2e8fb2a6d5a99f2ba4c1527c95421244aa1f1fab4e973e7d4ba8bb53f248c469af80bda96221fbd2589544e5b4435753ead374ee2789b606d6b021ad40dfeecfaaa6b7bc2334b6d4ccc7df0a268b0017113953ce5ffb0c0bff7316dbc522e6c8ccf25a9462589da99c31679fe38cb25b7c749917d13108cddc80b70c4956ffad469f31d0e0eb4efc817f28004111e37cd63523864bade21dd55331f7906a2f182fc4b4c38565f0c9c971b456dc8d5a23cec7c97e5553478a5ea7afe2a725b994590488c2b903316e3299c8ecb9db1cff80adc103e3671fd3980e89af9e447aba06bb99293aaba4a54d3e64efdaba48c615f62f34ec738429235496cbe13a8797416043bb64320007b9a2a9a09dc32766335a79ad3de43ee93127f3aee1e7e7651f0b5ba3a80f94e052c4ff0a350e29d3ac77b44ca3b30d5f25691d04aebf5cad002f15f29640e7aea0cb88f7626c880dd8d0b7e4c1b8db3d8c6df8cfd8f9d3353ad11934f5eef578c49e1fb4ee18d358a596e851d73f3a4896162fbe9012f709bf2399dda7b42c778062cc633d4774d13570aebf280107c71b4a074858b35044fed559f490b64e473b1a4b50ac443fb3b48adf71b4b73d5858c0742ea60ee76a196815d8cbfb4fe810d3d0581c19381c6e6102b5b6fdef55be11e85d8b74cf74d781358b6fee02074fbe7283db0c4a41eac7b9986048c7c4e154b53cb2d37c07b591682fc2b60481fd9d04c39c7498a7d7bc12d48f1234e7231028a346e32ffd67962c129a0be8ca9609eeb35c79c26fd7902fb15a1b26c4be1ad5074997cc5bf6aa40d86618cc251b1f98d83f8781f1f95f758ce87ae70aa0b582eb7d9cb9b69d8b768c8e60e480ffdeea8e12ea3e7e545a7c67cb346b402080f212fdb38182d963404b73d21293dedbfce302e865e2dc3311c0675dbb0228a1100c432b171e77ed2cd2f4dfd5d38efa552ed358cb627d52a4b9ef9cc24eba51f51172920d0ba60e1f42c95160da89c05f58ba596963dfb27fe709d4c82c69c8e019af1cc67fbca031e2a104f970d5e7122a6e6ff1a5aafb088038520cd85a81b503ee0a257a069e8b3ffd5012913696aa91c90df64ace7e0fbd830a416328ac80abe85508f2ab607ecbd7c0806681ecfde27f63e2b0ab2999107ab9de81d91fb88df8d734c82b70b9695cfec074032209b0c1925ee15126de2c4bea42f07ab2eb7a12c61ec2513c1ad9bee882a1ad49551fafa502ed111638b371cd4a16a8f38ccb76fa505e89affd25775f15be05208a272026862ef98dafe3ff803138fdfcdfaaa35e956611f126a8004e0c5cceb0997279cc39efef2ed2ed8ad01d624087ca2e27a78d053397869aa7e51486edda06e32946eab2a28e5ff6810499f7f1b87ff06bb2622987788f279c364c498f352c1d6023edfcef6a5f5ae3a8cb15bbdd2f6adebfb3ef7b04f09837879947f2a5d162472dbed905e5103ff63ba96a52aac4519fb1780fb2e357dbb8d3f35236f8049dc521727754ad1635c9c7163f78694989574fd7ba31e1b409ff7dc12e404ca2949942181e90e40919b223c3a2c8b85ebc833e991372ba56a1e3506c3f8d7e7587eeab6ef67f6311a9ebf2d0a6b2d6ed9c03dea36a833d29d2be5998e01f96a7e944386927efb86058409e24d3d8db28d4bfed827cd83a6616fccca54d5795d41f31254f8fc5867e0e22e759ac11509b170f3383d67a65ba604e6f501c402a15dc196625e160b0ff51ce13263506dfec0396aac8c315e3dad2c8949878d2ed9b81d8d1943e5c9838f685573974eb9f417049774264e91b3c543ab97b5a0f110b03c2a922314220bddf34fad55499e7b744f4543964e72427da905716322bb1037eaa091557c232cb61b081005c1b1612b3b98ca02f178590b73ac238eb268a93b8f848f582b53a62ec5c0b551baff64f919fbfbc1fbd1b24066ac4b5f938734928ca7a8967928277daac25b395ec0e2a5eddf79d1956fd2fe96a6c595192b0b86dffe58f4f931d4ea38c9ddb72ffd7239fc079019498a822bd57011327f6e18ce9661eced4a3b666b1013ebc20ff420fe6e650e7a0ccdf603cf7a58906f667704abc122094edb3182b2e9985f910cdf68bd669c4af915dd676b1e3d12b5591070d291dd8c251c5c6d952facc9574b2973fe06e37a5308341394591b307258411ba3d83673192bb09c724571bbce2d93f32aa50af56c8c8ba64c54980c22e9fcbe08adf07dcf3461aa9de2a4e07ebaaa26e310d329cd052596797fdcb8f92473473d7a688909a77e0745f06d8f3c855f47178ac387086a6d39a73f55247c1815897bf5e98c104cd5a1a42132f07a4fcc5e9da428a3b4be95e30ad9f77ea8ef1abef7f506ff1c76c33f8b080abd1badc390fbcd79fc13048274d214dcc1cbea26cbde2d9979179a1c2d4e01aa3dbdf559e0f270031418efa584a026d7e499f74cafe9254476704dd894c2fc74b3bdce4047329607ca4d21686d785c679a48fb8b63bc44091b368f2b61615d5b7a9067d65c7faac9ab1fcb7dbc2a5f847242a48d1c96430fdfc2cae9163219e3ec558c19b21eec05ae2964d1c583675745ce7f8b55999d0320f06c71a8978eb7e87a21ba2628b53a31cbfcd19e33d76a220f4872c7b3fc54b8f350948debfd171b62ed4b87eeb190a72abd7cc1a2eda61e705d359b71a9bde7a91438607944949eb2f78c64decf8c27fe62ca7eb7259465ab8a77b70f2ef9a4d6e174b0fb2adfc9201a0a5647c207f877758246dbbe86bd25b4e953257b15a55fb9234835876697c120e330c7c9ff854ac9ea82d989514dc4f287e688ab068c4c306d4046fb6026a58c9d3a8f62f6e9e6534c7f4b88819ddeb95510358b8af10c220ba12756039797cb25776b4c5d52a5c8baf0e1728fcae8b9267cce5c8803d676369dc0061194666392fb81a4cd1c9dc8cea8809aaa5352dc90b57330e544795af794af1bc6e8529dd848cc35d7fc36ddc3ecb6d4916d418a928cc7f6415f4e185a76bde090c17d38cc60ce9766a7b1276428e7072d9973a408ff501524a9d2eb59ef072499743c145060307c9f1a7434ca84b51150b788bfb59512cf3d4b6c601d68616c16032045b15ac7d258b6a9fc87ee20c7d3c8eda36137c0a05b019fe58cc837493dc342850bf0ddf9022e1fbce2ca879abbe2afe6ba5f26a1460fc2107b8eb40c79cb8d8151258aa15ecb3ae223681a3e7a1915b03b952f86521360b982c7774645ad4ba25a40e"}, {@device_a, @device_a, 0xe0, "58ea6edb60427df71ce8703a4f4b564fcc1e5f8f28bb04dc0329a28fcc170a0e37c0ad6c4a7fabb8bb3138c10d62b3d6a765d91a5055e58219313c35b8b0b3275d1b87fe116a60fe3de01848cd5511e8b523f354a125f31d527e702278191512acbd484c64252d365fa5562a3de672972aa4da632caf383158d5617db55c35e1eb4a0dd566e6a67e3c779e9fd339d8f86e5dd52036d09cad932d5ee4a4d0109384dfe413fdb8e255b930d65471c8b4c074e8a73eb47e336b6393b5ff9515775cf0cb73fb5dd57ae1088107d9a9bd0bb42481d6c1f1c397eda3c4b892eb2c9447"}, {@device_a, @broadcast, 0x44, "872155605485054745625bcaf931e92f9f79a3310167367377ec998f2f06e760e036b6224f57fcc0354e75728d6dc651c9be8f0650f4ecd9479f03ed744cf8253d975405"}, {@device_a, @device_b, 0x40, "34dbce140bc41d234de903828ed92ef17c00180a6e5991a36a33d1176a3595ee68c07648182efd5f4ae4dcb19557cc0da27f6d7364310b7d9ed37fb0b94a56eb"}, {@device_b, @broadcast, 0x16, "9a49ae7d6c94708e5d70770eb04f23142ce30dd2e465"}, {@device_b, @device_b, 0x95, "8c0aa3ca906495fe92d46ccf5cc00361fd53fc45d5ad29436a4da5b457bcfadd48bac4f2192b4bc21d09cfb5e1803dc0cbdc44c736b67617b08d156eabf288b751dfb3a6128fbbe545f5183c270e840ea39a644e00cdcd28d6fd3b22e9fc16e585c0e35a48ff4f08eca4b926b17601032ad2b0012349dc3e676c2e54d9457d723b2491ebf15cb27a7b3c155e06e25c368ce3164943"}, {@device_b, @device_b, 0x72, "0ff4bcfaac435f013944c10aa65f8cbfc2f6706917d93c422de88af04b8d6804c4de45073be1d29412b20cb136e5cef5fd3fedf6bb79108e67481860b6f38e3fdc4200c521cfa61764f24b8cd2f45ac6817ad6a85348176df5078f3d2382e4c85a3628c6a84f6bd22ae557b5fd2f7d38f354"}, {@device_b, @broadcast, 0xe5, "45403201e61862a769f2d2a9b07508d1b60f3bb269c801ca685d6bf732c8de72f75ecc71af6177b0e84b3f2f5a38ab7aa63e736e6b1019a2c6e8be6d430c6f3e1386c09ef11f6522cceb7454b3c5ae58487c93d3abd6ee03f872abcf5047e0bbb59553673a2c134cc1cefa735687ca72cbdf9224e9ca8790bc9bd791e78e441387b38082b664571050f61e1de00dbc05f497973bcb1a6027aa09fd9781b33e2e8b95806e8afdd1a314e11856c5ef1c2082a488b2832235bd077e6710466f71554a80ab423bb71e46af2cb4623c4db83945dcddbba6ce7d4558fe6c4851ba0ea8eeb767dfc0"}, {@device_a, @device_b, 0x98, "5ed67f583a80894c49c41b9b0240a632b15eb8b7a0d741e7d342efc50f8ed2e86cc46b68cbcd874e05b67a191515c2f24dce833e07411673367dae179bd47e683bdc1bb07d1eca6b4fdb42874aaa262e55e0b0beb8a82289578d978398f32775ab4eb9d170a1fb49b6515102871ef7f738bbd015b627acab45c16880d51958519e27028b4a2529757a876d9286ef31569184dcf39347964f"}]}}, @NL80211_ATTR_FRAME={0x583, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x65}, @device_b, @device_b, @from_mac=@broadcast, {0xc, 0x6}}, {0x1, 0x0, 0x2, 0x0, 0x5}}, {@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x396}, @device_b, @from_mac, @initial, {0x9, 0xe09}}, {0x4, 0x0, 0x1, 0x1, 0x75}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x444, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xba2}, @device_a, @device_b, @initial, {0xe}}, 0x9f, @random=0x3, 0x2001, @void, @val={0x1, 0x5, [{0x4, 0x1}, {0x5, 0x1}, {0x9}, {0x9}, {0xd946ed5610544a33}]}, @void, @val={0x4, 0x6, {0x73, 0x7f, 0x9, 0x8}}, @val={0x6, 0x2, 0x81}, @val={0x2d, 0x1a, {0xc, 0x2, 0x3, 0x0, {0x5, 0x7f, 0x0, 0x81, 0x0, 0x0, 0x1}, 0x6, 0x8, 0x20}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x61}}, [{0xdd, 0x84, "be1b9752806916dfec46ca1bdc65e0b22e756b6acb6d65b64b9a7fb60e8190112866fcd96806dec8cc040a9d0c819731d39c8373deca933f38f51a789ba1fba327d83eac0a7a8bb2753924e4bbfc948ad761e552595e20eda98917c28772596e629bc44ba3de7d0a24428a0dfda8db8a684b9acf589c4ffa73fd96a99ae5b51f3fff9156"}, {0xdd, 0xd3, "e120baf92ce438806d685bf0b32161d5f20441f56a36b17910719e475440ab3671eb1e44b06a6e690a19f2280e7e2441d3ab340aaa0cf196e1373eff4f3300c1c64b99e76c6abfc401c3e5a253ab2495946beb2f6aed51827929b9a33ae5aa51f7e381b0dd87504d41bced6b5d9c7b23d6eefffb59b78acd288b6b67279416d684b53196e31aa7eecfed915d72d23e69b9502df3c57743fb07f563a4b8a31a88f0aa258ba7bc43ef10e742554bdac600a3032da29ce04d6d353d95e49ae251a417d4c5be17c4e06efd86ec9e850ba7b539c112"}, {0xdd, 0x85, "a9fc1b90334050abc577bd2ce8ab6746c0d58ab2615f6d5d2bec4e6ea51071fc0d7c518a71f32d2f8c1c8c6134328d6fdee52b7e33c24148ccb25af9a7a66a9b602ea25768a9a44d0275448a1097057d766379964db6b0fb139936b902188311675acf33aeda881a12334f1f7ebd0963c93ce35326da072691f5a7c6c778b26d6f720107ee"}, {0xdd, 0x2c, "b7a425b6d190809307b4f92e07138940e04311a516ac247110ae7f6c00201b6a728fa718a39cee1b519706af"}, {0xdd, 0x15, "9341c9dc72fc5b2c087aa8cbdc3af0938fbb54b4de"}, {0xdd, 0xa0, "eea8284eb49270e45b901c00441a44a341b76c399f691a8682f1b4673479f7fcb910598b789dcb35f8d25832092717338b2bd22d181d3f1eef2287a17f8c2ef9a9fd5c2b91fb9d0bbe117bc257ab9ebae8d6d1fef1af3ac8743bf3b85379421df3933f4fed0de4d1f8c3cb55817cadcd2e6a810d04bce0cdbcd37e28931d8b62672fea06033cba02026def1fcea1d31f77d6e5c5145a995a8e791dbd79431015"}, {0xdd, 0x3d, "c21bcd7d3325690da64cb52758ee19e97be3e47d938c47721661bff35ceaeedcdb5df7a104aa6caaa966ab3bc6310c172598755b543476512f30eac616"}, {0xdd, 0xd2, "c872940f9e3fab453bdb234ea8dfb232cf44ae828684550815765968c5eccd7b6bb17f8d9bb82450bfa00d69a7387021510857cc558fad87ff81f4f8cbf48ef928260ac6b701a5c7a36730d2ae868638e4f6dfc5604bcf560e63a00b31da79fac0be7690115d58dcd7cf7251a53da505518e35b44126460126e8e3535bfed8e6b94147fa158e75dff7e5f515226b60c87ce5d2a8c7239ddaa01a409371ad9d6708faa242eb75710d403ab161a90c644a7b39438d66c77a2b1b07790919e04d61982773c8f6857bc78c6389b50c23a83e7b33"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1f08}, 0x1, 0x0, 0x0, 0x20004000}, 0x8880) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000380)={0x80000000, &(0x7f00000002c0)=[{0x80000000}], &(0x7f0000000300)}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000003c0)={{0x80000000, r4, 0x3, [0x0, 0x8]}, {r5, 0x0, 0x4, [0x8, 0x3]}, 0x2, [0x4, 0x800]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x59}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x1, 0x0, {0x5f5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x30000000, 0x7f}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_KEK={0x2c, 0xf2, "3418203cde72aaf1b1c51113d8647ee877f965251a66a0f0e692a94db6b47902b4c4ccc260d0dabd"}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x80}}, 0x40840) r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0x5450, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000540)='@\xd6%$}-^.(\\{+:\'{-:\x00', 0x0, r0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x28}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x854) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x1f08, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @random="e1b6d6651617", {0x0, 0xc0}}, 0x3, @val={0x8c, 0x18, {0x594, "a04a92a1b807", @long="bc589c78d668c4c3f3e4432d0636b265"}}}}, @NL80211_ATTR_FRAME={0x14ba, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {}, @device_a, @broadcast, @device_b, {0x8, 0x5}}, @a_msdu=[{@device_b, @broadcast}, {@device_a, @device_a, 0x1000, "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"}, {@device_a, @device_a, 0xe0, "58ea6edb60427df71ce8703a4f4b564fcc1e5f8f28bb04dc0329a28fcc170a0e37c0ad6c4a7fabb8bb3138c10d62b3d6a765d91a5055e58219313c35b8b0b3275d1b87fe116a60fe3de01848cd5511e8b523f354a125f31d527e702278191512acbd484c64252d365fa5562a3de672972aa4da632caf383158d5617db55c35e1eb4a0dd566e6a67e3c779e9fd339d8f86e5dd52036d09cad932d5ee4a4d0109384dfe413fdb8e255b930d65471c8b4c074e8a73eb47e336b6393b5ff9515775cf0cb73fb5dd57ae1088107d9a9bd0bb42481d6c1f1c397eda3c4b892eb2c9447"}, {@device_a, @broadcast, 0x44, "872155605485054745625bcaf931e92f9f79a3310167367377ec998f2f06e760e036b6224f57fcc0354e75728d6dc651c9be8f0650f4ecd9479f03ed744cf8253d975405"}, {@device_a, @device_b, 0x40, "34dbce140bc41d234de903828ed92ef17c00180a6e5991a36a33d1176a3595ee68c07648182efd5f4ae4dcb19557cc0da27f6d7364310b7d9ed37fb0b94a56eb"}, {@device_b, @broadcast, 0x16, "9a49ae7d6c94708e5d70770eb04f23142ce30dd2e465"}, {@device_b, @device_b, 0x95, "8c0aa3ca906495fe92d46ccf5cc00361fd53fc45d5ad29436a4da5b457bcfadd48bac4f2192b4bc21d09cfb5e1803dc0cbdc44c736b67617b08d156eabf288b751dfb3a6128fbbe545f5183c270e840ea39a644e00cdcd28d6fd3b22e9fc16e585c0e35a48ff4f08eca4b926b17601032ad2b0012349dc3e676c2e54d9457d723b2491ebf15cb27a7b3c155e06e25c368ce3164943"}, {@device_b, @device_b, 0x72, "0ff4bcfaac435f013944c10aa65f8cbfc2f6706917d93c422de88af04b8d6804c4de45073be1d29412b20cb136e5cef5fd3fedf6bb79108e67481860b6f38e3fdc4200c521cfa61764f24b8cd2f45ac6817ad6a85348176df5078f3d2382e4c85a3628c6a84f6bd22ae557b5fd2f7d38f354"}, {@device_b, @broadcast, 0xe5, "45403201e61862a769f2d2a9b07508d1b60f3bb269c801ca685d6bf732c8de72f75ecc71af6177b0e84b3f2f5a38ab7aa63e736e6b1019a2c6e8be6d430c6f3e1386c09ef11f6522cceb7454b3c5ae58487c93d3abd6ee03f872abcf5047e0bbb59553673a2c134cc1cefa735687ca72cbdf9224e9ca8790bc9bd791e78e441387b38082b664571050f61e1de00dbc05f497973bcb1a6027aa09fd9781b33e2e8b95806e8afdd1a314e11856c5ef1c2082a488b2832235bd077e6710466f71554a80ab423bb71e46af2cb4623c4db83945dcddbba6ce7d4558fe6c4851ba0ea8eeb767dfc0"}, {@device_a, @device_b, 0x98, "5ed67f583a80894c49c41b9b0240a632b15eb8b7a0d741e7d342efc50f8ed2e86cc46b68cbcd874e05b67a191515c2f24dce833e07411673367dae179bd47e683bdc1bb07d1eca6b4fdb42874aaa262e55e0b0beb8a82289578d978398f32775ab4eb9d170a1fb49b6515102871ef7f738bbd015b627acab45c16880d51958519e27028b4a2529757a876d9286ef31569184dcf39347964f"}]}}, @NL80211_ATTR_FRAME={0x583, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x65}, @device_b, @device_b, @from_mac=@broadcast, {0xc, 0x6}}, {0x1, 0x0, 0x2, 0x0, 0x5}}, {@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x396}, @device_b, @from_mac, @initial, {0x9, 0xe09}}, {0x4, 0x0, 0x1, 0x1, 0x75}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x444, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xba2}, @device_a, @device_b, @initial, {0xe}}, 0x9f, @random=0x3, 0x2001, @void, @val={0x1, 0x5, [{0x4, 0x1}, {0x5, 0x1}, {0x9}, {0x9}, {0xd946ed5610544a33}]}, @void, @val={0x4, 0x6, {0x73, 0x7f, 0x9, 0x8}}, @val={0x6, 0x2, 0x81}, @val={0x2d, 0x1a, {0xc, 0x2, 0x3, 0x0, {0x5, 0x7f, 0x0, 0x81, 0x0, 0x0, 0x1}, 0x6, 0x8, 0x20}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x61}}, [{0xdd, 0x84, "be1b9752806916dfec46ca1bdc65e0b22e756b6acb6d65b64b9a7fb60e8190112866fcd96806dec8cc040a9d0c819731d39c8373deca933f38f51a789ba1fba327d83eac0a7a8bb2753924e4bbfc948ad761e552595e20eda98917c28772596e629bc44ba3de7d0a24428a0dfda8db8a684b9acf589c4ffa73fd96a99ae5b51f3fff9156"}, {0xdd, 0xd3, "e120baf92ce438806d685bf0b32161d5f20441f56a36b17910719e475440ab3671eb1e44b06a6e690a19f2280e7e2441d3ab340aaa0cf196e1373eff4f3300c1c64b99e76c6abfc401c3e5a253ab2495946beb2f6aed51827929b9a33ae5aa51f7e381b0dd87504d41bced6b5d9c7b23d6eefffb59b78acd288b6b67279416d684b53196e31aa7eecfed915d72d23e69b9502df3c57743fb07f563a4b8a31a88f0aa258ba7bc43ef10e742554bdac600a3032da29ce04d6d353d95e49ae251a417d4c5be17c4e06efd86ec9e850ba7b539c112"}, {0xdd, 0x85, "a9fc1b90334050abc577bd2ce8ab6746c0d58ab2615f6d5d2bec4e6ea51071fc0d7c518a71f32d2f8c1c8c6134328d6fdee52b7e33c24148ccb25af9a7a66a9b602ea25768a9a44d0275448a1097057d766379964db6b0fb139936b902188311675acf33aeda881a12334f1f7ebd0963c93ce35326da072691f5a7c6c778b26d6f720107ee"}, {0xdd, 0x2c, "b7a425b6d190809307b4f92e07138940e04311a516ac247110ae7f6c00201b6a728fa718a39cee1b519706af"}, {0xdd, 0x15, "9341c9dc72fc5b2c087aa8cbdc3af0938fbb54b4de"}, {0xdd, 0xa0, "eea8284eb49270e45b901c00441a44a341b76c399f691a8682f1b4673479f7fcb910598b789dcb35f8d25832092717338b2bd22d181d3f1eef2287a17f8c2ef9a9fd5c2b91fb9d0bbe117bc257ab9ebae8d6d1fef1af3ac8743bf3b85379421df3933f4fed0de4d1f8c3cb55817cadcd2e6a810d04bce0cdbcd37e28931d8b62672fea06033cba02026def1fcea1d31f77d6e5c5145a995a8e791dbd79431015"}, {0xdd, 0x3d, "c21bcd7d3325690da64cb52758ee19e97be3e47d938c47721661bff35ceaeedcdb5df7a104aa6caaa966ab3bc6310c172598755b543476512f30eac616"}, {0xdd, 0xd2, "c872940f9e3fab453bdb234ea8dfb232cf44ae828684550815765968c5eccd7b6bb17f8d9bb82450bfa00d69a7387021510857cc558fad87ff81f4f8cbf48ef928260ac6b701a5c7a36730d2ae868638e4f6dfc5604bcf560e63a00b31da79fac0be7690115d58dcd7cf7251a53da505518e35b44126460126e8e3535bfed8e6b94147fa158e75dff7e5f515226b60c87ce5d2a8c7239ddaa01a409371ad9d6708faa242eb75710d403ab161a90c644a7b39438d66c77a2b1b07790919e04d61982773c8f6857bc78c6389b50c23a83e7b33"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1f08}, 0x1, 0x0, 0x0, 0x20004000}, 0x8880) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000380)={0x80000000, &(0x7f00000002c0), &(0x7f0000000300)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000003c0)={{0x80000000, r4, 0x3, [0x0, 0x8]}, {r5, 0x0, 0x4, [0x8, 0x3]}, 0x2, [0x4, 0x800]}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x59}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x1, 0x0, {0x5f5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x30000000, 0x7f}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_KEK={0x2c, 0xf2, "3418203cde72aaf1b1c51113d8647ee877f965251a66a0f0e692a94db6b47902b4c4ccc260d0dabd"}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x80}}, 0x40840) (async) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0x5450, 0x0) (async) 00:20:51 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r3, 0x105, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) 00:20:51 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r3, 0x105, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) 00:20:51 executing program 0: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000640)={0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x80000000}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, &(0x7f00000005c0)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000140)}) (async) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) (async) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}, {{0x80000000, 0x0}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r4}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x9, 0x0, &(0x7f0000000780)=[{}, {}, {0x80000000}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x4, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x6, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000200)={{r0, r1, 0x0, [0x80, 0x200]}, {r4, r8, 0x4, [0x2, 0x1000]}, 0x1, [0x2, 0xe79]}) (async, rerun: 64) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000006c0)={0x1, 0x100}) (async, rerun: 64) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r11, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000700)={r7, &(0x7f0000000600), &(0x7f0000000b80)=[{}, {{0x80000000}}]}) (async) r13 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r13, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r15 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r15, 0xc1007c01, &(0x7f0000000080)={r14}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000000c00)={{r12, r9, 0x0, [0x520, 0x7]}, {r14, r5, 0x1, [0x0, 0x9d1]}, 0x2, [0x1, 0x7]}) (async) r16 = openat$cgroup_type(r10, &(0x7f0000000740), 0x2, 0x0) (async) r17 = fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r17, 0x5, &(0x7f00000000c0)='/dev/media#\x00', 0x0, r16) (async, rerun: 32) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0x1, 0x20, 0x80, 0x20, 0x1}, 0x48) (async, rerun: 32) ioctl$VHOST_SET_VRING_ENDIAN(r10, 0x4008af13, &(0x7f0000000040)={0x0, 0x3}) 00:20:51 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r3, 0x105, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:51 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x3, 0x0, &(0x7f0000000540)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000003c0)=[{}, {}], 0x4, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) 00:20:51 executing program 1: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000640)={0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x80000000}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, &(0x7f00000005c0)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000140)}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}, {{0x80000000, 0x0}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x9, 0x0, &(0x7f0000000780)=[{}, {}, {0x80000000}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x4, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x6, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000200)={{r0, r1, 0x0, [0x80, 0x200]}, {r4, r8, 0x4, [0x2, 0x1000]}, 0x1, [0x2, 0xe79]}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000006c0)={0x1, 0x100}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r11, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000700)={r7, &(0x7f0000000600), &(0x7f0000000b80)=[{}, {{0x80000000}}]}) r13 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r13, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r15 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r15, 0xc1007c01, &(0x7f0000000080)={r14}) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000000c00)={{r12, r9, 0x0, [0x520, 0x7]}, {r14, r5, 0x1, [0x0, 0x9d1]}, 0x2, [0x1, 0x7]}) r16 = openat$cgroup_type(r10, &(0x7f0000000740), 0x2, 0x0) r17 = fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r17, 0x5, &(0x7f00000000c0)='/dev/media#\x00', 0x0, r16) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0x1, 0x20, 0x80, 0x20, 0x1}, 0x48) ioctl$VHOST_SET_VRING_ENDIAN(r10, 0x4008af13, &(0x7f0000000040)={0x0, 0x3}) 00:20:51 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x2881) r0 = fsmount(0xffffffffffffffff, 0x0, 0x81) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 00:20:51 executing program 0: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000640)={0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x80000000}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, &(0x7f00000005c0)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000140)}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}, {{0x80000000, 0x0}}]}) (async) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r4}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x9, 0x0, &(0x7f0000000780)=[{}, {}, {0x80000000}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x4, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x6, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000200)={{r0, r1, 0x0, [0x80, 0x200]}, {r4, r8, 0x4, [0x2, 0x1000]}, 0x1, [0x2, 0xe79]}) (async, rerun: 32) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000006c0)={0x1, 0x100}) (async, rerun: 32) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r11, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000700)={r7, &(0x7f0000000600), &(0x7f0000000b80)=[{}, {{0x80000000}}]}) (async) r13 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r13, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) (async, rerun: 32) r15 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$MEDIA_IOC_ENUM_ENTITIES(r15, 0xc1007c01, &(0x7f0000000080)={r14}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000000c00)={{r12, r9, 0x0, [0x520, 0x7]}, {r14, r5, 0x1, [0x0, 0x9d1]}, 0x2, [0x1, 0x7]}) (async) r16 = openat$cgroup_type(r10, &(0x7f0000000740), 0x2, 0x0) (async) r17 = fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r17, 0x5, &(0x7f00000000c0)='/dev/media#\x00', 0x0, r16) (async) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0x1, 0x20, 0x80, 0x20, 0x1}, 0x48) ioctl$VHOST_SET_VRING_ENDIAN(r10, 0x4008af13, &(0x7f0000000040)={0x0, 0x3}) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x440604) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) 00:20:51 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x2881) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x81) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 00:20:51 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r3, 0x105, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) 00:20:51 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x3, 0x0, &(0x7f0000000540)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000003c0)=[{}, {}], 0x4, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) 00:20:51 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x440604) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x8, 0x440604) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) (async) 00:20:51 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x2881) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x81) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 00:20:51 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x1, 0x3}) 00:20:51 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x3, 0x0, &(0x7f0000000540)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000003c0)=[{}, {}], 0x4, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) (async) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) 00:20:51 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) 00:20:51 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x8, 0x400d00) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x5421, 0x0) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x440604) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) 00:20:51 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r2, 0x105, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:51 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x1, 0x3}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x1, 0x3}) (async) 00:20:51 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) 00:20:51 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x400, 0x7a54c0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 00:20:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="016376eab300fcdbdf251c090000000000000000000000000000080003006163bf9ececc85e6729feb848f00fc6fd09b", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_VENDOR(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r6, 0x228, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x64f}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x148}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x4001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '$+{\'+'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '/e@-'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c4}, 0x10) r12 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r12, 0x5421, 0x0) 00:20:51 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x1, 0x3}) 00:20:51 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x8, 0x400d00) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x5421, 0x0) [ 1251.723992][T19504] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 00:20:51 executing program 1: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="016376eab300fcdbdf251c090000000000000000000000000000080003006163bf9ececc85e6729feb848f00fc6fd09b", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_VENDOR(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r6, 0x228, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x64f}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x148}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x4001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '$+{\'+'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '/e@-'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c4}, 0x10) (async) r12 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r12, 0x5421, 0x0) 00:20:51 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:51 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000040)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000140)='nomand\x00', 0x0, 0x0) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x400, 0x7a54c0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 00:20:51 executing program 1: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:51 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:51 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x8, 0x400d00) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x5421, 0x0) 00:20:51 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000040)) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000140)='nomand\x00', 0x0, 0x0) [ 1251.829860][T19518] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 00:20:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="016376eab300fcdbdf251c090000000000000000000000000000080003006163bf9ececc85e6729feb848f00fc6fd09b", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="016376eab300fcdbdf251c090000000000000000000000000000080003006163bf9ececc85e6729feb848f00fc6fd09b", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_VENDOR(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r6, 0x228, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x64f}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x148}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x4001) (async) sendmsg$NFC_CMD_VENDOR(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r6, 0x228, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x64f}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x148}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x4001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '$+{\'+'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '/e@-'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c4}, 0x10) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r12 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r12, 0x5421, 0x0) 00:20:51 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x8, 0x400d00) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)) 00:20:51 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:51 executing program 1: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:51 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x400, 0x7a54c0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 00:20:51 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000040)) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000140)='nomand\x00', 0x0, 0x0) [ 1251.933056][T19539] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1251.942418][T19544] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 00:20:51 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:51 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x8, 0x400d00) 00:20:51 executing program 1: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:51 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x6, [0x7f]}, {r2, 0x0, 0x5, [0x1, 0x10000]}, 0x4, [0x8000, 0x6]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) 00:20:51 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r2, &(0x7f0000000340), &(0x7f0000000380)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000500)={r4, &(0x7f0000000440), &(0x7f0000000480)}) 00:20:52 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x8, 0x400d00) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)) 00:20:52 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:52 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) (async) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x6, [0x7f]}, {r2, 0x0, 0x5, [0x1, 0x10000]}, 0x4, [0x8000, 0x6]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) 00:20:52 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r2, &(0x7f0000000340), &(0x7f0000000380)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000500)={r4, &(0x7f0000000440), &(0x7f0000000480)}) 00:20:52 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:52 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x8, 0x400d00) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)) 00:20:52 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x6, [0x7f]}, {r2, 0x0, 0x5, [0x1, 0x10000]}, 0x4, [0x8000, 0x6]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) (async) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x6, [0x7f]}, {r2, 0x0, 0x5, [0x1, 0x10000]}, 0x4, [0x8000, 0x6]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) (async) 00:20:52 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r2, &(0x7f0000000340), &(0x7f0000000380)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000500)={r4, &(0x7f0000000440), &(0x7f0000000480)}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r2, &(0x7f0000000340), &(0x7f0000000380)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000500)={r4, &(0x7f0000000440), &(0x7f0000000480)}) (async) 00:20:52 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:52 executing program 1: r0 = syz_open_dev$media(0x0, 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:52 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x8, 0x400d00) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)) 00:20:52 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:52 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000340), 0x7fffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x105800, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = io_uring_setup(0x7c7e, &(0x7f0000001000)={0x0, 0xa3ea, 0x8, 0x3, 0xda, 0x0, r3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000001080)=r1, 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000240)) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x1, 0x0, &(0x7f0000000440)=[{}], 0x0, 0x0, &(0x7f00000004c0), 0x1, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x0, &(0x7f0000000780)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000f80)={0x0, 0x8, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000b40)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}], 0xb, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000100)={r5}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/tee', 0x200003, 0x0) openat$cgroup_type(r6, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000200), 0x2, 0x0) 00:20:52 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x8, 0x400d00) 00:20:52 executing program 1: r0 = syz_open_dev$media(0x0, 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:52 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:52 executing program 2: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000005c0)) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000180), 0x7fff, 0x4000) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000340), 0x9, 0x131041) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f00000004c0)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) socket(0x8, 0x80000, 0x3) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) r11 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r11, 0xc0287c02, &(0x7f0000000780)={0x80000000, 0x0, &(0x7f0000000380)=[{{0x80000000}}]}) r13 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r14, 0xc1007c01, &(0x7f0000000640)={r12}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r13, 0xc1007c01, &(0x7f0000000080)={r12}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000001c0)={r12, &(0x7f00000002c0), &(0x7f0000000240)}) 00:20:52 executing program 1: r0 = syz_open_dev$media(0x0, 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:52 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000340), 0x7fffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x105800, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = io_uring_setup(0x7c7e, &(0x7f0000001000)={0x0, 0xa3ea, 0x8, 0x3, 0xda, 0x0, r3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000001080)=r1, 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000240)) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x1, 0x0, &(0x7f0000000440)=[{}], 0x0, 0x0, &(0x7f00000004c0), 0x1, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x0, &(0x7f0000000780)=[{}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x1, 0x0, &(0x7f0000000440)=[{}], 0x0, 0x0, &(0x7f00000004c0), 0x1, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x0, &(0x7f0000000780)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000f80)={0x0, 0x8, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000b40)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}], 0xb, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000100)={r5}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000100)={r5}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/tee', 0x200003, 0x0) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/tee', 0x200003, 0x0) openat$cgroup_type(r6, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000200), 0x2, 0x0) (async) openat$cgroup_freezer_state(r6, &(0x7f0000000200), 0x2, 0x0) 00:20:52 executing program 2: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000005c0)) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) (async) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) (async) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) (async) r4 = syz_open_dev$media(&(0x7f0000000180), 0x7fff, 0x4000) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000340), 0x9, 0x131041) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f00000004c0)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) (async) socket(0x8, 0x80000, 0x3) (async) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) (async) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) (async) r11 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r11, 0xc0287c02, &(0x7f0000000780)={0x80000000, 0x0, &(0x7f0000000380)=[{{0x80000000}}]}) r13 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r14, 0xc1007c01, &(0x7f0000000640)={r12}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r13, 0xc1007c01, &(0x7f0000000080)={r12}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000001c0)={r12, &(0x7f00000002c0), &(0x7f0000000240)}) 00:20:52 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:52 executing program 4: r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:52 executing program 2: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000005c0)) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) (async) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000180), 0x7fff, 0x4000) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) (rerun: 64) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000340), 0x9, 0x131041) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f00000004c0)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) (async) socket(0x8, 0x80000, 0x3) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) (async, rerun: 64) r11 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(r11, 0xc0287c02, &(0x7f0000000780)={0x80000000, 0x0, &(0x7f0000000380)=[{{0x80000000}}]}) r13 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r14, 0xc1007c01, &(0x7f0000000640)={r12}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r13, 0xc1007c01, &(0x7f0000000080)={r12}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000001c0)={r12, &(0x7f00000002c0), &(0x7f0000000240)}) 00:20:52 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000340), 0x7fffffff, 0x0) (async) syz_open_dev$media(&(0x7f0000000340), 0x7fffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x105800, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = io_uring_setup(0x7c7e, &(0x7f0000001000)={0x0, 0xa3ea, 0x8, 0x3, 0xda, 0x0, r3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000001080)=r1, 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000001080)=r1, 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000240)) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x1, 0x0, &(0x7f0000000440)=[{}], 0x0, 0x0, &(0x7f00000004c0), 0x1, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x0, &(0x7f0000000780)=[{}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x1, 0x0, &(0x7f0000000440)=[{}], 0x0, 0x0, &(0x7f00000004c0), 0x1, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x0, &(0x7f0000000780)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000f80)={0x0, 0x8, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000b40)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}], 0xb, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000100)={r5}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/tee', 0x200003, 0x0) openat$cgroup_type(r6, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000200), 0x2, 0x0) (async) openat$cgroup_freezer_state(r6, &(0x7f0000000200), 0x2, 0x0) 00:20:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:52 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:52 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 4: r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x1, 0x9, 0x2, 0x2}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ip_gre', 0x1, 0x32) r3 = socket$isdn(0x22, 0x3, 0x24) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f00000001c0)=0x3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) socket$isdn(0x22, 0x3, 0x22) openat$cgroup_type(r4, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_ro(r4, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000080)) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xb482cda572f05264}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x12c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1ff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7f}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x210}, @NFC_ATTR_VENDOR_SUBCMD={0xffffff4c, 0x1e, 0x6}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x800}, @NFC_ATTR_VENDOR_DATA={0xe5, 0x1f, "ec2275304ffd3c730f5a6558c45bd198fc6344fe751a219b3fc9c246a9f7b7c14ae4477337099eb59942c3b95778f60626e2345f287856439490dc5f18f128d242389c23be99ae756c045a21eeb04b98092b739538975686b017a1c7ac8667cdad2f619436e22b2c4a65f8032bd09db6c0388dea16abc8622d0e3760f01638c7f99b67deb22212f56c511a017fff222f45a5244de7ab6294f530973c68fb501cb22f4a413b5a28010bff2135f4ea3adc31bf0534095f32f16a59297b1be0a2e63972bc45b816f2c8f59739dd8b4685f5df5973b73cda6302f25b5b6de739ca5327"}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc815}, 0x48010) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x40049409, 0x0) 00:20:52 executing program 4: r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000200), &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x1, 0x3ffffffffffffeca}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x9, 0x201) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) 00:20:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:52 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x1, 0x9, 0x2, 0x2}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ip_gre', 0x1, 0x32) (async) r3 = socket$isdn(0x22, 0x3, 0x24) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f00000001c0)=0x3) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) socket$isdn(0x22, 0x3, 0x22) (async) openat$cgroup_type(r4, &(0x7f0000000740), 0x2, 0x0) (async, rerun: 32) openat$cgroup_ro(r4, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x0, 0x0) (rerun: 32) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000080)) (async) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xb482cda572f05264}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x12c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1ff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7f}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x210}, @NFC_ATTR_VENDOR_SUBCMD={0xffffff4c, 0x1e, 0x6}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x800}, @NFC_ATTR_VENDOR_DATA={0xe5, 0x1f, "ec2275304ffd3c730f5a6558c45bd198fc6344fe751a219b3fc9c246a9f7b7c14ae4477337099eb59942c3b95778f60626e2345f287856439490dc5f18f128d242389c23be99ae756c045a21eeb04b98092b739538975686b017a1c7ac8667cdad2f619436e22b2c4a65f8032bd09db6c0388dea16abc8622d0e3760f01638c7f99b67deb22212f56c511a017fff222f45a5244de7ab6294f530973c68fb501cb22f4a413b5a28010bff2135f4ea3adc31bf0534095f32f16a59297b1be0a2e63972bc45b816f2c8f59739dd8b4685f5df5973b73cda6302f25b5b6de739ca5327"}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc815}, 0x48010) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x40049409, 0x0) 00:20:52 executing program 4: r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 3: r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x9, 0x201) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x9, 0x201) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) 00:20:52 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:52 executing program 4: fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:52 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x9, 0x201) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x9, 0x201) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) (async) 00:20:52 executing program 3: r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x1, 0x9, 0x2, 0x2}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ip_gre', 0x1, 0x32) r3 = socket$isdn(0x22, 0x3, 0x24) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f00000001c0)=0x3) (async) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f00000001c0)=0x3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) socket$isdn(0x22, 0x3, 0x22) openat$cgroup_type(r4, &(0x7f0000000740), 0x2, 0x0) (async) openat$cgroup_type(r4, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_ro(r4, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000080)) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000080)) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xb482cda572f05264}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x12c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1ff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7f}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x210}, @NFC_ATTR_VENDOR_SUBCMD={0xffffff4c, 0x1e, 0x6}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x800}, @NFC_ATTR_VENDOR_DATA={0xe5, 0x1f, "ec2275304ffd3c730f5a6558c45bd198fc6344fe751a219b3fc9c246a9f7b7c14ae4477337099eb59942c3b95778f60626e2345f287856439490dc5f18f128d242389c23be99ae756c045a21eeb04b98092b739538975686b017a1c7ac8667cdad2f619436e22b2c4a65f8032bd09db6c0388dea16abc8622d0e3760f01638c7f99b67deb22212f56c511a017fff222f45a5244de7ab6294f530973c68fb501cb22f4a413b5a28010bff2135f4ea3adc31bf0534095f32f16a59297b1be0a2e63972bc45b816f2c8f59739dd8b4685f5df5973b73cda6302f25b5b6de739ca5327"}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc815}, 0x48010) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x40049409, 0x0) 00:20:52 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:52 executing program 1: syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:52 executing program 4: fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 3: r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x4, r1}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x5421, 0x0) 00:20:52 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r1 = fsopen(&(0x7f0000000140)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8d) 00:20:52 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:52 executing program 1: syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:52 executing program 3: r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 4: fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r1 = fsopen(&(0x7f0000000140)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8d) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) (async) fsopen(&(0x7f0000000140)='fuse\x00', 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x8d) (async) 00:20:52 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x4, r1}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x5421, 0x0) 00:20:52 executing program 1: syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x20000010) 00:20:52 executing program 3: fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:52 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x4, r1}) (async) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x5421, 0x0) 00:20:52 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r1 = fsopen(&(0x7f0000000140)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x8d) 00:20:53 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000340), 0x7fffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x105800, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = io_uring_setup(0x7c7e, &(0x7f0000001000)={0x0, 0xa3ea, 0x8, 0x3, 0xda, 0x0, r3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000001080)=r1, 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000240)) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x1, 0x0, &(0x7f0000000440)=[{}], 0x0, 0x0, &(0x7f00000004c0), 0x1, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x0, &(0x7f0000000780)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000f80)={0x0, 0x8, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000b40)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}], 0xb, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000100)={r5}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/tee', 0x200003, 0x0) openat$cgroup_type(r6, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000200), 0x2, 0x0) 00:20:53 executing program 3: fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:53 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r2, &(0x7f0000000340), &(0x7f0000000380)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000500)={r4, &(0x7f0000000440), &(0x7f0000000480)}) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x5, 0x0, &(0x7f0000000a40)=[{}, {0x80000000}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000700)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{r7, r6, 0x2, [0x1, 0x6]}, {r8, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000480)=0xfffffffa) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x20000010) 00:20:53 executing program 3: fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:20:53 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x20000010) 00:20:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x20000010) 00:20:53 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r2, &(0x7f0000000340), &(0x7f0000000380)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000500)={r4, &(0x7f0000000440), &(0x7f0000000480)}) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x5, 0x0, &(0x7f0000000a40)=[{}, {0x80000000}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000700)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{r7, r6, 0x2, [0x1, 0x6]}, {r8, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000480)=0xfffffffa) 00:20:53 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x5, 0x0, &(0x7f0000000a40)=[{}, {0x80000000}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000700)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{r7, r6, 0x2, [0x1, 0x6]}, {r8, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000480)=0xfffffffa) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x5, 0x0, &(0x7f0000000a40)=[{}, {0x80000000}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000700)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{r7, r6, 0x2, [0x1, 0x6]}, {r8, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000480)=0xfffffffa) 00:20:53 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r2, &(0x7f0000000340), &(0x7f0000000380)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000500)={r4, &(0x7f0000000440), &(0x7f0000000480)}) 00:20:53 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x20600, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x400c040) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0x5452, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r4, &(0x7f0000000740), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 00:20:53 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x5, 0x0, &(0x7f0000000a40)=[{}, {0x80000000}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000700)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{r7, r6, 0x2, [0x1, 0x6]}, {r8, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000480)=0xfffffffa) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x5, 0x0, &(0x7f0000000a40)=[{}, {0x80000000}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000700)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{r7, r6, 0x2, [0x1, 0x6]}, {r8, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r2, &(0x7f0000000340), &(0x7f0000000380)}) 00:20:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) 00:20:53 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x5, 0x0, &(0x7f0000000a40)=[{}, {0x80000000}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000700)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{r7, r6, 0x2, [0x1, 0x6]}, {r8, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000480)=0xfffffffa) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{r7, r6, 0x2, [0x1, 0x6]}, {0x80000000, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000540)={0x0, 0x8, 0x0, &(0x7f0000000040)=[{}, {}, {}, {0x80000000}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0, &(0x7f00000003c0)=[{}], 0x7, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000b40)={0x0, 0x7, 0x0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000a40)=[{}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x2, 0x0, &(0x7f0000000ac0)=[{}, {}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000bc0)={{r1, r2, 0x2, [0xf2, 0x7fff]}, {r4, 0x0, 0x0, [0x1ff, 0x1]}, 0x0, [0x80000000, 0xf3fa]}) 00:20:53 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{0x80000000, r6, 0x2, [0x1, 0x6]}, {0x80000000, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x5, 0x0, &(0x7f0000000a40)=[{}, {0x80000000}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000700)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{r7, r6, 0x2, [0x1, 0x6]}, {r8, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) 00:20:53 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000540)={0x0, 0x8, 0x0, &(0x7f0000000040)=[{}, {}, {}, {0x80000000}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0, &(0x7f00000003c0)=[{}], 0x7, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000b40)={0x0, 0x7, 0x0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000a40)=[{}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x2, 0x0, &(0x7f0000000ac0)=[{}, {}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000bc0)={{r1, r2, 0x2, [0xf2, 0x7fff]}, {r4, 0x0, 0x0, [0x1ff, 0x1]}, 0x0, [0x80000000, 0xf3fa]}) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x5, 0x0, &(0x7f0000000a40)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000700)=[{}]}) 00:20:53 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) 00:20:53 executing program 3: r0 = syz_open_dev$media(0x0, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000540)={0x0, 0x8, 0x0, &(0x7f0000000040)=[{}, {}, {}, {0x80000000}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0, &(0x7f00000003c0)=[{}], 0x7, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000b40)={0x0, 0x7, 0x0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000a40)=[{}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x2, 0x0, &(0x7f0000000ac0)=[{}, {}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000bc0)={{r1, r2, 0x2, [0xf2, 0x7fff]}, {r4, 0x0, 0x0, [0x1ff, 0x1]}, 0x0, [0x80000000, 0xf3fa]}) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) 00:20:53 executing program 3: r0 = syz_open_dev$media(0x0, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000540)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000280)}) 00:20:53 executing program 3: r0 = syz_open_dev$media(0x0, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 1: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000100)=[{}, {}], 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{r7, r6, 0x2, [0x1, 0x6]}, {0x80000000, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) 00:20:53 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)=0xfff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={r0, 0x1, 0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x2}, 0x20) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x40049409, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000002c0)='freezer.state\x00', 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000300)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20024011}, 0x24004004) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) 00:20:53 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:53 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) 00:20:53 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 2: syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x18102) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:53 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:53 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000440)=0x1000080, 0x4) 00:20:53 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, r3, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:53 executing program 3: syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) 00:20:53 executing program 2: syz_open_dev$media(0x0, 0x7, 0x18102) 00:20:53 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) 00:20:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)=[{{}, {0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, r2, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 3: syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) 00:20:54 executing program 2: syz_open_dev$media(0x0, 0x7, 0x18102) 00:20:54 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)}) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) 00:20:54 executing program 3: syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) r1 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 2: syz_open_dev$media(0x0, 0x7, 0x18102) 00:20:54 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000005c0)={0x80000000, &(0x7f0000000500), &(0x7f0000000540)}) 00:20:54 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) write$tcp_congestion(r1, &(0x7f0000000040)='illinois\x00', 0x9) r2 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:54 executing program 1: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 2: syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x18102) 00:20:54 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:54 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) write$tcp_congestion(r1, &(0x7f0000000040)='illinois\x00', 0x9) r2 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:54 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 1: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 2: syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x18102) 00:20:54 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) write$tcp_congestion(r1, &(0x7f0000000040)='illinois\x00', 0x9) r2 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:54 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 2: syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x18102) 00:20:54 executing program 1: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:54 executing program 1: r0 = syz_open_dev$media(0x0, 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 2: syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x0) 00:20:54 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='illinois\x00', 0x9) r1 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:54 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 1: r0 = syz_open_dev$media(0x0, 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='illinois\x00', 0x9) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:54 executing program 2: syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x0) 00:20:54 executing program 1: r0 = syz_open_dev$media(0x0, 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:54 executing program 0: r0 = syz_open_dev$media(0x0, 0x2, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 2: syz_open_dev$media(&(0x7f00000002c0), 0x7, 0x0) 00:20:54 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='illinois\x00', 0x9) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:54 executing program 0: r0 = syz_open_dev$media(0x0, 0x2, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:54 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4841}, 0x4010) r10 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0xe8d00) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r11) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r11, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x9824) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0x541b, 0x0) 00:20:54 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='illinois\x00', 0x9) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:54 executing program 0: r0 = syz_open_dev$media(0x0, 0x2, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x0, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:54 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x70b603, 0x10) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f00000001c0)=""/110, 0x10000, 0x0, 0x5, 0x1}, 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r3, 0x1) 00:20:54 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 4: r0 = syz_open_dev$media(0x0, 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x0, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:54 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x70b603, 0x10) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f00000001c0)=""/110, 0x10000, 0x0, 0x5, 0x1}, 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r3, 0x1) 00:20:54 executing program 1: syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 4: r0 = syz_open_dev$media(0x0, 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:54 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x0, 0x400) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:54 executing program 4: r0 = syz_open_dev$media(0x0, 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 1: syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x70b603, 0x10) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f00000001c0)=""/110, 0x10000, 0x0, 0x5, 0x1}, 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r3, 0x1) 00:20:54 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:54 executing program 1: syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:54 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:54 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x70b603, 0x10) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f00000001c0)=""/110, 0x10000, 0x0, 0x5, 0x1}, 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:20:54 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:54 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 00:20:54 executing program 0: syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}]}, 0x1c}}, 0x20000010) 00:20:54 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:54 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x70b603, 0x10) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f00000001c0)=""/110, 0x10000, 0x0, 0x5, 0x1}, 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r3, &(0x7f0000000740), 0x2, 0x0) 00:20:54 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5}]}, 0x1c}}, 0x0) 00:20:55 executing program 3: r0 = syz_open_dev$media(0x0, 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:55 executing program 0: syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 00:20:55 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:55 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x70b603, 0x10) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f00000001c0)=""/110, 0x10000, 0x0, 0x5, 0x1}, 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) 00:20:55 executing program 3: r0 = syz_open_dev$media(0x0, 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:55 executing program 0: syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x2, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 00:20:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:55 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:55 executing program 3: r0 = syz_open_dev$media(0x0, 0x7, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:55 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x70b603, 0x10) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f00000001c0)=""/110, 0x10000, 0x0, 0x5, 0x1}, 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 00:20:55 executing program 4: syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) 00:20:55 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 5: r0 = syz_open_dev$media(0x0, 0x2, 0x400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 00:20:55 executing program 4: syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:55 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x70b603, 0x10) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 00:20:55 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 00:20:55 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffc04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5452, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f00000000c0)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x74) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f) 00:20:55 executing program 4: syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 00:20:55 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:55 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x70b603, 0x10) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x0, [0x1, 0x6]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:55 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:55 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5421, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, &(0x7f0000000200)=[{}, {0x80000000, 0x0}], &(0x7f0000000240)}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r2, 0x0, [0x6, 0x2]}, {r4, 0x0, 0x4, [0x3, 0x1000]}, 0x10000001, [0x80, 0x5]}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/video4linux', 0x200000, 0xc4) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r6, 0x8004af79, &(0x7f0000000180)) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) 00:20:55 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{0x80000000, 0x0, 0x0, [0x1]}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 00:20:55 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:55 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x7, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:55 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f00000001c0)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x5b7, 0xc0000) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{}, {0x80000000, 0x0, 0x1, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:55 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:20:55 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 00:20:55 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x7, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{}, {0x80000000, 0x0, 0x0, [0x9, 0x4]}, 0x2, [0x8, 0x1]}) 00:20:55 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000200)={0x101, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x2, 0x1], &(0x7f0000000180)=[r3], &(0x7f00000001c0)=[0x88c2, 0x0, 0x1]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000040)="692c45b9", 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, r3}) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 00:20:55 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0xffffffffffffffff, 0x2a8c81) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:20:55 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x7, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{}, {0x80000000, 0x0, 0x0, [0x9]}, 0x2, [0x8, 0x1]}) 00:20:55 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0xffffffffffffffff, 0x2a8c81) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:20:55 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, 0x0) 00:20:55 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000200)={0x101, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x2, 0x1], &(0x7f0000000180)=[r3], &(0x7f00000001c0)=[0x88c2, 0x0, 0x1]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000040)="692c45b9", 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, r3}) 00:20:55 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0xffffffffffffffff, 0x2a8c81) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{}, {}, 0x2, [0x8, 0x1]}) 00:20:55 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, 0x0) 00:20:55 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{}, {}, 0x0, [0x8, 0x1]}) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0xffffffffffffffff, 0x2a8c81) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:55 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40086602, 0x0) 00:20:55 executing program 2: syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 00:20:55 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0xffffffffffffffff, 0x2a8c81) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)={{}, {}, 0x0, [0x8]}) 00:20:55 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000200)={0x101, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x2, 0x1], &(0x7f0000000180)=[r3], &(0x7f00000001c0)=[0x88c2, 0x0, 0x1]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000040)="692c45b9", 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, r3}) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 2: syz_emit_vhci(0x0, 0x0) 00:20:55 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x200000000003, 0x111001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ipvtap', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r1, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:55 executing program 4: syz_open_dev$rtc(&(0x7f0000000080), 0xffffffffffffffff, 0x2a8c81) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000600), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001100)) 00:20:55 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000200)={0x101, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x2, 0x1], &(0x7f0000000180)=[r3], &(0x7f00000001c0)=[0x88c2, 0x0, 0x1]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000040)="692c45b9", 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:55 executing program 2: syz_emit_vhci(0x0, 0x0) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000011c0)={0x0, 0xa, 0x0, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000e40)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000001080)=[{}], 0x6, 0x0, &(0x7f00000010c0)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r3, &(0x7f0000000040)=[{}, {0x80000000}], &(0x7f0000000080)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x6, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000001c0)=[{}], 0x2, 0x0, &(0x7f0000000240)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x1, 0x0, &(0x7f0000000280)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000380)={r5, &(0x7f0000000340)=[{0x80000000}], &(0x7f0000000640)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f00000009c0)={0x0, 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x3, 0x0, &(0x7f0000000740)=[{}, {}, {}], 0x3, 0x0, &(0x7f00000008c0)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x2, 0x0, &(0x7f0000000940)=[{}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000a40)={{r4, r6, 0x4, [0x0, 0x1ff]}, {r7, r8, 0x0, [0xffff, 0x10000]}, 0x0, [0x2, 0x8]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:55 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]}) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000580)=0x208000, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000640), &(0x7f00000006c0)=0x80) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000600)=r2, 0x1) 00:20:55 executing program 4: syz_open_dev$rtc(0x0, 0xffffffffffffffff, 0x2a8c81) 00:20:55 executing program 2: syz_emit_vhci(0x0, 0x0) 00:20:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:55 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000200)={0x101, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x2, 0x1], &(0x7f0000000180)=[r3], &(0x7f00000001c0)=[0x88c2, 0x0, 0x1]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:55 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]}) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000580)=0x208000, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000640), &(0x7f00000006c0)=0x80) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000600)=r2, 0x1) 00:20:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r5) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x202020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002abd7000fbdbdf251d00000008001d0006ff000008000100", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x4041) 00:20:55 executing program 4: syz_open_dev$rtc(0x0, 0xffffffffffffffff, 0x2a8c81) 00:20:56 executing program 2: syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000200)={0x101, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x2, 0x1], &(0x7f0000000180)=[r2], &(0x7f00000001c0)=[0x88c2, 0x0, 0x1]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:56 executing program 4: syz_open_dev$rtc(0x0, 0xffffffffffffffff, 0x2a8c81) 00:20:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]}) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000580)=0x208000, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000640), &(0x7f00000006c0)=0x80) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000600)=r2, 0x1) 00:20:56 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r5) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x202020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002abd7000fbdbdf251d00000008001d0006ff000008000100", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x4041) 00:20:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x2a8c81) 00:20:56 executing program 2: syz_open_dev$rtc(0x0, 0xffffffffffffffff, 0x2a8c81) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]}) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000580)=0x208000, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000640), &(0x7f00000006c0)=0x80) 00:20:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) r4 = openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000940)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r6, &(0x7f00000001c0), &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x1, 0x2, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000180)={0x81, 0x0, r9}) 00:20:56 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:56 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r5) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x202020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002abd7000fbdbdf251d00000008001d0006ff000008000100", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x4041) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x2a8c81) 00:20:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]}) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000580)=0x208000, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) 00:20:56 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:56 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r3) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x2a8c81) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) r4 = openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000940)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r6, &(0x7f00000001c0), &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x1, 0x2, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000180)={0x81, 0x0, r9}) 00:20:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]}) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000580)=0x208000, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x541b, 0x0) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000080), 0xffffffffffffffff, 0x0) 00:20:56 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) socket$packet(0x11, 0x2, 0x300) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:56 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r3) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]}) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000580)=0x208000, 0x4) 00:20:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) r4 = openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000940)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r6, &(0x7f00000001c0), &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x1, 0x2, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000180)={0x81, 0x0, r9}) 00:20:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000080), 0xffffffffffffffff, 0x0) 00:20:56 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]}) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) r4 = openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000940)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r6, &(0x7f00000001c0), &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x1, 0x2, 0x2, 0x1}) 00:20:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000080), 0xffffffffffffffff, 0x0) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) r4 = openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000940)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r6, &(0x7f00000001c0), &(0x7f0000000200)}) 00:20:56 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:56 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]}) 00:20:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000080), 0xffffffffffffffff, 0x0) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 5: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x541b, 0x0) 00:20:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) 00:20:56 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) r4 = openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000940)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 4: syz_open_dev$rtc(0x0, 0xffffffffffffffff, 0x0) 00:20:56 executing program 5: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x541b, 0x0) 00:20:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 4: syz_open_dev$rtc(0x0, 0xffffffffffffffff, 0x0) 00:20:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) r4 = openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) 00:20:56 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:56 executing program 5: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x541b, 0x0) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 3: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6}) 00:20:56 executing program 4: syz_open_dev$rtc(0x0, 0xffffffffffffffff, 0x0) 00:20:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 00:20:56 executing program 5: r0 = syz_open_dev$media(0x0, 0x10, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:56 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:56 executing program 3: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6}) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) 00:20:56 executing program 5: r0 = syz_open_dev$media(0x0, 0x10, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) 00:20:56 executing program 3: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6}) 00:20:56 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) 00:20:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) 00:20:56 executing program 5: r0 = syz_open_dev$media(0x0, 0x10, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 00:20:56 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) 00:20:56 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:56 executing program 4: syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) 00:20:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) 00:20:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:57 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) 00:20:57 executing program 1: r0 = syz_open_dev$media(0x0, 0x10, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) 00:20:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) 00:20:57 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x6}) 00:20:57 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) r4 = openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000940)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) 00:20:57 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x541b, 0x0) 00:20:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) r4 = openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x80000000003, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) r8 = openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000940)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r6, &(0x7f00000001c0), &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x1, 0x2, 0x2, 0x1}) 00:20:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r3, 0x0, '\x00', 0x5, 0x2}) openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) 00:20:57 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6}) 00:20:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x148, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0x5450, 0x0) 00:20:57 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x541b, 0x0) 00:20:57 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[{}, {}], r2, 0x0, '\x00', 0x5, 0x2}) 00:20:57 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6}) 00:20:57 executing program 4: r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x174, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8}, @NFC_ATTR_VENDOR_DATA={0x7d, 0x1f, "dfc9c49f6951612f0195d45b3778be76dbcfd32d622353cd46ba4835bb38adbde28dc3c55619af5762a6364bbb8adf479f75e6bc2695907879e730495f5b4c66aca5881f284544fb51271aff7fe0decbd6934e8b43b2c62cbecb03d7e70702f6d2761d225cf4e44dd47f086255cddd4d9307994706ee9e50c4"}, @NFC_ATTR_VENDOR_DATA={0xae, 0x1f, "82794cbb468a4b5114fc63d985c3c20a85e822d0c76cb99a720ae4bc48c49a93a733ab86c167a0b8959f58cd2df2984a8be1c5513ffc0124d0a74a5b99b25cb4d3423d0e3f4b01a0e0071a9ba42c9d2b68c52c360a8caaa8cfbd80a9b2564f3a4c02f20b400fa2e5fd61428d2a7f2334e5e10631979eb1bd64749ecbb17f35c9a4ec5f9c22f7a18e51e847f59405504484f1ec8b9f33501e88668675bb79571e5ab1835fe98d3017bd1a"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}]}, 0x174}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r2) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001740), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001780)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/em28xx_rc', 0x301002, 0x11) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000680)={0x0, 0x4, 0x0, &(0x7f0000000080)=[{}, {}, {}, {0x80000000}], 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000b40)={0x0, 0x1, 0x0, &(0x7f0000000900)=[{}], 0x1, 0x0, &(0x7f0000000980)=[{}], 0x2, 0x0, &(0x7f0000000a00)=[{}, {}], 0x5, 0x0, &(0x7f0000000a40)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0x5421, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001680)={0x0, 0x6, 0x0, &(0x7f0000000e80)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f00000010c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000014c0), 0x4, 0x0, &(0x7f00000015c0)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000007c0)={r7, &(0x7f0000000700), &(0x7f0000000740)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000008c0)={r8, &(0x7f0000000800), &(0x7f0000000840)}) [ 1257.258254][T20433] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:57 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6}) 00:20:57 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x541b, 0x0) 00:20:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) 00:20:57 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x148, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0x5450, 0x0) 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000040)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r7, &(0x7f0000000300)='reno\x00', 0x5) 00:20:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, 0x0) 00:20:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='\x00', 0x0, r0) r4 = fsopen(&(0x7f0000000240)='ext4\x00', 0x1) fsmount(r4, 0x0, 0x9) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0x9349, 0x9]}, {0x80000000, 0x0, 0x4, [0x8, 0x8]}, 0x4, [0x5, 0x4]}) 00:20:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) 00:20:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='\x00', 0x0, r0) r4 = fsopen(&(0x7f0000000240)='ext4\x00', 0x1) fsmount(r4, 0x0, 0x9) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0x9349, 0x9]}, {0x80000000, 0x0, 0x4, [0x8, 0x8]}, 0x4, [0x5, 0x4]}) 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000040)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r7, &(0x7f0000000300)='reno\x00', 0x5) [ 1257.412813][T20458] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:57 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, 0x0) 00:20:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x148, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0x5450, 0x0) 00:20:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000040)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r7, &(0x7f0000000300)='reno\x00', 0x5) 00:20:57 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, 0x0) 00:20:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) 00:20:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='\x00', 0x0, r0) r4 = fsopen(&(0x7f0000000240)='ext4\x00', 0x1) fsmount(r4, 0x0, 0x9) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0x9349, 0x9]}, {0x80000000, 0x0, 0x4, [0x8, 0x8]}, 0x4, [0x5, 0x4]}) [ 1257.528048][T20473] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x148, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000040)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:20:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)) 00:20:57 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 00:20:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='\x00', 0x0, r0) r4 = fsopen(&(0x7f0000000240)='ext4\x00', 0x1) fsmount(r4, 0x0, 0x9) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) [ 1257.616642][T20491] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000040)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:20:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)) 00:20:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:57 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x148, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) [ 1257.677587][T20501] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)) 00:20:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='\x00', 0x0, r0) r2 = fsopen(&(0x7f0000000240)='ext4\x00', 0x1) fsmount(r2, 0x0, 0x9) 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000040)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:20:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='\x00', 0x0, r0) fsopen(&(0x7f0000000240)='ext4\x00', 0x1) 00:20:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, 0x0) 00:20:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 2: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x5450, 0x0) 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x70) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) 00:20:57 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000980)=0xb) 00:20:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='\x00', 0x0, r0) [ 1257.808417][T20522] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) 00:20:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:57 executing program 2: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x5450, 0x0) 00:20:57 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) socket(0x1, 0x3, 0x7) r3 = syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000800)={0x0, 0x6, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {0x80000000}], 0x7, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000940)={0x80000000, &(0x7f0000000880), &(0x7f00000008c0)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000980)={{r4, 0x0, 0x1, [0x0, 0x810]}, {r6, r8, 0x0, [0x6, 0x7fff]}, 0x4, [0x80000000, 0x6]}) 00:20:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1257.894940][T20535] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) 00:20:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:57 executing program 2: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x5450, 0x0) 00:20:57 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:57 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) socket(0x1, 0x3, 0x7) r3 = syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000800)={0x0, 0x6, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {0x80000000}], 0x7, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000940)={0x80000000, &(0x7f0000000880), &(0x7f00000008c0)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000980)={{r4, 0x0, 0x1, [0x0, 0x810]}, {r6, r8, 0x0, [0x6, 0x7fff]}, 0x4, [0x80000000, 0x6]}) 00:20:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:57 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000300)='reno\x00', 0x5) 00:20:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) 00:20:57 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x88081) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:58 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:58 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) socket(0x1, 0x3, 0x7) r3 = syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000800)={0x0, 0x6, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {0x80000000}], 0x7, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000940)={0x80000000, &(0x7f0000000880), &(0x7f00000008c0)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000980)={{r4, 0x0, 0x1, [0x0, 0x810]}, {r6, r8, 0x0, [0x6, 0x7fff]}, 0x4, [0x80000000, 0x6]}) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x88081) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:58 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) 00:20:58 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x88081) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:58 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) socket(0x1, 0x3, 0x7) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000800)={0x0, 0x6, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000940)={0x80000000, &(0x7f0000000880), &(0x7f00000008c0)}) 00:20:58 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) 00:20:58 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) socket(0x1, 0x3, 0x7) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000800)={0x0, 0x6, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) 00:20:58 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:58 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:58 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) socket(0x1, 0x3, 0x7) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000800)={0x0, 0x6, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) 00:20:58 executing program 4: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x10000, 0x0) 00:20:58 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:58 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x5450, 0x0) [ 1258.398129][T20618] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:58 executing program 4: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x10000, 0x0) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) socket(0x1, 0x3, 0x7) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000800)={0x0, 0x6, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) 00:20:58 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) 00:20:58 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x5450, 0x0) 00:20:58 executing program 4: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x10000, 0x0) 00:20:58 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) socket(0x1, 0x3, 0x7) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000800)={0x0, 0x6, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) 00:20:58 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x88081) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x5450, 0x0) 00:20:58 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) 00:20:58 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0x40049409, 0x0) socket(0x1, 0x3, 0x7) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000800)={0x0, 0x6, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:20:58 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) 00:20:58 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x40049409, 0x0) socket(0x1, 0x3, 0x7) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:20:58 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0x40049409, 0x0) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) 00:20:58 executing program 5: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x101200) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:58 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:58 executing program 5: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/mac80211_hwsim', 0x100, 0x0) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x101200) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:58 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 5: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) syz_open_dev$media(&(0x7f0000000080), 0x92, 0x1) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) 00:20:58 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x101200) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:58 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 00:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:58 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) 00:20:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:58 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:20:58 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 00:20:58 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40049409, 0x0) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) 00:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:59 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40049409, 0x0) 00:20:59 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 00:20:59 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) 00:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000280)={{0x80000000, r2, 0x4, [0x7fff, 0x7]}, {r4, 0x0, 0x7, [0x8, 0x1f]}, 0x4, [0x4f5, 0x9]}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) 00:20:59 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="5e7868cfec16ffec5ae1f83e6d8f0ac44ec2fb115a616378005cf7b7cb9dd11b5d480ee8d2d4156e00e701b94b2fcd118e35570973515d59beffffffffffffffff26ca324f24010784cedf61f52eed3fabc6d19839e4bbc9f8d9193fb1dba0bff44726012f88719edda7fc739af1c213c6c9724ffbbeb768e89776"], 0x4) 00:20:59 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40049409, 0x0) 00:20:59 executing program 3: syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x72283) 00:20:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="5e7868cfec16ffec5ae1f83e6d8f0ac44ec2fb115a616378005cf7b7cb9dd11b5d480ee8d2d4156e00e701b94b2fcd118e35570973515d59beffffffffffffffff26ca324f24010784cedf61f52eed3fabc6d19839e4bbc9f8d9193fb1dba0bff44726012f88719edda7fc739af1c213c6c9724ffbbeb768e89776"], 0x4) 00:20:59 executing program 4: r0 = syz_open_dev$media(0x0, 0x6, 0x101200) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:59 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000300)='reno\x00', 0x5) 00:20:59 executing program 3: syz_open_dev$media(0x0, 0x7fff, 0x72283) 00:20:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 4: r0 = syz_open_dev$media(0x0, 0x6, 0x101200) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:59 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="5e7868cfec16ffec5ae1f83e6d8f0ac44ec2fb115a616378005cf7b7cb9dd11b5d480ee8d2d4156e00e701b94b2fcd118e35570973515d59beffffffffffffffff26ca324f24010784cedf61f52eed3fabc6d19839e4bbc9f8d9193fb1dba0bff44726012f88719edda7fc739af1c213c6c9724ffbbeb768e89776"], 0x4) 00:20:59 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000300)='reno\x00', 0x5) 00:20:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:59 executing program 3: syz_open_dev$media(0x0, 0x7fff, 0x72283) 00:20:59 executing program 4: r0 = syz_open_dev$media(0x0, 0x6, 0x101200) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:59 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="5e7868cfec16ffec5ae1f83e6d8f0ac44ec2fb115a616378005cf7b7cb9dd11b5d480ee8d2d4156e00e701b94b2fcd118e35570973515d59beffffffffffffffff26ca324f24010784cedf61f52eed3fabc6d19839e4bbc9f8d9193fb1dba0bff44726012f88719edda7fc739af1c213c6c9724ffbbeb768e89776"], 0x4) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000300)='reno\x00', 0x5) 00:20:59 executing program 3: syz_open_dev$media(0x0, 0x7fff, 0x72283) 00:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, 0x0, 0x0) 00:20:59 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x101200) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:59 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="5e7868cfec16ffec5ae1f83e6d8f0ac44ec2fb115a616378005cf7b7cb9dd11b5d480ee8d2d4156e00e701b94b2fcd118e35570973515d59beffffffffffffffff26ca324f24010784cedf61f52eed3fabc6d19839e4bbc9f8d9193fb1dba0bff44726012f88719edda7fc739af1c213c6c9724ffbbeb768e89776"], 0x4) 00:20:59 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0x5) 00:20:59 executing program 3: syz_open_dev$media(&(0x7f0000000100), 0x0, 0x72283) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, 0x0, 0x0) 00:20:59 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x101200) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:59 executing program 5: syz_emit_vhci(0x0, 0x4) 00:20:59 executing program 3: syz_open_dev$media(&(0x7f0000000100), 0x0, 0x72283) 00:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, 0x0, 0x0) 00:20:59 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0x5) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x101200) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:59 executing program 5: syz_emit_vhci(0x0, 0x4) 00:20:59 executing program 5: syz_emit_vhci(0x0, 0x4) 00:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:59 executing program 3: syz_open_dev$media(&(0x7f0000000100), 0x0, 0x72283) 00:20:59 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:20:59 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) [ 1259.612693][T20818] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x4) 00:20:59 executing program 3: syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x0) 00:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40049409, 0x0) 00:20:59 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 00:20:59 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x4) 00:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:59 executing program 3: syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x0) 00:20:59 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40049409, 0x0) 00:20:59 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 00:20:59 executing program 3: syz_open_dev$media(&(0x7f0000000100), 0x7fff, 0x0) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x4) 00:20:59 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 00:20:59 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x40049409, 0x0) 00:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, 0x0, 0x0) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x4) 00:20:59 executing program 3: syz_emit_vhci(0x0, 0x4) 00:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:59 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 00:20:59 executing program 4: syz_open_dev$media(0x0, 0x7fff, 0x72283) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 5: syz_emit_vhci(0x0, 0x4) 00:20:59 executing program 3: syz_emit_vhci(0x0, 0x4) 00:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:20:59 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) 00:20:59 executing program 3: syz_emit_vhci(0x0, 0x4) 00:20:59 executing program 5: syz_emit_vhci(0x0, 0x4) 00:21:00 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:21:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 5: syz_emit_vhci(0x0, 0x4) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000300)='reno\x00', 0x5) 00:21:00 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:21:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900", @ANYRES32=0x0, @ANYBLOB="040014000500140021000000100014002f6465762f6d656469612300100014002f6465762f6d656469612300100014002f6465762f6d656469612300"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000300)='reno\x00', 0x5) [ 1260.139274][T20912] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:21:00 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) 00:21:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08177900"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 00:21:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100", @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x10000, 0x2141) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000300)='reno\x00', 0x5) 00:21:00 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 00:21:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f00000008000100"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={0xffffffffffffffff, 0xb, 0x1, 0x1, &(0x7f0000000180)=[0x0, 0x0], 0x2}, 0x20) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r5, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:21:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 00:21:00 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={0xffffffffffffffff, 0xb, 0x1, 0x1, &(0x7f0000000180)=[0x0, 0x0], 0x2}, 0x20) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r5, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:21:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={0xffffffffffffffff, 0xb, 0x1, 0x1, &(0x7f0000000180)=[0x0, 0x0], 0x2}, 0x20) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r5, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x40049409, 0x0) 00:21:00 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}}, 0x4000000) 00:21:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={0xffffffffffffffff, 0xb, 0x1, 0x1, &(0x7f0000000180)=[0x0, 0x0], 0x2}, 0x20) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r5, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:00 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}}, 0x0) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r5, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r3}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r7, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000840)={r9, &(0x7f0000000780), &(0x7f00000007c0)}) r11 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r11, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000700)={{r3, 0x0, 0x1, [0x1f, 0x5]}, {r6, r12, 0x4, [0x6]}, 0x1, [0x97, 0x4]}) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r14 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r13, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32=r14, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r5, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1260.725708][T20998] autofs4:pid:20998:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1260.737828][T20998] autofs4:pid:20998:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r5, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:00 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r3}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r7, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000840)={r9, &(0x7f0000000780), &(0x7f00000007c0)}) r11 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r11, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000700)={{r3, 0x0, 0x1, [0x1f, 0x5]}, {r6, r12, 0x4, [0x6]}, 0x1, [0x97, 0x4]}) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r14 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r13, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32=r14, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) [ 1260.843137][T21014] autofs4:pid:21014:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:00 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1260.860271][T21014] autofs4:pid:21014:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r3}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r7, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000840)={r9, &(0x7f0000000780), &(0x7f00000007c0)}) r11 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r11, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000700)={{r3, 0x0, 0x1, [0x1f, 0x5]}, {r6, r12, 0x4, [0x6]}, 0x1, [0x97, 0x4]}) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r14 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r13, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32=r14, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) [ 1260.973430][T21031] autofs4:pid:21031:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1260.994070][T21031] autofs4:pid:21031:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:00 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r3}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r7, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000840)={r9, &(0x7f0000000780), &(0x7f00000007c0)}) r11 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r11, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000700)={{r3, 0x0, 0x1, [0x1f, 0x5]}, {r6, r12, 0x4, [0x6]}, 0x1, [0x97, 0x4]}) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r13, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1261.066828][T21052] autofs4:pid:21052:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1261.088822][T21052] autofs4:pid:21052:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r3}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r7, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000840)={r9, &(0x7f0000000780), &(0x7f00000007c0)}) r11 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r11, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000700)={{r3, 0x0, 0x1, [0x1f, 0x5]}, {r6, r12, 0x4, [0x6]}, 0x1, [0x97, 0x4]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r3}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r7, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000840)={r9, &(0x7f0000000780), &(0x7f00000007c0)}) r11 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r11, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000700)={{r3, 0x0, 0x1, [0x1f, 0x5]}, {r6, r12, 0x4, [0x6]}, 0x1, [0x97, 0x4]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000080)={r3}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r7, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000840)={r9, &(0x7f0000000780), &(0x7f00000007c0)}) r11 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r11, 0xc1007c01, &(0x7f0000000080)={r6}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000700)={{r3, 0x0, 0x1, [0x1f, 0x5]}, {r6, r12, 0x4, [0x6]}, 0x1, [0x97, 0x4]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:01 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f0000000800"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f0000000800"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r6, &(0x7f0000000740), 0x2, 0x0) r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r9 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r9, 0xc1007c01, &(0x7f0000000080)={r8}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000840)={r8, &(0x7f0000000780), &(0x7f00000007c0)}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r5}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f0000000800"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r2, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) [ 1261.414089][T21108] autofs4:pid:21108:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1261.418542][T21108] autofs4:pid:21108:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:01 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r6, &(0x7f0000000740), 0x2, 0x0) r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r9 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r9, 0xc1007c01, &(0x7f0000000080)={r8}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000840)={r8, &(0x7f0000000780), &(0x7f00000007c0)}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r5}) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r2, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1261.505811][T21120] autofs4:pid:21120:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1261.519986][T21120] autofs4:pid:21120:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r8 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r8, 0xc1007c01, &(0x7f0000000080)={r7}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000840)={r7, &(0x7f0000000780), &(0x7f00000007c0)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r2, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1261.592052][T21137] autofs4:pid:21137:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1261.602048][T21137] autofs4:pid:21137:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f0000000800"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) 00:21:01 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r8 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r8, 0xc1007c01, &(0x7f0000000080)={r7}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000840)={r7, &(0x7f0000000780), &(0x7f00000007c0)}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f0000000800"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) [ 1261.705536][T21147] autofs4:pid:21147:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f0000000800"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) [ 1261.716730][T21147] autofs4:pid:21147:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:01 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r8 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r8, 0xc1007c01, &(0x7f0000000080)={r7}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:01 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) 00:21:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) [ 1261.789931][T21162] autofs4:pid:21162:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1261.793144][T21162] autofs4:pid:21162:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) 00:21:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1261.886867][T21185] autofs4:pid:21185:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1261.904256][T21185] autofs4:pid:21185:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1262.005421][T21201] autofs4:pid:21201:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1262.022719][T21201] autofs4:pid:21201:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) 00:21:02 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:02 executing program 3: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1262.105138][T21216] autofs4:pid:21216:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1262.108505][T21216] autofs4:pid:21216:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:02 executing program 3: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x4000000) 00:21:02 executing program 3: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) [ 1262.216663][T21236] autofs4:pid:21236:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1262.242449][T21236] autofs4:pid:21236:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1262.313722][T21250] autofs4:pid:21250:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1262.329938][T21250] autofs4:pid:21250:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:02 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) [ 1262.414636][T21266] autofs4:pid:21266:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) [ 1262.430894][T21266] autofs4:pid:21266:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1262.504332][T21280] autofs4:pid:21280:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1262.519764][T21280] autofs4:pid:21280:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:02 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1262.600659][T21295] autofs4:pid:21295:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) [ 1262.620333][T21295] autofs4:pid:21295:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:02 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1262.699806][T21308] autofs4:pid:21308:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) [ 1262.718797][T21308] autofs4:pid:21308:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) [ 1262.791652][T21327] autofs4:pid:21327:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1262.808915][T21327] autofs4:pid:21327:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:02 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) [ 1262.893789][T21342] autofs4:pid:21342:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1262.919414][T21342] autofs4:pid:21342:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:02 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x4000000) 00:21:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) [ 1262.985874][T21353] autofs4:pid:21353:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1263.007915][T21353] autofs4:pid:21353:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 00:21:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1263.078709][T21369] autofs4:pid:21369:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1263.105844][T21369] autofs4:pid:21369:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:03 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000080001"], 0x60}}, 0x0) 00:21:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1263.172457][T21382] autofs4:pid:21382:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) [ 1263.186520][T21382] autofs4:pid:21382:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) [ 1263.207198][T21387] __nla_validate_parse: 13 callbacks suppressed [ 1263.207213][T21387] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:21:03 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x4000000) 00:21:03 executing program 4: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_technisat_usb2', 0x30000, 0xc1) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) [ 1263.280275][T21399] autofs4:pid:21399:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x4000000) [ 1263.304059][T21399] autofs4:pid:21399:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250f000000"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) [ 1263.321067][T21403] autofs4:pid:21403:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:03 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) [ 1263.341146][T21403] autofs4:pid:21403:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 00:21:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1263.389787][T21415] autofs4:pid:21415:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1263.389824][T21411] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1263.409212][T21415] autofs4:pid:21415:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:03 executing program 0: syz_open_dev$rtc(&(0x7f0000000040), 0xa33, 0x80000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:03 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r5, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000000c0)}) 00:21:03 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r9, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:03 executing program 4: sendto$isdn(0xffffffffffffffff, &(0x7f00000010c0)={0x7fff, 0x81, "b05cd00e7d732edd987c3691f1601d75b5e5e5f057a184502282b3961765c7768749b58c6102c79cdfcf3328f818200394aa63a259265854c379f964ff1f8290334fed768a0f791519307b40fb884a0cba93109bede726e32cd98464e0a97df3d019c0410a074c6879490cbf36d3b366455f13a025462ccbc58c913ca9c094258aa70f4ecc4af5aeb4ed80c2a7b7fb11483a3d848dd65d36d8b1dfa647e755ef125f848f"}, 0xac, 0x4000840, &(0x7f0000001180)={0x22, 0x4, 0x81, 0x0, 0x3}, 0x6) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000001080)={0x0, 0x1000, &(0x7f0000000080)=""/4096}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x19, 0x20, 0x6}}}, 0xc) [ 1263.485408][T21430] autofs4:pid:21430:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1263.501645][T21430] autofs4:pid:21430:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:03 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r5, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 4: sendto$isdn(0xffffffffffffffff, &(0x7f00000010c0)={0x7fff, 0x81, "b05cd00e7d732edd987c3691f1601d75b5e5e5f057a184502282b3961765c7768749b58c6102c79cdfcf3328f818200394aa63a259265854c379f964ff1f8290334fed768a0f791519307b40fb884a0cba93109bede726e32cd98464e0a97df3d019c0410a074c6879490cbf36d3b366455f13a025462ccbc58c913ca9c094258aa70f4ecc4af5aeb4ed80c2a7b7fb11483a3d848dd65d36d8b1dfa647e755ef125f848f"}, 0xac, 0x4000840, &(0x7f0000001180)={0x22, 0x4, 0x81, 0x0, 0x3}, 0x6) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000001080)={0x0, 0x1000, &(0x7f0000000080)=""/4096}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x19, 0x20, 0x6}}}, 0xc) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000000c0)}) 00:21:03 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:03 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r9, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) [ 1263.572329][T21442] autofs4:pid:21442:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1263.584472][T21442] autofs4:pid:21442:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:03 executing program 4: sendto$isdn(0xffffffffffffffff, &(0x7f00000010c0)={0x7fff, 0x81, "b05cd00e7d732edd987c3691f1601d75b5e5e5f057a184502282b3961765c7768749b58c6102c79cdfcf3328f818200394aa63a259265854c379f964ff1f8290334fed768a0f791519307b40fb884a0cba93109bede726e32cd98464e0a97df3d019c0410a074c6879490cbf36d3b366455f13a025462ccbc58c913ca9c094258aa70f4ecc4af5aeb4ed80c2a7b7fb11483a3d848dd65d36d8b1dfa647e755ef125f848f"}, 0xac, 0x4000840, &(0x7f0000001180)={0x22, 0x4, 0x81, 0x0, 0x3}, 0x6) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000001080)={0x0, 0x1000, &(0x7f0000000080)=""/4096}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x19, 0x20, 0x6}}}, 0xc) 00:21:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000000c0)}) 00:21:03 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000080)={r5}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {r5, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r10, 0xc1007c01, &(0x7f0000000080)={r9}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r9, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:03 executing program 4: sendto$isdn(0xffffffffffffffff, &(0x7f00000010c0)={0x7fff, 0x81, "b05cd00e7d732edd987c3691f1601d75b5e5e5f057a184502282b3961765c7768749b58c6102c79cdfcf3328f818200394aa63a259265854c379f964ff1f8290334fed768a0f791519307b40fb884a0cba93109bede726e32cd98464e0a97df3d019c0410a074c6879490cbf36d3b366455f13a025462ccbc58c913ca9c094258aa70f4ecc4af5aeb4ed80c2a7b7fb11483a3d848dd65d36d8b1dfa647e755ef125f848f"}, 0xac, 0x4000840, &(0x7f0000001180)={0x22, 0x4, 0x81, 0x0, 0x3}, 0x6) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000001080)={0x0, 0x1000, &(0x7f0000000080)=""/4096}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:21:03 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x80086301, 0x0) 00:21:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000080)={r4}) 00:21:03 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:03 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r9, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 4: sendto$isdn(0xffffffffffffffff, &(0x7f00000010c0)={0x7fff, 0x81, "b05cd00e7d732edd987c3691f1601d75b5e5e5f057a184502282b3961765c7768749b58c6102c79cdfcf3328f818200394aa63a259265854c379f964ff1f8290334fed768a0f791519307b40fb884a0cba93109bede726e32cd98464e0a97df3d019c0410a074c6879490cbf36d3b366455f13a025462ccbc58c913ca9c094258aa70f4ecc4af5aeb4ed80c2a7b7fb11483a3d848dd65d36d8b1dfa647e755ef125f848f"}, 0xac, 0x4000840, &(0x7f0000001180)={0x22, 0x4, 0x81, 0x0, 0x3}, 0x6) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000001080)={0x0, 0x1000, &(0x7f0000000080)=""/4096}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:21:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) (fail_nth: 1) 00:21:03 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) 00:21:03 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r9, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) [ 1263.787604][T21475] FAULT_INJECTION: forcing a failure. [ 1263.787604][T21475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.799145][T21475] CPU: 1 PID: 21475 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1263.801905][T21475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1263.804471][T21475] Call trace: [ 1263.805371][T21475] dump_backtrace+0x1b8/0x1e4 [ 1263.806597][T21475] show_stack+0x2c/0x44 [ 1263.807728][T21475] dump_stack_lvl+0xd0/0x124 [ 1263.808913][T21475] dump_stack+0x1c/0x28 [ 1263.809992][T21475] should_fail_ex+0x3f8/0x5c4 [ 1263.811198][T21475] should_fail+0x14/0x24 [ 1263.812252][T21475] should_fail_usercopy+0x20/0x30 [ 1263.813553][T21475] copy_msghdr_from_user+0xb8/0x59c [ 1263.814896][T21475] __sys_sendmsg+0x200/0x33c [ 1263.816090][T21475] __arm64_sys_sendmsg+0x80/0x94 [ 1263.817357][T21475] invoke_syscall+0x98/0x2c0 [ 1263.818565][T21475] el0_svc_common+0x138/0x258 [ 1263.819762][T21475] do_el0_svc+0x64/0x198 [ 1263.820877][T21475] el0_svc+0x4c/0x15c [ 1263.821946][T21475] el0t_64_sync_handler+0x84/0xf0 [ 1263.823208][T21475] el0t_64_sync+0x190/0x194 00:21:03 executing program 4: sendto$isdn(0xffffffffffffffff, &(0x7f00000010c0)={0x7fff, 0x81, "b05cd00e7d732edd987c3691f1601d75b5e5e5f057a184502282b3961765c7768749b58c6102c79cdfcf3328f818200394aa63a259265854c379f964ff1f8290334fed768a0f791519307b40fb884a0cba93109bede726e32cd98464e0a97df3d019c0410a074c6879490cbf36d3b366455f13a025462ccbc58c913ca9c094258aa70f4ecc4af5aeb4ed80c2a7b7fb11483a3d848dd65d36d8b1dfa647e755ef125f848f"}, 0xac, 0x4000840, &(0x7f0000001180)={0x22, 0x4, 0x81, 0x0, 0x3}, 0x6) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000001080)={0x0, 0x1000, &(0x7f0000000080)=""/4096}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) 00:21:03 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:03 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) [ 1263.858497][T21486] autofs4:pid:21486:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1263.868059][T21486] autofs4:pid:21486:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:03 executing program 4: sendto$isdn(0xffffffffffffffff, &(0x7f00000010c0)={0x7fff, 0x81, "b05cd00e7d732edd987c3691f1601d75b5e5e5f057a184502282b3961765c7768749b58c6102c79cdfcf3328f818200394aa63a259265854c379f964ff1f8290334fed768a0f791519307b40fb884a0cba93109bede726e32cd98464e0a97df3d019c0410a074c6879490cbf36d3b366455f13a025462ccbc58c913ca9c094258aa70f4ecc4af5aeb4ed80c2a7b7fb11483a3d848dd65d36d8b1dfa647e755ef125f848f"}, 0xac, 0x4000840, &(0x7f0000001180)={0x22, 0x4, 0x81, 0x0, 0x3}, 0x6) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000001080)={0x0, 0x1000, &(0x7f0000000080)=""/4096}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x19, 0x20, 0x6}}}, 0xc) 00:21:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) (fail_nth: 2) 00:21:03 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x1, [0xfffffff9, 0x9]}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) 00:21:03 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:03 executing program 4: sendto$isdn(0xffffffffffffffff, &(0x7f00000010c0)={0x7fff, 0x81, "b05cd00e7d732edd987c3691f1601d75b5e5e5f057a184502282b3961765c7768749b58c6102c79cdfcf3328f818200394aa63a259265854c379f964ff1f8290334fed768a0f791519307b40fb884a0cba93109bede726e32cd98464e0a97df3d019c0410a074c6879490cbf36d3b366455f13a025462ccbc58c913ca9c094258aa70f4ecc4af5aeb4ed80c2a7b7fb11483a3d848dd65d36d8b1dfa647e755ef125f848f"}, 0xac, 0x4000840, &(0x7f0000001180)={0x22, 0x4, 0x81, 0x0, 0x3}, 0x6) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x19, 0x20, 0x6}}}, 0xc) [ 1263.967098][T21501] FAULT_INJECTION: forcing a failure. [ 1263.967098][T21501] name failslab, interval 1, probability 0, space 0, times 0 00:21:03 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) [ 1263.983712][T21501] CPU: 1 PID: 21501 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1263.986361][T21501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1263.988972][T21501] Call trace: [ 1263.989812][T21501] dump_backtrace+0x1b8/0x1e4 [ 1263.990983][T21501] show_stack+0x2c/0x44 [ 1263.992049][T21501] dump_stack_lvl+0xd0/0x124 [ 1263.993288][T21501] dump_stack+0x1c/0x28 [ 1263.994357][T21501] should_fail_ex+0x3f8/0x5c4 [ 1263.995649][T21501] __should_failslab+0xc8/0x128 [ 1263.996881][T21501] should_failslab+0x10/0x28 [ 1263.998106][T21501] kmem_cache_alloc_node+0x84/0x46c [ 1263.999422][T21501] __alloc_skb+0x19c/0x3d8 [ 1264.000574][T21501] netlink_sendmsg+0x634/0xb18 [ 1264.001841][T21501] ____sys_sendmsg+0x568/0x81c [ 1264.003063][T21501] __sys_sendmsg+0x26c/0x33c [ 1264.004286][T21501] __arm64_sys_sendmsg+0x80/0x94 [ 1264.005631][T21501] invoke_syscall+0x98/0x2c0 [ 1264.006820][T21501] el0_svc_common+0x138/0x258 [ 1264.008016][T21501] do_el0_svc+0x64/0x198 [ 1264.009064][T21501] el0_svc+0x4c/0x15c [ 1264.010031][T21501] el0t_64_sync_handler+0x84/0xf0 [ 1264.011342][T21501] el0t_64_sync+0x190/0x194 00:21:04 executing program 4: sendto$isdn(0xffffffffffffffff, &(0x7f00000010c0)={0x7fff, 0x81, "b05cd00e7d732edd987c3691f1601d75b5e5e5f057a184502282b3961765c7768749b58c6102c79cdfcf3328f818200394aa63a259265854c379f964ff1f8290334fed768a0f791519307b40fb884a0cba93109bede726e32cd98464e0a97df3d019c0410a074c6879490cbf36d3b366455f13a025462ccbc58c913ca9c094258aa70f4ecc4af5aeb4ed80c2a7b7fb11483a3d848dd65d36d8b1dfa647e755ef125f848f"}, 0xac, 0x4000840, &(0x7f0000001180)={0x22, 0x4, 0x81, 0x0, 0x3}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x19, 0x20, 0x6}}}, 0xc) 00:21:04 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:04 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32, @ANYBLOB="90960000000000002e2f66696c653000"]) 00:21:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) (fail_nth: 3) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r8, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) 00:21:04 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:04 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x19, 0x20, 0x6}}}, 0xc) 00:21:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) (fail_nth: 4) 00:21:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r8, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) 00:21:04 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000040)={{r1, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:04 executing program 4: syz_emit_vhci(0x0, 0x0) [ 1264.179403][T21535] FAULT_INJECTION: forcing a failure. [ 1264.179403][T21535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.182767][T21535] CPU: 0 PID: 21535 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1264.185253][T21535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1264.187765][T21535] Call trace: [ 1264.188605][T21535] dump_backtrace+0x1b8/0x1e4 [ 1264.189810][T21535] show_stack+0x2c/0x44 [ 1264.190956][T21535] dump_stack_lvl+0xd0/0x124 [ 1264.192259][T21535] dump_stack+0x1c/0x28 [ 1264.193351][T21535] should_fail_ex+0x3f8/0x5c4 [ 1264.194569][T21535] should_fail+0x14/0x24 [ 1264.195669][T21535] should_fail_usercopy+0x20/0x30 [ 1264.196958][T21535] _copy_from_iter+0x1b0/0xe7c [ 1264.198165][T21535] netlink_sendmsg+0x704/0xb18 [ 1264.199392][T21535] ____sys_sendmsg+0x568/0x81c [ 1264.200682][T21535] __sys_sendmsg+0x26c/0x33c [ 1264.201883][T21535] __arm64_sys_sendmsg+0x80/0x94 [ 1264.203180][T21535] invoke_syscall+0x98/0x2c0 [ 1264.204389][T21535] el0_svc_common+0x138/0x258 [ 1264.205568][T21535] do_el0_svc+0x64/0x198 [ 1264.206659][T21535] el0_svc+0x4c/0x15c [ 1264.207660][T21535] el0t_64_sync_handler+0x84/0xf0 [ 1264.208945][T21535] el0t_64_sync+0x190/0x194 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) 00:21:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r8, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 4: syz_emit_vhci(0x0, 0x0) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000040)={r2}) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r9, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000", @ANYRES32]) 00:21:04 executing program 4: syz_emit_vhci(0x0, 0x0) 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 00:21:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) (fail_nth: 5) [ 1264.327535][T21555] autofs4:pid:21555:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) [ 1264.339507][T21555] autofs4:pid:21555:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r7 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000080)={r2}) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r9, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:04 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x0, 0x20, 0x6}}}, 0xc) [ 1264.361751][T21562] FAULT_INJECTION: forcing a failure. [ 1264.361751][T21562] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.368888][T21562] CPU: 1 PID: 21562 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1264.371544][T21562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1264.374070][T21562] Call trace: [ 1264.374940][T21562] dump_backtrace+0x1b8/0x1e4 [ 1264.376144][T21562] show_stack+0x2c/0x44 [ 1264.377197][T21562] dump_stack_lvl+0xd0/0x124 [ 1264.378451][T21562] dump_stack+0x1c/0x28 [ 1264.379572][T21562] should_fail_ex+0x3f8/0x5c4 [ 1264.380829][T21562] __should_failslab+0xc8/0x128 [ 1264.382051][T21562] should_failslab+0x10/0x28 [ 1264.383238][T21562] __kmem_cache_alloc_node+0x80/0x388 [ 1264.384569][T21562] __kmalloc+0xb8/0x1b8 [ 1264.385685][T21562] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 1264.387245][T21562] genl_rcv_msg+0x65c/0xc1c [ 1264.388453][T21562] netlink_rcv_skb+0x214/0x3c4 [ 1264.389731][T21562] genl_rcv+0x38/0x50 [ 1264.390720][T21562] netlink_unicast+0x660/0x8d4 [ 1264.391942][T21562] netlink_sendmsg+0x834/0xb18 [ 1264.393157][T21562] ____sys_sendmsg+0x568/0x81c [ 1264.394388][T21562] __sys_sendmsg+0x26c/0x33c [ 1264.395529][T21562] __arm64_sys_sendmsg+0x80/0x94 [ 1264.396791][T21562] invoke_syscall+0x98/0x2c0 [ 1264.397973][T21562] el0_svc_common+0x138/0x258 [ 1264.399146][T21562] do_el0_svc+0x64/0x198 [ 1264.400228][T21562] el0_svc+0x4c/0x15c [ 1264.401276][T21562] el0t_64_sync_handler+0x84/0xf0 [ 1264.402591][T21562] el0t_64_sync+0x190/0x194 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 00:21:04 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x0, 0x0, 0x6}}}, 0xc) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018000000"]) 00:21:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) [ 1264.441646][T21573] autofs4:pid:21573:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1264.446390][T21573] autofs4:pid:21573:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) (fail_nth: 6) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r5, r6, 0x2, [0x9, 0x1]}, {r2, r3, 0x0, [0x8, 0x5]}, 0x10000000, [0x61c8, 0x8]}) r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r8, r6, 0x1, [0xffff, 0x9331]}, {0x80000000, r4, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[]) 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:04 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x5450, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[]) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r5, r3, 0x1, [0xffff, 0x9331]}, {0x80000000, r2, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) [ 1264.541694][T21588] FAULT_INJECTION: forcing a failure. [ 1264.541694][T21588] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.544849][T21588] CPU: 1 PID: 21588 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1264.547270][T21588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1264.549835][T21588] Call trace: [ 1264.550637][T21588] dump_backtrace+0x1b8/0x1e4 [ 1264.551867][T21588] show_stack+0x2c/0x44 [ 1264.552924][T21588] dump_stack_lvl+0xd0/0x124 [ 1264.554096][T21588] dump_stack+0x1c/0x28 [ 1264.555173][T21588] should_fail_ex+0x3f8/0x5c4 [ 1264.556405][T21588] __should_failslab+0xc8/0x128 [ 1264.557716][T21588] should_failslab+0x10/0x28 [ 1264.558885][T21588] kmem_cache_alloc_node+0x84/0x46c [ 1264.560231][T21588] __alloc_skb+0x19c/0x3d8 [ 1264.561374][T21588] netlink_ack+0x2e4/0xf50 [ 1264.562543][T21588] netlink_rcv_skb+0x1f4/0x3c4 [ 1264.563758][T21588] genl_rcv+0x38/0x50 [ 1264.564749][T21588] netlink_unicast+0x660/0x8d4 [ 1264.565967][T21588] netlink_sendmsg+0x834/0xb18 [ 1264.567175][T21588] ____sys_sendmsg+0x568/0x81c [ 1264.568473][T21588] __sys_sendmsg+0x26c/0x33c [ 1264.569725][T21588] __arm64_sys_sendmsg+0x80/0x94 [ 1264.571010][T21588] invoke_syscall+0x98/0x2c0 [ 1264.572225][T21588] el0_svc_common+0x138/0x258 [ 1264.573461][T21588] do_el0_svc+0x64/0x198 [ 1264.574594][T21588] el0_svc+0x4c/0x15c [ 1264.575622][T21588] el0t_64_sync_handler+0x84/0xf0 [ 1264.576912][T21588] el0t_64_sync+0x190/0x194 00:21:04 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4000) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x1, [0xfffffff9, 0x9]}, {r3, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) (fail_nth: 7) 00:21:04 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x5, 0x0, 0xbbbbbbbb}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x0, 0xfc, 0x1}}}, 0xc) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb179235f070fde5a}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x85) 00:21:04 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r5, r3, 0x1, [0xffff, 0x9331]}, {0x80000000, r2, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[]) 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x0, [0xfffffff9, 0x9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:04 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x5, 0x0, 0xbbbbbbbb}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x0, 0xfc, 0x1}}}, 0xc) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb179235f070fde5a}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x85) 00:21:04 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2, 0x0, 0x0, [0xfffffff9]}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) (fail_nth: 8) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB]) 00:21:04 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) [ 1264.768839][T21625] FAULT_INJECTION: forcing a failure. [ 1264.768839][T21625] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2}, {r4, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB]) [ 1264.792045][T21625] CPU: 0 PID: 21625 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1264.794673][T21625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1264.797208][T21625] Call trace: [ 1264.798028][T21625] dump_backtrace+0x1b8/0x1e4 [ 1264.799198][T21625] show_stack+0x2c/0x44 [ 1264.800250][T21625] dump_stack_lvl+0xd0/0x124 [ 1264.801402][T21625] dump_stack+0x1c/0x28 [ 1264.802452][T21625] should_fail_ex+0x3f8/0x5c4 [ 1264.803638][T21625] should_fail+0x14/0x24 [ 1264.804749][T21625] should_fail_usercopy+0x20/0x30 [ 1264.806026][T21625] simple_read_from_buffer+0xd4/0x248 [ 1264.807465][T21625] proc_fail_nth_read+0x198/0x234 [ 1264.808778][T21625] vfs_read+0x284/0x8ac [ 1264.809933][T21625] ksys_read+0x15c/0x26c [ 1264.811088][T21625] __arm64_sys_read+0x7c/0x90 [ 1264.812378][T21625] invoke_syscall+0x98/0x2c0 [ 1264.813572][T21625] el0_svc_common+0x138/0x258 [ 1264.814728][T21625] do_el0_svc+0x64/0x198 [ 1264.815798][T21625] el0_svc+0x4c/0x15c [ 1264.816817][T21625] el0t_64_sync_handler+0x84/0xf0 [ 1264.818116][T21625] el0t_64_sync+0x190/0x194 00:21:04 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x5, 0x0, 0xbbbbbbbb}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x0, 0xfc, 0x1}}}, 0xc) (async) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb179235f070fde5a}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x85) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x541b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:04 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB]) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:04 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:04 executing program 4: accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110"]) 00:21:04 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{r1, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:04 executing program 4: accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) 00:21:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110"]) 00:21:04 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2}, {0x80000000, 0x0, 0x2, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:05 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:05 executing program 4: accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{r1, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110"]) 00:21:05 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2}, {r4, 0x0, 0x0, [0x9, 0xfff]}, 0x0, [0x7, 0x5]}) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="034d92632867a9fc8ee5d346095210664dc94f4bf17754f63dd532b8c969611a0296a76d0fb0be56c885273a3d6233de10b3fbe1f6be88e4c4eaace5113089713fcbdb4f4ee5cc701a0f2b1f8b2fb69bc34ac7d455baa1de6fa82f61fe78540b4d7e77acbb08e63414fadb7321fb470fdc426f4e0f"], 0x67) 00:21:05 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)=0xfffffffffff0bd99) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{r1, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="034d92632867a9fc8ee5d346095210664dc94f4bf17754f63dd532b8c969611a0296a76d0fb0be56c885273a3d6233de10b3fbe1f6be88e4c4eaace5113089713fcbdb4f4ee5cc701a0f2b1f8b2fb69bc34ac7d455baa1de6fa82f61fe78540b4d7e77acbb08e63414fadb7321fb470fdc426f4e0f"], 0x67) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2}, {r4, 0x0, 0x0, [0x9]}, 0x0, [0x7, 0x5]}) [ 1265.128833][ T5985] Bluetooth: hci5: SCO packet for unknown connection handle 589 [ 1265.170842][T21689] autofs4:pid:21689:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) 00:21:05 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) [ 1265.180619][T21689] autofs4:pid:21689:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:05 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="034d92632867a9fc8ee5d346095210664dc94f4bf17754f63dd532b8c969611a0296a76d0fb0be56c885273a3d6233de10b3fbe1f6be88e4c4eaace5113089713fcbdb4f4ee5cc701a0f2b1f8b2fb69bc34ac7d455baa1de6fa82f61fe78540b4d7e77acbb08e63414fadb7321fb470fdc426f4e0f"], 0x67) 00:21:05 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2}, {r4}, 0x0, [0x7, 0x5]}) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1265.185259][ T5985] Bluetooth: hci5: SCO packet for unknown connection handle 589 00:21:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110"]) 00:21:05 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r0, 0x74000) 00:21:05 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:05 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110"]) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x5, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2}, {r4}, 0x0, [0x7]}) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r0, 0x74000) 00:21:05 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110"]) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x6, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r0, 0x74000) 00:21:05 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2}, {r4}}) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) 00:21:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001100000"]) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x7, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="048f93da79ff0000abb9046ac768002e0484d917a2a14c6cf14555f89517255673961910ebadedbc4fc64607bfb1dd23e84ec73b36da05023661b4c27125e1f0e3ba873c4d5d924878e1f00e7e3159bf47f90df6bd2683cd6f734d3be33b98df252fb3cf6aeb539de00500000000000000d2cdd2bff8ec6343c72a854f5702da9bbcf7149ea40965c5114a62487c3e9c2a88edd2706904454b3b10b87fafa358bfb482838471d2e843"], 0xc) 00:21:05 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) 00:21:05 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001100000"]) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="048f93da79ff0000abb9046ac768002e0484d917a2a14c6cf14555f89517255673961910ebadedbc4fc64607bfb1dd23e84ec73b36da05023661b4c27125e1f0e3ba873c4d5d924878e1f00e7e3159bf47f90df6bd2683cd6f734d3be33b98df252fb3cf6aeb539de00500000000000000d2cdd2bff8ec6343c72a854f5702da9bbcf7149ea40965c5114a62487c3e9c2a88edd2706904454b3b10b87fafa358bfb482838471d2e843"], 0xc) 00:21:05 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x9, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) 00:21:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001100000"]) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r1, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="048f93da79ff0000abb9046ac768002e0484d917a2a14c6cf14555f89517255673961910ebadedbc4fc64607bfb1dd23e84ec73b36da05023661b4c27125e1f0e3ba873c4d5d924878e1f00e7e3159bf47f90df6bd2683cd6f734d3be33b98df252fb3cf6aeb539de00500000000000000d2cdd2bff8ec6343c72a854f5702da9bbcf7149ea40965c5114a62487c3e9c2a88edd2706904454b3b10b87fafa358bfb482838471d2e843"], 0xc) 00:21:05 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) 00:21:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x6, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0xe, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{r2}, {r4}, 0x0, [0x7]}) 00:21:05 executing program 3: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="10002dbd7000fd0000080003000000000000", @ANYRES32=r1, @ANYBLOB="0c009900ca0000006b0000000800a000010000000800220112010000080022019c010000050018011c0000000800a0000400000008009f000600000008009f0003000000050018010e000000050018011c00000008005700040000000800570068000000"], 0x80}, 0x1, 0x0, 0x0, 0x24040080}, 0x8d0) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r1, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) (fail_nth: 1) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="10002dbd7000fd0000080003000000000000", @ANYRES32=r1, @ANYBLOB="0c009900ca0000006b0000000800a000010000000800220112010000080022019c010000050018011c0000000800a0000400000008009f000600000008009f0003000000050018010e000000050018011c00000008005700040000000800570068000000"], 0x80}, 0x1, 0x0, 0x0, 0x24040080}, 0x8d0) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r1, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 3: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)) 00:21:05 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x500, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) [ 1265.232972][ T5985] Bluetooth: hci5: SCO packet for unknown connection handle 589 [ 1265.803454][T21797] FAULT_INJECTION: forcing a failure. [ 1265.803454][T21797] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.812369][T21797] CPU: 1 PID: 21797 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1265.814995][T21797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1265.817570][T21797] Call trace: [ 1265.818428][T21797] dump_backtrace+0x1b8/0x1e4 [ 1265.819602][T21797] show_stack+0x2c/0x44 [ 1265.820646][T21797] dump_stack_lvl+0xd0/0x124 [ 1265.821808][T21797] dump_stack+0x1c/0x28 [ 1265.822939][T21797] should_fail_ex+0x3f8/0x5c4 [ 1265.824105][T21797] __should_failslab+0xc8/0x128 [ 1265.825354][T21797] should_failslab+0x10/0x28 [ 1265.826495][T21797] __kmem_cache_alloc_node+0x80/0x388 [ 1265.827861][T21797] __kmalloc+0xb8/0x1b8 [ 1265.828950][T21797] tomoyo_realpath_from_path+0xc8/0x4cc [ 1265.830355][T21797] tomoyo_path_number_perm+0x1ec/0x6a8 [ 1265.831715][T21797] tomoyo_file_ioctl+0x2c/0x3c [ 1265.832880][T21797] security_file_ioctl+0x80/0xbc [ 1265.834147][T21797] __arm64_sys_ioctl+0xa8/0x1c8 [ 1265.835408][T21797] invoke_syscall+0x98/0x2c0 [ 1265.836591][T21797] el0_svc_common+0x138/0x258 [ 1265.837744][T21797] do_el0_svc+0x64/0x198 [ 1265.838823][T21797] el0_svc+0x4c/0x15c [ 1265.839787][T21797] el0t_64_sync_handler+0x84/0xf0 [ 1265.841041][T21797] el0t_64_sync+0x190/0x194 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x600, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="10002dbd7000fd0000080003000000000000", @ANYRES32=r1, @ANYBLOB="0c009900ca0000006b0000000800a000010000000800220112010000080022019c010000050018011c0000000800a0000400000008009f000600000008009f0003000000050018010e000000050018011c00000008005700040000000800570068000000"], 0x80}, 0x1, 0x0, 0x0, 0x24040080}, 0x8d0) 00:21:05 executing program 3: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)) 00:21:05 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) [ 1265.918425][T21797] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1265.922070][T21797] autofs4:pid:21797:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1265.928368][T21797] autofs4:pid:21797:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x800) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000180)=""/103, &(0x7f0000000200)=0x67) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 00:21:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) (fail_nth: 2) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 2: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) 00:21:05 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) 00:21:05 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) 00:21:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x900, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:05 executing program 2: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) 00:21:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x800) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000180)=""/103, &(0x7f0000000200)=0x67) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 00:21:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) [ 1266.010970][T21828] FAULT_INJECTION: forcing a failure. [ 1266.010970][T21828] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.014149][T21828] CPU: 0 PID: 21828 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1266.016646][T21828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1266.019149][T21828] Call trace: [ 1266.019982][T21828] dump_backtrace+0x1b8/0x1e4 [ 1266.021158][T21828] show_stack+0x2c/0x44 [ 1266.022331][T21828] dump_stack_lvl+0xd0/0x124 [ 1266.023561][T21828] dump_stack+0x1c/0x28 [ 1266.024678][T21828] should_fail_ex+0x3f8/0x5c4 [ 1266.025854][T21828] __should_failslab+0xc8/0x128 [ 1266.027139][T21828] should_failslab+0x10/0x28 [ 1266.028452][T21828] __kmem_cache_alloc_node+0x80/0x388 [ 1266.029833][T21828] __kmalloc+0xb8/0x1b8 [ 1266.030937][T21828] tomoyo_encode+0x270/0x4b0 [ 1266.032128][T21828] tomoyo_realpath_from_path+0x478/0x4cc [ 1266.033536][T21828] tomoyo_path_number_perm+0x1ec/0x6a8 [ 1266.034846][T21828] tomoyo_file_ioctl+0x2c/0x3c [ 1266.036069][T21828] security_file_ioctl+0x80/0xbc [ 1266.037315][T21828] __arm64_sys_ioctl+0xa8/0x1c8 [ 1266.038512][T21828] invoke_syscall+0x98/0x2c0 [ 1266.039626][T21828] el0_svc_common+0x138/0x258 [ 1266.040785][T21828] do_el0_svc+0x64/0x198 [ 1266.041851][T21828] el0_svc+0x4c/0x15c [ 1266.042833][T21828] el0t_64_sync_handler+0x84/0xf0 [ 1266.044065][T21828] el0t_64_sync+0x190/0x194 00:21:06 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) [ 1266.076816][T21828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1266.078673][T21828] autofs4:pid:21828:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1266.090673][T21828] autofs4:pid:21828:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:06 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) (fail_nth: 3) 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0xe00, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:06 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x800) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000180)=""/103, &(0x7f0000000200)=0x67) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 00:21:06 executing program 2: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) 00:21:06 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)) 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x4000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:06 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)) [ 1266.164590][T21854] FAULT_INJECTION: forcing a failure. [ 1266.164590][T21854] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:21:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000180)=""/6, 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0xff, 0x6, @random="a4f49dcd27a1"}, 0x14) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x2, r5, 0x4}, 0x10, &(0x7f00000000c0), 0xa21739fe174f830b, 0x0, 0x0, 0x20000054}, 0x48005) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 00:21:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) [ 1266.184289][T21854] CPU: 1 PID: 21854 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1266.186971][T21854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1266.189641][T21854] Call trace: [ 1266.190532][T21854] dump_backtrace+0x1b8/0x1e4 [ 1266.191711][T21854] show_stack+0x2c/0x44 [ 1266.192823][T21854] dump_stack_lvl+0xd0/0x124 [ 1266.194021][T21854] dump_stack+0x1c/0x28 [ 1266.195114][T21854] should_fail_ex+0x3f8/0x5c4 [ 1266.196341][T21854] should_fail+0x14/0x24 [ 1266.197478][T21854] should_fail_usercopy+0x20/0x30 [ 1266.198808][T21854] autofs_dev_ioctl+0x13c/0xac8 [ 1266.200038][T21854] __arm64_sys_ioctl+0x14c/0x1c8 [ 1266.201310][T21854] invoke_syscall+0x98/0x2c0 [ 1266.202463][T21854] el0_svc_common+0x138/0x258 [ 1266.203680][T21854] do_el0_svc+0x64/0x198 [ 1266.204749][T21854] el0_svc+0x4c/0x15c [ 1266.205839][T21854] el0t_64_sync_handler+0x84/0xf0 [ 1266.207083][T21854] el0t_64_sync+0x190/0x194 00:21:06 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:06 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) (fail_nth: 4) 00:21:06 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:06 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)) 00:21:06 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{r1, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x30000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043209003de628aaceefc82116ba635f5ae5475155cf862333dfc4218e668dedd3d1a46bcac4ebc58479d50df1f2749903c9ff790c4db4e7c7fae2c139ec94ec4cdb0f48c52f56f50a9634b038c824c4e6cde92fe4b80002879fa7a6e953e438ebf81cebf462996cd0fb4636270ac0943cddf04e9cf834ab8c417fe3786db6a239f4ad13f25c9f8501000000250f88351f79e19babab3a92f70c9cfb5f1146f4f82880d4490784a13161964344f92ec5b208c6aa8096e273daeb8916620352a4de7555d79a00a4adf6b568341f9a5306d391ed69e09e7ded7488d08affa7c5e6cfeb012c2e468cea7498631291965483be4363d58adfba171f2361aee7bc94a5f2ac8a723fe5361dde8a5a05e530633ef70f4c81a29202724147ae6efaf3c5be06cf81d7900391586bf22510737e8eee4642c795682019d614d33d070b6783ad6b858c4dc9d4fd771dace9b82dff6d65db89"], 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000180)=""/6, 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0xff, 0x6, @random="a4f49dcd27a1"}, 0x14) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x2, r5, 0x4}, 0x10, &(0x7f00000000c0), 0xa21739fe174f830b, 0x0, 0x0, 0x20000054}, 0x48005) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) (async) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) (async) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) (async) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) (async) recvfrom$packet(r0, &(0x7f0000000180)=""/6, 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0xff, 0x6, @random="a4f49dcd27a1"}, 0x14) (async) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) (async) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x2, r5, 0x4}, 0x10, &(0x7f00000000c0), 0xa21739fe174f830b, 0x0, 0x0, 0x20000054}, 0x48005) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 00:21:06 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{r1, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x34000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) 00:21:06 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) (fail_nth: 5) 00:21:06 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:06 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{r1, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x400300, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) 00:21:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000180)=""/6, 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0xff, 0x6, @random="a4f49dcd27a1"}, 0x14) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x2, r5, 0x4}, 0x10, &(0x7f00000000c0), 0xa21739fe174f830b, 0x0, 0x0, 0x20000054}, 0x48005) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) (async) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) (async) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) (async) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) (async) recvfrom$packet(r0, &(0x7f0000000180)=""/6, 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0xff, 0x6, @random="a4f49dcd27a1"}, 0x14) (async) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) (async) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x2, r5, 0x4}, 0x10, &(0x7f00000000c0), 0xa21739fe174f830b, 0x0, 0x0, 0x20000054}, 0x48005) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) [ 1266.415121][T21894] FAULT_INJECTION: forcing a failure. [ 1266.415121][T21894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1266.439246][T21894] CPU: 1 PID: 21894 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1266.441895][T21894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 00:21:06 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) [ 1266.444363][T21894] Call trace: [ 1266.445236][T21894] dump_backtrace+0x1b8/0x1e4 [ 1266.446467][T21894] show_stack+0x2c/0x44 [ 1266.447582][T21894] dump_stack_lvl+0xd0/0x124 [ 1266.448811][T21894] dump_stack+0x1c/0x28 [ 1266.449952][T21894] should_fail_ex+0x3f8/0x5c4 [ 1266.451231][T21894] should_fail+0x14/0x24 [ 1266.452277][T21894] should_fail_usercopy+0x20/0x30 [ 1266.453661][T21894] memdup_user+0x8c/0x1f8 [ 1266.454884][T21894] autofs_dev_ioctl+0x28c/0xac8 00:21:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) [ 1266.456213][T21894] __arm64_sys_ioctl+0x14c/0x1c8 [ 1266.457559][T21894] invoke_syscall+0x98/0x2c0 [ 1266.458763][T21894] el0_svc_common+0x138/0x258 [ 1266.459974][T21894] do_el0_svc+0x64/0x198 [ 1266.461108][T21894] el0_svc+0x4c/0x15c [ 1266.462148][T21894] el0t_64_sync_handler+0x84/0xf0 [ 1266.463471][T21894] el0t_64_sync+0x190/0x194 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x1000000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) 00:21:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x30000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) (fail_nth: 6) 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x2000000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000180)=""/6, 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0xff, 0x6, @random="a4f49dcd27a1"}, 0x14) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x2, r5, 0x4}, 0x10, &(0x7f00000000c0), 0xa21739fe174f830b, 0x0, 0x0, 0x20000054}, 0x48005) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 00:21:06 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 00:21:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) [ 1266.564916][T21921] autofs4:pid:21921:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1266.568393][T21921] autofs4:pid:21921:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) [ 1266.587770][T21921] FAULT_INJECTION: forcing a failure. [ 1266.587770][T21921] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:21:06 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "adc0bbf455644348ebf57a1756fe33540adfdcd16e15dbfefb8a5c88ca429e1b2081735565a35d51b1bd74cc3b0fffdfbb32d797e2b21d7a929b2f0c66c8495142e1b2417dc23b8629d919c150749341dd1e03c58b00506bb5e1cd784dc7b1a78fda640e33c7337612b574c4d2949817780613ce738ac171705bd67fb5336576f8af82aec62d133a10f0e90cc4fed41b969a413f7bb93cdbc0f3881c3d6dbec73d31cb4362fca03867aad049ebc4b664857bf5e7dac1ea1b8886e983eecd53c1fada06372c1b8538e9232276b07919ade5cb1513041778d44658ad27335c22fde6b0276ce56cecb739eb6f57c499d8edcf75fed9fc3562f0c86e6d38464b2f6c74b066bdcb75a44c1413d243d5f372d6793a9439b3a7530b49b4cac84d21a8d6c15bcc7d56d3bec6e3585d8a90c6629af19c8e09475eca903f13bb7a89c544a21619dea459a8675f066ab9fc3bc6c3d8bdc16e11660f88f98144cf3d6863a6737f750e05e5e5cfd2263916380b671d67843933fe810b5067ea4900a7e2c96f2a6d3c4977a51b3534d76e4ebe09bd1856d1063bd952007ae3354470a00be89c1af6aa9dd167e835abd55910b1999ab9e064216d607f1bdbebc16ad31999a948e18c099512f4127d348b616a8876c6464433d513b9b4af4eda3fc677e121077c33600dcac847b60afdd1211a9074f6f5df206bae9ef20d0297cf09ba182a553b3f7dd5d0413c33a1bf015b89eabf408ca2c35a34c6bcb970605ed13925122ab41a33454235b3569f0f063c40e85449ef26d23d57e6b224126f447a08473b8798e29d989eb9d617d8ee926f5925b74b9b2dfb4a4b69adcac6af367c06c6840850709979b6c475aa5873eefc5b253b9cb7b0525c467c1ac1e4cb5c82c1e17aa9823de8f88e98a2df5d02255f163cb7e1a82b5d45d32b2ac296c8cf067ab486520f5a388447b89b8e87a4bd4f05c1149f297a38fa6f29d1b854eb8da3d25e784b4148bbc830a128b391eea1352ea5ae32c0c0e79fd7089cb684ed8f62e120bbdc3d3ef4b583dae7c8e95ecb29d23ce0f52312cda24d46818491cbf1593d57fd33bd3211ebae119b924569429f53a5dde0b9c1bb73bcaa03274e2a45eade77b81302867cca9160e142f25a838048ea9f2cd79ae64958464c2b2ae567b46374447747d5d6faa93d529fdb4b5bb3d2cce0147568579b719aef3807a15c00a7a070e7b70fdd620716df5216dac209bfdbb9f6dfc9aa2db2696cc8b5a127b8c4a947e472790c1fd99d50d987c824ba0c52a8dd4474d97701d5f66d6f9c16e0d99f01fb84be443cea2dd491229c338903b57b4a2acc1ba795aec8248709e88c8c6e24bb13a9ef47ff540fa18b7a24a3dbddc596b2c681eec7b1ad791a7c37a1dd116f1d5c2efc30177c24d2ea5b5bdd20eaddd3330f452f8ed6db61ab1fa23cc9dd257d0f1abd6b73b52eb7306624010ad7f2b71421547f4c2e2c767e07d315b9ed4f25c246ca5185b1bd805bda8baf73553efe58355b90834510301d3220fb6269f21b5f38a7b111a0fc5729fb078244d86a3a56674085999c4a5436ab5515ccfd211b53f33e27dcadce90f709fce5eb67e1fc8a7b691228c3d050b275abfc2fd2066e11120fec6265bf0bd8bbdd68a019f3360a45b764058bc16349cc432c0147da41bfe10c7831d7edcf5b020b700691ea9c297f088fa598f79a4159183a5087becbbac345d16b0a582098760544b2c80adc6c660536c41a15f36de8fde685568648d39bbe108669910a7c40db4ede94f21749ba73d05c413fba9bba62d692a73cec2e6b938de82a656305696ea8fede7d4ef848152c94456d82a2bd0af660832233ffcfea842075e1be641f3d02ba671f0fe5a9e6a1592167416deb3c6ccf2e327b3d4ceadf6b6b0efa8ee95bf238435f152e2cdaf5f792258e221a5545d9410b286c6853ef97342f90be784aa8bbaadedbdd0e66fad1dfd41dbb3df3db5ca37be3830645fb730a06c3aa36f5f4e7cefede08f75c6733ae91e9f13f7041dce5903a0ce13f61a1582a9caea48015f8e25c50a9177d7d132010f470b702b3107678a2ac06e10fa685ea0e740362d8160a7e9d9565f1f83bd8d30dc1c02ecaeefaac7c567885dfd314f49dbb91a209392d34cbbdad12bfe67dd601a79220b5eedf9076d68df65dfe30d36257ce44658c0df167b94a12283bb04fec6ceef6fb16229a90f8e88f1481a3e6f8fdc761e5d32619d5f981bdb136cdeefc3a9cc11b142a857c3ee2dafd1e7ef3529dc9c95c57ad01658a827c79b647ccb919312525d05dc16e30eb974daa254956f5461c5f1cccf8204ac0e89f1dc4aaad97928d04960acfa022a75febab8e6030f746ed67319aa2d318df97c941833a23f5ca31575dd9ea5d16b0a86d083005bae5f8c1b419471fe7a24d66d8fdebad614704ba4d131afeaf43e73e5a2be1b108fd6d9dee1bf173021d16190ad376d59d83200091aa1c788fb0a452535efae3abc99e28cfe4e230b6c10ddc8b6b94773e6afebda451146ef4acc9254397d34c3203b3022646d97cb9f6df1d9cf6f6cb14bb700994ed4ad9ac2aff1b7e3394d1e7627233a9c321ff06f6fd1e532f979653e0faaee73b5a6eed70b892441bc7d86a3c16ea9faf0641ce36b2b3363e5d398e0d009f5c04949a30d11e0f64a41baad22388da24044dacb9b645182c9217a8ec13ff3d7ce33efff8ef34450814ff820fccd595486bb51ab54a0849b90c13d0cd1b33b3bd956316e01f02bf03344f7dc90c51bd6a9bbcef188af0a69f002dbe27d53a3d9bf6256f8b50f53cfd0c2c7b6cd992ad75f7f1f5dbbea9e20f3900ff6c45f149fa9296d4f60963128c15da397fd37814e760a8fa81860c0c8502efe4d5eb39df05b4751d3d97016e7de4953126e2ea14b686ad64180b2a473964a7c8bde90666139dbe7b28c0d8eec321e0043f181d481f9f6be86f111cf8575606a292a8913c22a36f9e557e7cdcf267233552e58304e7146f262b9a827878c1f2c87ffc5dcbd97e3f7d185b2d10b26712bf905d52652b69f5fb547ae4464b15f30817c11984f1479edea4a2465a99cf7910a5b375e410a2fd13f979ace67bd603fcbdab8df0a972f03158982406673700656d96e5900b6a97c9a1629c7c754b010997fb32768ec75c2b1f04223d50c54a83b46ef19a5968ef45b94c38955ac1b7d913fe6696437fc69217821e948d9e9a30f6b332587a943469edd6a12d530f4ffd2f4a05d072c14a0610322e7a14b507a9c9cdadeef94cd35dbf8afeda6c6992f6792b9d3727d0845da8ff4984721a15afc62b87f4820411c1993fd9e2c23af67e876018aff33b18fa9913636f56513ab26b31d0602104d42660635a084787df619f51a22856fc8364d2f5c0c60f4b0e24cc32ff8411b2faf974f779c906a832267a0066e7537643a12653966279dfe6db6b89f5c2471246a4d5a1c199893166cdf1a0615c206b11eb84b20bf00142af6d39d4962da0b0b4be680a4c5b45c4718f736d3641949f05c79bbf72002091f5d42d20d5567adc7316e2651c4ed0686d3697b3ab6e7e9867e734ee9241aa5944c6a6e994ae02f9997cdd20ccd8a1a16e674c2a67efeedeab1589f095a561a38d19098007706b2fb1639001d8ce7a42742f7f040b49e41fbc5faeb5c6fbe699e5fed00bd8122f19c65f1c51e259be721981f5b774818618d908cbfd5165f79c7476520075000f9c369a80a61fe87245350f9da511d614962211bd61d1d8edddb906448a6559ae04609c6ffd3cf92ab614cc0dd3991221d02e23b94ce63cebe6ac723e98498586be5eb2b2424bedb980817983fcc61766b7b09c22527eb301ad66b8b275a4497190913d86072a84b2f30b2e6a969f70acdf2dcc1a951afec3578401ecc5d361ab899b59417f06bd16139a0d9646a4c69d18ba18b828bfb61e4a7913e90d98bc117bac6161e1d40d18ad56027234d93d20f22af21401263310a206dcfe31ba725a85a74c78256c0bf063ad24143cf69537c85bd067b33e2993c5c6289e719e65b1d36475ace64a20bd9e73f8fd36a21c91f6acdee23ae670f758a310352810ee16bb82c6de6c2aa575479aa3c058d1e7c15aa247ccaf20349e7aefffdd4a940b23e8f4e29bbc3b3e417fd43231e1c28d293361089cb881ae144066daf795c81b173392c862922ea977e26534d356473dc19eb8f8c616b2a23ef432edaa545de71c3add10ff7d5bc63be10f0609559dfa45f5f4643246cd39d0c017d861691bb122a7d9a1c3935f20a6f57dfe0253ac26d7ee2bc1acd8e2809cfcee05968b09ebd8e4bc90b979c249e784186ab34b69b928236630136dd2d550c71a8fd6096179edd4b192fc605d6bf881317a4934724f115f4d430cea268c9ce638da44e9927171abde3e3683010f9100fb5edc49df1cfe19bb99643e28f47a026519e191e5a4152b7289feae13881165c0f03a9c18feccc1d10cb673118c490260a424c8c83d1772be3348a57d9b7613a96e03e893782adf47a29762b822d7267ea43e0af4f1a7f0927e5a7e113f212ec25c916b164f34f03b5dc5b4f82646eb58b735485756d9f838399ee5ff24e77403cf92bc2a727e3e4b9b71d15548a4f4e754906fae4bfea59163616f40f8f0e48c25acfa7c3c8151ca92eea9d04a075368bc964cd932e436a1de04f8c59c001e7672025ca36fa28880dfe2382cc3f74e3dcadf5794db49b960ec373ef184c95bf5852675790e591ba1cc28175e20c27c831e3f1d961ed8acb88fc212a83da037f3ce21e8af30892cc39666f53a1f590a13e56b7406f198aa7a1c7b384b40a2d004d74dbbcf0696401d868b24e2232a1841be22f50e7284740e4931237e01eff62774e01a5eff05724325e687ce10603c3c48dfa14e454c8e55f389e28375c04a1e7cdbe02685e753ce75b940ee0898c53ef784a2592c0bb7b719c9ef596d6ee08e190f063019b17c4005e8be199e9ed773e01a27c74d5a7220e757ad0f96c87826183652fcd87e60ae2d1ce31d553856be83ba7416937013192d241d53472c6c883c13de899bd19d2e67f4b69a0490320b20c66044bfaa8098805c3efe67a5075446207d51d9d03e1e93330577c145e13457ef41279cb532bd646087380516407b8572eb436d0c046e6567a59245398f3c895a2bd4881446bc7d0f293f21a37275c630d52d2e14ffdb8e894d0e9b07bd5fdae1af35bcda48d31ae7e88fdaa55c928bf3954420d2d1b71a3358af1be727d16b5e728cd0aae3b079a9e89760105c9b1892bfbe4c5e0728b931b1d7fd772664000dc0843cb159ddcc24ccc9ff6e58b578939ca026eddcc36e8ddb7ba26fce84b2e2d743488b6fb088ab655a90b1484577c9aea0f12ca115b8490fcfe7bc461d64222a43a3c811de09ab2d233f83fab250efd0c44a84ab71dfe11c4399328524bd846a3563930ad6cc4df3db827994029ddcf1d2c2fef51c0a51b286a25c8c5be5b6cfc8507f61a2800274fd67a6d206e0516b7ea8ed80c5ab0e30d13f597efc12d24c1e28a3ade2725d2d419363b0013fe6fd9b771195259fb53ced366fe13d551ec5b077e875ec13cc7bd2d8f7fd4286505abd8fd87c14fb3146085257287bd1a88ab31dcd8a607a2ddc955052dbf6f2540ea215fd6e7a176fe308f06b2442068d98b057f7d924a3f17df179ce7cfdb2bcdcc61b7dcee068f006f0f417b017d86ea20e259afb25f4910cdd6b99964364cd41d749bbcf9597107a76bbcdee90251917f3ec8081959e9acc859032dbc2f94449b02bf7968697499936"}, 0x1004) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "adc0bbf455644348ebf57a1756fe33540adfdcd16e15dbfefb8a5c88ca429e1b2081735565a35d51b1bd74cc3b0fffdfbb32d797e2b21d7a929b2f0c66c8495142e1b2417dc23b8629d919c150749341dd1e03c58b00506bb5e1cd784dc7b1a78fda640e33c7337612b574c4d2949817780613ce738ac171705bd67fb5336576f8af82aec62d133a10f0e90cc4fed41b969a413f7bb93cdbc0f3881c3d6dbec73d31cb4362fca03867aad049ebc4b664857bf5e7dac1ea1b8886e983eecd53c1fada06372c1b8538e9232276b07919ade5cb1513041778d44658ad27335c22fde6b0276ce56cecb739eb6f57c499d8edcf75fed9fc3562f0c86e6d38464b2f6c74b066bdcb75a44c1413d243d5f372d6793a9439b3a7530b49b4cac84d21a8d6c15bcc7d56d3bec6e3585d8a90c6629af19c8e09475eca903f13bb7a89c544a21619dea459a8675f066ab9fc3bc6c3d8bdc16e11660f88f98144cf3d6863a6737f750e05e5e5cfd2263916380b671d67843933fe810b5067ea4900a7e2c96f2a6d3c4977a51b3534d76e4ebe09bd1856d1063bd952007ae3354470a00be89c1af6aa9dd167e835abd55910b1999ab9e064216d607f1bdbebc16ad31999a948e18c099512f4127d348b616a8876c6464433d513b9b4af4eda3fc677e121077c33600dcac847b60afdd1211a9074f6f5df206bae9ef20d0297cf09ba182a553b3f7dd5d0413c33a1bf015b89eabf408ca2c35a34c6bcb970605ed13925122ab41a33454235b3569f0f063c40e85449ef26d23d57e6b224126f447a08473b8798e29d989eb9d617d8ee926f5925b74b9b2dfb4a4b69adcac6af367c06c6840850709979b6c475aa5873eefc5b253b9cb7b0525c467c1ac1e4cb5c82c1e17aa9823de8f88e98a2df5d02255f163cb7e1a82b5d45d32b2ac296c8cf067ab486520f5a388447b89b8e87a4bd4f05c1149f297a38fa6f29d1b854eb8da3d25e784b4148bbc830a128b391eea1352ea5ae32c0c0e79fd7089cb684ed8f62e120bbdc3d3ef4b583dae7c8e95ecb29d23ce0f52312cda24d46818491cbf1593d57fd33bd3211ebae119b924569429f53a5dde0b9c1bb73bcaa03274e2a45eade77b81302867cca9160e142f25a838048ea9f2cd79ae64958464c2b2ae567b46374447747d5d6faa93d529fdb4b5bb3d2cce0147568579b719aef3807a15c00a7a070e7b70fdd620716df5216dac209bfdbb9f6dfc9aa2db2696cc8b5a127b8c4a947e472790c1fd99d50d987c824ba0c52a8dd4474d97701d5f66d6f9c16e0d99f01fb84be443cea2dd491229c338903b57b4a2acc1ba795aec8248709e88c8c6e24bb13a9ef47ff540fa18b7a24a3dbddc596b2c681eec7b1ad791a7c37a1dd116f1d5c2efc30177c24d2ea5b5bdd20eaddd3330f452f8ed6db61ab1fa23cc9dd257d0f1abd6b73b52eb7306624010ad7f2b71421547f4c2e2c767e07d315b9ed4f25c246ca5185b1bd805bda8baf73553efe58355b90834510301d3220fb6269f21b5f38a7b111a0fc5729fb078244d86a3a56674085999c4a5436ab5515ccfd211b53f33e27dcadce90f709fce5eb67e1fc8a7b691228c3d050b275abfc2fd2066e11120fec6265bf0bd8bbdd68a019f3360a45b764058bc16349cc432c0147da41bfe10c7831d7edcf5b020b700691ea9c297f088fa598f79a4159183a5087becbbac345d16b0a582098760544b2c80adc6c660536c41a15f36de8fde685568648d39bbe108669910a7c40db4ede94f21749ba73d05c413fba9bba62d692a73cec2e6b938de82a656305696ea8fede7d4ef848152c94456d82a2bd0af660832233ffcfea842075e1be641f3d02ba671f0fe5a9e6a1592167416deb3c6ccf2e327b3d4ceadf6b6b0efa8ee95bf238435f152e2cdaf5f792258e221a5545d9410b286c6853ef97342f90be784aa8bbaadedbdd0e66fad1dfd41dbb3df3db5ca37be3830645fb730a06c3aa36f5f4e7cefede08f75c6733ae91e9f13f7041dce5903a0ce13f61a1582a9caea48015f8e25c50a9177d7d132010f470b702b3107678a2ac06e10fa685ea0e740362d8160a7e9d9565f1f83bd8d30dc1c02ecaeefaac7c567885dfd314f49dbb91a209392d34cbbdad12bfe67dd601a79220b5eedf9076d68df65dfe30d36257ce44658c0df167b94a12283bb04fec6ceef6fb16229a90f8e88f1481a3e6f8fdc761e5d32619d5f981bdb136cdeefc3a9cc11b142a857c3ee2dafd1e7ef3529dc9c95c57ad01658a827c79b647ccb919312525d05dc16e30eb974daa254956f5461c5f1cccf8204ac0e89f1dc4aaad97928d04960acfa022a75febab8e6030f746ed67319aa2d318df97c941833a23f5ca31575dd9ea5d16b0a86d083005bae5f8c1b419471fe7a24d66d8fdebad614704ba4d131afeaf43e73e5a2be1b108fd6d9dee1bf173021d16190ad376d59d83200091aa1c788fb0a452535efae3abc99e28cfe4e230b6c10ddc8b6b94773e6afebda451146ef4acc9254397d34c3203b3022646d97cb9f6df1d9cf6f6cb14bb700994ed4ad9ac2aff1b7e3394d1e7627233a9c321ff06f6fd1e532f979653e0faaee73b5a6eed70b892441bc7d86a3c16ea9faf0641ce36b2b3363e5d398e0d009f5c04949a30d11e0f64a41baad22388da24044dacb9b645182c9217a8ec13ff3d7ce33efff8ef34450814ff820fccd595486bb51ab54a0849b90c13d0cd1b33b3bd956316e01f02bf03344f7dc90c51bd6a9bbcef188af0a69f002dbe27d53a3d9bf6256f8b50f53cfd0c2c7b6cd992ad75f7f1f5dbbea9e20f3900ff6c45f149fa9296d4f60963128c15da397fd37814e760a8fa81860c0c8502efe4d5eb39df05b4751d3d97016e7de4953126e2ea14b686ad64180b2a473964a7c8bde90666139dbe7b28c0d8eec321e0043f181d481f9f6be86f111cf8575606a292a8913c22a36f9e557e7cdcf267233552e58304e7146f262b9a827878c1f2c87ffc5dcbd97e3f7d185b2d10b26712bf905d52652b69f5fb547ae4464b15f30817c11984f1479edea4a2465a99cf7910a5b375e410a2fd13f979ace67bd603fcbdab8df0a972f03158982406673700656d96e5900b6a97c9a1629c7c754b010997fb32768ec75c2b1f04223d50c54a83b46ef19a5968ef45b94c38955ac1b7d913fe6696437fc69217821e948d9e9a30f6b332587a943469edd6a12d530f4ffd2f4a05d072c14a0610322e7a14b507a9c9cdadeef94cd35dbf8afeda6c6992f6792b9d3727d0845da8ff4984721a15afc62b87f4820411c1993fd9e2c23af67e876018aff33b18fa9913636f56513ab26b31d0602104d42660635a084787df619f51a22856fc8364d2f5c0c60f4b0e24cc32ff8411b2faf974f779c906a832267a0066e7537643a12653966279dfe6db6b89f5c2471246a4d5a1c199893166cdf1a0615c206b11eb84b20bf00142af6d39d4962da0b0b4be680a4c5b45c4718f736d3641949f05c79bbf72002091f5d42d20d5567adc7316e2651c4ed0686d3697b3ab6e7e9867e734ee9241aa5944c6a6e994ae02f9997cdd20ccd8a1a16e674c2a67efeedeab1589f095a561a38d19098007706b2fb1639001d8ce7a42742f7f040b49e41fbc5faeb5c6fbe699e5fed00bd8122f19c65f1c51e259be721981f5b774818618d908cbfd5165f79c7476520075000f9c369a80a61fe87245350f9da511d614962211bd61d1d8edddb906448a6559ae04609c6ffd3cf92ab614cc0dd3991221d02e23b94ce63cebe6ac723e98498586be5eb2b2424bedb980817983fcc61766b7b09c22527eb301ad66b8b275a4497190913d86072a84b2f30b2e6a969f70acdf2dcc1a951afec3578401ecc5d361ab899b59417f06bd16139a0d9646a4c69d18ba18b828bfb61e4a7913e90d98bc117bac6161e1d40d18ad56027234d93d20f22af21401263310a206dcfe31ba725a85a74c78256c0bf063ad24143cf69537c85bd067b33e2993c5c6289e719e65b1d36475ace64a20bd9e73f8fd36a21c91f6acdee23ae670f758a310352810ee16bb82c6de6c2aa575479aa3c058d1e7c15aa247ccaf20349e7aefffdd4a940b23e8f4e29bbc3b3e417fd43231e1c28d293361089cb881ae144066daf795c81b173392c862922ea977e26534d356473dc19eb8f8c616b2a23ef432edaa545de71c3add10ff7d5bc63be10f0609559dfa45f5f4643246cd39d0c017d861691bb122a7d9a1c3935f20a6f57dfe0253ac26d7ee2bc1acd8e2809cfcee05968b09ebd8e4bc90b979c249e784186ab34b69b928236630136dd2d550c71a8fd6096179edd4b192fc605d6bf881317a4934724f115f4d430cea268c9ce638da44e9927171abde3e3683010f9100fb5edc49df1cfe19bb99643e28f47a026519e191e5a4152b7289feae13881165c0f03a9c18feccc1d10cb673118c490260a424c8c83d1772be3348a57d9b7613a96e03e893782adf47a29762b822d7267ea43e0af4f1a7f0927e5a7e113f212ec25c916b164f34f03b5dc5b4f82646eb58b735485756d9f838399ee5ff24e77403cf92bc2a727e3e4b9b71d15548a4f4e754906fae4bfea59163616f40f8f0e48c25acfa7c3c8151ca92eea9d04a075368bc964cd932e436a1de04f8c59c001e7672025ca36fa28880dfe2382cc3f74e3dcadf5794db49b960ec373ef184c95bf5852675790e591ba1cc28175e20c27c831e3f1d961ed8acb88fc212a83da037f3ce21e8af30892cc39666f53a1f590a13e56b7406f198aa7a1c7b384b40a2d004d74dbbcf0696401d868b24e2232a1841be22f50e7284740e4931237e01eff62774e01a5eff05724325e687ce10603c3c48dfa14e454c8e55f389e28375c04a1e7cdbe02685e753ce75b940ee0898c53ef784a2592c0bb7b719c9ef596d6ee08e190f063019b17c4005e8be199e9ed773e01a27c74d5a7220e757ad0f96c87826183652fcd87e60ae2d1ce31d553856be83ba7416937013192d241d53472c6c883c13de899bd19d2e67f4b69a0490320b20c66044bfaa8098805c3efe67a5075446207d51d9d03e1e93330577c145e13457ef41279cb532bd646087380516407b8572eb436d0c046e6567a59245398f3c895a2bd4881446bc7d0f293f21a37275c630d52d2e14ffdb8e894d0e9b07bd5fdae1af35bcda48d31ae7e88fdaa55c928bf3954420d2d1b71a3358af1be727d16b5e728cd0aae3b079a9e89760105c9b1892bfbe4c5e0728b931b1d7fd772664000dc0843cb159ddcc24ccc9ff6e58b578939ca026eddcc36e8ddb7ba26fce84b2e2d743488b6fb088ab655a90b1484577c9aea0f12ca115b8490fcfe7bc461d64222a43a3c811de09ab2d233f83fab250efd0c44a84ab71dfe11c4399328524bd846a3563930ad6cc4df3db827994029ddcf1d2c2fef51c0a51b286a25c8c5be5b6cfc8507f61a2800274fd67a6d206e0516b7ea8ed80c5ab0e30d13f597efc12d24c1e28a3ade2725d2d419363b0013fe6fd9b771195259fb53ced366fe13d551ec5b077e875ec13cc7bd2d8f7fd4286505abd8fd87c14fb3146085257287bd1a88ab31dcd8a607a2ddc955052dbf6f2540ea215fd6e7a176fe308f06b2442068d98b057f7d924a3f17df179ce7cfdb2bcdcc61b7dcee068f006f0f417b017d86ea20e259afb25f4910cdd6b99964364cd41d749bbcf9597107a76bbcdee90251917f3ec8081959e9acc859032dbc2f94449b02bf7968697499936"}, 0x1004) (async) [ 1266.599754][T21921] CPU: 0 PID: 21921 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1266.602288][T21921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1266.604766][T21921] Call trace: [ 1266.605593][T21921] dump_backtrace+0x1b8/0x1e4 [ 1266.606792][T21921] show_stack+0x2c/0x44 [ 1266.607938][T21921] dump_stack_lvl+0xd0/0x124 [ 1266.609229][T21921] dump_stack+0x1c/0x28 [ 1266.610302][T21921] should_fail_ex+0x3f8/0x5c4 [ 1266.611561][T21921] should_fail+0x14/0x24 [ 1266.612665][T21921] should_fail_usercopy+0x20/0x30 [ 1266.614031][T21921] simple_read_from_buffer+0xd4/0x248 [ 1266.615456][T21921] proc_fail_nth_read+0x198/0x234 [ 1266.616806][T21921] vfs_read+0x284/0x8ac [ 1266.617890][T21921] ksys_read+0x15c/0x26c [ 1266.619022][T21921] __arm64_sys_read+0x7c/0x90 [ 1266.620238][T21921] invoke_syscall+0x98/0x2c0 [ 1266.621390][T21921] el0_svc_common+0x138/0x258 [ 1266.622595][T21921] do_el0_svc+0x64/0x198 [ 1266.623692][T21921] el0_svc+0x4c/0x15c [ 1266.624756][T21921] el0t_64_sync_handler+0x84/0xf0 [ 1266.626058][T21921] el0t_64_sync+0x190/0x194 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x3000000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 00:21:06 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x4000000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:06 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000180)=""/6, 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0xff, 0x6, @random="a4f49dcd27a1"}, 0x14) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x2, r5, 0x4}, 0x10, &(0x7f00000000c0), 0xa21739fe174f830b, 0x0, 0x0, 0x20000054}, 0x48005) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 00:21:06 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) 00:21:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x5000000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1266.740534][T21947] autofs4:pid:21947:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189373) [ 1266.748312][T21947] autofs4:pid:21947:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:06 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="10002dbd7000fd0000080003000000000000", @ANYRES32=r1, @ANYBLOB="0c009900ca0000006b0000000800a000010000000800220112010000080022019c010000050018011c0000000800a0000400000008009f000600000008009f0003000000050018010e000000050018011c00000008005700040000000800570068000000"], 0x80}, 0x1, 0x0, 0x0, 0x24040080}, 0x8d0) 00:21:06 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) 00:21:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000180)=""/6, 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0xff, 0x6, @random="a4f49dcd27a1"}, 0x14) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x2, r5, 0x4}, 0x10, &(0x7f00000000c0), 0xa21739fe174f830b, 0x0, 0x0, 0x20000054}, 0x48005) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x6000000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x1, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:06 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:06 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (fail_nth: 1) 00:21:06 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) (async) 00:21:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2, 0x0, 0x0, [0xffff, 0x9331]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x7000000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) [ 1266.876488][T21968] FAULT_INJECTION: forcing a failure. [ 1266.876488][T21968] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.895531][T21968] CPU: 0 PID: 21968 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1266.898035][T21968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1266.900629][T21968] Call trace: [ 1266.901442][T21968] dump_backtrace+0x1b8/0x1e4 [ 1266.902653][T21968] show_stack+0x2c/0x44 [ 1266.903703][T21968] dump_stack_lvl+0xd0/0x124 [ 1266.904899][T21968] dump_stack+0x1c/0x28 [ 1266.906009][T21968] should_fail_ex+0x3f8/0x5c4 [ 1266.907258][T21968] __should_failslab+0xc8/0x128 [ 1266.908492][T21968] should_failslab+0x10/0x28 [ 1266.909698][T21968] __kmem_cache_alloc_node+0x80/0x388 [ 1266.911087][T21968] __kmalloc+0xb8/0x1b8 [ 1266.912172][T21968] tomoyo_realpath_from_path+0xc8/0x4cc [ 1266.913639][T21968] tomoyo_path_number_perm+0x1ec/0x6a8 [ 1266.915062][T21968] tomoyo_file_ioctl+0x2c/0x3c [ 1266.916341][T21968] security_file_ioctl+0x80/0xbc [ 1266.917602][T21968] __arm64_sys_ioctl+0xa8/0x1c8 00:21:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000180)=""/6, 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0xff, 0x6, @random="a4f49dcd27a1"}, 0x14) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x2, r5, 0x4}, 0x10, &(0x7f00000000c0), 0xa21739fe174f830b, 0x0, 0x0, 0x20000054}, 0x48005) [ 1266.918869][T21968] invoke_syscall+0x98/0x2c0 [ 1266.920036][T21968] el0_svc_common+0x138/0x258 [ 1266.921248][T21968] do_el0_svc+0x64/0x198 [ 1266.922412][T21968] el0_svc+0x4c/0x15c [ 1266.923506][T21968] el0t_64_sync_handler+0x84/0xf0 [ 1266.924886][T21968] el0t_64_sync+0x190/0x194 00:21:06 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043209000000040000000000"], 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x22, 0x1, 0x5e, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) socket$phonet(0x23, 0x2, 0x1) 00:21:06 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x541b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2, 0x0, 0x0, [0xffff]}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2}, {0x80000000, 0x0, 0x7, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) [ 1266.963927][T21968] ERROR: Out of memory at tomoyo_realpath_from_path. 00:21:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x9000000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000180)=""/6, 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0xff, 0x6, @random="a4f49dcd27a1"}, 0x14) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (fail_nth: 2) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x5421, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2}, {0x80000000, 0x0, 0x0, [0x400, 0xffff0001]}, 0x2, [0x1, 0x101]}) 00:21:07 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043209000000040000000000"], 0xc) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043209000000040000000000"], 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x22, 0x1, 0x5e, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) socket$phonet(0x23, 0x2, 0x1) 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0xe000000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1267.064327][T21996] FAULT_INJECTION: forcing a failure. [ 1267.064327][T21996] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.067607][T21996] CPU: 0 PID: 21996 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1267.070259][T21996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1267.072904][T21996] Call trace: [ 1267.073788][T21996] dump_backtrace+0x1b8/0x1e4 [ 1267.075001][T21996] show_stack+0x2c/0x44 [ 1267.076084][T21996] dump_stack_lvl+0xd0/0x124 [ 1267.077257][T21996] dump_stack+0x1c/0x28 [ 1267.078347][T21996] should_fail_ex+0x3f8/0x5c4 [ 1267.079625][T21996] __should_failslab+0xc8/0x128 [ 1267.080904][T21996] should_failslab+0x10/0x28 [ 1267.082056][T21996] __kmem_cache_alloc_node+0x80/0x388 [ 1267.083467][T21996] __kmalloc+0xb8/0x1b8 [ 1267.084522][T21996] tomoyo_encode+0x270/0x4b0 [ 1267.085721][T21996] tomoyo_realpath_from_path+0x478/0x4cc [ 1267.087193][T21996] tomoyo_path_number_perm+0x1ec/0x6a8 [ 1267.088669][T21996] tomoyo_file_ioctl+0x2c/0x3c [ 1267.089904][T21996] security_file_ioctl+0x80/0xbc [ 1267.091193][T21996] __arm64_sys_ioctl+0xa8/0x1c8 [ 1267.092544][T21996] invoke_syscall+0x98/0x2c0 [ 1267.093741][T21996] el0_svc_common+0x138/0x258 [ 1267.094969][T21996] do_el0_svc+0x64/0x198 [ 1267.096127][T21996] el0_svc+0x4c/0x15c [ 1267.097158][T21996] el0t_64_sync_handler+0x84/0xf0 [ 1267.098503][T21996] el0t_64_sync+0x190/0x194 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x40000000, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x5450, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2}, {0x80000000, 0x0, 0x0, [0x400]}, 0x2, [0x1, 0x101]}) 00:21:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000180)=""/6, 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0xff, 0x6, @random="a4f49dcd27a1"}, 0x14) 00:21:07 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=r0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043209000000040000000000"], 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x22, 0x1, 0x5e, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) socket$phonet(0x23, 0x2, 0x1) [ 1267.129207][T21996] ERROR: Out of memory at tomoyo_realpath_from_path. 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (fail_nth: 3) 00:21:07 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2}, {}, 0x2, [0x1, 0x101]}) 00:21:07 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2}, {}, 0x0, [0x1, 0x101]}) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x5451, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2}, {}, 0x0, [0x1]}) 00:21:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x97bb679c, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1267.229716][T22020] FAULT_INJECTION: forcing a failure. [ 1267.229716][T22020] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:21:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x7f}}}}, 0x9) [ 1267.243465][T22020] CPU: 1 PID: 22020 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1267.246047][T22020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1267.248593][T22020] Call trace: [ 1267.249411][T22020] dump_backtrace+0x1b8/0x1e4 [ 1267.250593][T22020] show_stack+0x2c/0x44 [ 1267.251702][T22020] dump_stack_lvl+0xd0/0x124 [ 1267.252951][T22020] dump_stack+0x1c/0x28 [ 1267.254051][T22020] should_fail_ex+0x3f8/0x5c4 [ 1267.255294][T22020] should_fail+0x14/0x24 [ 1267.256389][T22020] should_fail_usercopy+0x20/0x30 [ 1267.257755][T22020] simple_read_from_buffer+0xd4/0x248 [ 1267.259100][T22020] proc_fail_nth_read+0x198/0x234 [ 1267.260416][T22020] vfs_read+0x284/0x8ac [ 1267.261561][T22020] ksys_read+0x15c/0x26c [ 1267.262700][T22020] __arm64_sys_read+0x7c/0x90 [ 1267.263949][T22020] invoke_syscall+0x98/0x2c0 [ 1267.265172][T22020] el0_svc_common+0x138/0x258 [ 1267.266391][T22020] do_el0_svc+0x64/0x198 [ 1267.267456][T22020] el0_svc+0x4c/0x15c [ 1267.268485][T22020] el0t_64_sync_handler+0x84/0xf0 [ 1267.269801][T22020] el0t_64_sync+0x190/0x194 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x5452, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000240)={{r2}}) 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x9c67bb97, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x7f}}}}, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x7f}}}}, 0x9) (async) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x5460, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x7f}}}}, 0x9) 00:21:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x2, 0x0) 00:21:07 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x7f}}}}, 0x9) 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0xf0ffffff, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x7f}}}}, 0x9) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x8933, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x10, 0x0) 00:21:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) 00:21:07 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043209000000d20d00000000"], 0xc) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x400448c9, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x7f}}}}, 0x9) 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0xffffff7f, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x541b, 0x0) 00:21:07 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043209000000d20d00000000"], 0xc) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x400448dd, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) 00:21:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) 00:21:07 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043209000000d20d00000000"], 0xc) 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x5421, 0x0) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) connect$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1}, 0x14) 00:21:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) 00:21:07 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x71}, @l2cap_cid_signaling={{0x6d}, [@l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf1, 0xf17f}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x3960}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x3ff, 0x2, 0x0, 0xff}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x7}}, @l2cap_move_chan_rsp={{0xf, 0xb8, 0x4}, {0x6, 0xffff}}, @l2cap_conf_rsp={{0x5, 0x80, 0x41}, {0x20, 0x6, 0x1, [@l2cap_conf_ews={0x7, 0x2, 0x100}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0x35, 0x1, 0x2, 0x8001, 0x80, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x3f, 0x1, 0x4, 0x1}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x24, 0x8, 0x4, 0xffff, 0x3}}, @l2cap_conf_flushto={0x2, 0x2, 0x8}]}}]}}, 0x76) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000100)={0x764, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x718, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x20}, @broadcast, @device_b, @device_a, {0x7, 0x4}}, {0x7, 0x1, 0x0, 0x0, 0x3}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x30af}, @broadcast, @device_b, @random="431613f1f53c", {0x8, 0x2}}, {0xf, 0x0, 0x3, 0x1, 0x1}}}, @random="013dfec9bc10a5ceb8d9716495faf397fa8535beb810b9269e41fa97af8b1ce251d38bcfc94a0b88c2407f4eb1999ebeff23dce930f18513603af1d423ee81c7cc9ca1566c973b6b7ba485955df66ed3761b18c72b2f9384385461626624db64c1ff27d66213a663c7b7afb2f9cd3b6a0dc6207fa80a1a7bb9d47861bc9e801663f69bdfa9f4305c790fde49fa6159fbdde948bd6bce85cfd27d5fe09bd978c3dfd5d0c822c9585531d266106d87458c9008389609ae0b76025c78cd0d829f7cc1a7bcdb44396adaf15b9866e5f53f3052a16909c44fb16314156f52b54d560de32701cd0e7a8654ad8afe611ac89ffd7644b221fad7fbfa522da8d6a6f24eb057522d6ecba7a48bd23ae8cdb81dc45396777e8719ed9b865259b8c0229c650671a7d67485cece2202e693988b4697b18601babd16ba227f881a3ba2cec1e29f362bd8e03dbde539a61c87290a7d919c1f5849a0fcbf15855c4fa6239c61cfe94099401f327d751dbc188ba58cb299cbbeb5ab07900e63488f20b5e57e7936bed7a46fa585741f8c2eb9119f9bc15c4b8db1ee5b93d545b9c90570d5e3037f35c426ff755a3707164d3f8c0381022c555e05e0c98b2497ff4b189f8998f4c09e9fb3eede99f9ea620b9d5c30022c14743f5034ec1676ef7a44b64a1773048b3384381f9bb2795b9e6170f523543cf2aa96c4d1b0f2c595459eadeb4f97e3d70b108eb9984735421c86d73a4e46dc4f970c854dad189652dd8545295e00cd9b22965ea89567acefaf6532326637353cdeaef7261cb76fe1113816d788d4bf4d37bae5adca17f1e30bb8944bfc2190fe25b100f7cfbb2737f09589105731cb7b93d91e2106b0a18ecd5fcdb43b1d8ff9c96e7658f930eca4145eb7b03a30a995ea9e498475519b9725880f6e677f1c3835e1b38d9f960b8880c61f8d358e1c8929e72e085bf3ce41c05e4f9bcecb51d6f551dcee2ba5eebc406aaea2f3285c67ee5586db43dc31885fb7faca9956d45fce64bf3297e9b474a43684ff18cf8243776ada30dee146d2688a22004479cd00691ccdf58a6937482d1cc15091fccd00d280678df4794a1ac61705bd59d6dc6f68134824c34752ab4478fea447d0e558103ec86092e6837044381dab0f533ffdeec3ff686de5181004c5d585e8b38e431f05b0c535963dc38f9b3777f15173bcc37b6d06a8a212ec3538606af1ef70405578de6fc3775fb20a2b7e57c874f51f120b58a53af44c28e127178ed7d883956b7144ebddc7fe0ea6faf14f3b80c75a1bec58079b2f741a1f40c3b13c2862bc6f60ba94cb5d7c442e9d4e4998b220b8a88131cf041b08549d100472372f9b3a178f91fc20a91a0b7858f5532ea6c12726a3018d6c524079177f6cdf48138d923672d465b80c0840a35d48249ada2ccdd0295936c3b426009c6efbf7e348f902c48f1c4350c2714d966da9c4d19428235fd761301818114a66deb78e554e977b0e1b0127bebc31b4b7e2d42fa774e45a976173b57709d5feb5fb83351e14df728226e29a1ae740b77174baf8da24a638d9e3d761b7fa2c83613c87860fd4287ecc5234064edde42f730c72afb1cd3e074ddbc68b8859c93c374f54dd57951017b671b3ed0ce7e3fb8e14597ec50c146144639760a24ca90f46bdd17a23faceff15019a231e8c137fd2b38bc0d3cd27886d6f58894ff2956ddab7ada67a642eb392c6a33780a6a9d6b46bc5408fc62864a88ee78b2c0c4d2e6a30082f84d83babc6702776de07e9660226edd35f654cc374ea0074fcc3948907c2eb7db2b66356b5ff31b42992f6e75eec09c9c3351fef54a07e47e83e7eb1b7440f9ced2efb1679e5b3a40d49a0700160a951e529ad65dfce4d99107231d5eb3be1edff2ab85cc472915196bedb3e89d7fcc8afec14488f4f1c6d04512f6dd332c54cf4a72578b94071cbda0215f29a66f9e05dec4390911577f74da08928a871b1ba7f96264f46163c59710cca0e7555fb64319793fedbb5d920d325f7e8c06499413153503467f528cdf7e00f38ab7e34c3cb97b6927a820742c5317949b7331d7cb0430e7d004bdf1b00afa49f98590f761a708441beea6bde2bcccf8afdcbf99c18135c94d5ed79c4522a1bf3295b7f43b04c3257981e77c2a6532208a6c6d82afcc121bb242e7ecbd17808c326560b8330d26f0bd8e6cf36cf32e694f8625e41f85e70367ee69c9ff0034af709ad973e42ae5522b97a721ff64dc3b8ef6e40f16473bbe4d8b33306a519b3d433335f7bc72bf888851ea85506bdbe78ac84cedf10a8eed8d8ab926c2f769ec6db7cf797e01dca844f1a7189e3eb4c7bd152f54e2ef46752ab933c35b47f55400a7ca1582f64f1beb0b9ccb362470a7f0af98a1a7810091525be50f30713dd685d7b5c7366d78c29183e56e0c72363717432044498f41683e4af88551fa961ec562ae2ce4aee4b5b58c7d76775caebdcefed36"}}]}, 0x764}, 0x1, 0x0, 0x0, 0x4880}, 0xc0) r1 = fsopen(&(0x7f0000000140)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000900)='wlan1\x00', &(0x7f0000000940)='./file0\x00', 0xffffffffffffff9c) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x5450, 0x0) 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x40049409, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) 00:21:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) 00:21:07 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x71}, @l2cap_cid_signaling={{0x6d}, [@l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf1, 0xf17f}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x3960}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x3ff, 0x2, 0x0, 0xff}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x7}}, @l2cap_move_chan_rsp={{0xf, 0xb8, 0x4}, {0x6, 0xffff}}, @l2cap_conf_rsp={{0x5, 0x80, 0x41}, {0x20, 0x6, 0x1, [@l2cap_conf_ews={0x7, 0x2, 0x100}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0x35, 0x1, 0x2, 0x8001, 0x80, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x3f, 0x1, 0x4, 0x1}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x24, 0x8, 0x4, 0xffff, 0x3}}, @l2cap_conf_flushto={0x2, 0x2, 0x8}]}}]}}, 0x76) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x71}, @l2cap_cid_signaling={{0x6d}, [@l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf1, 0xf17f}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x3960}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x3ff, 0x2, 0x0, 0xff}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x7}}, @l2cap_move_chan_rsp={{0xf, 0xb8, 0x4}, {0x6, 0xffff}}, @l2cap_conf_rsp={{0x5, 0x80, 0x41}, {0x20, 0x6, 0x1, [@l2cap_conf_ews={0x7, 0x2, 0x100}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0x35, 0x1, 0x2, 0x8001, 0x80, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x3f, 0x1, 0x4, 0x1}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x24, 0x8, 0x4, 0xffff, 0x3}}, @l2cap_conf_flushto={0x2, 0x2, 0x8}]}}]}}, 0x76) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000100)={0x764, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x718, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x20}, @broadcast, @device_b, @device_a, {0x7, 0x4}}, {0x7, 0x1, 0x0, 0x0, 0x3}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x30af}, @broadcast, @device_b, @random="431613f1f53c", {0x8, 0x2}}, {0xf, 0x0, 0x3, 0x1, 0x1}}}, @random="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"}}]}, 0x764}, 0x1, 0x0, 0x0, 0x4880}, 0xc0) r1 = fsopen(&(0x7f0000000140)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000900)='wlan1\x00', &(0x7f0000000940)='./file0\x00', 0xffffffffffffff9c) 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x40086602, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x5451, 0x0) 00:21:07 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x7f}}}}, 0x9) 00:21:07 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x71}, @l2cap_cid_signaling={{0x6d}, [@l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf1, 0xf17f}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x3960}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x3ff, 0x2, 0x0, 0xff}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x7}}, @l2cap_move_chan_rsp={{0xf, 0xb8, 0x4}, {0x6, 0xffff}}, @l2cap_conf_rsp={{0x5, 0x80, 0x41}, {0x20, 0x6, 0x1, [@l2cap_conf_ews={0x7, 0x2, 0x100}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0x35, 0x1, 0x2, 0x8001, 0x80, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x3f, 0x1, 0x4, 0x1}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x24, 0x8, 0x4, 0xffff, 0x3}}, @l2cap_conf_flushto={0x2, 0x2, 0x8}]}}]}}, 0x76) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000100)={0x764, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x718, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x20}, @broadcast, @device_b, @device_a, {0x7, 0x4}}, {0x7, 0x1, 0x0, 0x0, 0x3}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x30af}, @broadcast, @device_b, @random="431613f1f53c", {0x8, 0x2}}, {0xf, 0x0, 0x3, 0x1, 0x1}}}, @random="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"}}]}, 0x764}, 0x1, 0x0, 0x0, 0x4880}, 0xc0) r1 = fsopen(&(0x7f0000000140)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000900)='wlan1\x00', &(0x7f0000000940)='./file0\x00', 0xffffffffffffff9c) 00:21:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/7, 0x102c000, 0x1000, 0x3}, 0x20) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x40186366, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x5452, 0x0) 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x140, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:07 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x7f}}}}, 0x9) 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0xec0, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x5460, 0x0) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x401c5820, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0412f84b47d77766ec214b35e6e37a7f000000b814c1af33000000f09c2ceef36d1ed50114f0b24730359173aefd0596157e5203055e7563f33d66a19d356752fd4e55a780c2728243b9c72a6acb55fac4e41d00933663a2bc2c7ad91cdf06ee3a679b4ad02369fe352e9fc646bfb9d7f7157eb94f816f341dd4493ddb9e7e6ff7b367c0b92fbdee91e1175d1f940dfbd4223da2fb7b671e6800000000000000"], 0x8) 00:21:07 executing program 5: syz_emit_vhci(0x0, 0x0) [ 1267.878827][ T5985] Bluetooth: hci5: unexpected event 0x12 length: 5 < 8 00:21:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) 00:21:07 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0412f84b47d77766ec214b35e6e37a7f000000b814c1af33000000f09c2ceef36d1ed50114f0b24730359173aefd0596157e5203055e7563f33d66a19d356752fd4e55a780c2728243b9c72a6acb55fac4e41d00933663a2bc2c7ad91cdf06ee3a679b4ad02369fe352e9fc646bfb9d7f7157eb94f816f341dd4493ddb9e7e6ff7b367c0b92fbdee91e1175d1f940dfbd4223da2fb7b671e6800000000000000"], 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0412f84b47d77766ec214b35e6e37a7f000000b814c1af33000000f09c2ceef36d1ed50114f0b24730359173aefd0596157e5203055e7563f33d66a19d356752fd4e55a780c2728243b9c72a6acb55fac4e41d00933663a2bc2c7ad91cdf06ee3a679b4ad02369fe352e9fc646bfb9d7f7157eb94f816f341dd4493ddb9e7e6ff7b367c0b92fbdee91e1175d1f940dfbd4223da2fb7b671e6800000000000000"], 0x8) (async) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x8933, 0x0) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x4020940d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:07 executing program 5: syz_emit_vhci(0x0, 0x0) 00:21:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x33fe0, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) [ 1267.966717][ T5985] Bluetooth: hci5: unexpected event 0x12 length: 5 < 8 [ 1267.968620][ T5985] Bluetooth: hci5: unexpected event 0x12 length: 5 < 8 00:21:07 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0412f84b47d77766ec214b35e6e37a7f000000b814c1af33000000f09c2ceef36d1ed50114f0b24730359173aefd0596157e5203055e7563f33d66a19d356752fd4e55a780c2728243b9c72a6acb55fac4e41d00933663a2bc2c7ad91cdf06ee3a679b4ad02369fe352e9fc646bfb9d7f7157eb94f816f341dd4493ddb9e7e6ff7b367c0b92fbdee91e1175d1f940dfbd4223da2fb7b671e6800000000000000"], 0x8) 00:21:07 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x400448c9, 0x0) 00:21:07 executing program 5: syz_emit_vhci(0x0, 0x0) 00:21:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x80086301, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) [ 1268.007922][ T5991] Bluetooth: hci5: unexpected event 0x12 length: 5 < 8 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0xfffffdef, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0x0, 0x7f}}}}, 0x9) 00:21:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) 00:21:08 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x40000000000002e4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x2, 0x400}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x400448dd, 0x0) 00:21:08 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0x0, 0x7f}}}}, 0x9) 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x2, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x80086601, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x40000000000002e4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x40000000000002e4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x2, 0x400}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x400454ca, 0x0) 00:21:08 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0x0, 0x7f}}}}, 0x9) 00:21:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00'}) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x801c581f, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x5, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x40000000000002e4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x2, 0x400}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) 00:21:08 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9}}}}, 0x9) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x40049409, 0x0) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0045878, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x6, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00'}) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) 00:21:08 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xe5}, "9cf87a902084b7f5c69c02da65c686f01ad3d42e59836adc00455936a35e5e3d04142586e572ea0688a385aff72dd2f57c6c2d582cf849e900eb7917d14bf6726cb146e69eafe057ab46641765865bb0428a7f7f7f2d9cb9760026b1e9c33c520746ad3c7c95016729d4d6afbcda8c1b32639e84cf9f7f681f3a5a62d8c11e91393c03667a60379d292ec6049e7babbba53a018dc9c31ef10ff3c39812f7ff68a7e763c318834b37a750b58dc3c3b730a04303c51f87edd06e3f21bec77cf63b5a40214f7515720b8d9e96950c01fa53ea6661530add8faeb51dbc44d674e654e1e7836655"}}, 0xe8) clock_gettime(0x0, &(0x7f0000000000)) 00:21:08 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0x0, 0x7f}}}}, 0x9) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x40086602, 0x0) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0045878, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x7, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0x0, 0x7f}}}}, 0x9) 00:21:08 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xe5}, "9cf87a902084b7f5c69c02da65c686f01ad3d42e59836adc00455936a35e5e3d04142586e572ea0688a385aff72dd2f57c6c2d582cf849e900eb7917d14bf6726cb146e69eafe057ab46641765865bb0428a7f7f7f2d9cb9760026b1e9c33c520746ad3c7c95016729d4d6afbcda8c1b32639e84cf9f7f681f3a5a62d8c11e91393c03667a60379d292ec6049e7babbba53a018dc9c31ef10ff3c39812f7ff68a7e763c318834b37a750b58dc3c3b730a04303c51f87edd06e3f21bec77cf63b5a40214f7515720b8d9e96950c01fa53ea6661530add8faeb51dbc44d674e654e1e7836655"}}, 0xe8) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000000)) (rerun: 64) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018930a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x40186366, 0x0) 00:21:08 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x8, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xe5}, "9cf87a902084b7f5c69c02da65c686f01ad3d42e59836adc00455936a35e5e3d04142586e572ea0688a385aff72dd2f57c6c2d582cf849e900eb7917d14bf6726cb146e69eafe057ab46641765865bb0428a7f7f7f2d9cb9760026b1e9c33c520746ad3c7c95016729d4d6afbcda8c1b32639e84cf9f7f681f3a5a62d8c11e91393c03667a60379d292ec6049e7babbba53a018dc9c31ef10ff3c39812f7ff68a7e763c318834b37a750b58dc3c3b730a04303c51f87edd06e3f21bec77cf63b5a40214f7515720b8d9e96950c01fa53ea6661530add8faeb51dbc44d674e654e1e7836655"}}, 0xe8) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000000)) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x401c5820, 0x0) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189323, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0x0, 0x7f}}}}, 0x9) 00:21:08 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x4020940d, 0x0) 00:21:08 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189325, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 5: 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x500, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044902, 0x0) 00:21:08 executing program 2: syz_emit_vhci(0x0, 0xc) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018932a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, 0x0) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018932b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 5: 00:21:08 executing program 2: syz_emit_vhci(0x0, 0xc) 00:21:08 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x2, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 5: 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018932d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 2: syz_emit_vhci(0x0, 0xc) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80086301, 0x0) 00:21:08 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000010000000"], 0xc) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) getrusage(0x0, &(0x7f0000000140)) 00:21:08 executing program 5: syz_emit_vhci(0x0, 0x0) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018932e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x3, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80086601, 0x0) 00:21:08 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0xc) 00:21:08 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000010000000"], 0xc) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) getrusage(0x0, &(0x7f0000000140)) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018932f, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 5: syz_emit_vhci(0x0, 0x0) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x801c581f, 0x0) 00:21:08 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0xc) 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000010000000"], 0xc) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async) getrusage(0x0, &(0x7f0000000140)) 00:21:08 executing program 5: syz_emit_vhci(0x0, 0x0) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189330, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0xc) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0xc0045878, 0x0) 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x5, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000080)) 00:21:08 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xc) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018934c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term}}, 0x9) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0xc0045878, 0x0) 00:21:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x6, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:08 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000080)) 00:21:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189358, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:08 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:08 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xc) 00:21:08 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0xc0189436, 0x0) 00:21:09 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000080)) 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018935c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x7, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:09 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0xc020660b, 0x0) 00:21:09 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04320900000000000000000b"], 0xc) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xc) 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189363, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x9, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:09 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x492040, 0x0) 00:21:09 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04320900000000000000000b"], 0xc) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04320900000000000000000b"], 0xc) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) 00:21:09 executing program 5: 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189364, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:09 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) (async) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x492040, 0x0) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043209003de628aaceefc82116ba635f5ae5475155cf862333dfc4218e668dedd3d1a46bcac4ebc58479d50df1f2749903c9ff790c4db4e7c7fae2c139ec94ec4cdb0f48c52f56f50a9634b038c824c4e6cde92fe4b80002879fa7a6e953e438ebf81cebf462996cd0fb4636270ac0943cddf04e9cf834ab8c417fe3786db6a239f4ad13f25c9f8501000000250f88351f79e19babab3a92f70c9cfb5f1146f4f82880d4490784a131"], 0xc) 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0xe, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04320900000000000000000b"], 0xc) (async) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) 00:21:09 executing program 5: 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189368, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xc) 00:21:09 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x492040, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) (async) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x492040, 0x0) (async) 00:21:09 executing program 5: 00:21:09 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189369, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x300, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xc) 00:21:09 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) 00:21:09 executing program 5: syz_emit_vhci(0x0, 0x0) 00:21:09 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x416842, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018936c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x500, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xc) 00:21:09 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) 00:21:09 executing program 5: syz_emit_vhci(0x0, 0x0) 00:21:09 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x416842, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x600, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043209003de628aaceefc82116ba635f5ae5475155cf862333dfc4218e668dedd3d1a46bcac4ebc58479d50df1f2749903c9ff790c4db4e7c7fae2c139ec94ec4cdb0f48c52f56f50a9634b038c824c4e6cde92fe4"], 0xc) 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018936f, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:09 executing program 5: syz_emit_vhci(0x0, 0x0) 00:21:09 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0400"/12], 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="6208ffff000000002e2f66696c653000"]) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x700, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043209003de628aaceefc82116ba635f5ae5475155cf862333dfc4218e668dedd3d1a46bcac4ebc58479d50df1f2749903c9ff790c4db4e7c7fae2c139ec94ec4cdb0f48c52f56f50a9634b038c824c4e6cde92fe4"], 0xc) 00:21:09 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x416842, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) (async, rerun: 64) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) (async, rerun: 64) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189370, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) [ 1269.520258][ T5991] Bluetooth: hci5: Received unexpected HCI Event 0x00 00:21:09 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0400"/12], 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="6208ffff000000002e2f66696c653000"]) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) [ 1269.576159][ T5991] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1269.581179][ T5991] Bluetooth: hci5: Received unexpected HCI Event 0x00 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x900, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0400"/12], 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="6208ffff000000002e2f66696c653000"]) (async, rerun: 32) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) (rerun: 32) 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) [ 1269.611101][T22446] autofs4:pid:22446:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189371) [ 1269.614694][T22446] autofs4:pid:22446:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) [ 1269.628699][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) [ 1269.638401][ T5991] Bluetooth: hci0: ACL packet for unknown connection handle 0 00:21:09 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)=0x1) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x0, 0x6, 0xaaf, 0x3ff}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x2, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r4, &(0x7f0000000740), 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000001c0)=r4, 0x1) recvfrom$packet(r1, &(0x7f0000000040)=""/177, 0xb1, 0x100, &(0x7f0000000100)={0x11, 0xf7, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) [ 1269.655619][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1269.663750][T22456] autofs4:pid:22456:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189374) [ 1269.668167][T22456] autofs4:pid:22456:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1269.673373][ T5991] Bluetooth: hci5: Received unexpected HCI Event 0x00 00:21:09 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0xc0040, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="00fbf3741a6727cca6d0062134da9bb0938fe81af2c89abb24c158c1f93c577a0072a4fdf76a555d673e9538534a76a55c9bbdcece03a38c38eb84b6c6a11487396185244a2cf7e2d8ff5088ff2cc86328c1b2004034e22bf953f58e3df896e35afd251be325edfa3a5b45dc2ab40445820cd5442abf7cf2152e721bfad0a1efed316f93f294c9dc07d393dbad048c42e53b20e6444112d164c5d41c16d366"], 0xc) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0xe00, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) [ 1269.722037][ T5991] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1269.727996][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:09 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0xc0040, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="00fbf3741a6727cca6d0062134da9bb0938fe81af2c89abb24c158c1f93c577a0072a4fdf76a555d673e9538534a76a55c9bbdcece03a38c38eb84b6c6a11487396185244a2cf7e2d8ff5088ff2cc86328c1b2004034e22bf953f58e3df896e35afd251be325edfa3a5b45dc2ab40445820cd5442abf7cf2152e721bfad0a1efed316f93f294c9dc07d393dbad048c42e53b20e6444112d164c5d41c16d366"], 0xc) [ 1269.742032][T22469] autofs4:pid:22469:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189375) [ 1269.749902][ T5991] Bluetooth: Wrong link type (-22) 00:21:09 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)=0x1) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x0, 0x6, 0xaaf, 0x3ff}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x2, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r4, &(0x7f0000000740), 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000001c0)=r4, 0x1) recvfrom$packet(r1, &(0x7f0000000040)=""/177, 0xb1, 0x100, &(0x7f0000000100)={0x11, 0xf7, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) [ 1269.756324][T22469] autofs4:pid:22469:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x4000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043209003de628aaceefc82116ba635f5ae5475155cf862333dfc4218e668dedd3d1a46bcac4ebc58479d5"], 0xc) [ 1269.797369][ T5991] Bluetooth: Wrong link type (-22) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) [ 1269.824205][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x30000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) [ 1269.860966][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 00:21:09 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0xc0040, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="00fbf3741a6727cca6d0062134da9bb0938fe81af2c89abb24c158c1f93c577a0072a4fdf76a555d673e9538534a76a55c9bbdcece03a38c38eb84b6c6a11487396185244a2cf7e2d8ff5088ff2cc86328c1b2004034e22bf953f58e3df896e35afd251be325edfa3a5b45dc2ab40445820cd5442abf7cf2152e721bfad0a1efed316f93f294c9dc07d393dbad048c42e53b20e6444112d164c5d41c16d366"], 0xc) [ 1269.878740][T22492] autofs4:pid:22492:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc0189378) [ 1269.882408][T22492] autofs4:pid:22492:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189378) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) 00:21:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) [ 1269.896888][ T5991] Bluetooth: Wrong link type (-22) [ 1269.898326][ T5991] Bluetooth: hci0: link tx timeout [ 1269.901173][ T5991] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa 00:21:09 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (async) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)=0x1) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x0, 0x6, 0xaaf, 0x3ff}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x2, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000400)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r4, &(0x7f0000000740), 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000001c0)=r4, 0x1) (async) recvfrom$packet(r1, &(0x7f0000000040)=""/177, 0xb1, 0x100, &(0x7f0000000100)={0x11, 0xf7, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x18}, {0xfc01, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:09 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x43, 0xc9, 0xc9, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x8}}}, 0xd) [ 1269.933518][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x18}, {0x0, 0x7, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x34000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:09 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043209003de628aaceefc82116ba635f5ae5475155cf"], 0xc) [ 1269.958801][T22506] autofs4:pid:22506:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc018937a) 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x18}, {0x0, 0x0, 0x3f2, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:09 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x43, 0xc9, 0xc9, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x8}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x8}}}, 0xd) 00:21:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x18}, {0x0, 0x0, 0x0, 0x2, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) [ 1269.998737][T22506] autofs4:pid:22506:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937a) 00:21:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:10 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x18}, {0x0, 0x0, 0x0, 0x0, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6, 0x1]}}}}, 0x25) 00:21:10 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) [ 1270.066499][T22525] autofs4:pid:22525:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc018937e) 00:21:10 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000040)) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0xffffffffffffffff) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x400300, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:10 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x43, 0xc9, 0xc9, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x8}}}, 0xd) 00:21:10 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x16}, {0x0, 0x0, 0x0, 0x0, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100, 0x6]}}}}, 0x23) [ 1270.086520][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 00:21:10 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) [ 1270.113505][T22525] autofs4:pid:22525:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x1000000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:10 executing program 4: ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x1, 0x6}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) 00:21:10 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x14}, {0x0, 0x0, 0x0, 0x0, [0x261, 0x17, 0x7, 0x1, 0x7f, 0x100]}}}}, 0x21) 00:21:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:10 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x0, [0x261, 0x17, 0x7, 0x1, 0x7f]}}}}, 0x1f) 00:21:10 executing program 4: ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x1, 0x6}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x1, 0x6}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) (async) [ 1270.166956][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 00:21:10 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000040)) (async) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0xffffffffffffffff) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x2000000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:10 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) 00:21:10 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000040)) (async) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0xffffffffffffffff) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x3000000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:10 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, [0x261, 0x17, 0x7, 0x1]}}}}, 0x1d) 00:21:10 executing program 4: ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x1, 0x6}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) 00:21:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) [ 1270.259244][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 00:21:10 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043209003de628aaceefc821"], 0xc) 00:21:10 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0xc00) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}, {}], 0x0, 0x0, '\x00', 0x1, 0x2}) 00:21:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="016376eab300fcdbdf251c090000000000000000000000000000080003006163bf9ececc85e6729feb848f00fc6fd09b", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="016376eab300fcdbdf251c090000000000000000000000000000080003006163bf9ececc85e6729feb848f00fc6fd09b", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r8) sendmsg$NFC_CMD_ACTIVATE_TARGET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x80) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x58}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="00000000deffffffffff0100"], 0xc) 00:21:10 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="0432"], 0xc) 00:21:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x4000000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:10 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x0, [0x261, 0x17, 0x7]}}}}, 0x1b) [ 1270.357433][T22579] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:10 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xc) [ 1270.375737][T22586] autofs4:pid:22586:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3.4097), cmd(0xc0189373) 00:21:10 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0xc00) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}, {}], 0x0, 0x0, '\x00', 0x1, 0x2}) [ 1270.380623][T22579] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1270.385726][T22586] autofs4:pid:22586:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="016376eab300fcdbdf251c090000000000000000000000000000080003006163bf9ececc85e6729feb848f00fc6fd09b", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r4) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="016376eab300fcdbdf251c090000000000000000000000000000080003006163bf9ececc85e6729feb848f00fc6fd09b", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r8) sendmsg$NFC_CMD_ACTIVATE_TARGET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x80) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x58}}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="00000000deffffffffff0100"], 0xc) 00:21:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="040000000110000018"]) 00:21:10 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, [0x261, 0x17]}}}}, 0x19) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x5000000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:10 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xc) [ 1270.454266][T22600] autofs4:pid:22600:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4.4097), cmd(0xc0189373) [ 1270.461176][T22594] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1270.467442][T22600] autofs4:pid:22600:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:10 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0xc00) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}, {}], 0x0, 0x0, '\x00', 0x1, 0x2}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0xc00) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}, {}], 0x0, 0x0, '\x00', 0x1, 0x2}) (async) 00:21:10 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xc) 00:21:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000110000018"]) 00:21:10 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, [0x261]}}}}, 0x17) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x6000000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="016376eab300fcdbdf251c090000000000000000000000000000080003006163bf9ececc85e6729feb848f00fc6fd09b", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r4) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="016376eab300fcdbdf251c090000000000000000000000000000080003006163bf9ececc85e6729feb848f00fc6fd09b", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r8) sendmsg$NFC_CMD_ACTIVATE_TARGET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x80) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x58}}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="00000000deffffffffff0100"], 0xc) 00:21:10 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) 00:21:10 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x1, 0x1, 0x101, &(0x7f0000000040)=[0x0], 0x1}, 0x20) fsmount(r2, 0x0, 0x0) [ 1270.549546][T22617] autofs4:pid:22617:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(5.4097), cmd(0xc0189373) [ 1270.553313][T22617] autofs4:pid:22617:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x7000000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1270.583533][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 00:21:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000110000018"]) 00:21:10 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) 00:21:10 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) [ 1270.628183][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1270.635854][T22634] autofs4:pid:22634:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(7.4097), cmd(0xc0189373) 00:21:10 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0xc) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf251f0000000a0001007770616e330000000a0001007770616e310000000a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="0a0001007770616e30000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) rt_sigreturn() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044840) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032bbd7000fedbdf250f00000008000100", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20004851}, 0x20004054) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x9000000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:10 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xc) 00:21:10 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x1, 0x1, 0x101, &(0x7f0000000040)=[0x0], 0x1}, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x1, 0x1, 0x101, &(0x7f0000000040)=[0x0], 0x1}, 0x20) fsmount(r2, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x0) [ 1270.671926][ T5991] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1270.679994][T22634] autofs4:pid:22634:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="080000000110000018"]) 00:21:10 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0xe000000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) [ 1270.732417][T22649] autofs4:pid:22649:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc018937e) [ 1270.740562][T22650] autofs4:pid:22650:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(8.4097), cmd(0xc0189373) 00:21:10 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0) (async) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) (async) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x1, 0x1, 0x101, &(0x7f0000000040)=[0x0], 0x1}, 0x20) (async) fsmount(r2, 0x0, 0x0) [ 1270.753125][T22649] autofs4:pid:22649:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1270.762888][T22650] autofs4:pid:22650:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) [ 1270.762888][T22652] autofs4:pid:22652:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3.4097), cmd(0xc0189373) [ 1270.762910][T22652] autofs4:pid:22652:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000110000018"]) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x40000000, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1270.825887][T22661] autofs4:pid:22661:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc018937e) [ 1270.832785][T22662] autofs4:pid:22662:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(10.4097), cmd(0xc0189373) [ 1270.837149][T22661] autofs4:pid:22661:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1270.843315][T22662] autofs4:pid:22662:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x97bb679c, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000110000018"]) 00:21:10 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0xc) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf251f0000000a0001007770616e330000000a0001007770616e310000000a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="0a0001007770616e30000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) (async) rt_sigreturn() (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044840) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032bbd7000fedbdf250f00000008000100", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20004851}, 0x20004054) 00:21:10 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x48175608bee2bd97, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:10 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) [ 1271.025190][T22672] autofs4:pid:22672:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4097), cmd(0xc018937e) [ 1271.031562][T22673] autofs4:pid:22673:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(24.4097), cmd(0xc0189373) [ 1271.035880][T22670] autofs4:pid:22670:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3.4097), cmd(0xc0189373) [ 1271.038334][T22673] autofs4:pid:22673:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:11 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x48175608bee2bd97, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) [ 1271.049157][T22672] autofs4:pid:22672:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1271.059460][T22670] autofs4:pid:22670:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x9c67bb97, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:11 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="190000000110000018"]) 00:21:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:11 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) 00:21:11 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x48175608bee2bd97, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) [ 1271.124665][T22681] autofs4:pid:22681:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(25.4097), cmd(0xc0189373) [ 1271.131351][T22684] autofs4:pid:22684:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3.4097), cmd(0xc0189373) [ 1271.145650][T22681] autofs4:pid:22681:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) [ 1271.150707][T22684] autofs4:pid:22684:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:11 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0xc) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf251f0000000a0001007770616e330000000a0001007770616e310000000a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="0a0001007770616e30000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) (async) rt_sigreturn() (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044840) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032bbd7000fedbdf250f00000008000100", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20004851}, 0x20004054) 00:21:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0xf0ffffff, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:11 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/carl9170', 0x28800, 0x41) fsmount(r1, 0x1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) 00:21:11 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="240000000110000018"]) [ 1271.272097][T22700] autofs4:pid:22700:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(36.4097), cmd(0xc0189373) [ 1271.276337][T22700] autofs4:pid:22700:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) 00:21:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0xffffff7f, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:11 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/carl9170', 0x28800, 0x41) (rerun: 64) fsmount(r1, 0x1, 0x0) (async) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 00:21:11 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="250000000110000018"]) 00:21:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) [ 1271.351245][T22715] autofs4:pid:22715:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(37.4097), cmd(0xc0189373) [ 1271.366611][T22715] autofs4:pid:22715:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="77dc090000000000000000b9"], 0xc) 00:21:11 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0xfffffff0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:11 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="590000000110000018"]) 00:21:11 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) 00:21:11 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/carl9170', 0x28800, 0x41) fsmount(r1, 0x1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) [ 1271.472962][T22726] autofs4:pid:22726:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(89.4097), cmd(0xc0189373) [ 1271.487255][T22726] autofs4:pid:22726:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:11 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:11 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) 00:21:11 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) eventfd2(0x2, 0x0) 00:21:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:11 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="700000000110000018"]) 00:21:11 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="77dc090000000000000000b9"], 0xc) 00:21:11 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) 00:21:11 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (async) eventfd2(0x2, 0x0) 00:21:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x2, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1271.580446][T22743] autofs4:pid:22743:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(112.4097), cmd(0xc0189373) [ 1271.594361][T22743] autofs4:pid:22743:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:11 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="77dc090000000000000000b9"], 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="77dc090000000000000000b9"], 0xc) (async) 00:21:11 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="000300000110000018"]) 00:21:11 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) 00:21:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x3, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:11 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (async) eventfd2(0x2, 0x0) 00:21:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="d2513417000000c4fe8a7350"], 0xc) 00:21:11 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) [ 1271.681840][T22760] autofs4:pid:22760:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(768.4097), cmd(0xc0189373) 00:21:11 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) [ 1271.700518][T22760] autofs4:pid:22760:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x4, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:11 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="f2ffff7f0110000018"]) 00:21:11 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x6001, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000003180)={'wg0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f00000001c0)=0x5aa, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'caif0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x10a) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000280)=0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000240)=0x4000000) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x6, r4, 0x13}, 0x10) 00:21:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="d2513417000000c4fe8a7350"], 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="d2513417000000c4fe8a7350"], 0xc) (async) 00:21:11 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000110000018"]) 00:21:11 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000110000018"]) [ 1271.770085][T22774] autofs4:pid:22774:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2147483634.4097), cmd(0xc0189373) 00:21:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x5, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1271.780373][T22774] autofs4:pid:22774:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:11 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) 00:21:11 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="f8ffff7f0110000018"]) 00:21:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="d2513417000000c4fe8a7350"], 0xc) 00:21:11 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018937e, 0x0) 00:21:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x6, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:11 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) 00:21:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3}}}, 0x4) [ 1271.866974][T22793] autofs4:pid:22793:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2147483640.4097), cmd(0xc0189373) 00:21:11 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x6001, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000003180)={'wg0\x00', 0x0}) (async) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f00000001c0)=0x5aa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'caif0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x10a) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000280)=0xffffffffffffffff) (async, rerun: 64) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) (async, rerun: 64) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) (async) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000240)=0x4000000) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x6, r4, 0x13}, 0x10) 00:21:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x2, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1271.896153][ T5991] Bluetooth: hci5: hardware error 0x03 00:21:11 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) [ 1271.898942][T22793] autofs4:pid:22793:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x7, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:11 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="f9ffff7f0110000018"]) 00:21:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3}}}, 0x4) 00:21:11 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3}}}, 0x4) [ 1271.962676][ T5985] Bluetooth: hci1: hardware error 0x03 [ 1271.971790][T22814] autofs4:pid:22814:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2147483641.4097), cmd(0xc0189373) [ 1271.975361][T22814] autofs4:pid:22814:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:11 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3}}}, 0x4) 00:21:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3}}}, 0x4) 00:21:11 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[]) 00:21:11 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3}}}, 0x4) 00:21:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x9, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:12 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x851}, 0x8001) 00:21:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010200000110000018"]) 00:21:12 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[]) 00:21:12 executing program 2: 00:21:12 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x6001, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003180)={'wg0\x00'}) accept$packet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000003180)={'wg0\x00', 0x0}) (async) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f00000001c0)=0x5aa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'caif0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003180)={'wg0\x00'}) (async) r5 = fsmount(0xffffffffffffffff, 0x1, 0x10a) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000280)=0xffffffffffffffff) (async) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) (async) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) (async) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000240)=0x4000000) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x6, r4, 0x13}, 0x10) [ 1272.091569][T22832] autofs4:pid:22832:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(513.4097), cmd(0xc0189373) [ 1272.095111][T22832] autofs4:pid:22832:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:12 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x851}, 0x8001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) (async) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) (async) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x851}, 0x8001) (async) 00:21:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0xe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010300000110000018"]) 00:21:12 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[]) 00:21:12 executing program 2: 00:21:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x300, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:12 executing program 2: [ 1272.184603][T22850] autofs4:pid:22850:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(769.4097), cmd(0xc0189373) [ 1272.198669][T22850] autofs4:pid:22850:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) 00:21:12 executing program 2: syz_emit_vhci(0x0, 0x0) 00:21:12 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB]) 00:21:12 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x851}, 0x8001) [ 1272.239507][ T5991] ================================================================== [ 1272.241662][ T5991] BUG: KASAN: slab-use-after-free in hci_conn_hash_flush+0x90/0x210 [ 1272.243618][ T5991] Read of size 8 at addr ffff0000d34fe000 by task kworker/u5:4/5991 [ 1272.245669][ T5991] [ 1272.246275][ T5991] CPU: 1 PID: 5991 Comm: kworker/u5:4 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1272.248758][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1272.251353][ T5991] Workqueue: hci5 hci_error_reset [ 1272.252631][ T5991] Call trace: [ 1272.253450][ T5991] dump_backtrace+0x1b8/0x1e4 [ 1272.254634][ T5991] show_stack+0x2c/0x44 [ 1272.255669][ T5991] dump_stack_lvl+0xd0/0x124 [ 1272.256829][ T5991] print_report+0x174/0x514 [ 1272.258012][ T5991] kasan_report+0xd4/0x130 [ 1272.259178][ T5991] __asan_report_load8_noabort+0x20/0x2c [ 1272.260621][ T5991] hci_conn_hash_flush+0x90/0x210 [ 1272.261891][ T5991] hci_dev_close_sync+0x894/0xf8c [ 1272.263169][ T5991] hci_error_reset+0xd4/0x1e0 [ 1272.264350][ T5991] process_one_work+0x788/0x12d4 [ 1272.265587][ T5991] worker_thread+0x8e0/0xfe8 [ 1272.266770][ T5991] kthread+0x288/0x310 [ 1272.267816][ T5991] ret_from_fork+0x10/0x20 [ 1272.268987][ T5991] [ 1272.269592][ T5991] Allocated by task 16317: [ 1272.270735][ T5991] kasan_set_track+0x4c/0x7c [ 1272.271906][ T5991] kasan_save_alloc_info+0x24/0x30 [ 1272.273193][ T5991] __kasan_kmalloc+0xac/0xc4 [ 1272.274346][ T5991] kmalloc_trace+0x70/0x88 [ 1272.275476][ T5991] hci_conn_add+0xcc/0x10b4 [ 1272.276598][ T5991] hci_connect_sco+0x94/0x2bc [ 1272.277805][ T5991] sco_sock_connect+0x264/0x860 [ 1272.279025][ T5991] __sys_connect+0x268/0x290 [ 1272.280202][ T5991] __arm64_sys_connect+0x7c/0x94 [ 1272.281437][ T5991] invoke_syscall+0x98/0x2c0 [ 1272.282605][ T5991] el0_svc_common+0x138/0x258 [ 1272.283765][ T5991] do_el0_svc+0x64/0x198 [ 1272.284812][ T5991] el0_svc+0x4c/0x15c [ 1272.285832][ T5991] el0t_64_sync_handler+0x84/0xf0 [ 1272.287115][ T5991] el0t_64_sync+0x190/0x194 [ 1272.288263][ T5991] [ 1272.288799][ T5991] Freed by task 5991: [ 1272.289829][ T5991] kasan_set_track+0x4c/0x7c [ 1272.291007][ T5991] kasan_save_free_info+0x38/0x5c [ 1272.292292][ T5991] ____kasan_slab_free+0x144/0x1c0 [ 1272.293645][ T5991] __kasan_slab_free+0x18/0x28 [ 1272.294820][ T5991] __kmem_cache_free+0x2a8/0x49c [ 1272.296084][ T5991] kfree+0xb8/0x19c [ 1272.297064][ T5991] bt_link_release+0x20/0x30 [ 1272.298271][ T5991] device_release+0x8c/0x1ac [ 1272.299478][ T5991] kobject_put+0x2a8/0x41c [ 1272.300644][ T5991] put_device+0x28/0x40 [ 1272.301731][ T5991] hci_conn_cleanup+0x4fc/0x694 [ 1272.302969][ T5991] hci_conn_del+0x314/0x4b8 [ 1272.304114][ T5991] hci_conn_unlink+0x24c/0x2c4 [ 1272.305347][ T5991] hci_conn_unlink+0x190/0x2c4 00:21:12 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cec0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x230100, 0x0) 00:21:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010400000110000018"]) 00:21:12 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB]) 00:21:12 executing program 2: syz_emit_vhci(0x0, 0x0) [ 1272.306513][ T5991] hci_conn_hash_flush+0x188/0x210 [ 1272.307833][ T5991] hci_dev_close_sync+0x894/0xf8c [ 1272.309066][ T5991] hci_error_reset+0xd4/0x1e0 00:21:12 executing program 4: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000080)=""/139, &(0x7f0000000000)=0x8b) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000) [ 1272.310322][ T5991] process_one_work+0x788/0x12d4 [ 1272.311565][ T5991] worker_thread+0x8e0/0xfe8 [ 1272.312698][ T5991] kthread+0x288/0x310 [ 1272.313699][ T5991] ret_from_fork+0x10/0x20 [ 1272.314758][ T5991] [ 1272.315344][ T5991] Last potentially related work creation: [ 1272.316720][ T5991] kasan_save_stack+0x40/0x6c [ 1272.317911][ T5991] __kasan_record_aux_stack+0xcc/0xe8 [ 1272.319248][ T5991] kasan_record_aux_stack_noalloc+0x14/0x20 [ 1272.320728][ T5991] insert_work+0x64/0x384 [ 1272.321805][ T5991] __queue_work+0xd3c/0x1374 [ 1272.322622][T22868] autofs4:pid:22868:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1025.4097), cmd(0xc0189373) [ 1272.322945][ T5991] queue_delayed_work_on+0x1f4/0x2e4 [ 1272.327773][ T5991] hci_conn_drop+0x198/0x2bc [ 1272.328932][ T5991] __sco_sock_close+0x288/0x7b0 [ 1272.330175][ T5991] sco_sock_release+0xb4/0x2c0 [ 1272.331393][ T5991] sock_close+0xb8/0x1fc [ 1272.332460][ T5991] __fput+0x30c/0x7bc [ 1272.333482][ T5991] ____fput+0x20/0x30 [ 1272.334492][ T5991] task_work_run+0x230/0x2e0 [ 1272.335703][ T5991] get_signal+0x13a4/0x159c [ 1272.336835][ T5991] do_notify_resume+0x3cc/0x3c90 [ 1272.338182][T22868] autofs4:pid:22868:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) [ 1272.338181][ T5991] el0_svc+0x90/0x15c [ 1272.341956][ T5991] el0t_64_sync_handler+0x84/0xf0 [ 1272.343241][ T5991] el0t_64_sync+0x190/0x194 [ 1272.344360][ T5991] [ 1272.344925][ T5991] The buggy address belongs to the object at ffff0000d34fe000 00:21:12 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB]) [ 1272.344925][ T5991] which belongs to the cache kmalloc-4k of size 4096 [ 1272.348444][ T5991] The buggy address is located 0 bytes inside of [ 1272.348444][ T5991] freed 4096-byte region [ffff0000d34fe000, ffff0000d34ff000) [ 1272.351905][ T5991] [ 1272.352502][ T5991] The buggy address belongs to the physical page: [ 1272.354117][ T5991] page:000000000f0840ea refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1134f8 [ 1272.356662][ T5991] head:000000000f0840ea order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 00:21:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010500000110000018"]) [ 1272.358948][ T5991] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 1272.360981][ T5991] page_type: 0xffffffff() [ 1272.362096][ T5991] raw: 05ffc00000010200 ffff0000c0002a80 fffffc00036d2600 dead000000000002 [ 1272.364273][ T5991] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1272.366525][ T5991] page dumped because: kasan: bad access detected [ 1272.368145][ T5991] [ 1272.368710][ T5991] Memory state around the buggy address: [ 1272.370114][ T5991] ffff0000d34fdf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1272.372170][ T5991] ffff0000d34fdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1272.374184][ T5991] >ffff0000d34fe000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1272.376209][ T5991] ^ [ 1272.377293][ T5991] ffff0000d34fe080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1272.379408][ T5991] ffff0000d34fe100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1272.381503][ T5991] ================================================================== 00:21:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x500, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:12 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cec0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x230100, 0x0) [ 1272.389179][ T5991] Disabling lock debugging due to kernel taint [ 1272.390842][ T5991] ------------[ cut here ]------------ [ 1272.392185][ T5991] ODEBUG: assert_init not available (active state 0) object: 000000008fdbee49 object type: timer_list hint: hci_conn_timeout+0x0/0x3f4 [ 1272.395888][ T5991] WARNING: CPU: 1 PID: 5991 at lib/debugobjects.c:508 debug_print_object+0x15c/0x1d4 [ 1272.398206][ T5991] Modules linked in: [ 1272.399117][ T5991] CPU: 1 PID: 5991 Comm: kworker/u5:4 Tainted: G B 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1272.401954][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1272.404424][ T5991] Workqueue: hci5 hci_error_reset [ 1272.405732][ T5991] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1272.407712][ T5991] pc : debug_print_object+0x15c/0x1d4 00:21:12 executing program 2: syz_emit_vhci(0x0, 0x0) [ 1272.409114][ T5991] lr : debug_print_object+0x15c/0x1d4 [ 1272.410503][ T5991] sp : ffff80001e8d7550 [ 1272.411597][ T5991] x29: ffff80001e8d7550 x28: dfff800000000000 x27: ffff700003d1aeb8 [ 1272.413663][ T5991] x26: dfff800000000000 x25: dfff800000000000 x24: ffff0000d34fe2b8 00:21:12 executing program 4: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000080)=""/139, &(0x7f0000000000)=0x8b) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000) [ 1272.415707][ T5991] x23: ffff800012a719a0 x22: ffff8000115d1618 x21: 0000000000000000 [ 1272.417816][ T5991] x20: ffff8000125bb020 x19: ffff800012a71520 x18: 1fffe00036848bbe [ 1272.419879][ T5991] x17: 0000000000000000 x16: ffff8000124340b0 x15: 0000000000000002 [ 1272.420702][T22881] autofs4:pid:22881:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1281.4097), cmd(0xc0189373) [ 1272.422108][ T5991] x14: 0000000000000000 x13: fffffffffffe9900 x12: 0000000000000001 [ 1272.422130][ T5991] x11: 0000000000000000 x10: 0000000000000000 x9 : 50fa35c845c59700 00:21:12 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000001"]) [ 1272.429610][ T5991] x8 : 50fa35c845c59700 x7 : fffffffffffe9900 x6 : fffffffffffe98d8 [ 1272.431673][ T5991] x5 : ffff80001e8d6e38 x4 : ffff800015f7dc50 x3 : ffff800008596160 [ 1272.432441][T22881] autofs4:pid:22881:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) [ 1272.433698][ T5991] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 1272.438515][ T5991] Call trace: [ 1272.439323][ T5991] debug_print_object+0x15c/0x1d4 [ 1272.440580][ T5991] debug_object_assert_init+0x318/0x3c8 [ 1272.441957][ T5991] __timer_delete+0xac/0x2f8 [ 1272.443111][ T5991] timer_delete+0x24/0x34 [ 1272.444194][ T5991] try_to_grab_pending+0x8c/0x618 [ 1272.445487][ T5991] __cancel_work_timer+0x118/0x540 [ 1272.446753][ T5991] cancel_delayed_work_sync+0x24/0x38 [ 1272.448101][ T5991] hci_conn_del+0x58/0x4b8 [ 1272.449232][ T5991] hci_conn_hash_flush+0x190/0x210 [ 1272.450546][ T5991] hci_dev_close_sync+0x894/0xf8c [ 1272.451804][ T5991] hci_error_reset+0xd4/0x1e0 [ 1272.452971][ T5991] process_one_work+0x788/0x12d4 [ 1272.454279][ T5991] worker_thread+0x8e0/0xfe8 [ 1272.455361][ T5991] kthread+0x288/0x310 [ 1272.456395][ T5991] ret_from_fork+0x10/0x20 [ 1272.457523][ T5991] irq event stamp: 12851 [ 1272.458601][ T5991] hardirqs last enabled at (12851): [] finish_lock_switch+0xbc/0x1e4 [ 1272.461130][ T5991] hardirqs last disabled at (12850): [] __schedule+0x2b4/0x23b8 [ 1272.463513][ T5991] softirqs last enabled at (12114): [] __do_softirq+0xac0/0xd54 [ 1272.465839][ T5991] softirqs last disabled at (12083): [] ____do_softirq+0x14/0x20 [ 1272.468182][ T5991] ---[ end trace 0000000000000000 ]--- [ 1272.470150][ T5991] ------------[ cut here ]------------ [ 1272.471605][ T5991] ODEBUG: assert_init not available (active state 0) object: 000000001cdb94a8 object type: timer_list hint: hci_conn_auto_accept+0x0/0x58 [ 1272.475322][ T5991] WARNING: CPU: 1 PID: 5991 at lib/debugobjects.c:508 debug_print_object+0x15c/0x1d4 00:21:12 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2cec0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x230100, 0x0) [ 1272.477662][ T5991] Modules linked in: [ 1272.478604][ T5991] CPU: 1 PID: 5991 Comm: kworker/u5:4 Tainted: G B W 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1272.481392][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1272.483947][ T5991] Workqueue: hci5 hci_error_reset [ 1272.485194][ T5991] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1272.487157][ T5991] pc : debug_print_object+0x15c/0x1d4 [ 1272.488547][ T5991] lr : debug_print_object+0x15c/0x1d4 00:21:12 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}}}, 0x4) [ 1272.489967][ T5991] sp : ffff80001e8d7550 [ 1272.491024][ T5991] x29: ffff80001e8d7550 x28: dfff800000000000 x27: ffff700003d1aeb8 00:21:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x600, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1272.493009][ T5991] x26: ffff0000d0964f68 x25: dfff800000000000 x24: ffff0000d34fe360 00:21:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010600000110000018"]) [ 1272.495039][ T5991] x23: ffff800012a719a0 x22: ffff8000115d1a0c x21: 0000000000000000 [ 1272.497064][ T5991] x20: ffff8000125bb020 x19: ffff800012a71520 x18: 1fffe00036848bbe [ 1272.499187][ T5991] x17: 0000000000000000 x16: ffff8000124340b0 x15: 0000000000000002 00:21:12 executing program 4: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000080)=""/139, &(0x7f0000000000)=0x8b) (async) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000080)=""/139, &(0x7f0000000000)=0x8b) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000) [ 1272.501309][ T5991] x14: 0000000000000000 x13: fffffffffffea0a0 x12: 0000000000000001 [ 1272.503293][ T5991] x11: 0000000000000000 x10: 0000000000000000 x9 : 50fa35c845c59700 [ 1272.505291][ T5991] x8 : 50fa35c845c59700 x7 : fffffffffffea0a0 x6 : fffffffffffea070 [ 1272.507327][ T5991] x5 : ffff80001e8d6e38 x4 : ffff800015f7e088 x3 : ffff800008596160 [ 1272.509392][ T5991] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 1272.511442][ T5991] Call trace: [ 1272.512295][ T5991] debug_print_object+0x15c/0x1d4 [ 1272.513530][ T5991] debug_object_assert_init+0x318/0x3c8 [ 1272.514918][ T5991] __timer_delete+0xac/0x2f8 [ 1272.516084][ T5991] timer_delete+0x24/0x34 [ 1272.517168][ T5991] try_to_grab_pending+0x8c/0x618 [ 1272.518451][ T5991] __cancel_work_timer+0x118/0x540 [ 1272.519723][ T5991] cancel_delayed_work_sync+0x24/0x38 [ 1272.521108][ T5991] hci_conn_del+0x60/0x4b8 [ 1272.522267][ T5991] hci_conn_hash_flush+0x190/0x210 [ 1272.523604][ T5991] hci_dev_close_sync+0x894/0xf8c [ 1272.524909][ T5991] hci_error_reset+0xd4/0x1e0 [ 1272.526077][ T5991] process_one_work+0x788/0x12d4 [ 1272.527322][ T5991] worker_thread+0x8e0/0xfe8 [ 1272.528488][ T5991] kthread+0x288/0x310 [ 1272.529526][ T5991] ret_from_fork+0x10/0x20 [ 1272.530667][ T5991] irq event stamp: 12851 [ 1272.531759][ T5991] hardirqs last enabled at (12851): [] finish_lock_switch+0xbc/0x1e4 00:21:12 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000001"]) [ 1272.534265][ T5991] hardirqs last disabled at (12850): [] __schedule+0x2b4/0x23b8 [ 1272.536723][ T5991] softirqs last enabled at (12114): [] __do_softirq+0xac0/0xd54 [ 1272.539158][ T5991] softirqs last disabled at (12083): [] ____do_softirq+0x14/0x20 [ 1272.541454][ T5991] ---[ end trace 0000000000000000 ]--- [ 1272.542052][T22904] autofs4:pid:22904:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1537.4097), cmd(0xc0189373) [ 1272.544317][ T5991] ------------[ cut here ]------------ [ 1272.547449][ T5991] ODEBUG: assert_init not available (active state 0) object: 00000000a398638c object type: timer_list hint: hci_conn_idle+0x0/0x554 [ 1272.551181][ T5991] WARNING: CPU: 1 PID: 5991 at lib/debugobjects.c:508 debug_print_object+0x15c/0x1d4 [ 1272.553604][ T5991] Modules linked in: [ 1272.554594][ T5991] CPU: 1 PID: 5991 Comm: kworker/u5:4 Tainted: G B W 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1272.557431][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1272.559958][ T5991] Workqueue: hci5 hci_error_reset [ 1272.561230][ T5991] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1272.563208][ T5991] pc : debug_print_object+0x15c/0x1d4 00:21:12 executing program 3: mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x6f000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40080, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)=0x1eaea40a31c1de) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x1000000) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) r1 = fsopen(&(0x7f0000000140)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x2a5, &(0x7f00000001c0)={0x0, 0xfcf5, 0x20, 0x2, 0x7f}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x3, 0x0, 0xeeeeeeee}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/nbd5', 0x200003, 0x0) openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000580)=0x3) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000540)={0x200, 0x8, &(0x7f00000003c0)=[r3, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x3, 0x8], &(0x7f00000004c0)=[0x0, 0x0, r6], &(0x7f0000000500)=[0x8], 0x0, 0x21}) clock_gettime(0x4, &(0x7f00000005c0)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='\x00', 0x0, r2) [ 1272.564577][ T5991] lr : debug_print_object+0x15c/0x1d4 [ 1272.565657][T22904] autofs4:pid:22904:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) [ 1272.565858][ T5991] sp : ffff80001e8d7550 [ 1272.569786][ T5991] x29: ffff80001e8d7550 x28: dfff800000000000 x27: ffff700003d1aeb8 [ 1272.571855][ T5991] x26: ffff0000d0964f68 x25: dfff800000000000 x24: ffff0000d34fe408 [ 1272.573992][ T5991] x23: ffff800012a719a0 x22: ffff8000115d1a64 x21: 0000000000000000 [ 1272.576016][ T5991] x20: ffff8000125bb020 x19: ffff800012a71520 x18: 1fffe00036848bbe 00:21:12 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}}}, 0x4) [ 1272.578107][ T5991] x17: 0000000000000000 x16: ffff800012381170 x15: 0000000000000002 [ 1272.580066][ T5991] x14: 0000000000000000 x13: fffffffffffea940 x12: 0000000000000001 [ 1272.582102][ T5991] x11: 0000000000000000 x10: 0000000000000000 x9 : 50fa35c845c59700 00:21:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x700, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1272.584100][ T5991] x8 : 50fa35c845c59700 x7 : fffffffffffea940 x6 : fffffffffffea920 [ 1272.586207][ T5991] x5 : ffff80001e8d6e38 x4 : ffff800015f7e4a8 x3 : ffff80000835d3ec [ 1272.588280][ T5991] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 1272.590312][ T5991] Call trace: [ 1272.591141][ T5991] debug_print_object+0x15c/0x1d4 [ 1272.592439][ T5991] debug_object_assert_init+0x318/0x3c8 [ 1272.593821][ T5991] __timer_delete+0xac/0x2f8 [ 1272.594981][ T5991] timer_delete+0x24/0x34 [ 1272.596077][ T5991] try_to_grab_pending+0x8c/0x618 [ 1272.597376][ T5991] __cancel_work_timer+0x118/0x540 00:21:12 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000001"]) [ 1272.598709][ T5991] cancel_delayed_work_sync+0x24/0x38 [ 1272.600065][ T5991] hci_conn_del+0x68/0x4b8 [ 1272.601198][ T5991] hci_conn_hash_flush+0x190/0x210 [ 1272.602575][ T5991] hci_dev_close_sync+0x894/0xf8c [ 1272.603876][ T5991] hci_error_reset+0xd4/0x1e0 [ 1272.605074][ T5991] process_one_work+0x788/0x12d4 00:21:12 executing program 4: syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x4, {0x1000, 0x2, 0x4, 0x8}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) [ 1272.606343][ T5991] worker_thread+0x8e0/0xfe8 [ 1272.607518][ T5991] kthread+0x288/0x310 [ 1272.608571][ T5991] ret_from_fork+0x10/0x20 [ 1272.609706][ T5991] irq event stamp: 12851 [ 1272.610836][ T5991] hardirqs last enabled at (12851): [] finish_lock_switch+0xbc/0x1e4 [ 1272.613328][ T5991] hardirqs last disabled at (12850): [] __schedule+0x2b4/0x23b8 [ 1272.615658][ T5991] softirqs last enabled at (12114): [] __do_softirq+0xac0/0xd54 00:21:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010700000110000018"]) [ 1272.618011][ T5991] softirqs last disabled at (12083): [] ____do_softirq+0x14/0x20 [ 1272.620433][ T5991] ---[ end trace 0000000000000000 ]--- [ 1272.624233][ T5991] Unable to handle kernel paging request at virtual address e0bda0b0400002ec [ 1272.626430][ T5991] KASAN: maybe wild-memory-access in range [0x05f1058200001760-0x05f1058200001767] [ 1272.628693][ T5991] Mem abort info: [ 1272.631745][ T5991] ESR = 0x0000000096000004 [ 1272.632987][ T5991] EC = 0x25: DABT (current EL), IL = 32 bits [ 1272.634490][ T5991] SET = 0, FnV = 0 [ 1272.635414][ T5991] EA = 0, S1PTW = 0 [ 1272.636672][ T5991] FSC = 0x04: level 0 translation fault [ 1272.638107][ T5991] Data abort info: [ 1272.639109][ T5991] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 1272.640668][ T5991] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 1272.642210][ T5991] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 1272.643805][ T5991] [e0bda0b0400002ec] address between user and kernel address ranges [ 1272.645767][ T5991] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP 00:21:12 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}}}, 0x4) [ 1272.647541][ T5991] Modules linked in: [ 1272.648503][ T5991] CPU: 1 PID: 5991 Comm: kworker/u5:4 Tainted: G B W 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1272.651346][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1272.653889][ T5991] Workqueue: hci5 hci_error_reset [ 1272.655152][ T5991] pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1272.655874][T22915] autofs4:pid:22915:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1793.4097), cmd(0xc0189373) [ 1272.657089][ T5991] pc : __list_del_entry_valid+0x78/0x158 [ 1272.657109][ T5991] lr : __list_del_entry_valid+0x4c/0x158 [ 1272.663468][ T5991] sp : ffff80001e8d7970 00:21:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x900, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) [ 1272.664557][ T5991] x29: ffff80001e8d7970 x28: dfff800000000000 x27: 1ffff0000311f078 [ 1272.666592][ T5991] x26: ffff0000f887b800 x25: 1fffe0001a69fc07 x24: ffff0000d34bc000 00:21:12 executing program 4: syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x4, {0x1000, 0x2, 0x4, 0x8}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) [ 1272.668630][ T5991] x23: dfff800000000000 x22: dfff800000000000 x21: 05f1058200001767 [ 1272.670656][ T5991] x20: ffff0000f887b800 x19: ffff0000d34fe000 x18: 1fffe00036848bbe 00:21:12 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000011000"]) [ 1272.672788][ T5991] x17: 0000000000000000 x16: ffff80000850af6c x15: 0000000000000000 [ 1272.674901][ T5991] x14: 0000000000000000 x13: 0000000000000000 x12: ffff60001a69fc3c [ 1272.676956][ T5991] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff80001a28f310 [ 1272.678953][ T5991] x8 : 00be20b0400002ec x7 : 0000000000000000 x6 : ffff80001064feb8 [ 1272.679359][T22915] autofs4:pid:22915:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) [ 1272.681038][ T5991] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80000aaeb514 [ 1272.681059][ T5991] x2 : dead000000000122 x1 : 0000000000000008 x0 : 0000000000000000 [ 1272.687926][ T5991] Call trace: [ 1272.688759][ T5991] __list_del_entry_valid+0x78/0x158 [ 1272.690130][ T5991] hci_conn_cleanup+0x14c/0x694 [ 1272.691341][ T5991] hci_conn_del+0x314/0x4b8 [ 1272.692518][ T5991] hci_conn_hash_flush+0x190/0x210 [ 1272.693835][ T5991] hci_dev_close_sync+0x894/0xf8c [ 1272.695080][ T5991] hci_error_reset+0xd4/0x1e0 [ 1272.696234][ T5991] process_one_work+0x788/0x12d4 [ 1272.697496][ T5991] worker_thread+0x8e0/0xfe8 [ 1272.698691][ T5991] kthread+0x288/0x310 [ 1272.699749][ T5991] ret_from_fork+0x10/0x20 [ 1272.700906][ T5991] Code: 91008902 eb0202bf 54000520 d343fea8 (38766908) [ 1272.702706][ T5991] ---[ end trace 0000000000000000 ]--- 00:21:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0xe00, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 00:21:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010800000110000018"]) [ 1272.767762][T22931] autofs4:pid:22931:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2049.4097), cmd(0xc0189373) [ 1272.775774][T22931] autofs4:pid:22931:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) [ 1273.589431][ T5991] Kernel panic - not syncing: Oops: Fatal exception [ 1273.591090][ T5991] SMP: stopping secondary CPUs [ 1273.592309][ T5991] Kernel Offset: disabled [ 1273.593420][ T5991] CPU features: 0x000000,40e00804,64017203 [ 1273.594845][ T5991] Memory Limit: none [ 1274.430516][ T5991] Rebooting in 86400 seconds..