Warning: Permanently added '[localhost]:41231' (ECDSA) to the list of known hosts. 2022/10/03 00:47:06 fuzzer started 2022/10/03 00:47:06 dialing manager at localhost:35095 syzkaller login: [ 44.129365] cgroup: Unknown subsys name 'net' [ 44.259248] cgroup: Unknown subsys name 'rlimit' 2022/10/03 00:47:20 syscalls: 2215 2022/10/03 00:47:20 code coverage: enabled 2022/10/03 00:47:20 comparison tracing: enabled 2022/10/03 00:47:20 extra coverage: enabled 2022/10/03 00:47:20 setuid sandbox: enabled 2022/10/03 00:47:20 namespace sandbox: enabled 2022/10/03 00:47:20 Android sandbox: enabled 2022/10/03 00:47:20 fault injection: enabled 2022/10/03 00:47:20 leak checking: enabled 2022/10/03 00:47:20 net packet injection: enabled 2022/10/03 00:47:20 net device setup: enabled 2022/10/03 00:47:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 00:47:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 00:47:20 USB emulation: enabled 2022/10/03 00:47:20 hci packet injection: enabled 2022/10/03 00:47:20 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 00:47:20 802.15.4 emulation: enabled 2022/10/03 00:47:20 fetching corpus: 50, signal 20759/22621 (executing program) 2022/10/03 00:47:20 fetching corpus: 100, signal 37216/40725 (executing program) 2022/10/03 00:47:20 fetching corpus: 150, signal 44913/49978 (executing program) 2022/10/03 00:47:20 fetching corpus: 200, signal 51011/57646 (executing program) 2022/10/03 00:47:20 fetching corpus: 250, signal 56457/64574 (executing program) 2022/10/03 00:47:20 fetching corpus: 300, signal 62067/71601 (executing program) 2022/10/03 00:47:21 fetching corpus: 350, signal 66700/77616 (executing program) 2022/10/03 00:47:21 fetching corpus: 400, signal 69190/81496 (executing program) 2022/10/03 00:47:21 fetching corpus: 450, signal 71952/85591 (executing program) 2022/10/03 00:47:21 fetching corpus: 500, signal 77762/92491 (executing program) 2022/10/03 00:47:21 fetching corpus: 550, signal 82059/97930 (executing program) 2022/10/03 00:47:21 fetching corpus: 600, signal 85442/102469 (executing program) 2022/10/03 00:47:21 fetching corpus: 650, signal 87708/105966 (executing program) 2022/10/03 00:47:21 fetching corpus: 700, signal 89798/109238 (executing program) 2022/10/03 00:47:22 fetching corpus: 750, signal 93517/113919 (executing program) 2022/10/03 00:47:22 fetching corpus: 800, signal 94828/116464 (executing program) 2022/10/03 00:47:22 fetching corpus: 850, signal 96316/119100 (executing program) 2022/10/03 00:47:22 fetching corpus: 900, signal 98338/122224 (executing program) 2022/10/03 00:47:22 fetching corpus: 950, signal 100712/125607 (executing program) 2022/10/03 00:47:22 fetching corpus: 1000, signal 103907/129715 (executing program) 2022/10/03 00:47:22 fetching corpus: 1050, signal 105097/131979 (executing program) 2022/10/03 00:47:22 fetching corpus: 1100, signal 106237/134200 (executing program) 2022/10/03 00:47:22 fetching corpus: 1150, signal 108430/137331 (executing program) 2022/10/03 00:47:23 fetching corpus: 1200, signal 110085/139945 (executing program) 2022/10/03 00:47:23 fetching corpus: 1250, signal 111449/142341 (executing program) 2022/10/03 00:47:23 fetching corpus: 1300, signal 112839/144745 (executing program) 2022/10/03 00:47:23 fetching corpus: 1350, signal 115701/148239 (executing program) 2022/10/03 00:47:23 fetching corpus: 1400, signal 118485/151653 (executing program) 2022/10/03 00:47:23 fetching corpus: 1450, signal 122023/155692 (executing program) 2022/10/03 00:47:23 fetching corpus: 1500, signal 124303/158672 (executing program) 2022/10/03 00:47:23 fetching corpus: 1550, signal 125116/160495 (executing program) 2022/10/03 00:47:24 fetching corpus: 1600, signal 126184/162489 (executing program) 2022/10/03 00:47:24 fetching corpus: 1650, signal 127345/164559 (executing program) 2022/10/03 00:47:24 fetching corpus: 1700, signal 129424/167305 (executing program) 2022/10/03 00:47:24 fetching corpus: 1750, signal 131214/169764 (executing program) 2022/10/03 00:47:24 fetching corpus: 1800, signal 132049/171479 (executing program) 2022/10/03 00:47:24 fetching corpus: 1850, signal 133163/173395 (executing program) 2022/10/03 00:47:24 fetching corpus: 1900, signal 134902/175802 (executing program) 2022/10/03 00:47:24 fetching corpus: 1950, signal 135774/177514 (executing program) 2022/10/03 00:47:25 fetching corpus: 2000, signal 136492/179112 (executing program) 2022/10/03 00:47:25 fetching corpus: 2050, signal 137501/180915 (executing program) 2022/10/03 00:47:25 fetching corpus: 2100, signal 139396/183331 (executing program) 2022/10/03 00:47:25 fetching corpus: 2150, signal 140717/185277 (executing program) 2022/10/03 00:47:25 fetching corpus: 2200, signal 141899/187104 (executing program) 2022/10/03 00:47:25 fetching corpus: 2250, signal 144709/190156 (executing program) 2022/10/03 00:47:25 fetching corpus: 2300, signal 145484/191689 (executing program) 2022/10/03 00:47:25 fetching corpus: 2350, signal 146669/193499 (executing program) 2022/10/03 00:47:25 fetching corpus: 2400, signal 147324/194938 (executing program) 2022/10/03 00:47:25 fetching corpus: 2450, signal 147997/196366 (executing program) 2022/10/03 00:47:26 fetching corpus: 2500, signal 148844/197908 (executing program) 2022/10/03 00:47:26 fetching corpus: 2550, signal 150277/199838 (executing program) 2022/10/03 00:47:26 fetching corpus: 2600, signal 152068/202041 (executing program) 2022/10/03 00:47:26 fetching corpus: 2650, signal 153961/204152 (executing program) 2022/10/03 00:47:26 fetching corpus: 2700, signal 155034/205799 (executing program) 2022/10/03 00:47:26 fetching corpus: 2750, signal 155791/207221 (executing program) 2022/10/03 00:47:26 fetching corpus: 2800, signal 157493/209212 (executing program) 2022/10/03 00:47:26 fetching corpus: 2850, signal 157900/210406 (executing program) 2022/10/03 00:47:27 fetching corpus: 2900, signal 159031/211972 (executing program) 2022/10/03 00:47:27 fetching corpus: 2950, signal 159505/213168 (executing program) 2022/10/03 00:47:27 fetching corpus: 3000, signal 160467/214683 (executing program) 2022/10/03 00:47:27 fetching corpus: 3050, signal 161005/215924 (executing program) 2022/10/03 00:47:27 fetching corpus: 3100, signal 161866/217322 (executing program) 2022/10/03 00:47:27 fetching corpus: 3150, signal 162511/218599 (executing program) 2022/10/03 00:47:27 fetching corpus: 3200, signal 163238/219891 (executing program) 2022/10/03 00:47:27 fetching corpus: 3250, signal 164282/221351 (executing program) 2022/10/03 00:47:28 fetching corpus: 3300, signal 165177/222693 (executing program) 2022/10/03 00:47:28 fetching corpus: 3350, signal 166036/223978 (executing program) 2022/10/03 00:47:28 fetching corpus: 3400, signal 167294/225486 (executing program) 2022/10/03 00:47:28 fetching corpus: 3450, signal 168033/226686 (executing program) 2022/10/03 00:47:28 fetching corpus: 3500, signal 169299/228217 (executing program) 2022/10/03 00:47:28 fetching corpus: 3550, signal 170265/229513 (executing program) 2022/10/03 00:47:28 fetching corpus: 3600, signal 171088/230795 (executing program) 2022/10/03 00:47:29 fetching corpus: 3650, signal 172180/232153 (executing program) 2022/10/03 00:47:29 fetching corpus: 3700, signal 173182/233503 (executing program) 2022/10/03 00:47:29 fetching corpus: 3750, signal 173619/234537 (executing program) 2022/10/03 00:47:29 fetching corpus: 3800, signal 175551/236276 (executing program) 2022/10/03 00:47:29 fetching corpus: 3850, signal 176238/237395 (executing program) 2022/10/03 00:47:29 fetching corpus: 3900, signal 177057/238569 (executing program) 2022/10/03 00:47:29 fetching corpus: 3950, signal 177861/239710 (executing program) 2022/10/03 00:47:29 fetching corpus: 4000, signal 179097/241061 (executing program) 2022/10/03 00:47:30 fetching corpus: 4050, signal 179818/242181 (executing program) 2022/10/03 00:47:30 fetching corpus: 4100, signal 181004/243452 (executing program) 2022/10/03 00:47:30 fetching corpus: 4150, signal 181571/244428 (executing program) 2022/10/03 00:47:30 fetching corpus: 4200, signal 182632/245701 (executing program) 2022/10/03 00:47:30 fetching corpus: 4250, signal 183521/246824 (executing program) 2022/10/03 00:47:30 fetching corpus: 4300, signal 184031/247779 (executing program) 2022/10/03 00:47:30 fetching corpus: 4350, signal 184764/248817 (executing program) 2022/10/03 00:47:30 fetching corpus: 4400, signal 185807/249961 (executing program) 2022/10/03 00:47:31 fetching corpus: 4450, signal 186552/250998 (executing program) 2022/10/03 00:47:31 fetching corpus: 4500, signal 186960/251925 (executing program) 2022/10/03 00:47:31 fetching corpus: 4550, signal 187836/252951 (executing program) 2022/10/03 00:47:31 fetching corpus: 4600, signal 188485/253935 (executing program) 2022/10/03 00:47:31 fetching corpus: 4650, signal 189151/254913 (executing program) 2022/10/03 00:47:31 fetching corpus: 4700, signal 189634/255801 (executing program) 2022/10/03 00:47:31 fetching corpus: 4750, signal 190541/256778 (executing program) 2022/10/03 00:47:31 fetching corpus: 4800, signal 191136/257716 (executing program) 2022/10/03 00:47:32 fetching corpus: 4850, signal 192206/258752 (executing program) 2022/10/03 00:47:32 fetching corpus: 4900, signal 192805/259642 (executing program) 2022/10/03 00:47:32 fetching corpus: 4950, signal 194201/260784 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/261614 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/262274 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/262960 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/263624 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/264255 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/264929 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/265607 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/266268 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/266988 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/267663 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/268352 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/269032 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/269718 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/270405 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/271106 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/271781 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/272463 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/273139 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/273797 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/274472 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/275161 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/275835 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/276497 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/277194 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/277874 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/278530 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/279197 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/279913 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/280549 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/281224 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/281893 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/282536 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/283191 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/283862 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/284517 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/285169 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/285835 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/286508 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/287184 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/287866 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/288516 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/289197 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/289868 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/290528 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/291211 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/291240 (executing program) 2022/10/03 00:47:32 fetching corpus: 4997, signal 194783/291240 (executing program) 2022/10/03 00:47:35 starting 8 fuzzer processes 00:47:35 executing program 0: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x2}, {0x1}, 0x63, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x1fe, 0x0, &(0x7f0000000280)={0x2, 0x181, {0x0, 0xc, 0xae, "2d694395b9c704eff774cb74ba61fe33b8f4dd0826f31e567d3ec89dd2c0b1843800691a6f71300c3f7fa1b0471d2744779ab59b1357bfd54b694580d211a0ff2ceb5709abe7e34f97122bac43b18efc1d9e1d3f4a0657fc99996c7f57e59cd7cfd5fcf0059014eec6771d47313d1a9157ec895fbe34dbe8cd9b81d2fc81b4938a2efeae5747b1e6402b10a15c4a2ebdf36c7e3234c886a83843688692faf6e59688a0ca96fdf040882bb7432658", 0xc6, "47e39a1bff74772393c96a66453e50071148b448cebf1eed887674f5f466fcabeeae61aafe843bbe2df448d2defe04add749afe15d1bb769f964f2838f9a8411a26b2ba34aa22f33a8b676698115cb650e8f56dc738de34223d521fb6f0df5f8d7e0da0c23c4852d175822dba56f92bb2cd88655f83a228a5ba34a15beb0596978a195473098c296468a0618b0c9bea8316e3d34674b721e1a1d0ddc54fb89e1c1d49650e835505a40932a56d72078c111c0bdac275d5f808fd4c593b58e11f776ebc76ceecc"}, 0x55, "ecf54c87ce7fbd238946a61b868c9b0892283a254e6bafeca5d738dc3c00ed6fc3ecc31f5275733fddddec877aeeb72fc5e7c777efe046f82a77779ab33910b963e0a72e29738b85c0916d5d94e3feee0844a4f273"}, 0x1e2}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000500)={@empty, @local}, 0xc) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = socket(0x0, 0x1, 0xb825) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xbe, 0x5, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40, 0x80, 0x2, 0xfffffffd}}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='cgroup.freeze\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000007c0)) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000800), &(0x7f0000000840)={'U-', 0x3ff}, 0x16, 0x1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x897}]}, 0x2c}}, 0x40000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(r4, &(0x7f0000000980)=""/197, 0xc5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0xdc34d8e2620075a3}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0xa12bd3df2bed8ff0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000011) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c00), r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, r6, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3ae}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x72]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044884}, 0x20000011) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x1ac, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x43}, @void, @val={0xc, 0x99, {0x9, 0x47}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x401}, @NL80211_ATTR_VENDOR_DATA={0xed, 0xc5, "369ed3e75477feed4143bff34f9c026ee44da6bb0b0a535fe2eabffec9a66ec16131e7650b5ad2f692a8f3fe28ea99050d6bb7eb7530cd3c57f48fbff3e6ade69ffb95d64a635032222704c1dd64bb20bab7bcc73a725203f1308efa69fde96932c972abe6464e82060fe91cbc0a9c83fa7f042bb0b13968d5a3ab0130546429b89ddec33f745123e969ef577238b3f230fe62bca71dbfffde8e3c5b2fbc46a748691399fe647cdd4d909be10e768dd36927aba6a5bf66be08845e5ca087795532670acfa08867b3c0e5aa3d157b3b4de9ecb630809e350d4041a5d304d27afd3a84cde646dafb8495"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x200}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x6c, 0xc5, "ec9ddca724a4ae5c8f0cd907ca2d1a1a2abece05ad8da5fa892e53eb1c20954f274e95d38e87d38d24fe3cd346ff658315620f15dcbef755bb6c48ec6b45a2ab4f60a2f95fa7b20e5257503fca596fbfa5e1558abc59208c62274a17632cb3313b4815670eb18ef8"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x48010}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x24}}, 0x40080c0) 00:47:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @broadcast}, &(0x7f0000000040)=0xc) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x8, 0x1, 0x1, 0x6, 0x4]}, &(0x7f0000000100)=0x78) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0, @in6=@private0, 0x4e23, 0x0, 0x4e20, 0x5, 0xa, 0x80, 0xa0, 0x16, r1, 0xee01}, {0x0, 0x5, 0x4, 0x6, 0xa, 0x7, 0x5, 0x7fffffff}, {0x1000, 0x5, 0x8001}, 0x4, 0x6e6bbf, 0x2, 0x0, 0x1, 0x2}, {{@in6=@mcast2, 0x4d2, 0xa0}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x3, 0xa8, 0xfffffff9, 0x10001, 0xffff0001}}, 0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f0000000340)=0xe8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000380)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x10) getsockname(r0, &(0x7f00000003c0)=@generic, &(0x7f0000000440)=0x80) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000480)={@remote, r2}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000004c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}, 0x14) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x28, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x40000) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000600)={r1, 0x1, 0x6, @multicast}, 0x10) connect$inet(r3, &(0x7f0000000640)={0x2, 0x4e21, @empty}, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xf386c9e068019ed3}, 0x1) getsockname$packet(r3, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) r4 = perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x4, 0x81, 0x0, 0xf9, 0x0, 0x5, 0x1, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000800), 0x6}, 0xd80, 0x8, 0x100, 0x7, 0x9de, 0xf274, 0x9, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x9) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) sendto$inet(r3, &(0x7f00000008c0)="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", 0x1000, 0x40, &(0x7f00000018c0)={0x2, 0x4e21, @broadcast}, 0x10) recvmsg(r3, &(0x7f0000002a80)={&(0x7f0000001900)=@isdn, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/161, 0xa1}], 0x1, &(0x7f0000001a80)=""/4096, 0x1000}, 0x40000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002ac0)={'veth0_to_batadv\x00'}) 00:47:35 executing program 2: rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() 00:47:35 executing program 3: ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000000)) fdatasync(0xffffffffffffffff) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000040)={{0x2, 0x100, 0xfff, 0x7, 0x2, 0x1}, 0xdb, [0x4, 0x20, 0x5, 0x1ff, 0x7fd, 0x2, 0x7ff, 0xfffffff7, 0x0, 0x7, 0x2, 0x1, 0x8, 0x8000, 0x9, 0x9, 0x3ff, 0x3, 0x1, 0x9, 0x7f, 0x3ff, 0x1, 0x1, 0x1, 0x100, 0x0, 0x80, 0x0, 0x4, 0x5, 0x1ff, 0x2, 0xb9, 0x4, 0x81, 0xcf8c, 0x401, 0x7, 0x80000000, 0xffff0000, 0x9, 0xfff, 0x40, 0x101, 0x19d1, 0x3d, 0x400000, 0x484, 0xf, 0x3, 0x1, 0xec, 0x5, 0x8, 0x7, 0xfa2, 0x2, 0x1ff, 0xa7e, 0x3, 0x4, 0x1, 0x9, 0x3, 0x7f, 0x0, 0x1, 0x1, 0x3ff, 0x1, 0xffffffe0, 0x3f, 0x1000, 0x6, 0x2, 0x31, 0x1470, 0x95f, 0xfffffff8, 0x8000, 0xb38, 0x7, 0x7ff, 0xfffffff9, 0x7, 0x7, 0x8, 0x8, 0x1, 0x2, 0x16, 0x53fd, 0xfff, 0x0, 0xdb, 0xc00000, 0x6, 0x2, 0xd437, 0x2, 0x8, 0x3, 0x80, 0x3ff, 0x6, 0x8, 0x97, 0x6, 0x0, 0x3, 0xffffff81, 0x5, 0x7846, 0x0, 0x5, 0x1, 0xa90, 0x4, 0x80000001, 0x85e5, 0x401, 0x7, 0x2, 0x4, 0x4, 0xfffffffb, 0x4, 0x0, 0x10000, 0x1000, 0x7, 0xffff8001, 0x269, 0x1, 0x7f, 0x8000, 0x2fe, 0x8, 0x100, 0x1ff, 0x0, 0x3, 0x7fff, 0x0, 0x5, 0x5, 0x5a0, 0x6ee, 0xd0b, 0x6, 0x4, 0xff, 0x1, 0x2, 0x6, 0xffff3aba, 0x8000, 0xaf, 0xfffffffb, 0x5, 0x5, 0x1000, 0x9, 0x6, 0x3, 0x7ff, 0xffffffff, 0x80, 0x6, 0x3, 0xd6a, 0x87, 0x3dfb93b4, 0x1f, 0x4, 0x9, 0x5, 0x50eb, 0x2, 0x80, 0x6, 0x7, 0x4, 0x4, 0x2, 0x1, 0x1ff, 0x8, 0x200, 0xffffffff, 0x3, 0x9, 0x7, 0x5, 0x3, 0x7, 0x1, 0xffffffff, 0x74fc, 0x7, 0x646, 0x40, 0xcd5d, 0x7, 0x1, 0x6, 0x3, 0xe42, 0x400, 0x6, 0x0, 0x5, 0x80, 0xff, 0x1000, 0x4, 0x1, 0x9, 0x9, 0x215, 0x800, 0x0, 0x800, 0x7f, 0x5, 0x5, 0x8, 0x8, 0x1, 0x5, 0x80000000, 0x5, 0x3, 0xfffffffe, 0x0, 0x10000, 0x101, 0x2, 0x0, 0x2, 0x6, 0x0, 0x4, 0x3, 0xcd, 0x0, 0x8, 0x1, 0x8, 0xffffff01, 0xffffffff, 0xffffa03f, 0xc23, 0xffffffc0, 0x7ff, 0xc3, 0x0, 0xb61, 0x8, 0x200, 0x6, 0x80, 0x80, 0x40, 0xffff, 0x1ff, 0x113, 0x7, 0x3, 0x100, 0x400, 0x6, 0x0, 0xfffffffc, 0x6, 0xc7d, 0x1ff, 0x3056, 0x356a, 0x7f, 0x1ff, 0x80000000, 0x6bdfb856, 0xc1, 0x5, 0x267, 0x4, 0x4, 0x8, 0x3, 0x1, 0x9, 0xe08a, 0x0, 0xffff, 0x81, 0x101, 0x100, 0x5, 0x0, 0x2, 0x9, 0x6, 0x44, 0x26f8, 0x9, 0x3, 0x1, 0x6, 0x5, 0x8, 0x8000, 0x3, 0x2, 0x385, 0x9, 0x9, 0x3, 0x800, 0x101, 0x101, 0x9, 0x1, 0x401, 0x6, 0x5, 0xfffff5c8, 0x0, 0xff, 0x8, 0x2, 0x7fee, 0x0, 0x3, 0x3, 0x7fff, 0x5, 0xffff0000, 0x504, 0x1, 0x8, 0x9, 0x6, 0x81, 0xb3d9, 0xfffffffd, 0x2, 0x5, 0xb, 0x8001, 0x7, 0x3, 0xfff, 0xfffffff7, 0x2, 0x10000, 0x1, 0x2, 0x10000, 0x2, 0x3, 0x9, 0x7f, 0x1, 0x0, 0x0, 0x11eb39e0, 0x10000, 0x1, 0x0, 0x7f, 0x4, 0x9, 0x0, 0x4, 0xfffffffe, 0x8000, 0x5, 0x3, 0x1, 0x0, 0x401, 0x2, 0x5, 0x5, 0x80000001, 0x5, 0xf79, 0x5, 0x6, 0xffff, 0x9, 0x402a, 0x9, 0xb983, 0x8001, 0x6, 0x7, 0x8, 0x7fff, 0x8, 0x4, 0x6, 0x3, 0x47c, 0xa5, 0x4, 0xef4, 0x81, 0x1f, 0x7, 0x3, 0x8001, 0x719adf0e, 0x0, 0x5, 0xffff, 0x1f, 0x4, 0x3, 0x1, 0x3ab, 0x536, 0xeb, 0x7, 0x0, 0xe15, 0xfffffff9, 0x1, 0x6, 0x4, 0x0, 0x8, 0x1, 0x1d7a, 0x3e, 0x7ff, 0x7fff, 0x5, 0x8, 0x9, 0xf7, 0x7, 0x9, 0x7fffffff, 0xfffffff8, 0x2, 0x4, 0x2, 0x9, 0x80, 0x0, 0x0, 0x1, 0x100, 0x7, 0x71, 0x1ff, 0x1, 0x81, 0x20, 0x13, 0x101, 0x9, 0x800, 0xffffffe0, 0x0, 0x4, 0x80, 0x5, 0x10001, 0x6, 0x4, 0x42b, 0x0, 0x9, 0x47, 0x3, 0x7, 0x1, 0xffffffff, 0x3, 0x5, 0x2, 0xcd, 0xffffff01, 0x2, 0x7, 0x7c9, 0x739, 0x0, 0x4, 0xfffff42a, 0x1f, 0x201c54fc, 0xffff, 0xe8a, 0x3ff, 0x10001, 0x3, 0x2, 0xa3c, 0x8, 0x9, 0x3055, 0x8, 0x6, 0x1, 0x434f, 0xa8, 0x80, 0x8001, 0x1, 0x4, 0x101, 0x7, 0xb85, 0x8, 0x8, 0x1, 0x10000, 0xc75, 0x9, 0xff, 0x1f, 0x1, 0x516592b2, 0x8000, 0x9, 0x79, 0x70, 0x7, 0x5, 0x2, 0x5, 0x7, 0xffffffff, 0x4, 0x1bd, 0x7, 0x7, 0xfff, 0xfff, 0x4089fb9e, 0x80000001, 0x8, 0x4, 0x6, 0x3, 0x3, 0x7fffffff, 0x5, 0x461, 0x4, 0x2, 0xc0000, 0x5864, 0x8, 0x0, 0x3ee, 0x8, 0x6, 0x9d, 0x8, 0x7fffffff, 0xffffff01, 0x9, 0x3, 0x6, 0x0, 0x5, 0x0, 0x247e7cce, 0x6, 0x4, 0x7fff, 0x10000, 0x800, 0x8, 0x3, 0x81, 0xffffff7f, 0x2, 0x5, 0x2991, 0x0, 0x1ff, 0x2, 0x4, 0x7, 0xda, 0xfff, 0xb0, 0xd947, 0x0, 0x0, 0xfff, 0x3, 0x0, 0xfffffff9, 0xfffffc00, 0x1, 0x80, 0xd0, 0x0, 0x4, 0x0, 0x7fff, 0x60, 0x1f, 0x6, 0x20, 0x2, 0x1, 0x7ff, 0x5, 0x1ffc00, 0x1f, 0x4, 0xff, 0x6, 0xaf6, 0x4, 0xfd55, 0x8ed, 0x8000, 0x7, 0x5f6d48e9, 0x1, 0x7f, 0x7fffffff, 0x6, 0x86af, 0x1, 0x8000, 0x7, 0x4, 0xa9c, 0x7, 0x81, 0x4, 0x40, 0xfb, 0x1, 0x5, 0xdc5, 0x7, 0x81, 0x1, 0x3, 0x3e, 0x4, 0x7ff, 0x702, 0x401, 0x3, 0xfe8, 0x5, 0x800, 0xcb, 0x1, 0x8b, 0x3, 0x8, 0x8, 0x0, 0x8, 0x101, 0x5, 0x3, 0x6, 0x18122b6d, 0x1, 0x4, 0x7, 0x2, 0xd3, 0x100, 0x101, 0x7e1, 0xffffffff, 0x81, 0x10001, 0x1000, 0x9, 0x8, 0xe33, 0x6, 0x0, 0x200, 0x8, 0x241, 0x89, 0xe48, 0x1, 0x3, 0xe2, 0x10001, 0x800, 0x4, 0xae86, 0x100, 0xdacd, 0xffffff80, 0x0, 0x0, 0x7, 0x5b8d, 0x8, 0x3, 0x7f, 0x6f, 0x400, 0x3de, 0xc02, 0x3, 0xfffffffa, 0x2, 0x0, 0x2, 0xfff, 0x81, 0x5, 0x1, 0xd3a0, 0x9, 0x8, 0x7, 0x7, 0x8, 0x10001, 0x400, 0x9, 0x7, 0x10000, 0x20, 0x6, 0x77, 0xfffffff9, 0x8, 0x6, 0x4, 0x7fff, 0x0, 0xfffffffb, 0x9, 0xa8a, 0x8000, 0x9, 0x7fff, 0xfffffffd, 0xc3, 0x4, 0x1, 0x4, 0x0, 0xfffff8b4, 0xffffffe8, 0x5, 0x9, 0x8, 0x7fffffff, 0x3ff, 0xfffffffd, 0x7, 0x7, 0x3, 0x1, 0x0, 0x9, 0x3, 0x10001, 0xffffffff, 0x380000, 0x6, 0x33, 0x80000000, 0x9, 0xd47d, 0x8, 0x3f, 0xfffffffc, 0x9, 0x7fffffff, 0x7, 0x80000000, 0x8, 0x7fffffff, 0x3, 0x2, 0x7, 0x1600000, 0x3, 0x7, 0x4b, 0x80000000, 0x12f2, 0x31f, 0xa6a4, 0x9, 0x0, 0xffff, 0x0, 0x200, 0xb0b0, 0x6, 0x4, 0x7ff, 0x0, 0x10001, 0x6, 0x2, 0xf1, 0x6, 0x0, 0x9, 0x5, 0xcb, 0x9, 0x1ff, 0x0, 0x0, 0xef0, 0x40d9, 0x2, 0x4, 0x1, 0x1, 0x100, 0x40714284, 0xfff, 0x0, 0x1ed38686, 0x6, 0x6, 0x8, 0x7ff, 0xc1f, 0x1, 0x1, 0x1, 0xfffffffe, 0x9, 0x4, 0x0, 0xfff, 0x8, 0x2, 0x8, 0x4d5, 0x5, 0xff, 0xb, 0x2400, 0x1, 0x4, 0x3ff, 0x9, 0x6, 0x3, 0x3, 0x6, 0x38, 0xfffffcfa, 0x6, 0x4, 0x0, 0x1ff, 0x1, 0x1, 0x81, 0x1, 0x9, 0x6, 0x4, 0xc13, 0x0, 0xfffffff8, 0x80000001, 0x81, 0x0, 0x400, 0x6, 0x4, 0x4, 0xffff, 0x3, 0xbf6, 0x2, 0x80, 0x1, 0x8, 0x8, 0xfff, 0x1, 0x0, 0x80000000, 0x8, 0x6ae, 0x40, 0x400, 0x5, 0x200, 0x3, 0x4, 0x7, 0x5ef, 0x85fe, 0xd75, 0x269, 0x5, 0xffff8001, 0x1, 0x5, 0x318, 0x8, 0x8, 0x9, 0xc7, 0xff, 0x9, 0xffff, 0x6, 0x6, 0x0, 0x81, 0x2, 0x9, 0x2, 0x9, 0x4, 0x0, 0x29, 0x3, 0xd290, 0x2, 0x3c27, 0x5, 0x8, 0x1, 0x2, 0x8001, 0x80, 0x200, 0x0, 0x1f, 0x7f, 0x101, 0x8, 0x0, 0xd0, 0x8, 0x3, 0x4, 0x0, 0x3f, 0x7, 0x9, 0x81, 0x0, 0xfffffff9, 0xf1, 0x7f, 0x200, 0xe1a, 0x4, 0x3f, 0x9, 0x9, 0x40d7, 0x100, 0x2, 0x7, 0xcb, 0x4, 0x10000, 0x7, 0x2, 0x80000000, 0x8, 0x7, 0x80, 0x8, 0x7, 0x4, 0x7, 0x1, 0x2, 0x7, 0x8001, 0x33f5000, 0x5, 0x3, 0x7, 0x2, 0xffff, 0x8, 0x1b, 0x2, 0x6, 0x5, 0xfce8, 0x3, 0x20, 0x8, 0x4, 0x7, 0x20, 0x8, 0x3, 0x3ff, 0x0, 0xffffffff, 0x6573, 0x46, 0x7c5, 0x1, 0x7, 0x0, 0x80, 0x7, 0x47c4, 0x9]}) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close(r0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000010c0)={{0x1ff, 0x6}, 0x100, './file0\x00'}) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001200)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000001240)) r2 = epoll_create(0x4) fallocate(r2, 0x20, 0x3, 0x80) r3 = openat2(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x40843, 0x48, 0x1}, 0x18) write$tcp_mem(r3, &(0x7f0000001300)={0xfff, 0x20, 0x4f4, 0x20, 0xffffffffffffff84}, 0x48) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000001380)={0x1, 0x1, 0x80000001}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000013c0), 0x40c0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000001400)={0x8, 0x1000, 0xfffff801, 0x2b}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001440), 0x400000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000001480)) pipe2$9p(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) finit_module(r6, &(0x7f0000001500)='i[-\',@\x00', 0x1) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001540)={0x0, "bd09d3c350c84b4ad195f2e673517861"}) 00:47:35 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_TID={0xc}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440d4}, 0x800) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff3c}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000002c0)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x1, 0x9, 0x7ff}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000340)={0x34, 0xccb9, 0x8, 0x6, 0x200}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff6a3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4048014) r4 = socket$packet(0x11, 0x0, 0x300) readv(r4, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/199, 0xc7}], 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7f, @media='eth\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x464, 0x8, 0x70bd2d, 0x25dfdbfd, "24f39ce4a0caa9da7e3b6935f7b9d500cfa1aa0e609010fdf18840270a851414253e7f7782ae625f4ccec4933c202390a305a313b45daa22668d54212d", ["", "", "", "", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x20850}, 0x80) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000ac0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "3ab950ab4a860b"}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001ac0)={r5, 0x1000}) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000002ac0), 0x80800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002b00)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) 00:47:35 executing program 6: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x2, 0x1e, 0x1b4, &(0x7f0000000000)="0d2713ff1192b01c2e1817b9c80ca67028c59f7ad81e53cb0daf1c980cac1f331a64572090f99b31146ba4099f33b8d521ba29fb8093e9c0ff06a095f95d838a1dac58b0eff2d6954a6ae3012b3f4daa8dc1f721a0f8c92eb4b9cb0ea93b0c77496f7d67ee04e5cf804495be1536dfb192fd0ab69dd25f4400cfc97faf81453591289a58a3c9436469f84552aceda5da518e2401cd9f755f280ce57913d7252db218c71b7907b63c9d13b2dd28dfc0e2a2c6b2c7352183271fedea0f383b58942035abe1af5a92ecc573444e507924cf18da6de19aeb4e97f5f01cfc341a5cebfc7c51391483dcaa6d2b5c6c284ee33d854f55e75c3d9e074ec235963935ee90cc1e753a0ff2e3b8e60e8da1ab1196dcef8a31cbf5e33ce358453030f3c393dbf057d940340f7d8e7d633f73410b6273d0854d1204b758e7b61a903912a9a4d66c6376d9fc3962b58561a6b0d49c8be5908cb6d3d0c25738781699d331cfe88994d012544c70258db01525d6e07355bb35bd1db85b8841ed9f9aeca328b0a91d84c6885665c9e2c43b992c848099083c6f8c5ced1ab6ea3dbd43e463b6f888f8c8855fb4d53a8de89985716e29537a9a5300f0417eee54b8e77f23531103760d26d977a651f4dc5687244c7739890c3014318b1df295d4262ecbfdd9726581776eb794455663f4414518e410852ba5e38d56a7fca1cb439272a2f89741371b4e7f12c44d627d07b73d13671a09b26e6bc082bab6ba561d96db110478aca3314a95661d367592e17f0e95a060ba45106a4d820342ec907933c97fbc8c46f128c9eee68c247559c52793bc0e04a2fe680a70711a3895457fa1450b9a371e04b6980ca38cc86681de865090d062dfd740114f334aeb739f3b333ccdae318300a66f1f8dddaeb1f7b9555944a48cd6e186cbd7aec108ea4f89e1cbdc2f25e2042325e9c73d4ce0f04b34a7a04510a204a316bac0a6ffac9e6941a265941aaa35cbc409d167df4663bdd4fc7d3e3989f1b5080b308f1479b039dd2651a3fbf87fbe9d59ae892fe635f93e1e731da9c6183fd20693b862e5cbc21c4e2a91f7e7aa5857fc547221045807e0a6247f2177011abd1532d9fa6fe5a427a428229f5661478fa06c646a104d43e309206055f1d07249250347b722c329d76f2a92d57b17300ce69ebb18c6c93ae65e26ece4da292eae1944cde862146113e9c9534739908e3529e6ab2a2a78fd66b0d2ac4549b4e0a5233d6f82aba26436cc80c1c42572b3316928747efbf02eb9967c41ef3ce57377f56d9fe26609df6f70e97db6357bb7f32e4e87be424c050e43728c03c16de9b3b2a09b0d0e3729c44b417476e08b8d37e6cc15f370d12b1a57c73c748efff000822789c36788505d6ee92066e9330e3acf9387f5de5b75757652d5249401bb2e2ab59ca4e5d172b78103d7d3a24f1008"}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000008c0)={0x3, 0x1, 0x18, 0x1b, 0x37, &(0x7f00000004c0)}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0x2, 0xffffffff}}, './file0\x00'}) r3 = syz_open_dev$vcsn(&(0x7f0000000980), 0x0, 0x80881) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000009c0)={0xbe, 0xae9, 0x482, 0x8, 0x2, "af625d8192153b2b30722c7eee20b59d862864"}) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000a00)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000a40)) r4 = dup(r2) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000a80)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2, {0x80000000}}, './file0\x00'}) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000b00)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000b80)={0x7fff, 0x7d000000, 0xa0, 0x8001, 0x4, "f116264e7dbfccdc53cd2c0d6c9e020183daf6", 0x4, 0x3}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000bc0)) signalfd4(r3, &(0x7f0000000c00)={[0x1f]}, 0x8, 0x800) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000c40)) 00:47:35 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x400, 0x1a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x172}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x534, r1, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x4c}}}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@chsw_timing={0x68, 0x4, {0x7fff, 0xfff8}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x6, @device_a, 0x6, @device_b, 0x3, 0x78d}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x46, 0x7f, [@cf={0x4, 0x6, {0x7e, 0x80, 0x5, 0xdc}}, @gcr_ga={0xbd, 0x6, @device_b}, @cf={0x4, 0x6, {0x1f, 0xfe, 0x200, 0x33a7}}, @chsw_timing={0x68, 0x4, {0x8, 0x1}}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0xc, 0x1, 0x3, 0x0, {0x401, 0x4, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x0, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0xe4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xdb, 0x2, "38c5044364bad5e0be4df3829e1f39a7e0df32a6fcb76cc05d037773e8fa0d70493995df9ec80578c3e89a5d3b48a58cc5b572c08eb3686c66a4d105f15ff55f62d0af54d15a405d0a093343882827ba41c63874825839c4d52d5824421e437d3d981e1471bdd4a57926e63e9ff3e4e21fb7a05c2bbe7f4276e5b8d8d796de2bdbc01ba58f11a0aee4f7817d481a45c5dc245da8b236888f1f6ba4ae4a3d42717ecca48688b7102e5d4d6b1256e3e2a677406bc356b0eeb8792e594854c8e99170007f719b9a9f2a711ad77c495966cee629164185da97"}]}, @NL80211_ATTR_BEACON_HEAD={0x289, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_b, @device_b, @initial, {0x0, 0xea9}}, 0x2, @random=0x81, 0x2005, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xa9}, @void, @void, @val={0x5, 0xd, {0x3, 0xe2, 0x4, "55f9fb028c4e819e9fb9"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xe7, 0x8c, 0x8}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x40}}, @val={0x76, 0x6, {0xa1, 0x9, 0x6, 0x8}}, [{0xdd, 0xcf, "ff9c7c2af79151dde6570931bfec55bb07579f4881e7f591ca826d1c6387c2e05b8e9621ad7be24b19cb902b5f8cf1d789a21d976213c09264de7765ca5cf6f2583cf6af5c228c590581393d9e466506e8e8dfc3fc5abfc85565d1c1bc162a823a5f2cf05bfad6eff7d9743bf5f9978b7a24a85dce3add1cf05c5dfc47a33b87fcf98e6f71556825bcf075ba95e501fe689eaecc48bece52ccd23a5153c5025a8f945019cf83c91bc6aaee62d208ebe129632f652da9b402d88116b5cfa84332ec995ad146bf4500d53975c725db76"}, {0xdd, 0x20, "b8ab5db4e139c41613ddcc3f3cbb0fa0167f9c0832c31389a9e012c566fe7f42"}, {0xdd, 0xa, "d59c1fc1d50df476d522"}, {0xdd, 0xdf, "6bfdcd26c3492a2695620334a876ac411361e2d069e7bc1232ca4d647c675cb53b96cafe300fd7905f917a0b39f869eaad02c65cc51f8e8b4a5dd0e514a9e7b7006b037569a3740a56b8d18eb2a6e111b52508a576544396f23abd10e200a61259fa9b79a3182f234cfbd7fd9c051a5fcf7851233a503dd76889f29c635fe9fda4a22ff96ac96ca612677bcd4d011556d20d7e565f33fa8b775e558139e0e435b1e4a93476bf98f0745ecb07a7838c11062e7280d2d83d170cb131739ede283362c36d9aeb46e2b2266b6d4e5a6b641fadbf7e09a97c6a91342ae98f4d3209"}, {0xdd, 0x4e, "deb3aedc3b5165947b6cf9ef4edb7c17a9979535d097290bcf3c8209d0e1f890a233a0aceb3c0fd699e0bc430c01b6cd07855671f93cd9b04aa56c71c8b3cec251bca02097c82f1e35ae34bf74d1"}]}}, @NL80211_ATTR_BEACON_HEAD={0x11d, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xdd3}, @device_b, @broadcast, @random="6d2e3588bbb2", {0x5}}, 0x7, @random=0x5, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb2}, @val={0x4, 0x6, {0x9, 0x7, 0x1, 0x5}}, @val={0x6, 0x2, 0x400}, @val={0x5, 0x5a, {0xff, 0xbf, 0x2, "f9ad3f68fdcc256ab13074f68ae1e2b8016129496fc9b1b15202abc8fe1802d09131fd4bb6dca240ae6d0fa9d55764f38f1f14e62e666ddf4bc90fea8db6d1b86b200dad057aae76a3b9597ec788839ff44b9b73b25cdf"}}, @val={0x25, 0x3, {0x1, 0x64, 0x2}}, @void, @val={0x3c, 0x4, {0x0, 0x5a, 0x9d}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xf9, 0x88}}, @void, [{0xdd, 0x64, "171516a37a279f93db25d911a0e2fefa2fbbbabb9347e241b347d9b953fedf662bd3ae2a8d5ba50171987b209300d8ff9cdd6b7617a1b7f3310ed4a55ff3fba76e862687bb2d3422be9426e2802def7165892d10fba440b23153856499ada11a3b459e0f"}]}}]}, 0x534}, 0x1, 0x0, 0x0, 0x8040}, 0x81) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x6c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x404c001}, 0x20008000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x21c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aba5db0b72115aa09f100db3d843e9c3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "43e901f236cdac20"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fff2a0e86857020b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "137390fd9f253151"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2586f4b8b67ba4e2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2ab0b735bd0790936b9bfa03e8f7b467"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e45bd26a9335e530dc7c535091081d54"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f36eca9c177100c0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf4}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a8d71b8fc5bc16a1ddebe4a0bea95956"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3e6e05fb88b78fae415cd6a552eff817"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="711435610e76916f0b25acea8d10dcf7497bee9043d1837984ae9b5bbd2f8ec2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6cea438bd209f34e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="262fd4aff855961ba15aa2b891b06590"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="72ea56d86e3a131910a74eb6d6b1c613"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x28000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "43294a44b80ebca3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28c33cd67819d576"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8040026da6815a5fef23963dee705b4ae9d918dd0b8e2a1c57e0438b322b2715"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eee0e56b6520b0515d8f1b0daaf3f1a28d7b48592af66157"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f3adbaf56f7527ba1ef3f61c8521b2ad"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3ac38114877818baceb652043916c3d003b31ee8ae9e1c45"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a6afc426d0154057efdf62585f0497a0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="61002dacdfcad0ec3c4a839d11e8a39d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x75b4}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40010}, 0x48045) fcntl$setflags(r2, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000c40)=0x3) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000c80)={0x20, 0x1f, 0x4, 0x0, "d3a115886c9ff6dd9ce5954c9b7e478a20bb4a16f206c55c35c3607936a74ab1"}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80201, 0x0) r5 = syz_genetlink_get_family_id$ethtool(0xfffffffffffffffc, r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d40)={'netdevsim0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000e00)={'ip6_vti0\x00', &(0x7f0000000d80)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x20, 0x4, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x20, 0x700, 0x7fff, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000e40)={'gre0\x00', 0x0, 0x700, 0x8000, 0x2, 0xc57, {{0x26, 0x4, 0x1, 0x5, 0x98, 0x67, 0x0, 0x4, 0x75, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x38, 0x2, [{0x5, 0xf, "97a4151b329fb6a781d13a0089"}, {0x7, 0x11, "cfd12c8ed7a515f3346bd1feb80803"}, {0x0, 0x2}, {0x0, 0xd, "5c57530ef63af140bd0f2d"}, {0x4, 0x3, "ca"}]}, @ssrr={0x89, 0x23, 0xb8, [@multicast1, @remote, @empty, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @private=0xa010101]}, @noop, @cipso={0x86, 0x27, 0x3, [{0x6, 0x5, "620e4e"}, {0x5, 0x9, "327a2f8b777e3d"}, {0x5, 0x5, "28c574"}, {0x5, 0xe, "37f4db747fe6d77d344bee10"}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000001080)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xe0, r5, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) readv(r4, &(0x7f0000001640)=[{&(0x7f00000010c0)=""/149, 0x95}, {&(0x7f0000001180)=""/65, 0x41}, {&(0x7f0000001200)=""/50, 0x32}, {&(0x7f0000001240)=""/152, 0x98}, {&(0x7f0000001300)=""/97, 0x61}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/138, 0x8a}, {&(0x7f0000001540)=""/78, 0x4e}, {&(0x7f00000015c0)=""/112, 0x70}], 0x9) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001700)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x4008085) [ 72.369546] audit: type=1400 audit(1664758055.323:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:47:35 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80c880, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x298, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c6a0000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x57686bcf}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe5000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x12}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7117}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x120000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc3}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20001014}, 0x40c0) ftruncate(r0, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x1000, 0xfffff01f, {{0x14, 0x4, 0x1, 0x1c, 0x50, 0x68, 0x0, 0x4, 0x29, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x2c, 0xfe, 0x0, 0x7, [0x7fffffff, 0x81, 0x7, 0x1, 0xbc, 0x5, 0x100, 0x0, 0x401, 0x2]}, @rr={0x7, 0xf, 0x7c, [@broadcast, @rand_addr=0x64010101, @empty]}]}}}}}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={0x0, @isdn={0x22, 0x9, 0x81, 0x0, 0x8b}, @nl=@unspec, @xdp={0x2c, 0x1, r2, 0x3}, 0x2, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000500)='bond0\x00', 0x0, 0x2, 0x5}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000005c0)) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x81801) ioctl$KDSETLED(r3, 0x4b32, 0x4) fdatasync(r3) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}}, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x17}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c045}, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840), 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0xa0910004}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x1917}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x105480, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r5 = syz_mount_image$tmpfs(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x2, 0x6, &(0x7f0000000e40)=[{&(0x7f0000000a80)="b3992b7b4ae7c3d3ce04b72832627f3c809847e1d304e5532e701a7e756729558e76d56f58d5fac23b54fc99bbe334f8107d95f55b0ee248ac44c403593547b2bc9a04962a", 0x45}, {&(0x7f0000000b00)="bf9ed163164feb64a045a8b80d77911687af10cb6c81ffc76c7752caeb7ae63cb8f9b0429c12408680bc1a333bbf112ae5302125074854b05bda71e17c8197ed6f4e5e2dd1802ebf67e8162404a1cd75cf94a9b0c4950098ebad2b7163948ea367f9203103c2877f21244dd792f4b3cddd4e237a4c48f524ea873e4cfb9db43829892c3536d73249bc0bd4ecb4c50e5af386f802c09b54d954ab9ec42abfe2185165cd22cf6869d317b4e9ff4095f087a2e13fa338c9604f7184196d75c131dee2a39771180c226d0175e6b348f437d86a30a56d37774f4b", 0xd8, 0xe7}, {&(0x7f0000000c00)="eb53e66d066c89e73e9e0eebce5bb4a3f016cd73e3aa647f0f0d3f0417e4c3225b4fe92d04eb", 0x26, 0x9}, {&(0x7f0000000c40)="d09131b5b10f114b667b9cd70aabb9ffcd98b8f7e364dafd45993513cc135779a6b554deff20689415d7d5432f0e185a64f4ee201080d68de78236d7905a53a4ff42193ef477244a5cee88f570eee372aa2b3e01a25383c35a541e725c7659d01e312368133fe9708e76cec704729d09de39e49d17568ebbe7bfa02eb59aea5daa78b7d7", 0x84}, {&(0x7f0000000d00)="d5c0bd86352518ade32ed243f83e5574f2005d83a59abe29f172db99529a977e0ec9f5e454903b0a", 0x28, 0xfffffffffffff038}, {&(0x7f0000000d40)="b02f37b8df510744b736d2d3eea5e4328be2d580b6838f866f33c676885155b8dbba8d1839df33a6440937e1fd3a296a2ca65f1f345e8a591d0b1c3b5561cebb90c430d53a0fa002835880355aa2c7f0e5ecac02f3b0f131a7592d3980822b381cd37d42ffe24c71dab06c9d6f30d607685413619988d6109dfe8970e5b78cdc52dd5dbd2936d3cd1bdb241137bfc751e6817cbee1eba10ac610affc3431ad7e65758931da4ecc0ed4838ac7cc713d48f13f0cd72ad4aab0512af60f32e9fa4031af33c46905c31e9fe36b439a1110321c824b1ac715056b96", 0xd9, 0x4}], 0x40080, &(0x7f0000000f00)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, 0xee01}}, {@nr_blocks={'nr_blocks', 0x3d, [0x74, 0x33, 0x36, 0x31, 0x35, 0x6b, 0x30, 0x2d, 0x3c, 0x31]}}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x8}}, {@size={'size', 0x3d, [0x38]}}, {@huge_advise}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x30, 0x38, 0x4, 0x65, 0x38, 0x36, 0x33], 0x2d, [0x30, 0x30, 0x31, 0x32], 0x2d, [0x36, 0x1c, 0x34, 0x32], 0x2d, [0x33, 0x32, 0x31, 0x38], 0x2d, [0x32, 0x32, 0x61, 0x65, 0x5e, 0x64, 0x63, 0x30]}}}, {@dont_measure}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '&.@'}}, {@appraise_type}]}) move_mount(r5, &(0x7f0000001080)='./file0\x00', r0, &(0x7f00000010c0)='./file0\x00', 0x77) [ 73.556777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.559667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.561522] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.570561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.572084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.575254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.581254] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.583972] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.585333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.586703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.589169] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.593810] Bluetooth: hci0: HCI_REQ-0x0c1a [ 73.616632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.617806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.623279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.630650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.632525] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.634223] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.636755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.638664] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.640121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.644501] Bluetooth: hci4: HCI_REQ-0x0c1a [ 73.669792] Bluetooth: hci1: HCI_REQ-0x0c1a [ 73.674455] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.676349] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.678104] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.679401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.681329] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.682557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.689681] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.690919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.693920] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 73.694634] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.696587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.697957] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.703553] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.705557] Bluetooth: hci6: HCI_REQ-0x0c1a [ 73.719634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.729234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.739491] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.741970] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.743809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.746870] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.750422] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.752243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 73.753646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.758866] Bluetooth: hci7: HCI_REQ-0x0c1a [ 73.776447] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.788304] Bluetooth: hci3: HCI_REQ-0x0c1a [ 75.643260] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 75.643504] Bluetooth: hci0: command 0x0409 tx timeout [ 75.706829] Bluetooth: hci4: command 0x0409 tx timeout [ 75.707483] Bluetooth: hci5: command 0x0409 tx timeout [ 75.770264] Bluetooth: hci1: command 0x0409 tx timeout [ 75.770291] Bluetooth: hci7: command 0x0409 tx timeout [ 75.771501] Bluetooth: hci6: command 0x0409 tx timeout [ 75.835134] Bluetooth: hci3: command 0x0409 tx timeout [ 77.691011] Bluetooth: hci0: command 0x041b tx timeout [ 77.756717] Bluetooth: hci5: command 0x041b tx timeout [ 77.756785] Bluetooth: hci4: command 0x041b tx timeout [ 77.818120] Bluetooth: hci6: command 0x041b tx timeout [ 77.819199] Bluetooth: hci7: command 0x041b tx timeout [ 77.819608] Bluetooth: hci1: command 0x041b tx timeout [ 77.882108] Bluetooth: hci3: command 0x041b tx timeout [ 78.983293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.985878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.996461] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.002189] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.005224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.008622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.018057] Bluetooth: hci2: HCI_REQ-0x0c1a [ 79.738055] Bluetooth: hci0: command 0x040f tx timeout [ 79.802088] Bluetooth: hci5: command 0x040f tx timeout [ 79.802559] Bluetooth: hci4: command 0x040f tx timeout [ 79.866249] Bluetooth: hci1: command 0x040f tx timeout [ 79.866717] Bluetooth: hci7: command 0x040f tx timeout [ 79.867240] Bluetooth: hci6: command 0x040f tx timeout [ 79.931148] Bluetooth: hci3: command 0x040f tx timeout [ 81.083135] Bluetooth: hci2: command 0x0409 tx timeout [ 81.786074] Bluetooth: hci0: command 0x0419 tx timeout [ 81.850086] Bluetooth: hci4: command 0x0419 tx timeout [ 81.850534] Bluetooth: hci5: command 0x0419 tx timeout [ 81.914055] Bluetooth: hci6: command 0x0419 tx timeout [ 81.914538] Bluetooth: hci7: command 0x0419 tx timeout [ 81.914925] Bluetooth: hci1: command 0x0419 tx timeout [ 81.978084] Bluetooth: hci3: command 0x0419 tx timeout [ 83.131052] Bluetooth: hci2: command 0x041b tx timeout [ 85.178073] Bluetooth: hci2: command 0x040f tx timeout [ 87.227070] Bluetooth: hci2: command 0x0419 tx timeout 00:48:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24e1, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x128400, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x2}, 0x2c, {[{@access_client}, {@fscache}, {@fscache}, {@mmap}, {@afid={'afid', 0x3d, 0xfbd}}, {@cache_fscache}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'veth1_virt_wifi\x00'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40086607, &(0x7f0000002000)) r1 = socket$inet6(0xa, 0x80000, 0x23) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00', {}, 0xff80}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={@private1, @empty, @empty, 0x0, 0x0, 0x8003}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x7fffffff, @private2, 0x3}, 0x1c) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000540)={0x0, 0xfffffffffffffff7}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x80, @local, 0x4}, 0x1c) 00:48:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0xfffffffe}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = fsmount(r0, 0x1, 0x81) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) fallocate(r2, 0x0, 0x0, 0x87ffffc) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) 00:48:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24e1, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x128400, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x2}, 0x2c, {[{@access_client}, {@fscache}, {@fscache}, {@mmap}, {@afid={'afid', 0x3d, 0xfbd}}, {@cache_fscache}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'veth1_virt_wifi\x00'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40086607, &(0x7f0000002000)) r1 = socket$inet6(0xa, 0x80000, 0x23) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00', {}, 0xff80}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={@private1, @empty, @empty, 0x0, 0x0, 0x8003}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x7fffffff, @private2, 0x3}, 0x1c) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000540)={0x0, 0xfffffffffffffff7}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x80, @local, 0x4}, 0x1c) [ 125.896192] audit: type=1400 audit(1664758108.849:7): avc: denied { open } for pid=3846 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.898087] audit: type=1400 audit(1664758108.850:8): avc: denied { kernel } for pid=3846 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.922967] ------------[ cut here ]------------ [ 125.923006] [ 125.923012] ====================================================== [ 125.923018] WARNING: possible circular locking dependency detected [ 125.923024] 6.0.0-rc7-next-20220930 #1 Not tainted [ 125.923036] ------------------------------------------------------ [ 125.923041] syz-executor.3/3847 is trying to acquire lock: [ 125.923052] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 125.923119] [ 125.923119] but task is already holding lock: [ 125.923123] ffff88800ea1f420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.923170] [ 125.923170] which lock already depends on the new lock. [ 125.923170] [ 125.923175] [ 125.923175] the existing dependency chain (in reverse order) is: [ 125.923181] [ 125.923181] -> #3 (&ctx->lock){....}-{2:2}: [ 125.923205] _raw_spin_lock+0x2a/0x40 [ 125.923226] __perf_event_task_sched_out+0x53b/0x18d0 [ 125.923246] __schedule+0xedd/0x2470 [ 125.923271] schedule+0xda/0x1b0 [ 125.923295] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.923317] syscall_exit_to_user_mode+0x19/0x40 [ 125.923340] do_syscall_64+0x48/0x90 [ 125.923371] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.923394] [ 125.923394] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 125.923419] _raw_spin_lock_nested+0x30/0x40 [ 125.923438] raw_spin_rq_lock_nested+0x1e/0x30 [ 125.923461] task_fork_fair+0x63/0x4d0 [ 125.923491] sched_cgroup_fork+0x3d0/0x540 [ 125.923516] copy_process+0x4183/0x6e20 [ 125.923535] kernel_clone+0xe7/0x890 [ 125.923552] user_mode_thread+0xad/0xf0 [ 125.923571] rest_init+0x24/0x250 [ 125.923592] arch_call_rest_init+0xf/0x14 [ 125.923622] start_kernel+0x4c6/0x4eb [ 125.923650] secondary_startup_64_no_verify+0xe0/0xeb [ 125.923675] [ 125.923675] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 125.923699] _raw_spin_lock_irqsave+0x39/0x60 [ 125.923719] try_to_wake_up+0xab/0x1930 [ 125.923743] up+0x75/0xb0 [ 125.923769] __up_console_sem+0x6e/0x80 [ 125.923797] console_unlock+0x46a/0x590 [ 125.923826] vt_ioctl+0x2822/0x2ca0 [ 125.923847] tty_ioctl+0x785/0x16b0 [ 125.923865] __x64_sys_ioctl+0x19a/0x210 [ 125.923889] do_syscall_64+0x3b/0x90 [ 125.923920] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.923943] [ 125.923943] -> #0 ((console_sem).lock){....}-{2:2}: [ 125.923968] __lock_acquire+0x2a02/0x5e70 [ 125.923998] lock_acquire+0x1a2/0x530 [ 125.924031] _raw_spin_lock_irqsave+0x39/0x60 [ 125.924050] down_trylock+0xe/0x70 [ 125.924078] __down_trylock_console_sem+0x3b/0xd0 [ 125.924107] vprintk_emit+0x16b/0x560 [ 125.924136] vprintk+0x84/0xa0 [ 125.924165] _printk+0xba/0xf1 [ 125.924185] report_bug.cold+0x72/0xab [ 125.924214] handle_bug+0x3c/0x70 [ 125.924244] exc_invalid_op+0x14/0x50 [ 125.924275] asm_exc_invalid_op+0x16/0x20 [ 125.924297] group_sched_out.part.0+0x2c7/0x460 [ 125.924329] ctx_sched_out+0x8f1/0xc10 [ 125.924359] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.924379] __schedule+0xedd/0x2470 [ 125.924404] schedule+0xda/0x1b0 [ 125.924428] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.924448] syscall_exit_to_user_mode+0x19/0x40 [ 125.924471] do_syscall_64+0x48/0x90 [ 125.924501] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.924525] [ 125.924525] other info that might help us debug this: [ 125.924525] [ 125.924530] Chain exists of: [ 125.924530] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 125.924530] [ 125.924559] Possible unsafe locking scenario: [ 125.924559] [ 125.924564] CPU0 CPU1 [ 125.924569] ---- ---- [ 125.924573] lock(&ctx->lock); [ 125.924583] lock(&rq->__lock); [ 125.924595] lock(&ctx->lock); [ 125.924606] lock((console_sem).lock); [ 125.924616] [ 125.924616] *** DEADLOCK *** [ 125.924616] [ 125.924620] 2 locks held by syz-executor.3/3847: [ 125.924632] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 125.924685] #1: ffff88800ea1f420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.924734] [ 125.924734] stack backtrace: [ 125.924738] CPU: 0 PID: 3847 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 125.924761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.924775] Call Trace: [ 125.924780] [ 125.924787] dump_stack_lvl+0x8b/0xb3 [ 125.924820] check_noncircular+0x263/0x2e0 [ 125.924851] ? format_decode+0x26c/0xb50 [ 125.924879] ? print_circular_bug+0x450/0x450 [ 125.924910] ? simple_strtoul+0x30/0x30 [ 125.924940] ? format_decode+0x26c/0xb50 [ 125.924971] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 125.925004] __lock_acquire+0x2a02/0x5e70 [ 125.925043] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 125.925085] lock_acquire+0x1a2/0x530 [ 125.925115] ? down_trylock+0xe/0x70 [ 125.925147] ? lock_release+0x750/0x750 [ 125.925184] ? vprintk+0x84/0xa0 [ 125.925217] _raw_spin_lock_irqsave+0x39/0x60 [ 125.925238] ? down_trylock+0xe/0x70 [ 125.925267] down_trylock+0xe/0x70 [ 125.925296] ? vprintk+0x84/0xa0 [ 125.925327] __down_trylock_console_sem+0x3b/0xd0 [ 125.925359] vprintk_emit+0x16b/0x560 [ 125.925393] vprintk+0x84/0xa0 [ 125.925425] _printk+0xba/0xf1 [ 125.925446] ? record_print_text.cold+0x16/0x16 [ 125.925476] ? report_bug.cold+0x66/0xab [ 125.925508] ? group_sched_out.part.0+0x2c7/0x460 [ 125.925542] report_bug.cold+0x72/0xab [ 125.925577] handle_bug+0x3c/0x70 [ 125.925609] exc_invalid_op+0x14/0x50 [ 125.925642] asm_exc_invalid_op+0x16/0x20 [ 125.925665] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.925702] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.925723] RSP: 0018:ffff88800acc7c48 EFLAGS: 00010006 [ 125.925739] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.925753] RDX: ffff888018265040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 125.925767] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 125.925780] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ea1f400 [ 125.925794] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 125.925814] ? group_sched_out.part.0+0x2c7/0x460 [ 125.925850] ? group_sched_out.part.0+0x2c7/0x460 [ 125.925887] ctx_sched_out+0x8f1/0xc10 [ 125.925923] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.925949] ? lock_is_held_type+0xd7/0x130 [ 125.925974] ? __perf_cgroup_move+0x160/0x160 [ 125.925994] ? set_next_entity+0x304/0x550 [ 125.926026] ? update_curr+0x267/0x740 [ 125.926060] ? lock_is_held_type+0xd7/0x130 [ 125.926086] __schedule+0xedd/0x2470 [ 125.926117] ? io_schedule_timeout+0x150/0x150 [ 125.926147] ? rcu_read_lock_sched_held+0x3e/0x80 [ 125.926184] schedule+0xda/0x1b0 [ 125.926212] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.926234] syscall_exit_to_user_mode+0x19/0x40 [ 125.926259] do_syscall_64+0x48/0x90 [ 125.926292] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.926316] RIP: 0033:0x7f4229883b19 [ 125.926331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.926351] RSP: 002b:00007f4226df9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.926370] RAX: 0000000000000001 RBX: 00007f4229996f68 RCX: 00007f4229883b19 [ 125.926384] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4229996f6c [ 125.926397] RBP: 00007f4229996f60 R08: 000000000000000e R09: 0000000000000000 [ 125.926410] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4229996f6c [ 125.926423] R13: 00007ffdfaaaba9f R14: 00007f4226df9300 R15: 0000000000022000 [ 125.926447] [ 126.024619] WARNING: CPU: 0 PID: 3847 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 126.025887] Modules linked in: [ 126.026326] CPU: 0 PID: 3847 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 126.027418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.028918] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.029668] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.032123] RSP: 0018:ffff88800acc7c48 EFLAGS: 00010006 [ 126.032840] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.033798] RDX: ffff888018265040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 126.034744] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 126.035719] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ea1f400 [ 126.036668] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 126.037631] FS: 00007f4226df9700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.038714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.039519] CR2: 00007fa1d30c4000 CR3: 000000003ebd8000 CR4: 0000000000350ef0 [ 126.040493] Call Trace: [ 126.040848] [ 126.041169] ctx_sched_out+0x8f1/0xc10 [ 126.041729] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.042435] ? lock_is_held_type+0xd7/0x130 [ 126.043030] ? __perf_cgroup_move+0x160/0x160 [ 126.043654] ? set_next_entity+0x304/0x550 [ 126.044254] ? update_curr+0x267/0x740 [ 126.044822] ? lock_is_held_type+0xd7/0x130 [ 126.045426] __schedule+0xedd/0x2470 [ 126.045954] ? io_schedule_timeout+0x150/0x150 [ 126.046602] ? rcu_read_lock_sched_held+0x3e/0x80 [ 126.047283] schedule+0xda/0x1b0 [ 126.047768] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.048447] syscall_exit_to_user_mode+0x19/0x40 [ 126.049111] do_syscall_64+0x48/0x90 [ 126.049638] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.050350] RIP: 0033:0x7f4229883b19 [ 126.050876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.053342] RSP: 002b:00007f4226df9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.054374] RAX: 0000000000000001 RBX: 00007f4229996f68 RCX: 00007f4229883b19 [ 126.055352] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4229996f6c [ 126.056320] RBP: 00007f4229996f60 R08: 000000000000000e R09: 0000000000000000 [ 126.057285] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4229996f6c [ 126.058257] R13: 00007ffdfaaaba9f R14: 00007f4226df9300 R15: 0000000000022000 [ 126.059264] [ 126.059590] irq event stamp: 668 [ 126.060050] hardirqs last enabled at (667): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 126.061304] hardirqs last disabled at (668): [] __schedule+0x1225/0x2470 [ 126.062423] softirqs last enabled at (362): [] __irq_exit_rcu+0x11b/0x180 [ 126.063586] softirqs last disabled at (327): [] __irq_exit_rcu+0x11b/0x180 [ 126.064742] ---[ end trace 0000000000000000 ]--- 00:48:29 executing program 5: syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) r4 = getpid() pidfd_open(r4, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) read$hidraw(r5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x40, 0x8, 0x3, 0x2, 0x0, 0x1, 0x1020, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x8000, 0x8}, 0x4b02e, 0x5, 0x401, 0x0, 0xff, 0x5, 0x1, 0x0, 0x1000, 0x0, 0x7fffffff}, r4, 0x3, r5, 0x7) 00:48:29 executing program 6: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x7) fdatasync(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) r2 = syz_open_pts(r1, 0x800) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) fcntl$addseals(r0, 0x409, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000004c0)={@private1, @empty, @empty, 0x0, 0x0, 0x8001}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x110, r3, 0xc2060000) write$P9_RSETATTR(r1, &(0x7f00000002c0)={0x7, 0x1b, 0x2}, 0x7) [ 126.557005] hrtimer: interrupt took 16791 ns 00:48:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) llistxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=""/138, 0x8a) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'vlan0\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b63, 0x0) fcntl$getflags(0xffffffffffffffff, 0xb) ioctl$KDSKBLED(r1, 0x4b65, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000001c0)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000004c0)={@private1, @empty, @empty, 0x0, 0x0, 0x8001}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000004c0)={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, r5}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'wg1\x00'}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000140)) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000) [ 126.631491] device syz_tun entered promiscuous mode 00:48:29 executing program 5: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000300), 0x0, &(0x7f00000000c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x2002) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/45) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) [ 126.893564] device syz_tun left promiscuous mode 00:48:29 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="26909bff000000000700000000a857000000000000f200b9ca65a481d37a3f000000bafecaddf88ca40f4cdca88c15d622526d4e52de0b11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855cc5b8cdf4b9a731d623fb060d5ab5e21c572daca488566329b62f6095610d4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fdf0a54ac2a72e6c4e6e74f300"/245], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 126.951880] device syz_tun entered promiscuous mode [ 126.953274] device syz_tun left promiscuous mode [ 127.248724] loop7: detected capacity change from 0 to 16368 [ 127.284414] loop7: detected capacity change from 0 to 16368 VM DIAGNOSIS: 00:48:29 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800acc75f8 R8 =0000000000000004 R9 =0000000000000010 R10=000000000000000f R11=0000000000000001 R12=0000000000002710 R13=0000000000000060 R14=fffffbfff0ecb584 R15=dffffc0000000000 RIP=ffffffff823bb0c1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4226df9700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa1d30c4000 CR3=000000003ebd8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f422996a7c0 00007f422996a7c8 YMM02=0000000000000000 0000000000000000 00007f422996a7e0 00007f422996a7c0 YMM03=0000000000000000 0000000000000000 00007f422996a7c8 00007f422996a7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=1ffff11001f16a9d RBX=ffff88807ad0de30 RCX=ffffffff811da3e7 RDX=1ffff110012bd300 RSI=0000000000000008 RDI=ffff8880095e9800 RBP=dffffc0000000000 RSP=ffff88800fe4fda8 R8 =0000000000000000 R9 =ffff8880095e9807 R10=ffffed10012bd300 R11=0000000000000001 R12=ffff88807ad0dff9 R13=ffff88800f8b5040 R14=fefefefefefefefe R15=0000000000000092 RIP=ffffffff817bd374 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f22d7670000 CR3=0000000015edc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000