Warning: Permanently added '[localhost]:27563' (ECDSA) to the list of known hosts. 2022/10/01 04:11:09 fuzzer started 2022/10/01 04:11:09 dialing manager at localhost:35095 syzkaller login: [ 37.445126] cgroup: Unknown subsys name 'net' [ 37.557511] cgroup: Unknown subsys name 'rlimit' 2022/10/01 04:11:23 syscalls: 2215 2022/10/01 04:11:23 code coverage: enabled 2022/10/01 04:11:23 comparison tracing: enabled 2022/10/01 04:11:23 extra coverage: enabled 2022/10/01 04:11:23 setuid sandbox: enabled 2022/10/01 04:11:23 namespace sandbox: enabled 2022/10/01 04:11:23 Android sandbox: enabled 2022/10/01 04:11:23 fault injection: enabled 2022/10/01 04:11:23 leak checking: enabled 2022/10/01 04:11:23 net packet injection: enabled 2022/10/01 04:11:23 net device setup: enabled 2022/10/01 04:11:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 04:11:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 04:11:23 USB emulation: enabled 2022/10/01 04:11:23 hci packet injection: enabled 2022/10/01 04:11:23 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 04:11:23 802.15.4 emulation: enabled 2022/10/01 04:11:24 fetching corpus: 50, signal 29696/31390 (executing program) 2022/10/01 04:11:24 fetching corpus: 100, signal 40242/43466 (executing program) 2022/10/01 04:11:24 fetching corpus: 150, signal 46292/50905 (executing program) 2022/10/01 04:11:24 fetching corpus: 200, signal 53049/58964 (executing program) 2022/10/01 04:11:24 fetching corpus: 250, signal 58627/65720 (executing program) 2022/10/01 04:11:24 fetching corpus: 300, signal 63433/71618 (executing program) 2022/10/01 04:11:24 fetching corpus: 350, signal 72120/81044 (executing program) 2022/10/01 04:11:24 fetching corpus: 400, signal 76860/86695 (executing program) 2022/10/01 04:11:24 fetching corpus: 450, signal 79278/90156 (executing program) 2022/10/01 04:11:25 fetching corpus: 500, signal 82423/94236 (executing program) 2022/10/01 04:11:25 fetching corpus: 550, signal 85898/98510 (executing program) 2022/10/01 04:11:25 fetching corpus: 600, signal 90895/104093 (executing program) 2022/10/01 04:11:25 fetching corpus: 650, signal 92920/106964 (executing program) 2022/10/01 04:11:25 fetching corpus: 700, signal 95241/110018 (executing program) 2022/10/01 04:11:25 fetching corpus: 750, signal 98337/113682 (executing program) 2022/10/01 04:11:25 fetching corpus: 800, signal 101174/117054 (executing program) 2022/10/01 04:11:25 fetching corpus: 850, signal 103869/120291 (executing program) 2022/10/01 04:11:26 fetching corpus: 900, signal 106976/123825 (executing program) 2022/10/01 04:11:26 fetching corpus: 950, signal 109108/126476 (executing program) 2022/10/01 04:11:26 fetching corpus: 1000, signal 110035/128132 (executing program) 2022/10/01 04:11:26 fetching corpus: 1050, signal 112356/130837 (executing program) 2022/10/01 04:11:26 fetching corpus: 1100, signal 114375/133342 (executing program) 2022/10/01 04:11:26 fetching corpus: 1150, signal 116460/135759 (executing program) 2022/10/01 04:11:26 fetching corpus: 1200, signal 117379/137290 (executing program) 2022/10/01 04:11:27 fetching corpus: 1250, signal 120125/140206 (executing program) 2022/10/01 04:11:27 fetching corpus: 1300, signal 121414/141942 (executing program) 2022/10/01 04:11:27 fetching corpus: 1350, signal 123649/144358 (executing program) 2022/10/01 04:11:27 fetching corpus: 1400, signal 126438/147171 (executing program) 2022/10/01 04:11:27 fetching corpus: 1450, signal 129420/149994 (executing program) 2022/10/01 04:11:27 fetching corpus: 1500, signal 130952/151764 (executing program) 2022/10/01 04:11:27 fetching corpus: 1550, signal 132545/153526 (executing program) 2022/10/01 04:11:27 fetching corpus: 1600, signal 133951/155108 (executing program) 2022/10/01 04:11:28 fetching corpus: 1650, signal 134916/156403 (executing program) 2022/10/01 04:11:28 fetching corpus: 1700, signal 136061/157864 (executing program) 2022/10/01 04:11:28 fetching corpus: 1750, signal 137986/159817 (executing program) 2022/10/01 04:11:28 fetching corpus: 1800, signal 139718/161552 (executing program) 2022/10/01 04:11:28 fetching corpus: 1850, signal 140988/162959 (executing program) 2022/10/01 04:11:28 fetching corpus: 1900, signal 141779/164008 (executing program) 2022/10/01 04:11:28 fetching corpus: 1950, signal 142836/165228 (executing program) 2022/10/01 04:11:28 fetching corpus: 2000, signal 143871/166424 (executing program) 2022/10/01 04:11:28 fetching corpus: 2050, signal 145728/168171 (executing program) 2022/10/01 04:11:28 fetching corpus: 2100, signal 146636/169211 (executing program) 2022/10/01 04:11:29 fetching corpus: 2150, signal 147690/170308 (executing program) 2022/10/01 04:11:29 fetching corpus: 2200, signal 148642/171353 (executing program) 2022/10/01 04:11:29 fetching corpus: 2250, signal 150182/172783 (executing program) 2022/10/01 04:11:29 fetching corpus: 2300, signal 151165/173801 (executing program) 2022/10/01 04:11:29 fetching corpus: 2350, signal 152028/174749 (executing program) 2022/10/01 04:11:29 fetching corpus: 2400, signal 153199/175864 (executing program) 2022/10/01 04:11:29 fetching corpus: 2450, signal 153925/176676 (executing program) 2022/10/01 04:11:29 fetching corpus: 2500, signal 154904/177634 (executing program) 2022/10/01 04:11:29 fetching corpus: 2550, signal 155419/178354 (executing program) 2022/10/01 04:11:30 fetching corpus: 2600, signal 157098/179540 (executing program) 2022/10/01 04:11:30 fetching corpus: 2650, signal 157755/180310 (executing program) 2022/10/01 04:11:30 fetching corpus: 2700, signal 158447/181076 (executing program) 2022/10/01 04:11:30 fetching corpus: 2750, signal 159102/181784 (executing program) 2022/10/01 04:11:30 fetching corpus: 2800, signal 160814/182912 (executing program) 2022/10/01 04:11:30 fetching corpus: 2850, signal 162229/183857 (executing program) 2022/10/01 04:11:30 fetching corpus: 2900, signal 164184/185041 (executing program) 2022/10/01 04:11:30 fetching corpus: 2950, signal 165743/186015 (executing program) 2022/10/01 04:11:30 fetching corpus: 3000, signal 166193/186556 (executing program) 2022/10/01 04:11:31 fetching corpus: 3050, signal 166849/187113 (executing program) 2022/10/01 04:11:31 fetching corpus: 3100, signal 167358/187633 (executing program) 2022/10/01 04:11:31 fetching corpus: 3150, signal 168405/188346 (executing program) 2022/10/01 04:11:31 fetching corpus: 3200, signal 169209/188998 (executing program) 2022/10/01 04:11:31 fetching corpus: 3250, signal 169740/189468 (executing program) 2022/10/01 04:11:31 fetching corpus: 3300, signal 170356/189977 (executing program) 2022/10/01 04:11:31 fetching corpus: 3350, signal 171525/190663 (executing program) 2022/10/01 04:11:31 fetching corpus: 3400, signal 172114/191148 (executing program) 2022/10/01 04:11:31 fetching corpus: 3450, signal 172687/191597 (executing program) 2022/10/01 04:11:32 fetching corpus: 3500, signal 173350/192088 (executing program) 2022/10/01 04:11:32 fetching corpus: 3550, signal 174463/192661 (executing program) 2022/10/01 04:11:32 fetching corpus: 3600, signal 175355/193165 (executing program) 2022/10/01 04:11:32 fetching corpus: 3650, signal 176247/193658 (executing program) 2022/10/01 04:11:32 fetching corpus: 3700, signal 177387/194160 (executing program) 2022/10/01 04:11:32 fetching corpus: 3750, signal 177943/194566 (executing program) 2022/10/01 04:11:32 fetching corpus: 3800, signal 178699/194963 (executing program) 2022/10/01 04:11:32 fetching corpus: 3850, signal 179206/195292 (executing program) 2022/10/01 04:11:32 fetching corpus: 3900, signal 179745/195649 (executing program) 2022/10/01 04:11:33 fetching corpus: 3950, signal 180562/196016 (executing program) 2022/10/01 04:11:33 fetching corpus: 4000, signal 181436/196388 (executing program) 2022/10/01 04:11:33 fetching corpus: 4050, signal 183430/196977 (executing program) 2022/10/01 04:11:33 fetching corpus: 4100, signal 184385/197312 (executing program) 2022/10/01 04:11:33 fetching corpus: 4150, signal 185252/197592 (executing program) 2022/10/01 04:11:33 fetching corpus: 4200, signal 186025/197875 (executing program) 2022/10/01 04:11:33 fetching corpus: 4250, signal 186789/198144 (executing program) 2022/10/01 04:11:33 fetching corpus: 4300, signal 187372/198369 (executing program) 2022/10/01 04:11:34 fetching corpus: 4350, signal 187794/198530 (executing program) 2022/10/01 04:11:34 fetching corpus: 4400, signal 188200/198761 (executing program) 2022/10/01 04:11:34 fetching corpus: 4450, signal 188662/199007 (executing program) 2022/10/01 04:11:34 fetching corpus: 4500, signal 189232/199244 (executing program) 2022/10/01 04:11:34 fetching corpus: 4550, signal 190065/199561 (executing program) 2022/10/01 04:11:34 fetching corpus: 4600, signal 190453/199709 (executing program) 2022/10/01 04:11:34 fetching corpus: 4650, signal 191192/199854 (executing program) 2022/10/01 04:11:34 fetching corpus: 4700, signal 192007/199989 (executing program) 2022/10/01 04:11:34 fetching corpus: 4750, signal 192647/200091 (executing program) 2022/10/01 04:11:35 fetching corpus: 4800, signal 193775/200277 (executing program) 2022/10/01 04:11:35 fetching corpus: 4850, signal 194351/200352 (executing program) 2022/10/01 04:11:35 fetching corpus: 4870, signal 194679/200400 (executing program) 2022/10/01 04:11:35 fetching corpus: 4870, signal 194679/200400 (executing program) 2022/10/01 04:11:38 starting 8 fuzzer processes 04:11:38 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff8001}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008010) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x131c}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48001}, 0x10) r3 = open(&(0x7f0000000300)='./file0\x00', 0x440001, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x4000090) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xac, 0x13}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0x4004808) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000005c0)={@dev, 0x0}, &(0x7f0000000600)=0x14) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0xa5, 0xfc, 0x64}, @xdp={0x2c, 0x2, r5, 0x37}, 0x7fff, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000640)='ip6tnl0\x00', 0xfffffffffffff001, 0x3e, 0x1ff}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x0, 0x12c, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000800)={{r0}, "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"}) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000001800)='wg2\x00', 0x4) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000018c0)={'ip6tnl0\x00', &(0x7f0000001840)={'syztnl1\x00', r6, 0x29, 0x9, 0x40, 0x81, 0x40, @mcast1, @private1, 0x1, 0x80, 0x40, 0x5}}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000001900)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x880) 04:11:38 executing program 1: sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x2b}}}}, ["", "", "", "", ""]}, 0x20}}, 0x4044841) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x1c}}, 0x4008000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xeda4ba4eedd045a0}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x90, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x747a}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x2, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600c040}, 0xc890) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r3, 0xfffffffffffffffd, 0x20000001) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfe06}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000005) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000a00)={@multicast2, @local, 0x0}, &(0x7f0000000a40)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x29, 0x39, 0xfc, 0x8, 0x4, @private2, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x20, 0x8000, 0xe0f, 0x9}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x154, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x154}}, 0x80) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d40), 0xffffffffffffffff) [ 65.759965] audit: type=1400 audit(1664597498.092:6): avc: denied { execmem } for pid=285 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:11:38 executing program 2: setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x7f}, 0x2) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040), 0x2) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000000c0)={0x3ff, 0x10, [0x1, 0x9, 0x8, 0x5], &(0x7f0000000080)=[0x0, 0x0]}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'veth0_virt_wifi\x00'}) r0 = syz_open_dev$mouse(&(0x7f0000000780), 0x0, 0xc0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000007c0)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000800)={0x7, 'veth0_virt_wifi\x00', {0xfffffc01}, 0x101}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x40100) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x2, 0x1, 0xffffffffffff8000, 0x7, 0x100000001, 0x400}, {0x2, 0x5, 0x7, 0x9, 0x4, 0x6}], ['\x00', '\x00']}) r2 = creat(&(0x7f00000009c0)='./file0\x00', 0xb0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000a00)={'veth1_macvtap\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000a40)={0x9, 0x6, 0x1, {0x5, 0x5}, 0x1, 0x7}) r3 = syz_open_pts(r0, 0x400) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000ac0)=""/176) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000b80)={{0x2, 0x3, 0x80000000, 0x10000, 0x1, 0x3}, 0x18c, [0x5, 0x3ff, 0x81, 0x5, 0xf5c6, 0xfff, 0x3, 0x8, 0x2, 0x80000001, 0x10000, 0x1f, 0x400, 0x9, 0x4, 0x8000, 0xffffffff, 0xa4, 0x6, 0x9, 0x10001, 0x42d920a4, 0xfffffff9, 0x883, 0x1, 0x2, 0x6, 0x8000, 0x3, 0x9, 0x7f, 0x9, 0xddb, 0x6, 0xe9, 0x0, 0x7, 0xffffc9c2, 0xffffffe0, 0x8001, 0x7, 0x7fff, 0x7, 0x8, 0x1000, 0x24, 0x1, 0x0, 0x6b7, 0x4, 0x5, 0x5, 0x3, 0x5, 0x3, 0x1ff, 0x4, 0x0, 0x75c9359c, 0x7f, 0x7fffffff, 0x3, 0x7ff, 0x1b359763, 0x1, 0x9, 0x1, 0x8, 0xdfd, 0x5, 0x800, 0x7f, 0x200, 0x0, 0x1, 0x4, 0x0, 0x4, 0x8, 0x5, 0x0, 0x2, 0x0, 0x25c, 0x401, 0x1, 0x0, 0x9, 0x0, 0x1ff, 0x6, 0x7fff, 0x5, 0x8, 0x7ff, 0x3, 0x81, 0x52, 0x10000, 0x0, 0x0, 0x1, 0x8, 0xcb92, 0x1aa26532, 0x0, 0x100, 0x100, 0x400, 0x5, 0x1, 0xff, 0x8, 0x10001, 0x8000, 0x7fffffff, 0x5, 0x10001, 0xe9, 0x3, 0x5, 0xa48, 0x5, 0x25, 0x3ff, 0x7, 0x6, 0x0, 0xc63, 0xead, 0x6, 0x80, 0x5, 0x0, 0x0, 0x7, 0x7, 0x100, 0x2, 0x2, 0x9, 0x2, 0x10000, 0x1000, 0x51, 0xfe, 0x4, 0x5, 0x1, 0x1000, 0x800, 0x0, 0x6, 0x7, 0x5, 0x82, 0x9, 0x8, 0x4, 0x0, 0x5, 0x10000, 0x3, 0x3e2, 0xfffffbff, 0x80, 0x16, 0x2, 0xbf3e, 0x4, 0x63de, 0x35, 0x9, 0x4, 0x4, 0x2, 0x6, 0x8001, 0x6, 0x1ff, 0x4, 0x1000, 0x60f0, 0xffffffff, 0x0, 0x5, 0x4, 0x80000001, 0x9, 0x756, 0x80, 0xfff, 0x1f0ab08e, 0x200, 0x8, 0x148c81f5, 0x0, 0x7, 0x61, 0x1c000, 0xfffffffd, 0x1, 0x2, 0x9, 0x0, 0x7, 0x3, 0x5, 0x80000000, 0x7, 0x8, 0x1, 0x7ff, 0xfffff800, 0x40, 0x7, 0x7, 0x1, 0x7, 0x4, 0x200, 0x7, 0x10000, 0x5, 0xffff4eab, 0x4, 0x8bce, 0x3, 0x19, 0x49, 0x1000, 0x8, 0x5, 0x6ec7, 0x4, 0x800, 0x1ff, 0x1, 0x50, 0x2, 0x338b3708, 0x100, 0x0, 0xf82, 0x10000, 0x5, 0x100, 0x0, 0x80, 0x4, 0x6cf0, 0x5, 0x3, 0x7, 0x9, 0x1, 0x7, 0x3, 0x400, 0x5, 0x400, 0x7fff, 0x52, 0x80000000, 0x9, 0x0, 0x100, 0x0, 0x5, 0x9fa0, 0x8, 0x4, 0x9, 0x4, 0x1ff, 0x9, 0x4, 0x7fff, 0x6187, 0x9, 0x9, 0x8, 0xe6c, 0x0, 0x9, 0x3, 0xffffff00, 0x5, 0x7, 0xf4, 0x9, 0x4, 0x401, 0xfffff56b, 0x2, 0x0, 0x7, 0xfffffffc, 0xea, 0x323, 0x7fffffff, 0x80, 0x7ff, 0x9, 0x6, 0xfffff000, 0x2, 0x7, 0x9, 0x200, 0x0, 0x1, 0x2, 0x4, 0x1ba, 0x80000000, 0x5, 0x68, 0x400, 0x3, 0x8c9, 0x80000000, 0x89, 0x1, 0x1, 0x6, 0x1, 0xff, 0x8, 0x0, 0x1f, 0x40, 0x3, 0x61, 0x2, 0x20, 0x3, 0x2, 0x3f, 0x4f71, 0xfffffffd, 0x3f, 0xe3d, 0x6, 0x7fff, 0x7fff, 0x8a9, 0x8, 0x8, 0x1, 0x27, 0x8, 0x8001, 0x3, 0x40, 0x9, 0x5, 0x80000001, 0x5, 0x9, 0x10001, 0x762, 0x77a9, 0x101, 0x7, 0x1, 0x80000001, 0x10001, 0x8, 0x8, 0x81, 0x8, 0x2, 0x9, 0x1, 0x60000000, 0x40000, 0x26, 0x3, 0x5, 0x2, 0x9, 0x5, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4, 0x7, 0x1f, 0x10000, 0x0, 0x28, 0x1000, 0x1, 0x2, 0x400, 0x4d911e91, 0x7719953c, 0x401, 0x400, 0x3, 0x32d, 0x1b00, 0x7ff, 0x6, 0x3ff, 0x2, 0x7f, 0x7fffffff, 0xfffffffe, 0x4, 0x800, 0x89, 0x7, 0xc8d, 0x10001, 0x200, 0x0, 0x1f, 0x372, 0x0, 0x1, 0x0, 0x38, 0x80000001, 0xdb, 0x8f7a, 0x9, 0x800, 0xdb9, 0x4, 0x6, 0x4, 0x3, 0x800, 0x3ff, 0x101, 0x7f, 0x6, 0x4, 0x9, 0x7f, 0x0, 0x2, 0xf2, 0x9, 0x0, 0x9, 0xcdd1, 0x1, 0x9, 0x8, 0x4, 0x4, 0x1ff, 0x6, 0x9, 0x7, 0x4, 0x1, 0x80, 0x4, 0x3, 0x2, 0x3, 0x60e6, 0xe44, 0x4, 0x7, 0x3, 0x0, 0x7, 0x4, 0x8, 0x7, 0x3, 0x3, 0x2, 0x3b, 0x9, 0x4c35, 0x0, 0xfffc0000, 0x7c, 0x6, 0x3ff, 0x5, 0x0, 0x6, 0x2, 0x9, 0x6, 0x8, 0x8000, 0x81, 0x7, 0xffffffcc, 0x4, 0x5, 0x8001, 0x1, 0x4, 0x730, 0x5, 0x8, 0x8000, 0xd1, 0x10001, 0x0, 0x9, 0x2, 0x6, 0xb41, 0x9, 0x1adf, 0x8, 0x20, 0x401, 0x80, 0xfeb9, 0xffff, 0x200, 0x4, 0x7f, 0x93, 0x8, 0x5, 0x767, 0x3f, 0x8, 0x0, 0x6, 0xffffffe1, 0x0, 0xd3c, 0xf058, 0x4, 0x3ff, 0x8, 0x0, 0x9a, 0x73, 0x10001, 0x6, 0x9, 0x8, 0x9, 0xffff, 0x3, 0x9, 0x9, 0x894, 0x80000000, 0x1000, 0x3, 0x3, 0xa91, 0x9f0, 0x400, 0x0, 0xe6df, 0x5, 0x800, 0x8, 0xed, 0x5, 0xd6, 0x5, 0x101, 0x10000, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x80, 0xa8, 0x100, 0x101, 0x0, 0x5, 0x6, 0x5, 0xfffffff7, 0x4, 0x2, 0x6, 0x1f, 0x1, 0x7ff, 0x8, 0x101, 0x2, 0x8001, 0x6b4, 0x80000001, 0x8c4f, 0xf3, 0x10001, 0x1, 0xe0, 0x1000, 0x7f, 0x1ff, 0xffff, 0x8000, 0x1, 0x2, 0x7, 0xff5, 0x1, 0x6, 0xfffffffa, 0x8, 0x7, 0xffffff01, 0x9, 0x6, 0xcdf0, 0x2e00, 0xc7, 0x1, 0x32, 0x401, 0xffff0e02, 0x4, 0x5, 0x6, 0x5, 0x0, 0x9dee, 0x8, 0xcb, 0xfffffffd, 0x101, 0x5, 0xfffffffd, 0x6b, 0xffffff4d, 0x4, 0x1, 0x5, 0xffff, 0xe922, 0x8001, 0x8, 0x0, 0x80, 0xd0, 0x9, 0x33, 0x9, 0x3d0d, 0x23, 0x7ff, 0x4607, 0x7fffffff, 0x10001, 0x9, 0x3, 0x0, 0x3, 0x7, 0x101, 0x2, 0x1, 0x800, 0x1, 0x5, 0x7ff, 0x2, 0x1, 0xb4, 0x7, 0x7, 0x1, 0x4, 0xffff, 0x4, 0x101, 0x0, 0x1544, 0x1000, 0x9, 0x5, 0xb, 0xff, 0x6, 0x452, 0x0, 0x1ff, 0x4, 0x9, 0x7fff, 0xad, 0xa368, 0x3f, 0x8, 0x5, 0x4, 0x2, 0x0, 0x1000, 0x7fffffff, 0x3ff, 0x20, 0x2, 0xd6, 0x4, 0x1, 0xffff, 0xac, 0x1a4, 0x8001, 0x9, 0x7ff, 0xffffffff, 0x8, 0x7a43, 0x7, 0x7, 0x8, 0x8001, 0xfffff248, 0x1, 0xfac5, 0x8, 0x10000, 0x1, 0xfffffceb, 0x4, 0x5, 0xfffffff9, 0x7fff, 0x1c0, 0x7, 0x7ff, 0x5, 0x80, 0xffffffff, 0x0, 0x9, 0xffffffff, 0x1000, 0x7, 0x7, 0x3ff, 0x9, 0x19d, 0xfffeffff, 0x6, 0x0, 0x1, 0x7019, 0xc01, 0x6, 0x80000001, 0xe70, 0x7, 0x101, 0x1000, 0x73d, 0x8, 0xc2d9, 0x9, 0x1ff, 0x2, 0x1, 0x8, 0x1, 0x3, 0x6, 0x1, 0x0, 0xbc, 0x9, 0x2, 0x7ff, 0x8, 0x1, 0x9, 0x3, 0x3, 0xffffd82a, 0x7, 0x80000001, 0x6, 0xaa6, 0x2, 0x10000, 0x86, 0x6, 0x3, 0x3ff, 0x81, 0x800, 0xffff, 0x4, 0xd1, 0x8, 0x6, 0x1, 0xd, 0x6, 0x6, 0x7, 0x7, 0x0, 0x2, 0x1, 0x1, 0x80000000, 0x4ff, 0x80, 0x100, 0x2, 0x9, 0xffffffc0, 0x62, 0x9, 0x6, 0x1, 0x401, 0x2, 0x1, 0x101, 0x7, 0x80000000, 0x5, 0x200, 0x29, 0xdb2, 0x9, 0x10, 0x0, 0x5, 0xa219, 0x10001, 0x6, 0xad, 0x9, 0x7fff, 0xb8, 0x9, 0xfff, 0xffffffff, 0x1, 0x0, 0x3ff, 0x6, 0x5, 0x1, 0x9, 0x6, 0x3f, 0x7bc3, 0x2, 0x1, 0x2, 0xbe9c, 0x1, 0x1ff, 0x23e0, 0x8001, 0xffffffff, 0x7, 0x8, 0xa0000, 0x1, 0x9, 0x0, 0x12b, 0xffffffff, 0xacd, 0x0, 0x7fff, 0x1, 0xff, 0x4, 0x7, 0x6, 0x4, 0x1, 0x6, 0x101, 0x101, 0x29, 0x8, 0xc3c9, 0x0, 0xfffffffd, 0x5, 0x51, 0x7, 0x685, 0x0, 0x100, 0x80000000, 0xa6e2, 0x0, 0x2, 0x4, 0xdbf6, 0x7, 0x0, 0x1ff, 0x8, 0x8, 0x7ff, 0x2, 0x8, 0x8001, 0x3, 0x81, 0x2, 0x8, 0x8ed, 0x10000, 0x7bb, 0x0, 0x9, 0x4, 0x9, 0x7ff, 0x2, 0xffffffff, 0x2, 0x6, 0xde5b, 0x9, 0x8, 0x4, 0x4, 0x80000000, 0x80, 0x6, 0x1ff, 0x3, 0x0, 0x4, 0x4, 0x8, 0x1, 0x6b, 0xcb, 0x8, 0x0, 0x7ff, 0x1, 0xd6, 0x7, 0x9, 0x3, 0x81, 0x8001, 0x4, 0x41e, 0x4e2c, 0xfffffffb, 0x80000000, 0x0, 0x6, 0x462c, 0xce4, 0x86d, 0x2a6, 0xde46, 0x12b, 0x1, 0x0, 0x4, 0xff, 0x2, 0x3, 0x3, 0x20, 0x1000000, 0x5a, 0x1, 0x0, 0x94cb, 0x9, 0x2, 0x3, 0x0, 0x3ff, 0x8000, 0x0, 0x7, 0x401, 0x8, 0x1, 0xfffff800, 0x0, 0x7, 0x30000000, 0xc58b, 0x3, 0x5, 0x3, 0x1, 0x1ff, 0x200, 0x3, 0x40, 0x10c, 0x4, 0x3, 0xd9, 0x97de, 0x1, 0x5, 0x3, 0x8, 0xd0, 0x2, 0x4, 0x10001, 0x400, 0x7fff, 0x0, 0x5]}) r4 = openat$incfs(r0, &(0x7f0000001bc0)='.pending_reads\x00', 0x123003, 0x60) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x20, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000001d40)) 04:11:38 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0xac0d, @bearer=@l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x3b713eb1b8e2b537}, 0x20008000) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0xe, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20008080) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x148, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x55, 0xa8, @random="c48413b81334bd49fe78a8b7e823e326750e7a280a9ca896027e2c1c3990621e941365bb0228cbc1b83865426977d99b206d8e8122154643e6fa455f2a06c160d2192ddd2733b0e4810c3bd58896575b75"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/fib_triestat\x00') r3 = openat2(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x8000, 0x14, 0x1}, 0x18) r4 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f00000006c0)="d9c486e77c4c0b8be2b7eaf5c07217fbee42fbaffb6b1c9c1327f704710312f3e4201a79c72aeca55f4386413bc808c1e19216a32563740a79c02884a5b1f8d188ff05980685e6da0a332cbd93cb43441e7b7215862906796367bd5134ff28095ff549e413b9bc71f9486939fb50a2afbc2c5489e290de06c61a31795ceb6cd87751f2714d70f7a8dc9a339866c0437aa7a5e08c04e268", 0x97) r6 = accept4$bt_l2cap(r5, &(0x7f0000000780), &(0x7f00000007c0)=0xe, 0x80000) write$binfmt_aout(r6, &(0x7f0000000800)={{0x108, 0x40, 0x28, 0xcd, 0x108, 0xaf, 0x232, 0xfffffff9}, "3f95c5be36b61fb0b6262e3053c033e4274516ce24d99f259e47957fb78882ee661af6b81a4f7a21df2796db5a792dfa347b6f0978854cb837407458b3533f7f399c067f990daf9c7b2398a6e3647c077ed899a6f6cb308ca34b4e0967ccebe415e0951226d30d18cce5ffde65afed9c6a0646eb71f277f503fd7f515cb29cd1bfdd48cf5590adaeb003e4c922787589ca10aff967933f8a9f221272650ceaa87cf847a04d4f4f33b16a16912ea29765ada7f63d06c9cc1e4464bbe45f84e9fb93930c3e728281b0e4ea6e8ff5b6bd70ab0cd7ef9d3285637546f74642d0a82542b3a8413629cc7ef865aa17668d30ddb0cf", ['\x00']}, 0x212) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20010891) setxattr$security_evm(&(0x7f0000000b40)='./file1\x00', &(0x7f0000000b80), &(0x7f0000000bc0)=@v1={0x2, "f78bebfc5bf7fce463b99eb487025ed3cd"}, 0x12, 0x2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40090}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x6a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x40, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x404c044) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x9ea68bd731a28a13, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x1) 04:11:38 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffff13a, 0x40, 0x5}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000080)={0x754, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x19c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x20, 0x5, "5df908de5bacc41631276ba21773fdcaa495e671c3aaaa045ce5c8d1"}, @ETHTOOL_A_BITSET_VALUE={0x6a, 0x4, "f4f00090eeee765291f5a24ee0896d53b1e6f9ce3cb0f37bc8a03461e189f117656acaa32de496041b35ef62182e57a15c86bd0912001e0bb2915e02b7ca04218c297eb4d03664b759484ba3c4229a3a74b422385459d7a9f81e14cc8cf5f915236f84a6c932"}, @ETHTOOL_A_BITSET_MASK={0x90, 0x5, "64c438404c69c4d331d5f5e348ac80d074448cd1602a4204c439f2fae307eb809a5469ce70bca7743ae8b932c21d7d8d7d0aad74a75d3a610db7d52b61d6c8226e533ca1df7145c0722e9acaf73a95c9dcc666d081f06c40dc5dbf5b1b38d455a68eefb4f4963228a2103541051ff41b323810ef6e0f4ae0752055abee46c4e30164ee71bfcc8ca10d0414ac"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x56155a8b}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '*[^${(.^^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x11\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x600000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x308, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '{*.:#--)#,\\:-.d\x9e:*/*/)\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@\x1d/:w+%-(-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80eb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!&\xcd\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '..{+$[//\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\\*[\'.!](\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}]}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "a86dccbaa87898f175864ba93e9eeff109372b649d347ef54e2cc5d804a9575b23e2728e4ff9862ad38be9a222261eed7880f15f25b3bf57e9cfed2bd78ecf7dc69a2b08acbf077aa9ca57280d428cbedeab93aad65e514282c1b6bb31d0d4170013f1c47f281bb5ad0384d95c5cf8d2e38667f76cd21d1e18a4243a4f780efdbe8afd347323a00949c18a1746189cdc693bd95f9ba47d916d946662855c9df7873ce15e30a612e84fbfa2d2"}, @ETHTOOL_A_BITSET_MASK={0x75, 0x5, "3b7d3487efcc8cc3d0e64ddbf49658fd7be92b39c6195444089a0835466e4c3111d589e3225b45ab10b0d1b7cc793cddbe333ae1e966522a46745ab3d65a9f4d596d8b44118efd7a097cdcf7e4a6fd88bf3f3879a46e857164144749d935440113fb56d284747d98e9f23feda4a1efa330"}, @ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "0ba782a45beca3d46e591601b45683c81d06d90c35193c4ea453dcfd0f61e839b0574f787301fc44614e886e65259e5743be16a2def618fbfc84e52767be0c488d39be0687df0a0571b818a6f0b32d56906e7095a35e52bbfa52dfdf8e96f0d59712d669d1a12b117b11b54d27649254194a295b9eb0d7693aabf452"}, @ETHTOOL_A_BITSET_VALUE={0x38, 0x4, "3e33d758aed8db484a0cd9571c44178001ccb03fdc95f226d59b0116163f297f0e4e8870ec7ec29de7053e64e4fef77039efd496"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_MASK={0x9, 0x5, "32e14f7ce2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc5, 0x4, "42a02f5c87dd423f8b026d65f083a7a17168030393c56bc1e3ad9f7936b76f063ec3b11886fbe2537e7f4e13f2423fc3d8c7e23a6700e3e0c9ba44f4668450e01951e859ee0951a5ccb6ca08fb1d4087fdc6100e12d8681fa969111bf70007569a25a3edfdb592cfff5026602219a55d0d390e663e685de202ec78ff07122d1b86b840339196b491d6d3ad5a78939ee680bfc3c2ea64394f67c63c83be7555a10d5cab41576ce75c8e82fce48253a414a6675246650e08ef59c2caa0c872288f05"}, @ETHTOOL_A_BITSET_VALUE={0xc9, 0x4, "822363fdea93a8b8202eba6464cf865d862e767bf6100aa647aea5890fb7528bb0ffee3b79146599ba071619de92b270e28c6ec2adac89a551152e0c073005a62aff96957e9fa52ad14d067016a962d1d898887e57912a4ac0f5b6719e0cc80cda0d14bf740219d9cb4ce9d461e93ec85c905c3d814dd32ca615030e56941ad63d7f1713b180ab96dfdd935a6436e5edf8a25575094075c2ae0d6f2b25555bb29e64ab7c0c72ca847bd4330f962ceb5934bea281ccfb298277d918e1910a995401b770468e"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "871f3117123a5d653594c914c4f2249af3f9501bc1e4356200588a07e10be911b15d34a0114cecee12f4ca7be347b92656e6968f398780bb183e1eb6ddc9223ea8f5c6cd3bcda0278997a9883144376e399cc7efb36a5602621a399930cce6893e56914a5811690b1fbb68b70cba86e1c2952caf0dd4e04582c0f2bc6b1aa1bb411177857e6432d2be565a25655dcf8f2ebfed26ab8de05ebf3b288d7f902ab25b7ec7f62a34d443fa3ddfd82014b6989b1049536aad4b95fb97808231ec856cd97f0df0e242782578fb10ba658de81633171072beeac11d954b0324b2c3e1d0c23f864b95910f3fd7b40db6730e3bed5b3ebb52"}]}]}, 0x754}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = epoll_create1(0x6f73507e7c8e9a45) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r3 = mq_open(&(0x7f00000008c0)='\x00', 0x1, 0x49, &(0x7f0000000900)={0x8, 0x10001, 0x2, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000940)={0x2000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000980)={0x3}) mq_timedsend(r3, 0xfffffffffffffffd, 0x0, 0xa6a, &(0x7f00000009c0)) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x1b0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0xc004}, 0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000c80)={0xc0002010}) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2502) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x8) sendmsg$802154_raw(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000d80)={&(0x7f0000000d00)="38a60cb5d6b3bec57944a85fd0bb46592341d966dc8a148f93f3ed6882c6f20e1ddbdf2a864d7c619a54fdd59a91351e67c6583c592fabb7679114db2a3d705e19e776a67009cb806482e4a3890716f4da4cb40cc4fe2534ce6c452bb9f9e05dc40e524822479267e01fb99d8dffcb0c0d7a10e570", 0x75}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) r6 = open_tree(r5, &(0x7f0000000f00)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x1, 0x7f, 0x1, 0x1, 0x0, 0x7f, 0x1d4a555d4f1e7c5a, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000e40), 0x6}, 0x18, 0x8, 0xfffffffc, 0x47e181d04f8df559, 0x10001, 0x2c9, 0x4, 0x0, 0xffffffc0, 0x0, 0xc8}, 0x0, 0xf, r6, 0xa) r7 = signalfd(r1, &(0x7f0000000f40)={[0x8]}, 0x8) mq_timedsend(r7, &(0x7f0000000f80)="1fbeb3981d18b3a4eec82115226657190b10a75b08dbf1ab728ec3e963037a6d6bf991eb6bafa3715c8268db38c916103bfe", 0x32, 0xffffffffffff22a8, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000001000)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14) 04:11:38 executing program 5: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xa8, 0x49}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048810}, 0x8004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xb0839b71d37a4530) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x80000000, 0x101) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000500)={0x0, 0x8001, 0xa1}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000580)={r5, r6/1000+60000}, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) accept$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) accept4$packet(r2, &(0x7f0000000880)={0x11, 0x0, 0x0}, &(0x7f00000008c0)=0x14, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000009c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r7, 0x200, 0x70bd28, 0x4, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xf0, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e32a8c889cddbf8e241e17fbec1806face7a051a9bc0336b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "02d14179eef3924862dd4e3cccf51e936a98da4430834d57"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0cfe523b713098028d71e561bcdb48512bb48aaff5d225f1"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a2d4e19be50e95549317863438e6e5cc4f67445d38ad611f"}]]}, 0xf0}, 0x1, 0x0, 0x0, 0x44}, 0x20044000) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4040) 04:11:38 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000021) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0xfffffc06, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000028}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x17, 0x14d0, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xda9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xff}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000540)=0x4) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000600)=0xc) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef12}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004880}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000780)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x344700, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000940)={{0x1, 0x1, 0x18, r3, {0xffffff81}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xc0, 0x3, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) 04:11:38 executing program 7: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x10, 0x9, 0x80000000, {{0x1b, 0x4, 0x1, 0x3, 0x6c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x2c, 0x0, [{0x1, 0x2}, {0x1, 0x6, "dbd033ec"}, {0x1, 0x5, "8f8cc6"}, {0x5, 0xd, "3d25f9fcc203543e86094e"}, {0x2, 0x5, "b40c4d"}, {0x0, 0x7, "91157d0b7b"}]}, @timestamp_prespec={0x44, 0xc, 0x22, 0x3, 0x9, [{@loopback, 0x5}]}, @timestamp={0x44, 0xc, 0xc0, 0x0, 0x3, [0x101, 0x6]}, @rr={0x7, 0x13, 0xee, [@local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8040, 0x1, 0x7, 0x100, {{0x44, 0x4, 0x2, 0x3e, 0x110, 0x66, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, {[@rr={0x7, 0x2b, 0x24, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @rand_addr=0x64010102, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp_addr={0x44, 0x2c, 0xda, 0x1, 0x8, [{@remote, 0x2}, {@rand_addr=0x64010100, 0xb9a}, {@private=0xa010100, 0x9ab}, {@multicast1, 0x5}, {@multicast1, 0x372}]}, @timestamp_addr={0x44, 0x24, 0x40, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x80000000}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0x6}]}, @noop, @noop, @rr={0x7, 0xb, 0xa5, [@broadcast, @loopback]}, @rr={0x7, 0xf, 0x85, [@multicast1, @remote, @multicast2]}, @lsrr={0x83, 0x2b, 0xee, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @empty, @rand_addr=0x64010102, @empty]}, @ssrr={0x89, 0x2b, 0x8f, [@empty, @remote, @local, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @broadcast, @empty, @private=0xa010101, @rand_addr=0x64010102, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x7b, 0x1, 0x7, [{@empty, 0x7cda}]}]}}}}}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x2]}, 0x8, 0x81000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', r2, 0x29, 0x9, 0x6, 0x6, 0x21, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x20, 0xffffffff, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'syztnl0\x00', r2, 0x8, 0x40, 0x3, 0x3, {{0x1f, 0x4, 0x0, 0x27, 0x7c, 0x64, 0x0, 0x5, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0xba, 0x1, 0x4, [{@local, 0x7f}, {@local, 0xa7b}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x9}, {@loopback, 0x2}]}, @ssrr={0x89, 0x1b, 0x93, [@dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x12}, @remote, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x66, 0x1, 0x7, [{@broadcast, 0x6}, {@remote, 0x101}]}, @generic={0x7, 0xd, "ed34888bbf0d5f3a99b339"}]}}}}}) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r5) clone3(&(0x7f0000000800)={0x0, &(0x7f0000000640)=0xffffffffffffffff, &(0x7f0000000680), 0xfffffffffffffffd, {0x3}, &(0x7f00000006c0)=""/42, 0x2a, &(0x7f0000000700)=""/190, &(0x7f00000007c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa, {r1}}, 0x58) finit_module(r6, &(0x7f0000000880)='ip_vti0\x00', 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000008c0)={'gre0\x00', r4, 0x40, 0x40, 0x4, 0x101, {{0xa, 0x4, 0x2, 0x7, 0x28, 0x65, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @local, {[@noop, @rr={0x7, 0xf, 0x96, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x21}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'ip6gre0\x00', r2, 0x2f, 0x9, 0x6, 0x200, 0x0, @empty, @empty, 0x10, 0x80, 0x10000, 0x81}}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000c40)={'gretap0\x00', &(0x7f0000000b80)={'ip_vti0\x00', r3, 0x87cf, 0x40, 0x1, 0x40, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x64, 0x0, 0xfc, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@ssrr={0x89, 0x2b, 0x4d, [@empty, @local, @loopback, @rand_addr=0x64010100, @local, @broadcast, @empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x34, 0x1, 0x1, [{@loopback, 0x2}, {@broadcast, 0x7}]}, @timestamp={0x44, 0xc, 0x97, 0x0, 0x2, [0x664f, 0x800]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'tunl0\x00', r7, 0x7, 0x8, 0x80000001, 0xb39b, {{0x9, 0x4, 0x0, 0x9, 0x24, 0x68, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @multicast1, {[@timestamp={0x44, 0xc, 0x69, 0x0, 0x1, [0x8, 0xfffffe00]}, @noop]}}}}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb0, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f40)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10000) [ 67.047172] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.049021] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.053674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.057411] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.059586] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.061676] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.072433] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.115135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.116811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.118559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.121231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.123187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.126495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.127710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.128009] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.130523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.131255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.133085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.134886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.139402] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.165202] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.172073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.173901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.179740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.180998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.183146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.185613] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.187040] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.189068] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.190249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.191393] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.194285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.197758] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.198600] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.203986] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.239988] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.243605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.248009] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.256925] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.262524] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.265991] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.271102] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.125153] Bluetooth: hci0: command 0x0409 tx timeout [ 69.188462] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 69.190494] Bluetooth: hci3: command 0x0409 tx timeout [ 69.191519] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 69.252463] Bluetooth: hci4: command 0x0409 tx timeout [ 69.254266] Bluetooth: hci1: command 0x0409 tx timeout [ 69.255262] Bluetooth: hci2: command 0x0409 tx timeout [ 69.316434] Bluetooth: hci7: command 0x0409 tx timeout [ 71.172417] Bluetooth: hci0: command 0x041b tx timeout [ 71.237838] Bluetooth: hci3: command 0x041b tx timeout [ 71.301410] Bluetooth: hci2: command 0x041b tx timeout [ 71.301807] Bluetooth: hci1: command 0x041b tx timeout [ 71.302178] Bluetooth: hci4: command 0x041b tx timeout [ 71.364379] Bluetooth: hci7: command 0x041b tx timeout [ 73.220427] Bluetooth: hci0: command 0x040f tx timeout [ 73.284378] Bluetooth: hci3: command 0x040f tx timeout [ 73.348430] Bluetooth: hci4: command 0x040f tx timeout [ 73.348846] Bluetooth: hci1: command 0x040f tx timeout [ 73.349203] Bluetooth: hci2: command 0x040f tx timeout [ 73.413387] Bluetooth: hci7: command 0x040f tx timeout [ 74.308722] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 74.373405] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 75.268426] Bluetooth: hci0: command 0x0419 tx timeout [ 75.332480] Bluetooth: hci3: command 0x0419 tx timeout [ 75.422627] Bluetooth: hci2: command 0x0419 tx timeout [ 75.423394] Bluetooth: hci1: command 0x0419 tx timeout [ 75.424072] Bluetooth: hci4: command 0x0419 tx timeout [ 75.460402] Bluetooth: hci7: command 0x0419 tx timeout [ 79.044409] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 79.364651] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 81.583253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.588275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.591956] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.616886] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.634625] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.636982] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.647952] Bluetooth: hci5: HCI_REQ-0x0c1a [ 81.953052] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.976106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.985079] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.003571] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.019034] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.027534] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.042439] Bluetooth: hci6: HCI_REQ-0x0c1a [ 83.716507] Bluetooth: hci5: command 0x0409 tx timeout [ 84.101510] Bluetooth: hci6: command 0x0409 tx timeout [ 85.765443] Bluetooth: hci5: command 0x041b tx timeout [ 86.149386] Bluetooth: hci6: command 0x041b tx timeout [ 87.813422] Bluetooth: hci5: command 0x040f tx timeout [ 88.197390] Bluetooth: hci6: command 0x040f tx timeout [ 89.860537] Bluetooth: hci5: command 0x0419 tx timeout [ 90.244606] Bluetooth: hci6: command 0x0419 tx timeout [ 119.906995] audit: type=1400 audit(1664597552.239:7): avc: denied { open } for pid=3590 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 04:12:32 executing program 4: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r3, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) pread64(0xffffffffffffffff, &(0x7f0000000780)=""/162, 0xa2, 0x4904) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050e00000200000004000000000000000400000000000000b5000000f593000000fffffffffffff60000000000000000000000fa61ebbf7000000000000000000000000010fdffffff00000000faffffffffffffff010000000100000002000000000000006e0100000000000000000000000000000000000000000000000000000000000000000000000000006e4798db1c0443d2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005175d53185259db2932f3700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000000000073e3b5107ad98f9f9e88984eb3293f85a70d3588a85835aef5ece2ac270ba265ceb4b56064b2b06e0fcc7a1f88d228d5c0766549304f8e9e0571a4350f32b4d5f9afb3a9e62b84eeabf541470c993bbf70e5b5c5a391403130a320d770516f254ea4cd22bb2062e463a216d591689899053b037a3fae27c5a188dce28d433cbdf976a70e132f0fb4e761333a53ff702eb8973c14e92dad5de76d326d21fa7280196e73e341c57cfcf3ef9bb90ffcd0328df0557417ddab0aed01348af0cba2ff6583f533eb5e127c9d74322314c47d259cf5da5c1e0df2982105a8824040c2fc0d79546f35fed69c8a72a12b25e5b40bed861b673c99652642f1bc6fab2c1597fd78547984053f67adbd03eb0ccdce37865b000000000000006e2ebfb72e2b8866319e6d30b7b7104a89b22ed0f33c13db9b0f16cf42f0eb84c1b2a27be99fd2be999034d1e06715e17cb6786e236ad9d0b4d9a7c674dd05fdc81dfd1554fb17586473abc770ee95a21aaef0d84c2b40c4dac45aa61b93c29dd5aa96774cb9ddad6ecd3df2d17528"]) open_by_handle_at(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="1439152c3bb34281caff0000255f839c0d4e82805b03c4d377b9ca79cc5a41a53173c0833f6ae3d6fe74be421f42664888068eeb6b920b33fbe92f2d2a6ea0d5bd1f1887c05efc47e6c6a02f7f1d410c234e2fbb7e62a4c862a79926ac4e81212ffb536b0a22deaa798dbca3bcf2920a299bd00eb9b661d864df7416e2"], 0x0) fstat(r0, &(0x7f0000000100)) r4 = epoll_create(0x7823) r5 = gettid() r6 = gettid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000140)={r4}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x91, 0xe1, 0x0, 0x3, 0x0, 0x80, 0x20, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xc4, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x2010, 0x7, 0x0, 0x7, 0x40, 0x1f, 0x1f, 0x0, 0x3, 0x0, 0x4}, r5, 0xe, r2, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fsync(r8) [ 120.015552] audit: type=1400 audit(1664597552.347:8): avc: denied { kernel } for pid=3600 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.036787] ------------[ cut here ]------------ [ 120.036807] [ 120.036811] ====================================================== [ 120.036814] WARNING: possible circular locking dependency detected [ 120.036819] 6.0.0-rc7-next-20220930 #1 Not tainted [ 120.036825] ------------------------------------------------------ [ 120.036828] syz-executor.4/3602 is trying to acquire lock: [ 120.036834] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 120.036873] [ 120.036873] but task is already holding lock: [ 120.036876] ffff88800ecb1420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.036902] [ 120.036902] which lock already depends on the new lock. [ 120.036902] [ 120.036905] [ 120.036905] the existing dependency chain (in reverse order) is: [ 120.036908] [ 120.036908] -> #3 (&ctx->lock){....}-{2:2}: [ 120.036922] _raw_spin_lock+0x2a/0x40 [ 120.036933] __perf_event_task_sched_out+0x53b/0x18d0 [ 120.036944] __schedule+0xedd/0x2470 [ 120.036957] schedule+0xda/0x1b0 [ 120.036970] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.036982] syscall_exit_to_user_mode+0x19/0x40 [ 120.036994] do_syscall_64+0x48/0x90 [ 120.037011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.037024] [ 120.037024] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 120.037037] _raw_spin_lock_nested+0x30/0x40 [ 120.037047] raw_spin_rq_lock_nested+0x1e/0x30 [ 120.037060] task_fork_fair+0x63/0x4d0 [ 120.037076] sched_cgroup_fork+0x3d0/0x540 [ 120.037090] copy_process+0x4183/0x6e20 [ 120.037100] kernel_clone+0xe7/0x890 [ 120.037109] user_mode_thread+0xad/0xf0 [ 120.037119] rest_init+0x24/0x250 [ 120.037133] arch_call_rest_init+0xf/0x14 [ 120.037152] start_kernel+0x4c6/0x4eb [ 120.037167] secondary_startup_64_no_verify+0xe0/0xeb [ 120.037181] [ 120.037181] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 120.037195] _raw_spin_lock_irqsave+0x39/0x60 [ 120.037205] try_to_wake_up+0xab/0x1930 [ 120.037218] up+0x75/0xb0 [ 120.037232] __up_console_sem+0x6e/0x80 [ 120.037247] console_unlock+0x46a/0x590 [ 120.037263] vprintk_emit+0x1bd/0x560 [ 120.037279] vprintk+0x84/0xa0 [ 120.037294] _printk+0xba/0xf1 [ 120.037306] regdb_fw_cb.cold+0x6c/0xa7 [ 120.037325] request_firmware_work_func+0x12e/0x240 [ 120.037344] process_one_work+0xa17/0x16a0 [ 120.037361] worker_thread+0x637/0x1260 [ 120.037377] kthread+0x2ed/0x3a0 [ 120.037391] ret_from_fork+0x22/0x30 [ 120.037403] [ 120.037403] -> #0 ((console_sem).lock){....}-{2:2}: [ 120.037416] __lock_acquire+0x2a02/0x5e70 [ 120.037433] lock_acquire+0x1a2/0x530 [ 120.037448] _raw_spin_lock_irqsave+0x39/0x60 [ 120.037458] down_trylock+0xe/0x70 [ 120.037473] __down_trylock_console_sem+0x3b/0xd0 [ 120.037489] vprintk_emit+0x16b/0x560 [ 120.037505] vprintk+0x84/0xa0 [ 120.037520] _printk+0xba/0xf1 [ 120.037530] report_bug.cold+0x72/0xab [ 120.037546] handle_bug+0x3c/0x70 [ 120.037562] exc_invalid_op+0x14/0x50 [ 120.037579] asm_exc_invalid_op+0x16/0x20 [ 120.037590] group_sched_out.part.0+0x2c7/0x460 [ 120.037608] ctx_sched_out+0x8f1/0xc10 [ 120.037624] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.037635] __schedule+0xedd/0x2470 [ 120.037648] schedule+0xda/0x1b0 [ 120.037661] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.037672] syscall_exit_to_user_mode+0x19/0x40 [ 120.037684] do_syscall_64+0x48/0x90 [ 120.037700] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.037713] [ 120.037713] other info that might help us debug this: [ 120.037713] [ 120.037715] Chain exists of: [ 120.037715] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 120.037715] [ 120.037730] Possible unsafe locking scenario: [ 120.037730] [ 120.037732] CPU0 CPU1 [ 120.037734] ---- ---- [ 120.037736] lock(&ctx->lock); [ 120.037742] lock(&rq->__lock); [ 120.037748] lock(&ctx->lock); [ 120.037754] lock((console_sem).lock); [ 120.037760] [ 120.037760] *** DEADLOCK *** [ 120.037760] [ 120.037761] 2 locks held by syz-executor.4/3602: [ 120.037768] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 120.037797] #1: ffff88800ecb1420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.037822] [ 120.037822] stack backtrace: [ 120.037825] CPU: 0 PID: 3602 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220930 #1 [ 120.037837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 120.037845] Call Trace: [ 120.037849] [ 120.037853] dump_stack_lvl+0x8b/0xb3 [ 120.037871] check_noncircular+0x263/0x2e0 [ 120.037887] ? format_decode+0x26c/0xb50 [ 120.037903] ? print_circular_bug+0x450/0x450 [ 120.037919] ? simple_strtoul+0x30/0x30 [ 120.037935] ? format_decode+0x26c/0xb50 [ 120.037952] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 120.037969] __lock_acquire+0x2a02/0x5e70 [ 120.037991] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 120.038013] lock_acquire+0x1a2/0x530 [ 120.038029] ? down_trylock+0xe/0x70 [ 120.038046] ? lock_release+0x750/0x750 [ 120.038066] ? vprintk+0x84/0xa0 [ 120.038084] _raw_spin_lock_irqsave+0x39/0x60 [ 120.038095] ? down_trylock+0xe/0x70 [ 120.038111] down_trylock+0xe/0x70 [ 120.038126] ? vprintk+0x84/0xa0 [ 120.038143] __down_trylock_console_sem+0x3b/0xd0 [ 120.038160] vprintk_emit+0x16b/0x560 [ 120.038179] vprintk+0x84/0xa0 [ 120.038196] _printk+0xba/0xf1 [ 120.038207] ? record_print_text.cold+0x16/0x16 [ 120.038223] ? report_bug.cold+0x66/0xab [ 120.038240] ? group_sched_out.part.0+0x2c7/0x460 [ 120.038258] report_bug.cold+0x72/0xab [ 120.038277] handle_bug+0x3c/0x70 [ 120.038294] exc_invalid_op+0x14/0x50 [ 120.038312] asm_exc_invalid_op+0x16/0x20 [ 120.038324] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.038345] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.038356] RSP: 0018:ffff88803b1bfc48 EFLAGS: 00010006 [ 120.038365] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.038372] RDX: ffff88801f2f8000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 120.038380] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 120.038387] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ecb1400 [ 120.038394] R13: ffff88806ce3d2c0 R14: ffffffff8547d160 R15: 0000000000000002 [ 120.038405] ? group_sched_out.part.0+0x2c7/0x460 [ 120.038425] ? group_sched_out.part.0+0x2c7/0x460 [ 120.038444] ctx_sched_out+0x8f1/0xc10 [ 120.038463] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.038477] ? lock_is_held_type+0xd7/0x130 [ 120.038491] ? __perf_cgroup_move+0x160/0x160 [ 120.038502] ? set_next_entity+0x304/0x550 [ 120.038519] ? update_curr+0x267/0x740 [ 120.038537] ? lock_is_held_type+0xd7/0x130 [ 120.038551] __schedule+0xedd/0x2470 [ 120.038568] ? io_schedule_timeout+0x150/0x150 [ 120.038584] ? rcu_read_lock_sched_held+0x3e/0x80 [ 120.038604] schedule+0xda/0x1b0 [ 120.038619] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.038631] syscall_exit_to_user_mode+0x19/0x40 [ 120.038645] do_syscall_64+0x48/0x90 [ 120.038662] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.038675] RIP: 0033:0x7f6a4b46db19 [ 120.038683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.038694] RSP: 002b:00007f6a489e3218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.038704] RAX: 0000000000000001 RBX: 00007f6a4b580f68 RCX: 00007f6a4b46db19 [ 120.038712] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6a4b580f6c [ 120.038719] RBP: 00007f6a4b580f60 R08: 000000000000000e R09: 0000000000000000 [ 120.038726] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f6a4b580f6c [ 120.038733] R13: 00007ffc5fa7767f R14: 00007f6a489e3300 R15: 0000000000022000 [ 120.038745] [ 120.096195] WARNING: CPU: 0 PID: 3602 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 120.096911] Modules linked in: [ 120.097157] CPU: 0 PID: 3602 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220930 #1 [ 120.097762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 120.098620] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.099042] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.100437] RSP: 0018:ffff88803b1bfc48 EFLAGS: 00010006 [ 120.100863] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.101419] RDX: ffff88801f2f8000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 120.101949] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 120.102485] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ecb1400 [ 120.103028] R13: ffff88806ce3d2c0 R14: ffffffff8547d160 R15: 0000000000000002 [ 120.103565] FS: 00007f6a489e3700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 120.104166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.104608] CR2: 00007f875e8116f4 CR3: 000000001d80a000 CR4: 0000000000350ef0 [ 120.105143] Call Trace: [ 120.105339] [ 120.105518] ctx_sched_out+0x8f1/0xc10 [ 120.105828] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.106220] ? lock_is_held_type+0xd7/0x130 [ 120.106548] ? __perf_cgroup_move+0x160/0x160 [ 120.106888] ? set_next_entity+0x304/0x550 [ 120.107223] ? update_curr+0x267/0x740 [ 120.107531] ? lock_is_held_type+0xd7/0x130 [ 120.107854] __schedule+0xedd/0x2470 [ 120.108149] ? io_schedule_timeout+0x150/0x150 [ 120.108504] ? rcu_read_lock_sched_held+0x3e/0x80 [ 120.108897] schedule+0xda/0x1b0 [ 120.109170] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.109559] syscall_exit_to_user_mode+0x19/0x40 [ 120.109920] do_syscall_64+0x48/0x90 [ 120.110207] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.110600] RIP: 0033:0x7f6a4b46db19 [ 120.110886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.112273] RSP: 002b:00007f6a489e3218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.112857] RAX: 0000000000000001 RBX: 00007f6a4b580f68 RCX: 00007f6a4b46db19 [ 120.113417] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6a4b580f6c [ 120.113947] RBP: 00007f6a4b580f60 R08: 000000000000000e R09: 0000000000000000 [ 120.114478] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f6a4b580f6c [ 120.115009] R13: 00007ffc5fa7767f R14: 00007f6a489e3300 R15: 0000000000022000 [ 120.115546] [ 120.115724] irq event stamp: 806 [ 120.115974] hardirqs last enabled at (805): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 120.116691] hardirqs last disabled at (806): [] __schedule+0x1225/0x2470 [ 120.117307] softirqs last enabled at (618): [] __irq_exit_rcu+0x11b/0x180 [ 120.117944] softirqs last disabled at (343): [] __irq_exit_rcu+0x11b/0x180 [ 120.118588] ---[ end trace 0000000000000000 ]--- 04:12:32 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) fgetxattr(r0, &(0x7f0000000380)=@random={'os2.', '%\x00'}, &(0x7f00000003c0)=""/52, 0x34) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x41) execveat(r2, &(0x7f0000000440)='./file0\x00', 0xfffffffffffffffe, &(0x7f0000000540)=[&(0x7f0000000480)='$\'}##)\xd3\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='^//&-\x00'], 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) r4 = socket(0x2b, 0x800, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ppoll(&(0x7f00000002c0)=[{r0, 0x701}, {r3}], 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x200000001]}, 0x1) [ 120.524343] hrtimer: interrupt took 18054 ns [ 120.551498] audit: type=1400 audit(1664597552.868:9): avc: denied { write } for pid=3600 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 04:12:32 executing program 3: r0 = getpid() r1 = gettid() r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)) r4 = epoll_create(0x7823) r5 = gettid() r6 = gettid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000140)={r4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=0x0) clone3(&(0x7f0000000640)={0x4400, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x39}, &(0x7f0000000300)=""/238, 0xee, &(0x7f0000000400)=""/214, &(0x7f0000000600)=[r0, 0x0, 0x0, 0x0, 0x0, r2, r6, r8, r0], 0x9}, 0x58) kcmp(r0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r9, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x9, 0x2, 0x9, 0x0, 0x1927, 0x4400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff7f, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x400, 0x80000001, 0x6, 0x3, 0x10000000, 0x10000000, 0x400, 0x0, 0xfff, 0x0, 0x8001}, r0, 0x5, r9, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 120.656951] loop3: detected capacity change from 0 to 256 [ 120.674606] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 04:12:33 executing program 4: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r3, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) pread64(0xffffffffffffffff, &(0x7f0000000780)=""/162, 0xa2, 0x4904) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) open_by_handle_at(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="1439152c3bb34281caff0000255f839c0d4e82805b03c4d377b9ca79cc5a41a53173c0833f6ae3d6fe74be421f42664888068eeb6b920b33fbe92f2d2a6ea0d5bd1f1887c05efc47e6c6a02f7f1d410c234e2fbb7e62a4c862a79926ac4e81212ffb536b0a22deaa798dbca3bcf2920a299bd00eb9b661d864df7416e2"], 0x0) fstat(r0, &(0x7f0000000100)) r4 = epoll_create(0x7823) r5 = gettid() r6 = gettid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000140)={r4}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x91, 0xe1, 0x0, 0x3, 0x0, 0x80, 0x20, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xc4, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x2010, 0x7, 0x0, 0x7, 0x40, 0x1f, 0x1f, 0x0, 0x3, 0x0, 0x4}, r5, 0xe, r2, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fsync(r8) 04:12:33 executing program 3: r0 = getpid() r1 = gettid() r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)) r4 = epoll_create(0x7823) r5 = gettid() r6 = gettid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000140)={r4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=0x0) clone3(&(0x7f0000000640)={0x4400, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x39}, &(0x7f0000000300)=""/238, 0xee, &(0x7f0000000400)=""/214, &(0x7f0000000600)=[r0, 0x0, 0x0, 0x0, 0x0, r2, r6, r8, r0], 0x9}, 0x58) kcmp(r0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x10ba42, 0x0) pwritev(r9, &(0x7f0000000500)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x9, 0x2, 0x9, 0x0, 0x1927, 0x4400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff7f, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x400, 0x80000001, 0x6, 0x3, 0x10000000, 0x10000000, 0x400, 0x0, 0xfff, 0x0, 0x8001}, r0, 0x5, r9, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) 04:12:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) fgetxattr(r0, &(0x7f0000000380)=@random={'os2.', '%\x00'}, &(0x7f00000003c0)=""/52, 0x34) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x41) execveat(r2, &(0x7f0000000440)='./file0\x00', 0xfffffffffffffffe, &(0x7f0000000540)=[&(0x7f0000000480)='$\'}##)\xd3\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='^//&-\x00'], 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) r4 = socket(0x2b, 0x800, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ppoll(&(0x7f00000002c0)=[{r0, 0x701}, {r3}], 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x200000001]}, 0x1) [ 121.007646] loop3: detected capacity change from 0 to 256 [ 121.034880] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 04:12:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) fgetxattr(r0, &(0x7f0000000380)=@random={'os2.', '%\x00'}, &(0x7f00000003c0)=""/52, 0x34) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x41) execveat(r2, &(0x7f0000000440)='./file0\x00', 0xfffffffffffffffe, &(0x7f0000000540)=[&(0x7f0000000480)='$\'}##)\xd3\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='^//&-\x00'], 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) r4 = socket(0x2b, 0x800, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ppoll(&(0x7f00000002c0)=[{r0, 0x701}, {r3}], 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x200000001]}, 0x1) 04:12:33 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) fgetxattr(r0, &(0x7f0000000380)=@random={'os2.', '%\x00'}, &(0x7f00000003c0)=""/52, 0x34) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x41) execveat(r2, &(0x7f0000000440)='./file0\x00', 0xfffffffffffffffe, &(0x7f0000000540)=[&(0x7f0000000480)='$\'}##)\xd3\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='^//&-\x00'], 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) r4 = socket(0x2b, 0x800, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ppoll(&(0x7f00000002c0)=[{r0, 0x701}, {r3}], 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x200000001]}, 0x1) VM DIAGNOSIS: 04:12:32 Registers: info registers vcpu 0 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803b1bf690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000062 R11=0000000000000001 R12=0000000000000062 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6a489e3700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f875e8116f4 CR3=000000001d80a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f6a4b5547c0 00007f6a4b5547c8 YMM02=0000000000000000 0000000000000000 00007f6a4b5547e0 00007f6a4b5547c0 YMM03=0000000000000000 0000000000000000 00007f6a4b5547c8 00007f6a4b5547c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=ffffea00001e4248 RCX=0000000080000001 RDX=ffff888014139ac0 RSI=ffffffff81692058 RDI=0000000000000007 RBP=ffff88800fb0cf30 RSP=ffff888039467908 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888039467cf8 R13=ffffea00001e4280 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81460c3d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056020a6f04c8 CR3=0000000030654000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00642e65626f7270 646f6d2f6374652f YMM01=0000000000000000 0000000000000000 00642e65626f7270 646f6d2f6374652f YMM02=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff YMM03=0000000000000000 0000000000000000 0000000000000000 0000ff00000000ff YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 676f6c206d6f7473 7563000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000