Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 34.498599] sshd (244) used greatest stack depth: 24776 bytes left Warning: Permanently added '[localhost]:40369' (ECDSA) to the list of known hosts. 2022/10/01 09:57:23 fuzzer started 2022/10/01 09:57:23 dialing manager at localhost:35095 [ 36.749376] cgroup: Unknown subsys name 'net' [ 36.855236] cgroup: Unknown subsys name 'rlimit' 2022/10/01 09:57:37 syscalls: 2215 2022/10/01 09:57:37 code coverage: enabled 2022/10/01 09:57:37 comparison tracing: enabled 2022/10/01 09:57:37 extra coverage: enabled 2022/10/01 09:57:37 setuid sandbox: enabled 2022/10/01 09:57:37 namespace sandbox: enabled 2022/10/01 09:57:37 Android sandbox: enabled 2022/10/01 09:57:37 fault injection: enabled 2022/10/01 09:57:37 leak checking: enabled 2022/10/01 09:57:37 net packet injection: enabled 2022/10/01 09:57:37 net device setup: enabled 2022/10/01 09:57:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 09:57:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 09:57:37 USB emulation: enabled 2022/10/01 09:57:37 hci packet injection: enabled 2022/10/01 09:57:37 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 09:57:37 802.15.4 emulation: enabled 2022/10/01 09:57:37 fetching corpus: 50, signal 22182/23965 (executing program) 2022/10/01 09:57:37 fetching corpus: 100, signal 33231/36619 (executing program) 2022/10/01 09:57:37 fetching corpus: 150, signal 43864/48673 (executing program) 2022/10/01 09:57:37 fetching corpus: 200, signal 50180/56372 (executing program) 2022/10/01 09:57:38 fetching corpus: 250, signal 54466/62007 (executing program) 2022/10/01 09:57:38 fetching corpus: 300, signal 59701/68449 (executing program) 2022/10/01 09:57:38 fetching corpus: 350, signal 65094/74962 (executing program) 2022/10/01 09:57:38 fetching corpus: 400, signal 67778/78841 (executing program) 2022/10/01 09:57:38 fetching corpus: 450, signal 70947/83170 (executing program) 2022/10/01 09:57:38 fetching corpus: 500, signal 73548/86949 (executing program) 2022/10/01 09:57:38 fetching corpus: 550, signal 80008/94070 (executing program) 2022/10/01 09:57:38 fetching corpus: 600, signal 82947/97951 (executing program) 2022/10/01 09:57:38 fetching corpus: 650, signal 86902/102732 (executing program) 2022/10/01 09:57:39 fetching corpus: 700, signal 90092/106730 (executing program) 2022/10/01 09:57:39 fetching corpus: 750, signal 92903/110312 (executing program) 2022/10/01 09:57:39 fetching corpus: 800, signal 94984/113244 (executing program) 2022/10/01 09:57:39 fetching corpus: 850, signal 96061/115245 (executing program) 2022/10/01 09:57:39 fetching corpus: 900, signal 98904/118697 (executing program) 2022/10/01 09:57:39 fetching corpus: 950, signal 101090/121636 (executing program) 2022/10/01 09:57:39 fetching corpus: 1000, signal 103506/124709 (executing program) 2022/10/01 09:57:40 fetching corpus: 1050, signal 109209/130399 (executing program) 2022/10/01 09:57:40 fetching corpus: 1100, signal 110579/132487 (executing program) 2022/10/01 09:57:40 fetching corpus: 1150, signal 113191/135534 (executing program) 2022/10/01 09:57:40 fetching corpus: 1200, signal 116199/138898 (executing program) 2022/10/01 09:57:40 fetching corpus: 1250, signal 117798/141080 (executing program) 2022/10/01 09:57:40 fetching corpus: 1300, signal 119990/143712 (executing program) 2022/10/01 09:57:40 fetching corpus: 1350, signal 121021/145414 (executing program) 2022/10/01 09:57:40 fetching corpus: 1400, signal 122065/147120 (executing program) 2022/10/01 09:57:40 fetching corpus: 1450, signal 123343/149039 (executing program) 2022/10/01 09:57:40 fetching corpus: 1500, signal 124778/151085 (executing program) 2022/10/01 09:57:41 fetching corpus: 1550, signal 126269/153157 (executing program) 2022/10/01 09:57:41 fetching corpus: 1600, signal 127515/154829 (executing program) 2022/10/01 09:57:41 fetching corpus: 1650, signal 129183/156825 (executing program) 2022/10/01 09:57:41 fetching corpus: 1700, signal 130594/158591 (executing program) 2022/10/01 09:57:41 fetching corpus: 1750, signal 131983/160380 (executing program) 2022/10/01 09:57:41 fetching corpus: 1800, signal 133853/162550 (executing program) 2022/10/01 09:57:41 fetching corpus: 1850, signal 135337/164338 (executing program) 2022/10/01 09:57:42 fetching corpus: 1900, signal 137165/166305 (executing program) 2022/10/01 09:57:42 fetching corpus: 1950, signal 139161/168403 (executing program) 2022/10/01 09:57:42 fetching corpus: 2000, signal 140331/169882 (executing program) 2022/10/01 09:57:42 fetching corpus: 2050, signal 141901/171627 (executing program) 2022/10/01 09:57:42 fetching corpus: 2100, signal 143346/173265 (executing program) 2022/10/01 09:57:42 fetching corpus: 2150, signal 144749/174806 (executing program) 2022/10/01 09:57:42 fetching corpus: 2200, signal 146536/176563 (executing program) 2022/10/01 09:57:42 fetching corpus: 2250, signal 147556/177844 (executing program) 2022/10/01 09:57:42 fetching corpus: 2300, signal 148352/178983 (executing program) 2022/10/01 09:57:43 fetching corpus: 2350, signal 149763/180457 (executing program) 2022/10/01 09:57:43 fetching corpus: 2400, signal 151391/182053 (executing program) 2022/10/01 09:57:43 fetching corpus: 2450, signal 153262/183776 (executing program) 2022/10/01 09:57:43 fetching corpus: 2500, signal 154035/184804 (executing program) 2022/10/01 09:57:43 fetching corpus: 2550, signal 154933/185932 (executing program) 2022/10/01 09:57:43 fetching corpus: 2600, signal 156331/187333 (executing program) 2022/10/01 09:57:44 fetching corpus: 2650, signal 157563/188596 (executing program) 2022/10/01 09:57:44 fetching corpus: 2700, signal 158768/189864 (executing program) 2022/10/01 09:57:44 fetching corpus: 2750, signal 160235/191147 (executing program) 2022/10/01 09:57:44 fetching corpus: 2800, signal 161174/192167 (executing program) 2022/10/01 09:57:44 fetching corpus: 2850, signal 161758/192991 (executing program) 2022/10/01 09:57:44 fetching corpus: 2900, signal 162934/194108 (executing program) 2022/10/01 09:57:44 fetching corpus: 2950, signal 163807/195065 (executing program) 2022/10/01 09:57:44 fetching corpus: 3000, signal 164751/196049 (executing program) 2022/10/01 09:57:45 fetching corpus: 3050, signal 165435/196853 (executing program) 2022/10/01 09:57:45 fetching corpus: 3100, signal 166480/197830 (executing program) 2022/10/01 09:57:45 fetching corpus: 3150, signal 167495/198770 (executing program) 2022/10/01 09:57:45 fetching corpus: 3200, signal 168310/199629 (executing program) 2022/10/01 09:57:45 fetching corpus: 3250, signal 169756/200822 (executing program) 2022/10/01 09:57:45 fetching corpus: 3300, signal 171398/201981 (executing program) 2022/10/01 09:57:45 fetching corpus: 3350, signal 172056/202686 (executing program) 2022/10/01 09:57:45 fetching corpus: 3400, signal 173037/203523 (executing program) 2022/10/01 09:57:46 fetching corpus: 3450, signal 173646/204272 (executing program) 2022/10/01 09:57:46 fetching corpus: 3500, signal 174260/204931 (executing program) 2022/10/01 09:57:46 fetching corpus: 3550, signal 174866/205595 (executing program) 2022/10/01 09:57:46 fetching corpus: 3600, signal 175926/206511 (executing program) 2022/10/01 09:57:46 fetching corpus: 3650, signal 176729/207212 (executing program) 2022/10/01 09:57:46 fetching corpus: 3700, signal 177907/207989 (executing program) 2022/10/01 09:57:46 fetching corpus: 3750, signal 178429/208567 (executing program) 2022/10/01 09:57:46 fetching corpus: 3800, signal 179028/209164 (executing program) 2022/10/01 09:57:46 fetching corpus: 3850, signal 179720/209743 (executing program) 2022/10/01 09:57:47 fetching corpus: 3900, signal 180648/210425 (executing program) 2022/10/01 09:57:47 fetching corpus: 3950, signal 181369/211033 (executing program) 2022/10/01 09:57:47 fetching corpus: 4000, signal 182075/211588 (executing program) 2022/10/01 09:57:47 fetching corpus: 4050, signal 182746/212162 (executing program) 2022/10/01 09:57:47 fetching corpus: 4100, signal 183751/212838 (executing program) 2022/10/01 09:57:47 fetching corpus: 4150, signal 184271/213333 (executing program) 2022/10/01 09:57:47 fetching corpus: 4200, signal 184923/213859 (executing program) 2022/10/01 09:57:47 fetching corpus: 4250, signal 185567/214365 (executing program) 2022/10/01 09:57:47 fetching corpus: 4300, signal 186162/214830 (executing program) 2022/10/01 09:57:48 fetching corpus: 4350, signal 186776/215301 (executing program) 2022/10/01 09:57:48 fetching corpus: 4400, signal 187078/215689 (executing program) 2022/10/01 09:57:48 fetching corpus: 4450, signal 188281/216241 (executing program) 2022/10/01 09:57:48 fetching corpus: 4500, signal 188725/216644 (executing program) 2022/10/01 09:57:48 fetching corpus: 4550, signal 189133/217011 (executing program) 2022/10/01 09:57:48 fetching corpus: 4600, signal 189728/217503 (executing program) 2022/10/01 09:57:48 fetching corpus: 4650, signal 190344/217923 (executing program) 2022/10/01 09:57:48 fetching corpus: 4700, signal 191399/218399 (executing program) 2022/10/01 09:57:49 fetching corpus: 4750, signal 193028/218920 (executing program) 2022/10/01 09:57:49 fetching corpus: 4800, signal 194052/219285 (executing program) 2022/10/01 09:57:49 fetching corpus: 4850, signal 194583/219610 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/219895 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/220149 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/220399 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/220656 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/220912 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/221172 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/221435 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/221711 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/221975 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/222242 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/222494 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/222735 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/222883 (executing program) 2022/10/01 09:57:49 fetching corpus: 4870, signal 194679/222883 (executing program) 2022/10/01 09:57:52 starting 8 fuzzer processes 09:57:52 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x5b, 0x40a, 0x0, @loopback, @private1, 0x8, 0x7800, 0x9, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x2f, 0x9, 0x6, 0x1, 0x66, @mcast2, @loopback, 0x8000, 0x700, 0x0, 0x5}}) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r3 = openat$cgroup_pressure(r0, &(0x7f0000000200)='io.pressure\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2, r3, r0], 0x3) r4 = fcntl$dupfd(r0, 0x406, r0) fallocate(r2, 0x20, 0x2353, 0x80000000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000440)=0x0) r6 = fork() clone3(&(0x7f00000004c0)={0x48068000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x3b}, &(0x7f0000000340)=""/142, 0x8e, &(0x7f0000000400)=""/4, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x6, {r4}}, 0x58) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0xa00, 0x0) sendfile(r7, r8, 0x0, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000580)) perf_event_open$cgroup(&(0x7f0000000640)={0x2, 0x80, 0x5, 0x3, 0x20, 0xa1, 0x0, 0xffffffffffffff81, 0x2840c, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x9}, 0x8000, 0x9, 0x3ff, 0x7, 0xa1c, 0x8001, 0x3f, 0x0, 0x3}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x6) r9 = syz_open_dev$vcsa(&(0x7f00000006c0), 0xffffffffffffff4d, 0x0) openat(r9, &(0x7f0000000700)='./file0\x00', 0x224200, 0x120) fsconfig$FSCONFIG_SET_PATH_EMPTY(r9, 0x4, &(0x7f0000000740)='(:@#&\x00', &(0x7f0000000780)='./file0\x00', r8) r10 = openat$cgroup_procs(r4, &(0x7f00000007c0)='tasks\x00', 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000800), &(0x7f0000000840)={'U-', 0x8}, 0x16, 0x1) 09:57:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7ff, 0x4, 0x3, 0x1ff, 0x5, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x9e4, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x276, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x623d}, @device_a, @device_a, @device_b, {0x3, 0x40}, @device_b}, {0x9, 0x1, 0x3}}, {@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0xe9}, @device_a, @device_a, @initial, {0x6, 0xff}}, {0x4, 0x1, 0x0, 0x1, 0x7}}}, @random="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"}}, @NL80211_ATTR_FRAME={0x113, 0x33, @mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_b, @broadcast, @from_mac, {0xd, 0x3f}}, @ver_80211n={0x0, 0x7, 0x3, 0x1, 0x0, 0x1}}, 0x2020, 0x6, {0x0, 0x15, @random="560e91fdb15299b309800d1fb2d04732f9bc0b4849"}, @val={0x1, 0x3, [{0x3}, {0x24, 0x1}, {0x4}]}, @val={0x2d, 0x1a, {0x4000, 0x1, 0x3, 0x0, {0x8001, 0x273, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x80000000, 0x23}}, [{0xdd, 0x64, "40ceba6c2851abc97137d434fe59eecdc44c374f5a00b302c57661793fb20f9edccac306c60557fd1505e356423063c1a4056e65c7300fae9d86ad8fc629d68607d8e3bc51e14f277422c0379d57f9d6a0b5874035c3a5ff2461cb7abf63eaed7f404021"}, {0xdd, 0x4f, "112fff336920b157eec3511d4766dac0c541dfdfde532c9c420a045868efce5539b5e1356e8a76291a537e50858e75e94570ab2912a2876c6330098b83c3f77b991fac942d0dcd00577db32a7518f0"}]}}, @NL80211_ATTR_FRAME={0x63a, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x1}, {0x3f}, @device_a, @broadcast, @device_b, {0xb, 0xd9}, @device_b}, @random="16aa74ba9d290f7dadc1d53c1fb88ff805319eef9a517524271fd33b8ca0806399c813b5c0b18c16345539dfc7f94a7c00f4894a1b99ebe9821190f6c4a54b050ae0a90f274f69a36a703eeadb86578daed5a3ca2079a70afece9a2cd8e51b72988dad4380974fa0d8ccc8e1acbfec4ec85acf3256479cab166279064f3df6a7dbeea6f29d17f2c532cf19f08f9e0dbf34966ee3150d73811335feab6bba9372b44adf5c6ff8b9ba4907427e6634a7d761223535e16ec353c3b868c5e3b8c213c90b5fb0daa46b162712cedbc227b92019d52e2eed7b9267a20894e5d33ca827f5b458f9fb0e90a75180069e80447b009be7bf80863ead5d339adfc5de7ca18567898c6a9f8c8ab6180101c7b447c7c9ee98c8ef924a030bb42162e6b1e246af3c6bfeccfa886401b165973f80e02b2aba55127c7d3306a8bea8cd666bb71d69acf0853feb794af5b27c3b60ffc1898ea71bff92691f188f713ee3d97a8bb2199f4398d12cffe3344bcd8806542a90e4e3cf61e142d9851c642404173cac73ef143fbb497108563a88e1257fcd5495f4bce1d2fd35cd7ab36a383e7eb7c0adbb5dba43fea93fe4fa88eb18bafc4c09bae7d60a17f9c6f28f5aff8f82b32ad9a6fbc3edaff54559b0d204f88acf227ad342c83ec9d18cfb5ada783016429ce77f61f9b50c811a17d471a760fcd5a291e1ddd7e9c7837237abfbcfd18c2df52dc1704610d1220eab118d3d266388d5f83aa4131dba776c8ce133cb2b76dfa5a1dfbf23939c12218a3663e83c256a0bef92f0bdcfb2ccfa27d426124e85abee7e6197a02948aacd48eeb83c54504ce5d65d89abe042ff13f77a573a9fbab8a77a9f391cd59cbc799dc551467a02920984b74a3d323223a1230a531f0815a7d58e2aadf7852193cff0ba729e04cb11862974e39d8ad7e35cf2d94c19d7ea25185aa0d466f0fa4c9e71e524a82219050f4d5c9101846477514ae2c92218f1a018bfa147951a8aae4966ca5c23e03b42a078a200cbf544f791f16f134c0b47c7c6c956c1e8badbe0c3512e2af368c0b54f5c1b15cfdccb1af59b2b0a7052cbb66914452cbd3358bf3d2c81b23d4e37c0d4cc8fe3a57bf240e5616fc9f6020a1b4be8c14604c4f85fe383b4f402a7ed9e99c5bab5ee518118a5882d3ef7ce10611333e44649b7cbc05ca278542db1ceca27ef1a485621b086582a7b89980132cced6b3de7161680cf8ac9107c590154017f706938020b67e7bf8551e7b32c2ce5d9b9c123480a2dbb87a3d570eb5e89f5d2004880c07303559977ae623f046f822ff0d56468dd76502d52a4568779d7abafa702bbd4f85a19642de22307829da5b728ed9f29d3b1635b8696af51286d1b31fca271a9765d643365cbee603b1de8b58f8de1bc14674d4dcc795039ccd89c5cba863794e5efa95b77bb6668722080620bb9d658cd860bfef02317222b4f18bf23fc1c36d42d1eb1cc878041bf01619a7ac852d05571389a963473c180d12c961e2b8a85ce95855a3e5d2c2418e98a851826b46afbd29b3079fad49ff3a4b2f3f510bb2f103a3df8079d4825badec3f7e85f61592843be3269b8b9b0fb8a08c528105105d18eed5b6bfddca8cfe0faa35e308ccb9e1d8871f6e83a23d89737d46baa7ff3fad628e25ccae8be710a78743497e9a9081dd19d8830ebb68f5054588d7a8145abdc8948a8aadff642317e264fe11e9070b5d3b72a7e289e0a14a72a6f722bd25cf6528765d9b5b866cf42a95caa99f7cb0a2c54edd769f32c4ca31129722a6c93f8c43f2718922823f2f1f7fd8fec278e328e1a409b648982772fcdbf9cbb5abc45d755e1b9462f14cc67d7616b9136c18276857c29aa617d02a1da3d7a9348144d022909a9807f094897f5ece0144561af59d789685195e4ce39e7a12df6903515c7365b846a266baa0dc73921cdef88cf776a7abada965d7bb29086cb05dd4c692920a132aebbba17d5f1876f1515fe3071700f60ff83966d7abf5e141fdd4cb7c2119e34e008333aaa6bb8b2f336bebb33ca5bb1f8998d3b31678e7cee0a598f75fb1911c8ede85c3ebf96749097c67a6652592403e04a43b1ef8f87e32af858755809113254caefed60eb92ba35ff177ef65dd6c513425ca243f2dc6a0dfb21a4a40350176e62ae7c93e78edb07e2e42516e47da00cffcea198f9b863e581a896bbfc63"}}]}, 0x9e4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r2 = memfd_create(&(0x7f0000000b40)='\xff\xff\xff\xff\xff\xff', 0x6) fcntl$setflags(r2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000bc0)={0x5f4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x208, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}]}, {0x178, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x54}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x8, 0x1, 0x800, 0x4, 0x5, 0x654, 0x8]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x4}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x2, 0x1}, {0x7, 0x3}, {0x3, 0x7}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0xd}, {}, {0x2, 0x5}, {0x6, 0x2}, {}, {0x2, 0x8}, {0x7}, {0x1, 0xa}, {0x4, 0x9}, {0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x3, 0x8}, {0x6, 0x1}, {0x3, 0x6}, {0x5, 0x8}, {0x1, 0x8}, {0x1}, {0x7, 0x5}, {0x7, 0x8}, {0x5, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x3, 0x3}, {0x4}, {0x5, 0x8}, {0x6, 0xa}, {0x5, 0x1}, {0x3, 0x4}, {0x2, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x4}, {0x4, 0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x3}, {0x0, 0x1}, {0x0, 0x8}, {0x7, 0x8}, {0x5, 0x7}, {0x6}, {0x5, 0x8}, {0x2, 0x5}, {0x1, 0x2}, {0x2, 0xa}, {0x2, 0x1}, {0x6, 0x8}, {0x3, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x6, 0x3}, {0x7, 0x4}, {0x0, 0x7}, {}, {0x7, 0xa}, {0x4, 0xa}, {0x5, 0x9}, {0x5, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0xbd9, 0x2, 0x2f, 0x200, 0x3, 0x5f]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0xb, 0x48, 0xb, 0x9, 0x6e, 0x0, 0x36, 0xb, 0xc, 0x5, 0xc, 0x4, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x6c, 0x18, 0x36, 0x6]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x19, 0x200, 0x4, 0x9, 0x1, 0x9, 0x5b, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x3, 0x9, 0x18, 0x30, 0x36, 0xb, 0x24, 0x6c, 0x6, 0x18, 0x30, 0x30, 0x0, 0x18, 0x6f, 0x16, 0xc, 0x4, 0x1, 0x2, 0x0, 0x1, 0xc, 0x6c]}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x6}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0xa}, {0x2, 0x1}, {0x7, 0x9}, {0x4, 0x8}, {0x6, 0x2}, {0x4}, {0x3, 0x4}, {0x7, 0x5}, {0x6, 0x3}, {0x6, 0x4}, {0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x3, 0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x9}, {0x3}, {0x5, 0x8}, {0x1, 0x9}, {0x4, 0x6}, {0x3}, {0x2, 0xa}, {0x2, 0x1}, {}, {0x3, 0x2}, {0x4, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x6, 0x5}, {0x7, 0x5}, {0x2, 0x2}, {0x4}, {0x4, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2c, 0x16, 0x0, 0x24, 0x2, 0xb, 0x2, 0x18, 0x6, 0x1b, 0xb, 0x30, 0xb, 0x30, 0x30, 0x4, 0x4, 0x60, 0x5, 0x24, 0x2, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x55}]}]}, @NL80211_ATTR_TID_CONFIG={0x34c, 0x11d, 0x0, 0x1, [{0x120, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xcf5c, 0x3, 0x36, 0x3, 0x1, 0x7ff, 0x2b62]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x1, 0x18, 0x4, 0x60, 0xb, 0x60, 0x0, 0xc, 0x1b, 0x5, 0x4, 0x35, 0x4]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x1, 0x200, 0x61, 0x1ff, 0x27e, 0x9f8b]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3}, {0x3, 0xa}, {0x1, 0x7}, {0x3, 0x8}, {0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0xa}, {0x7, 0x8}, {0x4, 0x5}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0xa}, {0x6}, {0x3, 0x7}, {0x5, 0x3}, {0x3, 0x6}, {0x4, 0x7}, {0x7, 0xa}, {0x6}, {0x4, 0x5}, {0x0, 0x8}, {0x6, 0x9}, {0x2, 0x9}, {0x4, 0x8}, {0x5, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x6}, {0x4}, {0x5}, {0x0, 0x8}, {0x4, 0x9}, {0x2, 0xa}, {0x1, 0xa}, {0x4, 0x3}, {0x1, 0x3}, {0x4, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x2, 0xa}, {0x3}, {0x6, 0x5}, {0x7, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0x6}, {0x4, 0x7}, {0x4, 0x7}, {0x7, 0x3}, {0x2, 0x5}, {0x2, 0xa}, {}, {0x3, 0x8}, {0x5, 0x3}, {0x2, 0x9}, {0x5, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {}, {0x3, 0x9}, {0x4, 0x3}, {0x2, 0x2}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb1, 0x1, 0x7f, 0x3, 0x6, 0x4, 0x7, 0x6]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x2, 0x12, 0x12, 0x1b, 0x6c, 0xc, 0x24, 0x5, 0x30, 0x30, 0x1, 0x30, 0x12, 0x60, 0xc, 0x6c, 0x9, 0x3, 0x16, 0x36, 0x6c, 0x12, 0x18, 0x1b, 0x41, 0x1, 0x18, 0x12, 0x36, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0xd2, 0x0, 0x9, 0x9e68, 0xbd, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x6c, 0x30, 0x1b, 0x18, 0xc, 0xb]}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x9, 0x1, 0x81, 0xadaf, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xd8a, 0x6, 0x5, 0x5, 0x6, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x3}, {0x5, 0x6}, {0x3, 0x8}, {0x3, 0x6}, {}, {0x0, 0x1}, {0x6, 0x7}, {0x5, 0x7}, {0x6, 0x8}, {0x5, 0x2}, {0x5, 0x4}, {0x3, 0x6}, {0x7, 0x3}, {0x6, 0x2}, {0x7, 0x5}, {0x5}, {0x5, 0x9}, {0x5}, {0x6, 0x2}, {0x4, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x8}, {0x0, 0x3}, {0x1, 0x5}, {0x4, 0x9}, {0x0, 0x9}, {0x6, 0x5}, {0x6, 0x1}, {0x6, 0xa}, {0x5, 0x4}, {0x0, 0x4}, {0x4, 0x1}, {0x6, 0x5}, {0x7}, {0x7, 0x4}, {0x3, 0x8}, {0x5}, {0x2, 0x3}, {0x2, 0x2}, {0x6, 0x3}, {0x4, 0x6}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0xb, 0x1, 0xb, 0x4, 0x30, 0x12, 0x48, 0x18, 0x24, 0x2, 0x24, 0x3, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x4e4, 0x8, 0xec4, 0x101, 0x6, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x24, 0x2, 0xc, 0x60, 0x16, 0x2, 0x3, 0x2, 0xb, 0x4, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x4, 0x6c, 0x16, 0x2, 0x4, 0x4, 0x1b, 0x6, 0x30, 0x60, 0x24, 0xc, 0x3, 0x24, 0x24, 0x16, 0x4, 0x60, 0x60, 0x3, 0x6, 0x18, 0x6]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x5}, {0x7, 0xa}, {0x3, 0x6}, {0x7, 0x6}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x5, 0x9, 0x24, 0x18, 0x24, 0x30, 0x12, 0x4, 0x3, 0x24, 0xb, 0xb, 0x16, 0x9, 0x30, 0x5, 0x57, 0x6c, 0x18, 0x5, 0x12, 0x9, 0x24, 0x2, 0xb, 0x48, 0xb, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x87, 0x2, 0x2, 0x8, 0xfffd, 0x1, 0x400]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x6, 0x5}, {0x4, 0x8}, {0x5, 0x1}, {0x1}, {0x3}, {0x3, 0x8}, {0x6, 0x8}, {0x4}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x16, 0x3, 0x4, 0x60, 0x48]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x4, 0x3, 0x24, 0x24, 0x60, 0x16]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x70, 0x6, 0x9, 0x3, 0x4, 0x7ff, 0x6, 0x59a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0xfffa, 0x8, 0x9, 0xfe6, 0x0, 0x3f]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x60, 0x2, 0x71a97a176819dd63, 0x48, 0x1b, 0x12, 0x6, 0x30, 0x24, 0x24, 0x7, 0x6, 0x6c, 0xc, 0x1, 0x5, 0x9]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x30, 0x48, 0x48, 0x12, 0x1, 0x5, 0x5, 0x5, 0x30, 0x3, 0x1, 0x9]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1}, {0x3, 0x5}, {0x3, 0x5}, {0x5, 0x2}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x44}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x0, 0x6, 0x8, 0x1ea, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x3, 0x4}, {0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x5, 0x6}, {0x7, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x5, 0x8}, {0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x4, 0x9}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x60, 0xc]}]}]}]}]}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x850}, 0x800) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x10000, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x70, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000013c0)=0x74) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001400)={"5fcc1f043021c7ebd18db41eca4d8394", 0x0, 0x0, {0x7fff, 0x9}, {0xff, 0x7}, 0x7, [0x0, 0x9, 0x2, 0x5, 0x46be, 0x100, 0x80000000, 0x2, 0x5, 0x200, 0x24, 0x42, 0x7, 0x9, 0x40, 0xfff]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip_mr_cache\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r3) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000001680)={&(0x7f0000001540), 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x6c, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x6c}}, 0x4004001) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r4, r6) r7 = inotify_init1(0x80800) flock(r7, 0x5) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000016c0)='ns/time_for_children\x00') ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x80089419, &(0x7f0000001700)) 09:57:52 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000000c0)={0x2, 0x5, 0x63, &(0x7f0000000040)=""/99}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "29945fcc330842f6f7e3a37e44a49b"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "58042f8566901b69a663e97e09"}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x80) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x2, 0x5, 0x7f, 0xf6d, 0x2, 0x3e, 0x7c, 0xe6, 0x40, 0x281, 0x200, 0x1, 0x38, 0x1, 0x5, 0x0, 0x1}, [{0x7000000b, 0x4, 0x3, 0xfffffffffffffff7, 0x0, 0x200, 0x7fffffff, 0x6}], "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", ['\x00', '\x00', '\x00', '\x00']}, 0x1478) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000016c0)=0x3a, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001700)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x769) syz_io_uring_submit(0x0, 0x0, &(0x7f00000017c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001740)={0x0, 0xc0, 0x3}, &(0x7f0000001780)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000001800), 0xff, 0x101200) pipe(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001880)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r3, &(0x7f00000018c0)={r4, r6, 0x1}) r7 = syz_open_dev$vcsu(&(0x7f0000001900), 0x0, 0x800) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000001940)) pipe(&(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r9, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r8, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r5, {r6}}, './file0\x00'}) 09:57:52 executing program 3: keyctl$setperm(0x5, 0x0, 0x2001) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="a076c70b8330b6e5776e1634413b5961329cddb7488c475dc4b79e05dde1b64cb41ffb90666506b261c5e0036ec04d7df5f34dd3eae4f58c42012a82ed573abf6c3f1a8652c1d6a9d63fa61e76c5b5466d109e05ca27e4c7c2b4584b7515a90ca326e9deab436da8049848abaed153027c79b89b339b093ffdf1ee487a44ca", 0x7f, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r2 = request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='keyring\x00', r1) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) r3 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "d60e74f4cc152fc2121ec6fe083b55e820fa48a0d3f0494d146849a6822ccdd311005d3cd4100799a78b9031f99d93470a8187f423b1404653f08d2060e93ec0", 0x22}, 0x48, r2) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$negate(0xd, r0, 0x3, r4) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r5) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r6) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000680)={[0x1]}, 0x8) r8 = perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x6, 0x0, 0x3, 0x1, 0x0, 0x5, 0x14844, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000005c0), 0x1}, 0x80, 0x78e836c7, 0x800, 0x0, 0x5d, 0xbc62, 0x2, 0x0, 0x8, 0x0, 0x14000000000000}, 0x0, 0x9, r7, 0x0) keyctl$KEYCTL_MOVE(0x1e, r6, r3, r3, 0x0) r9 = syz_io_uring_setup(0x490, &(0x7f00000006c0)={0x0, 0x7426, 0x20, 0x2, 0x3c8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f00000007c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x9) r11 = ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000ac0)=0xe8) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80), 0xc000, 0x0) sendmsg$netlink(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)={0x10, 0x33, 0x0, 0x70bd29, 0x25dfdbfd}, 0x10}, {&(0x7f0000000840)={0x164, 0x2e, 0x400, 0x70bd29, 0x25dfdbfd, "", [@generic="7519b957972e73c328306661012f3c8471ac24229e4b87164f5de1f316fa3d71336d15fed40c391b3a0c85ac919a4f3e11a7d1cca1901fdec8931a1ff3fbefde587b564faa03e5fa9c548186188f1dc1642549cc5fdf851c2224427e7c0e60e3a7044bf7f9aa476a26170f5186105fac5c8b", @generic="60fc5affd55989e7e54ef275735f0c64fb5f8d03d900ff053c6710296cd1d855f71bdd24071ddb25584e2ee5cc807fbd0a3308d3e1494bed47ce8cacc9815d0d681a350c354f4e401594f8ba806e62ed778d4ea36d2aee3d39f16b072d4ceebaf322bda6c03e4d4dcef5064f33b6b4db", @generic="e76455348f0a99fdc03285e36ef07c13e0c1e26f25546ce46b8af1cde0bc7fc481e53d3ee9c822c4ae324f254e07797afd2d772e31b10c0533af47e8afaecd3b1998d7dba78c60f31f96c2ae2c8ce9e21a5644e6b56b0c96ae259fdd0da3b06368ece6d39e8d572a659f6f3972ac46e3"]}, 0x164}, {&(0x7f0000000b00)={0x3f0, 0x36, 0x920, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x73, 0xe, 0x0, 0x1, [@generic="0c8c2fa3e94acc2511c73e7deb55d96335c83b88cf3d550fd99a2b4ec19ff21057d733372839b7accfc9c0f7accb96915e28f30294499bd403edab36f033f13e435a0ac09d005b71be34f3fcba12225ea648043d90bdbf4f9f7d95b56cdf02e4368a69714499cd1165f789c0f69763"]}, @typed={0x96, 0x1, 0x0, 0x0, @binary="c7cfbca89a795e2ce0f2892b1dd5a9be1dca7ac8778a570c802234369cc9dfafd75aa1776972a4bbffa14218ef980bf1b158183806970c1289d2f012cbfba392474ca355c05600cc441ff70667e6706e134cf05a8c10ce6b65675573be9f7c98115d3db291042a6f3a411b05c7af876e01ca569bf4730d563f35269282fd524b704e852d785ed333c92a07fa6515c6a33651"}, @nested={0x19c, 0x76, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @fd=r11}, @typed={0x8, 0x3a, 0x0, 0x0, @u32=0x6}, @generic="6976f355ffcf627baf0ff132f67baa6b342d6fd8b069da121804d8", @generic="f577ea09103c7c59d3866896b52af02c0517153ac6f6da7a7f2d96f645e5a42c30c90f0d47e1487c6b8e4e00f1befae18ce5665a2ce0431f40934f7f5c17c7976d90a63f36d70fc2053ac6142c8f3181036f64ee8485b0086bacebb393c73d8c737c789c7a9fd1ce4ac02478848b8c1ee21bafff9345450ee1616d9b8a7b220c9815011aad5005228bda9530e839e43ef1f84a06fcef4792b192a2c546b00c06000abb7bdf1233353361bb38562124bbcf8938d33863", @generic="f8ac328fae74daf8e391c69da52f924f4a60aa3dc49a0fad62d800bed6abbbed1549fb6f2b14476550e8e9b4e0379c90a857260683c37352faef20c75585cbd6444aca87603f83aa4d547ef994ea78a858fd6ede3b2410f27d46285f2015178521470889c582c7603c3f4ff272c6a43a77da628cd743cd20335d59a81be43627a27e82f1300154ec4c8266b69e9f78133c4e62a2babe109caa2164fe85768d57bba6a51711c6bbeb75b4fd", @typed={0xc, 0x48, 0x0, 0x0, @u64}]}, @typed={0x8, 0x66, 0x0, 0x0, @uid=r12}, @nested={0x127, 0x7f, 0x0, 0x1, [@typed={0xa1, 0x5b, 0x0, 0x0, @binary="a243fadd7eb7a41213938e6cf1dd2fd9c5a808dbace27abb9ccd57cb3fcb6016190cf823ea3b84a86349f91b1163cf0ee85cbee7ef559e391d9c191cc49e5a425b1714520a1f8855bb901d0f476334efdc19a5ac33fb214686c31928c1bb9a917a7b9c6b165f69d13d168795269a815c09f92b4134adbabcd50a615daeda361cd68618f801e63a4cf0ff2ea91a8092c7fa43e0b60a4df0e889aa51aea7"}, @generic="b5e8acacbf217af23f66087a8a2b402651ea71b38786b331a07bdf4913c0525bd0073eccd300af7af4960f6ad62923e867bbd893d7f10d9dd840fbe99fc8dc7ab22e0fb1ebe4692882ccdfa2af071fdb50ddea603c0ae4ccfc5fa6f308c850de7f04e1a5c6479a7b70f91d4b8c8856", @typed={0x8, 0x27, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x3b, 0x0, 0x0, @u32=0x395d2914}]}]}, 0x3f0}, {&(0x7f0000000f00)={0x20, 0x39, 0x300, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x67, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}, @typed={0x8, 0x6e, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x4, &(0x7f00000010c0)=[@rights={{0x18, 0x1, 0x1, [r13, r9]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r7, r9, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r7]}}, @rights={{0x24, 0x1, 0x1, [r7, r9, r8, 0xffffffffffffffff, r7]}}], 0x70, 0x4040810}, 0x20000080) 09:57:52 executing program 4: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/4096) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000001000)=""/24) r0 = msgget(0x2, 0x440) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001040)=""/205) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000001140)=""/86) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000011c0)=""/82) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001240)=""/146) r1 = msgget(0x3, 0x642) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000001300)=""/64) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001340)=""/59) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000001380)=""/34) r2 = msgget(0x1, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f00000013c0)=""/155) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001480)=""/4096) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000002480)=""/7) msgctl$IPC_INFO(r2, 0x3, &(0x7f00000024c0)=""/246) r3 = msgget(0x3, 0x400) msgctl$IPC_INFO(r3, 0x3, &(0x7f00000025c0)=""/4096) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000035c0)=""/205) msgget(0x3, 0x79b) 09:57:52 executing program 5: getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x58}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x100, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x38aa}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40890) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x80, 0x0, 0x80, 0x8}, {0x380, 0x2, 0x0, 0x40004000}, {0x1, 0x1, 0x4, 0x1}, {0x1, 0x20, 0x3, 0x4}, {0x5, 0x2, 0x9}]}, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3d4, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe930}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe9, 0x3, "422d9eea6114189ea23ff4046d7cbd04d7c61180697f382b967e5a6ca86e2494fde27697c10c047b539e9eef686f627baea6cbe4810b739d7fd90ac55b29d5ff5cfbd0c51270218d312ae2c96841f68f91c08753412f812bc8c34d7e8c5b0d46e9e237f001371151f6a3b084570ad5347b7d09d6837fc303a86b3559fc172d5800d4b4466ed4b2ce6b0c86647164391ffa4658cb7b822c8d6d0748083677226e331f1c457443d1f62b0ee71609f7e17693e45ad67d443ab0e7cc686225207035816920eefce21d71c91bb110490746de30acfb67da28a7ad32e0cbad351d0bfe5398f31ddb"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "33d168ae8aa339a0def7332dd8404909da68534e9bb78a64d6e75d89d64ccc"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffeb1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c39}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "61e98e16e36b45ccf90059f7b8ab393f7be92038f4f3d41fc8f5"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "0c96b474196d4bc4a1f2265bfdb841442c5f864082269540fcdcb638"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x60, 0x3, "6f3c8361e094611787a6ec9064f5de478aa2d6d97b9db4a31cebfac0c657ca4cd7fb6690a2ec8bcdb67ccccc6cb4e06e052427b0d458dbdef7978f6cd24ca156725e162f6706fa6cb387c7543dbdb2f72b8c81b6b8d7bb1cb4728913"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3b94}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @val={0xc, 0x99, {0x10000, 0x51}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x34}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8048854) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x13c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_REG_RULES={0xf4, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x20}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9ee6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x721}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000080) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1d}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x4010050) connect$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x21c, r0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x34}}}}, [@NL80211_ATTR_CQM={0x74, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x100, 0x4075, 0x1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x5, 0x6, 0x400, 0x40, 0xea7, 0x0, 0x8000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x40}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x3, 0xca1, 0x40, 0x7]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2, 0x1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x88, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x7535, 0x0, 0x1, 0x8, 0x5, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x65}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x61}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x5, 0xff, 0xffff, 0x3, 0x20000, 0x6, 0x3, 0xf55]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x200, 0x151a, 0x9, 0x5, 0x7fff, 0xc2]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xbe}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x17b}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x2a37]}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x82b2, 0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x168}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000fc0), 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001000), 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x34}}, 0x8001) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x158, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x45}, {0x6, 0x11, 0x81}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfb}, {0x6, 0x11, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x6}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000013c0), 0x4002, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000014c0)={&(0x7f0000001400), 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, r0, 0xc8b23c8b282be121, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x4008000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000001600)={&(0x7f0000001500), 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x48, r0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x5f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044084}, 0x48041) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001680), 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xc4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b230808f99"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x13, 0x4, "92122e1951e6ad0d369f3c6adb7040"}]}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_SEQ={0xa, 0x4, "d2d8db3ff45b"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc001}, 0x1) 09:57:52 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) fallocate(r0, 0x10, 0x1, 0x100000001) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000040)) r1 = accept4$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000180)={0x0, @aes256, 0x0, @desc4}) r2 = dup(r1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='!-&),#,\x00', 0x0, r2) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1, &(0x7f00000002c0)={'trans=virtio,', {[{@aname={'aname', 0x3d, '!-&),#,\x00'}}, {@version_9p2000}, {@access_user}], [{@fowner_lt={'fowner<', 0xee00}}]}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x31}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000004c0)=0x5) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder-control\x00', 0x801, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000540), &(0x7f0000000580)=@md5={0x1, "9162f696949a705892493a67713c3afa"}, 0x11, 0x2) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f00000005c0)={0x100000001, {0x8, 0x40, 0x4, 0x100000000, 0xf43}}) r4 = gettid() r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x0) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x9, 0x80, 0x1f, 0x11, 0x0, 0x9, 0x10, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1c1, 0x4}, 0x2000, 0xffffffffffffff7f, 0x7f, 0x7, 0x1, 0x1, 0xfffd, 0x0, 0x7, 0x0, 0x2}, r4, 0x4, r5, 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) openat$cgroup_ro(r6, &(0x7f0000000700)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) write$P9_RSTATu(r6, &(0x7f0000000880)={0x67, 0x7d, 0x2, {{0x0, 0x4e, 0x907, 0x9, {0x40, 0x3, 0x8}, 0x50800000, 0x5, 0x1, 0x5, 0x4, '}&.*', 0x3, ']`{', 0x7, 'fowner<', 0xd, 'security.evm\x00'}, 0x4, ')/#\xd6', 0xee01, 0xee00, r7}}, 0x67) [ 65.604097] audit: type=1400 audit(1664618272.471:6): avc: denied { execmem } for pid=287 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:57:52 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"43b5c77149e9a09fa99f9b1b793653c8", 0x0, 0x0, {0x800, 0x7fffffff}, {0x4d3, 0x1}, 0x3, [0xffffffffffff8000, 0x9, 0x9, 0xffff, 0x7, 0x7f, 0x8001, 0x3, 0x0, 0x7fff, 0x0, 0xe125, 0x0, 0x1, 0x5, 0x200]}) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x0, 0x4, 0x3}) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100, &(0x7f00000001c0)={0x100070, 0x100004, 0x180000}, 0x20) r2 = openat(r1, &(0x7f0000000200)='./file0\x00', 0x400000, 0x0) r3 = accept4(r2, 0x0, &(0x7f0000000240), 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x29c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x258, 0x5b}}}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e7792a72dcd154b606d45a10544be1c4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a69aae7db22197ef0dfc592310ffb03a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b17ecf3b81aba4841f20eb36ab1d6453"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="108d187ec4559075b91cf6490833953a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="440a9aded2eca9f21a934fba3a8ff965"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d96012b35ac084e1"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f9ccf3b9eb116de94dfe2c9a11395816"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3257c4b39ad98d32"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0973a85a1076e45d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e04c5cc359da0a07743134e0804d802f939e6bec5b554974b3b0c69311ce01ce"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "55db50b67efff348"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2c502fee776812596718e4971e51ca368a29758f76d90d09a8f1ac48fb26ec53"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0fb01cf5ed7af0588fbc55312cd2fb0605dc292adcc546ea392d9bd7ed878792"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1a4aa38652e4915e03356f60cb595bd1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ca53aefbd5e7f7b0"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2a3cd79cd5efeda6d9f4cc2e6da24c39"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x20}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7c151ca8b7fd93701786aa562287224cd6b11659c80942e8"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b921857eea9a3d52aff77fd8617d6910e38e06b94910b06d3a335a622f7e3593"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bd0708cd9c53685b25047191d9c4d36f"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ba00cd8b1e266b8d5035b41444291b36805506c870881dd7901ee03b2392eb84"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b6208d5a04fcee18206f7210fea123bd673631b6d8d1ba2f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7d76be896f7cf7deeda691272e2c291017f64474ee42736db385021e307bae4b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a6f24c4b9c1d1db77aa9af857d526f962e274ca5ec631c47"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c1f3368705fc6ee689bab0f5f6e55478"}]}]}, 0x29c}}, 0x8800) getsockname(r0, &(0x7f0000000600)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000680)=0x80) write$P9_RREADDIR(r3, &(0x7f00000006c0)={0x2a, 0x29, 0x1, {0x8, [{{0x40, 0x2, 0x3}, 0x10001, 0x1f, 0x7, './file0'}]}}, 0x2a) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x9400) socket$nl_audit(0x10, 0x3, 0x9) write$P9_RATTACH(r4, &(0x7f0000000740)={0x14, 0x69, 0x1, {0x4, 0x3, 0x6}}, 0x14) r5 = syz_io_uring_complete(0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000780)) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x400000, 0x0) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000008c0)=""/39, &(0x7f0000000900)=0x27) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000940)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x6}, 0x0) [ 66.967712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.969618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.971048] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.974683] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.976617] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.978215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.983481] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.032176] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.033935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.035345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.037645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.038680] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.039738] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.048467] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.054909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.057089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.058927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.060193] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.061404] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.062696] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.063747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.065305] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.067651] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.071075] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.071175] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.073796] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.075564] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.076604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.077725] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.078702] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.084332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.085379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.087116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.092458] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.093571] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.094510] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.095441] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.096433] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.097097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.099497] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.105346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.111554] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.116032] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.147176] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.148350] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.159946] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.161703] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.166588] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.181653] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.048363] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 69.049418] Bluetooth: hci0: command 0x0409 tx timeout [ 69.176096] Bluetooth: hci6: command 0x0409 tx timeout [ 69.176818] Bluetooth: hci4: command 0x0409 tx timeout [ 69.177411] Bluetooth: hci1: command 0x0409 tx timeout [ 69.177979] Bluetooth: hci3: command 0x0409 tx timeout [ 69.178527] Bluetooth: hci5: command 0x0409 tx timeout [ 69.239972] Bluetooth: hci7: command 0x0409 tx timeout [ 71.095938] Bluetooth: hci0: command 0x041b tx timeout [ 71.224041] Bluetooth: hci5: command 0x041b tx timeout [ 71.224511] Bluetooth: hci3: command 0x041b tx timeout [ 71.224952] Bluetooth: hci1: command 0x041b tx timeout [ 71.225353] Bluetooth: hci4: command 0x041b tx timeout [ 71.225751] Bluetooth: hci6: command 0x041b tx timeout [ 71.287914] Bluetooth: hci7: command 0x041b tx timeout [ 73.143947] Bluetooth: hci0: command 0x040f tx timeout [ 73.271959] Bluetooth: hci6: command 0x040f tx timeout [ 73.272012] Bluetooth: hci4: command 0x040f tx timeout [ 73.272424] Bluetooth: hci1: command 0x040f tx timeout [ 73.273184] Bluetooth: hci3: command 0x040f tx timeout [ 73.273541] Bluetooth: hci5: command 0x040f tx timeout [ 73.335923] Bluetooth: hci7: command 0x040f tx timeout [ 73.847927] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 75.192229] Bluetooth: hci0: command 0x0419 tx timeout [ 75.343424] Bluetooth: hci5: command 0x0419 tx timeout [ 75.343590] Bluetooth: hci3: command 0x0419 tx timeout [ 75.344265] Bluetooth: hci1: command 0x0419 tx timeout [ 75.345019] Bluetooth: hci4: command 0x0419 tx timeout [ 75.345716] Bluetooth: hci6: command 0x0419 tx timeout [ 75.383979] Bluetooth: hci7: command 0x0419 tx timeout [ 76.672748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.674579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.676364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.687114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.689060] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.692461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.696885] Bluetooth: hci2: HCI_REQ-0x0c1a [ 78.712939] Bluetooth: hci2: command 0x0409 tx timeout [ 80.759921] Bluetooth: hci2: command 0x041b tx timeout [ 82.807909] Bluetooth: hci2: command 0x040f tx timeout [ 84.855906] Bluetooth: hci2: command 0x0419 tx timeout [ 117.456194] audit: type=1400 audit(1664618324.324:7): avc: denied { open } for pid=3731 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:58:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x14}], 0x1}, 0x0) 09:58:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0xcd5ff099adcc241f}, 0x0) [ 117.904106] audit: type=1400 audit(1664618324.772:8): avc: denied { kernel } for pid=3762 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:58:44 executing program 3: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x2, 0xffffffffffffffff}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1290, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x3, 0xfffffffffffffffe, 0x87ffffb) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f00000038c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000ab9f98c5c8fa530b77fa6d03a2b8986b4c4d100367162bf339150ee8b8ce2653185068bd51da747e88504bcdb2bc39ac85482be32d2cd065912699785ef421ad5a57bdede7b4", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x28, 0x8, 0xd1, 0x3, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x14804, 0x8, 0x8, 0x2, 0x0, 0x3, 0x4824, 0x0, 0x0, 0x0, 0xffffffffffff8000}, r2, 0xc, r4, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000500)=""/125, 0x7d}], 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000340)) getpgid(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 118.074492] ------------[ cut here ]------------ [ 118.074520] [ 118.074524] ====================================================== [ 118.074527] WARNING: possible circular locking dependency detected [ 118.074531] 6.0.0-rc7-next-20220930 #1 Not tainted [ 118.074537] ------------------------------------------------------ [ 118.074540] syz-executor.3/3773 is trying to acquire lock: [ 118.074546] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 118.074585] [ 118.074585] but task is already holding lock: [ 118.074588] ffff88800e297020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 118.074614] [ 118.074614] which lock already depends on the new lock. [ 118.074614] [ 118.074616] [ 118.074616] the existing dependency chain (in reverse order) is: [ 118.074619] [ 118.074619] -> #3 (&ctx->lock){....}-{2:2}: [ 118.074633] _raw_spin_lock+0x2a/0x40 [ 118.074644] __perf_event_task_sched_out+0x53b/0x18d0 [ 118.074655] __schedule+0xedd/0x2470 [ 118.074668] schedule+0xda/0x1b0 [ 118.074681] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.074693] syscall_exit_to_user_mode+0x19/0x40 [ 118.074705] do_syscall_64+0x48/0x90 [ 118.074722] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.074734] [ 118.074734] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 118.074748] _raw_spin_lock_nested+0x30/0x40 [ 118.074758] raw_spin_rq_lock_nested+0x1e/0x30 [ 118.074771] task_fork_fair+0x63/0x4d0 [ 118.074786] sched_cgroup_fork+0x3d0/0x540 [ 118.074800] copy_process+0x4183/0x6e20 [ 118.074811] kernel_clone+0xe7/0x890 [ 118.074820] user_mode_thread+0xad/0xf0 [ 118.074830] rest_init+0x24/0x250 [ 118.074841] arch_call_rest_init+0xf/0x14 [ 118.074861] start_kernel+0x4c6/0x4eb [ 118.074876] secondary_startup_64_no_verify+0xe0/0xeb [ 118.074890] [ 118.074890] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 118.074903] _raw_spin_lock_irqsave+0x39/0x60 [ 118.074914] try_to_wake_up+0xab/0x1930 [ 118.074926] up+0x75/0xb0 [ 118.074940] __up_console_sem+0x6e/0x80 [ 118.074956] console_unlock+0x46a/0x590 [ 118.074971] vprintk_emit+0x1bd/0x560 [ 118.074987] vprintk+0x84/0xa0 [ 118.075003] _printk+0xba/0xf1 [ 118.075014] regdb_fw_cb.cold+0x6c/0xa7 [ 118.075030] request_firmware_work_func+0x12e/0x240 [ 118.075049] process_one_work+0xa17/0x16a0 [ 118.075066] worker_thread+0x637/0x1260 [ 118.075082] kthread+0x2ed/0x3a0 [ 118.075096] ret_from_fork+0x22/0x30 [ 118.075107] [ 118.075107] -> #0 ((console_sem).lock){....}-{2:2}: [ 118.075121] __lock_acquire+0x2a02/0x5e70 [ 118.075137] lock_acquire+0x1a2/0x530 [ 118.075153] _raw_spin_lock_irqsave+0x39/0x60 [ 118.075163] down_trylock+0xe/0x70 [ 118.075178] __down_trylock_console_sem+0x3b/0xd0 [ 118.075194] vprintk_emit+0x16b/0x560 [ 118.075210] vprintk+0x84/0xa0 [ 118.075225] _printk+0xba/0xf1 [ 118.075235] report_bug.cold+0x72/0xab [ 118.075251] handle_bug+0x3c/0x70 [ 118.075267] exc_invalid_op+0x14/0x50 [ 118.075287] asm_exc_invalid_op+0x16/0x20 [ 118.075301] group_sched_out.part.0+0x2c7/0x460 [ 118.075318] ctx_sched_out+0x8f1/0xc10 [ 118.075334] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.075345] __schedule+0xedd/0x2470 [ 118.075359] schedule+0xda/0x1b0 [ 118.075372] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.075382] syscall_exit_to_user_mode+0x19/0x40 [ 118.075394] do_syscall_64+0x48/0x90 [ 118.075411] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.075423] [ 118.075423] other info that might help us debug this: [ 118.075423] [ 118.075426] Chain exists of: [ 118.075426] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 118.075426] [ 118.075440] Possible unsafe locking scenario: [ 118.075440] [ 118.075442] CPU0 CPU1 [ 118.075444] ---- ---- [ 118.075447] lock(&ctx->lock); [ 118.075452] lock(&rq->__lock); [ 118.075458] lock(&ctx->lock); [ 118.075464] lock((console_sem).lock); [ 118.075470] [ 118.075470] *** DEADLOCK *** [ 118.075470] [ 118.075472] 2 locks held by syz-executor.3/3773: [ 118.075478] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 118.075507] #1: ffff88800e297020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 118.075533] [ 118.075533] stack backtrace: [ 118.075536] CPU: 1 PID: 3773 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 118.075548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 118.075556] Call Trace: [ 118.075559] [ 118.075563] dump_stack_lvl+0x8b/0xb3 [ 118.075582] check_noncircular+0x263/0x2e0 [ 118.075598] ? format_decode+0x26c/0xb50 [ 118.075614] ? print_circular_bug+0x450/0x450 [ 118.075630] ? simple_strtoul+0x30/0x30 [ 118.075646] ? format_decode+0x26c/0xb50 [ 118.075663] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 118.075680] __lock_acquire+0x2a02/0x5e70 [ 118.075701] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 118.075723] lock_acquire+0x1a2/0x530 [ 118.075740] ? down_trylock+0xe/0x70 [ 118.075757] ? lock_release+0x750/0x750 [ 118.075775] ? __lock_acquire+0x164d/0x5e70 [ 118.075793] ? vprintk+0x84/0xa0 [ 118.075810] _raw_spin_lock_irqsave+0x39/0x60 [ 118.075822] ? down_trylock+0xe/0x70 [ 118.075837] down_trylock+0xe/0x70 [ 118.075853] ? vprintk+0x84/0xa0 [ 118.075870] __down_trylock_console_sem+0x3b/0xd0 [ 118.075887] vprintk_emit+0x16b/0x560 [ 118.075905] vprintk+0x84/0xa0 [ 118.075922] _printk+0xba/0xf1 [ 118.075934] ? record_print_text.cold+0x16/0x16 [ 118.075949] ? report_bug.cold+0x66/0xab [ 118.075967] ? group_sched_out.part.0+0x2c7/0x460 [ 118.075985] report_bug.cold+0x72/0xab [ 118.076004] handle_bug+0x3c/0x70 [ 118.076021] exc_invalid_op+0x14/0x50 [ 118.076039] asm_exc_invalid_op+0x16/0x20 [ 118.076051] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 118.076072] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 118.076083] RSP: 0018:ffff888039b67c48 EFLAGS: 00010006 [ 118.076092] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.076099] RDX: ffff8880180d9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 118.076107] RBP: ffff88802f4c8b90 R08: 0000000000000005 R09: 0000000000000001 [ 118.076114] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800e297000 [ 118.076121] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 118.076132] ? group_sched_out.part.0+0x2c7/0x460 [ 118.076151] ? group_sched_out.part.0+0x2c7/0x460 [ 118.076171] ctx_sched_out+0x8f1/0xc10 [ 118.076190] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.076204] ? lock_is_held_type+0xd7/0x130 [ 118.076218] ? __perf_cgroup_move+0x160/0x160 [ 118.076228] ? set_next_entity+0x304/0x550 [ 118.076246] ? update_curr+0x267/0x740 [ 118.076264] ? lock_is_held_type+0xd7/0x130 [ 118.076278] __schedule+0xedd/0x2470 [ 118.076294] ? io_schedule_timeout+0x150/0x150 [ 118.076311] ? rcu_read_lock_sched_held+0x3e/0x80 [ 118.076331] schedule+0xda/0x1b0 [ 118.076345] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.076358] syscall_exit_to_user_mode+0x19/0x40 [ 118.076371] do_syscall_64+0x48/0x90 [ 118.076388] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.076401] RIP: 0033:0x7ff0c9dadb19 [ 118.076409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.076420] RSP: 002b:00007ff0c7323218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.076431] RAX: 0000000000000001 RBX: 00007ff0c9ec0f68 RCX: 00007ff0c9dadb19 [ 118.076438] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff0c9ec0f6c [ 118.076445] RBP: 00007ff0c9ec0f60 R08: 000000000000000e R09: 0000000000000000 [ 118.076452] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff0c9ec0f6c [ 118.076459] R13: 00007fffb8f69a7f R14: 00007ff0c7323300 R15: 0000000000022000 [ 118.076472] [ 118.135437] WARNING: CPU: 1 PID: 3773 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 118.136130] Modules linked in: [ 118.136379] CPU: 1 PID: 3773 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 118.137000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 118.137854] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 118.138276] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 118.139652] RSP: 0018:ffff888039b67c48 EFLAGS: 00010006 [ 118.140058] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.140607] RDX: ffff8880180d9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 118.141150] RBP: ffff88802f4c8b90 R08: 0000000000000005 R09: 0000000000000001 [ 118.141690] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800e297000 [ 118.142221] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 118.142765] FS: 00007ff0c7323700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 118.143367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.143806] CR2: 00007ff0c9ebd000 CR3: 0000000018894000 CR4: 0000000000350ee0 [ 118.144347] Call Trace: [ 118.144551] [ 118.144727] ctx_sched_out+0x8f1/0xc10 [ 118.145039] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.145436] ? lock_is_held_type+0xd7/0x130 [ 118.145763] ? __perf_cgroup_move+0x160/0x160 [ 118.146107] ? set_next_entity+0x304/0x550 [ 118.146440] ? update_curr+0x267/0x740 [ 118.146743] ? lock_is_held_type+0xd7/0x130 [ 118.147084] __schedule+0xedd/0x2470 [ 118.147379] ? io_schedule_timeout+0x150/0x150 [ 118.147736] ? rcu_read_lock_sched_held+0x3e/0x80 [ 118.148110] schedule+0xda/0x1b0 [ 118.148379] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.148764] syscall_exit_to_user_mode+0x19/0x40 [ 118.149129] do_syscall_64+0x48/0x90 [ 118.149422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.149820] RIP: 0033:0x7ff0c9dadb19 [ 118.150104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.151454] RSP: 002b:00007ff0c7323218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.152021] RAX: 0000000000000001 RBX: 00007ff0c9ec0f68 RCX: 00007ff0c9dadb19 [ 118.152559] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff0c9ec0f6c [ 118.153091] RBP: 00007ff0c9ec0f60 R08: 000000000000000e R09: 0000000000000000 [ 118.153631] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff0c9ec0f6c [ 118.154164] R13: 00007fffb8f69a7f R14: 00007ff0c7323300 R15: 0000000000022000 [ 118.154711] [ 118.154892] irq event stamp: 394 [ 118.155152] hardirqs last enabled at (393): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 118.155858] hardirqs last disabled at (394): [] __schedule+0x1225/0x2470 [ 118.156477] softirqs last enabled at (292): [] __irq_exit_rcu+0x11b/0x180 [ 118.157128] softirqs last disabled at (197): [] __irq_exit_rcu+0x11b/0x180 [ 118.157773] ---[ end trace 0000000000000000 ]--- [ 118.431777] audit: type=1400 audit(1664618325.299:9): avc: denied { read } for pid=3772 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:58:45 executing program 3: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x2, 0xffffffffffffffff}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1290, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x3, 0xfffffffffffffffe, 0x87ffffb) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f00000038c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000ab9f98c5c8fa530b77fa6d03a2b8986b4c4d100367162bf339150ee8b8ce2653185068bd51da747e88504bcdb2bc39ac85482be32d2cd065912699785ef421ad5a57bdede7b4", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x28, 0x8, 0xd1, 0x3, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x14804, 0x8, 0x8, 0x2, 0x0, 0x3, 0x4824, 0x0, 0x0, 0x0, 0xffffffffffff8000}, r2, 0xc, r4, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000500)=""/125, 0x7d}], 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000340)) getpgid(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 09:58:45 executing program 5: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x2, 0xffffffffffffffff}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1290, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x3, 0xfffffffffffffffe, 0x87ffffb) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f00000038c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000ab9f98c5c8fa530b77fa6d03a2b8986b4c4d100367162bf339150ee8b8ce2653185068bd51da747e88504bcdb2bc39ac85482be32d2cd065912699785ef421ad5a57bdede7b4", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x28, 0x8, 0xd1, 0x3, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x14804, 0x8, 0x8, 0x2, 0x0, 0x3, 0x4824, 0x0, 0x0, 0x0, 0xffffffffffff8000}, r2, 0xc, r4, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000500)=""/125, 0x7d}], 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000340)) getpgid(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 09:58:45 executing program 3: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x2, 0xffffffffffffffff}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1290, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x3, 0xfffffffffffffffe, 0x87ffffb) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f00000038c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000ab9f98c5c8fa530b77fa6d03a2b8986b4c4d100367162bf339150ee8b8ce2653185068bd51da747e88504bcdb2bc39ac85482be32d2cd065912699785ef421ad5a57bdede7b4", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x28, 0x8, 0xd1, 0x3, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x14804, 0x8, 0x8, 0x2, 0x0, 0x3, 0x4824, 0x0, 0x0, 0x0, 0xffffffffffff8000}, r2, 0xc, r4, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000500)=""/125, 0x7d}], 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000340)) getpgid(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 09:58:45 executing program 5: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x2, 0xffffffffffffffff}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1290, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x3, 0xfffffffffffffffe, 0x87ffffb) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f00000038c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000ab9f98c5c8fa530b77fa6d03a2b8986b4c4d100367162bf339150ee8b8ce2653185068bd51da747e88504bcdb2bc39ac85482be32d2cd065912699785ef421ad5a57bdede7b4", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x28, 0x8, 0xd1, 0x3, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x14804, 0x8, 0x8, 0x2, 0x0, 0x3, 0x4824, 0x0, 0x0, 0x0, 0xffffffffffff8000}, r2, 0xc, r4, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000500)=""/125, 0x7d}], 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000340)) getpgid(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 118.861056] audit: type=1400 audit(1664618325.728:10): avc: denied { map } for pid=3835 comm="syz-executor.2" path="pipe:[14023]" dev="pipefs" ino=14023 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 09:58:45 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x2, 0xffffffffffffffff}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1290, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x3, 0xfffffffffffffffe, 0x87ffffb) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f00000038c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000ab9f98c5c8fa530b77fa6d03a2b8986b4c4d100367162bf339150ee8b8ce2653185068bd51da747e88504bcdb2bc39ac85482be32d2cd065912699785ef421ad5a57bdede7b4", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x28, 0x8, 0xd1, 0x3, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x14804, 0x8, 0x8, 0x2, 0x0, 0x3, 0x4824, 0x0, 0x0, 0x0, 0xffffffffffff8000}, r2, 0xc, r4, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000500)=""/125, 0x7d}], 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000340)) getpgid(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) VM DIAGNOSIS: 09:58:45 Registers: info registers vcpu 0 RAX=ffff8880180b0001 RBX=0000000000000001 RCX=1ffff11003015ec4 RDX=dffffc0000000000 RSI=ffff8880180af668 RDI=ffff8880180af668 RBP=ffff8880180af620 RSP=ffff8880180af4f0 R8 =ffffffff85e3411e R9 =ffffffff85e34122 R10=ffffed1003015ec6 R11=ffff8880180af608 R12=ffff8880180af609 R13=ffff8880180af628 R14=ffff8880180af5c8 R15=ffffffff85e34123 RIP=ffffffff81119af0 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1fc485d8e0 CR3=000000001f3fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888039b67690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000064 R11=0000000000000001 R12=0000000000000064 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff0c7323700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff0c9ebd000 CR3=0000000018894000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff0c9e947c0 00007ff0c9e947c8 YMM02=0000000000000000 0000000000000000 00007ff0c9e947e0 00007ff0c9e947c0 YMM03=0000000000000000 0000000000000000 00007ff0c9e947c8 00007ff0c9e947c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000