Warning: Permanently added '[localhost]:30988' (ECDSA) to the list of known hosts. 2022/10/02 16:00:07 fuzzer started 2022/10/02 16:00:08 dialing manager at localhost:35095 syzkaller login: [ 45.494290] cgroup: Unknown subsys name 'net' [ 45.685198] cgroup: Unknown subsys name 'rlimit' 2022/10/02 16:00:21 syscalls: 2215 2022/10/02 16:00:21 code coverage: enabled 2022/10/02 16:00:21 comparison tracing: enabled 2022/10/02 16:00:21 extra coverage: enabled 2022/10/02 16:00:21 setuid sandbox: enabled 2022/10/02 16:00:21 namespace sandbox: enabled 2022/10/02 16:00:21 Android sandbox: enabled 2022/10/02 16:00:21 fault injection: enabled 2022/10/02 16:00:21 leak checking: enabled 2022/10/02 16:00:21 net packet injection: enabled 2022/10/02 16:00:21 net device setup: enabled 2022/10/02 16:00:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 16:00:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 16:00:21 USB emulation: enabled 2022/10/02 16:00:21 hci packet injection: enabled 2022/10/02 16:00:21 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 16:00:21 802.15.4 emulation: enabled 2022/10/02 16:00:22 fetching corpus: 50, signal 22138/23975 (executing program) 2022/10/02 16:00:22 fetching corpus: 100, signal 39869/43262 (executing program) 2022/10/02 16:00:22 fetching corpus: 150, signal 49758/54663 (executing program) 2022/10/02 16:00:22 fetching corpus: 200, signal 59156/65434 (executing program) 2022/10/02 16:00:22 fetching corpus: 250, signal 66031/73643 (executing program) 2022/10/02 16:00:22 fetching corpus: 300, signal 69142/78185 (executing program) 2022/10/02 16:00:22 fetching corpus: 350, signal 75099/85331 (executing program) 2022/10/02 16:00:23 fetching corpus: 400, signal 76507/88140 (executing program) 2022/10/02 16:00:23 fetching corpus: 450, signal 81080/93897 (executing program) 2022/10/02 16:00:23 fetching corpus: 500, signal 82919/97028 (executing program) 2022/10/02 16:00:23 fetching corpus: 550, signal 85713/101063 (executing program) 2022/10/02 16:00:23 fetching corpus: 600, signal 88097/104657 (executing program) 2022/10/02 16:00:23 fetching corpus: 650, signal 90419/108118 (executing program) 2022/10/02 16:00:23 fetching corpus: 700, signal 92984/111824 (executing program) 2022/10/02 16:00:23 fetching corpus: 750, signal 94763/114766 (executing program) 2022/10/02 16:00:23 fetching corpus: 800, signal 97289/118322 (executing program) 2022/10/02 16:00:24 fetching corpus: 850, signal 99719/121737 (executing program) 2022/10/02 16:00:24 fetching corpus: 900, signal 102449/125390 (executing program) 2022/10/02 16:00:24 fetching corpus: 950, signal 105578/129389 (executing program) 2022/10/02 16:00:24 fetching corpus: 1000, signal 107390/132215 (executing program) 2022/10/02 16:00:24 fetching corpus: 1050, signal 109741/135471 (executing program) 2022/10/02 16:00:24 fetching corpus: 1100, signal 112123/138709 (executing program) 2022/10/02 16:00:24 fetching corpus: 1150, signal 114316/141755 (executing program) 2022/10/02 16:00:24 fetching corpus: 1200, signal 116192/144500 (executing program) 2022/10/02 16:00:25 fetching corpus: 1250, signal 117704/146951 (executing program) 2022/10/02 16:00:25 fetching corpus: 1300, signal 119356/149445 (executing program) 2022/10/02 16:00:25 fetching corpus: 1350, signal 123143/153679 (executing program) 2022/10/02 16:00:25 fetching corpus: 1400, signal 126055/157155 (executing program) 2022/10/02 16:00:25 fetching corpus: 1450, signal 127383/159302 (executing program) 2022/10/02 16:00:25 fetching corpus: 1500, signal 129073/161706 (executing program) 2022/10/02 16:00:25 fetching corpus: 1550, signal 130831/164199 (executing program) 2022/10/02 16:00:25 fetching corpus: 1600, signal 132397/166487 (executing program) 2022/10/02 16:00:26 fetching corpus: 1650, signal 134249/168958 (executing program) 2022/10/02 16:00:26 fetching corpus: 1700, signal 135325/170857 (executing program) 2022/10/02 16:00:26 fetching corpus: 1750, signal 136640/172893 (executing program) 2022/10/02 16:00:26 fetching corpus: 1800, signal 138637/175442 (executing program) 2022/10/02 16:00:26 fetching corpus: 1850, signal 139864/177385 (executing program) 2022/10/02 16:00:26 fetching corpus: 1900, signal 141389/179499 (executing program) 2022/10/02 16:00:26 fetching corpus: 1950, signal 143140/181756 (executing program) 2022/10/02 16:00:26 fetching corpus: 2000, signal 144471/183693 (executing program) 2022/10/02 16:00:26 fetching corpus: 2050, signal 145264/185170 (executing program) 2022/10/02 16:00:27 fetching corpus: 2100, signal 146453/186967 (executing program) 2022/10/02 16:00:27 fetching corpus: 2150, signal 147629/188755 (executing program) 2022/10/02 16:00:27 fetching corpus: 2200, signal 148809/190517 (executing program) 2022/10/02 16:00:27 fetching corpus: 2250, signal 149421/191894 (executing program) 2022/10/02 16:00:27 fetching corpus: 2300, signal 150772/193756 (executing program) 2022/10/02 16:00:27 fetching corpus: 2350, signal 151786/195346 (executing program) 2022/10/02 16:00:27 fetching corpus: 2400, signal 152781/196879 (executing program) 2022/10/02 16:00:27 fetching corpus: 2450, signal 154703/199017 (executing program) 2022/10/02 16:00:28 fetching corpus: 2500, signal 156845/201319 (executing program) 2022/10/02 16:00:28 fetching corpus: 2550, signal 157807/202866 (executing program) 2022/10/02 16:00:28 fetching corpus: 2600, signal 158723/204333 (executing program) 2022/10/02 16:00:28 fetching corpus: 2650, signal 159447/205653 (executing program) 2022/10/02 16:00:28 fetching corpus: 2700, signal 160085/206860 (executing program) 2022/10/02 16:00:28 fetching corpus: 2750, signal 160782/208139 (executing program) 2022/10/02 16:00:28 fetching corpus: 2800, signal 161919/209679 (executing program) 2022/10/02 16:00:28 fetching corpus: 2850, signal 163002/211165 (executing program) 2022/10/02 16:00:28 fetching corpus: 2900, signal 164387/212830 (executing program) 2022/10/02 16:00:29 fetching corpus: 2950, signal 164874/213943 (executing program) 2022/10/02 16:00:29 fetching corpus: 3000, signal 165550/215168 (executing program) 2022/10/02 16:00:29 fetching corpus: 3050, signal 166421/216492 (executing program) 2022/10/02 16:00:29 fetching corpus: 3100, signal 167482/217909 (executing program) 2022/10/02 16:00:29 fetching corpus: 3150, signal 168542/219370 (executing program) 2022/10/02 16:00:29 fetching corpus: 3200, signal 169314/220581 (executing program) 2022/10/02 16:00:29 fetching corpus: 3250, signal 170097/221788 (executing program) 2022/10/02 16:00:29 fetching corpus: 3300, signal 171139/223174 (executing program) 2022/10/02 16:00:29 fetching corpus: 3350, signal 171820/224325 (executing program) 2022/10/02 16:00:30 fetching corpus: 3400, signal 172522/225487 (executing program) 2022/10/02 16:00:30 fetching corpus: 3450, signal 173150/226579 (executing program) 2022/10/02 16:00:30 fetching corpus: 3500, signal 174132/227822 (executing program) 2022/10/02 16:00:30 fetching corpus: 3550, signal 174909/228955 (executing program) 2022/10/02 16:00:30 fetching corpus: 3600, signal 175318/229921 (executing program) 2022/10/02 16:00:30 fetching corpus: 3650, signal 175819/230949 (executing program) 2022/10/02 16:00:30 fetching corpus: 3700, signal 176957/232253 (executing program) 2022/10/02 16:00:30 fetching corpus: 3750, signal 177527/233275 (executing program) 2022/10/02 16:00:30 fetching corpus: 3800, signal 178080/234350 (executing program) 2022/10/02 16:00:31 fetching corpus: 3850, signal 178609/235355 (executing program) 2022/10/02 16:00:31 fetching corpus: 3900, signal 179533/236482 (executing program) 2022/10/02 16:00:31 fetching corpus: 3950, signal 180946/237795 (executing program) 2022/10/02 16:00:31 fetching corpus: 4000, signal 182502/239167 (executing program) 2022/10/02 16:00:31 fetching corpus: 4050, signal 183583/240313 (executing program) 2022/10/02 16:00:31 fetching corpus: 4100, signal 183976/241186 (executing program) 2022/10/02 16:00:31 fetching corpus: 4150, signal 184499/242112 (executing program) 2022/10/02 16:00:31 fetching corpus: 4200, signal 184994/243045 (executing program) 2022/10/02 16:00:32 fetching corpus: 4250, signal 185799/244064 (executing program) 2022/10/02 16:00:32 fetching corpus: 4300, signal 186468/245010 (executing program) 2022/10/02 16:00:32 fetching corpus: 4350, signal 186938/245844 (executing program) 2022/10/02 16:00:32 fetching corpus: 4400, signal 187397/246687 (executing program) 2022/10/02 16:00:32 fetching corpus: 4450, signal 188241/247673 (executing program) 2022/10/02 16:00:32 fetching corpus: 4500, signal 188688/248534 (executing program) 2022/10/02 16:00:32 fetching corpus: 4550, signal 189142/249390 (executing program) 2022/10/02 16:00:32 fetching corpus: 4600, signal 189612/250227 (executing program) 2022/10/02 16:00:32 fetching corpus: 4650, signal 190186/251123 (executing program) 2022/10/02 16:00:33 fetching corpus: 4700, signal 191345/252115 (executing program) 2022/10/02 16:00:33 fetching corpus: 4750, signal 191891/252957 (executing program) 2022/10/02 16:00:33 fetching corpus: 4800, signal 192884/253918 (executing program) 2022/10/02 16:00:33 fetching corpus: 4850, signal 193403/254755 (executing program) 2022/10/02 16:00:33 fetching corpus: 4900, signal 193975/255585 (executing program) 2022/10/02 16:00:33 fetching corpus: 4950, signal 194437/256334 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/257099 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/257728 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/258300 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/258953 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/259565 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/260199 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/260827 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/261468 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/262091 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/262694 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/263310 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/263930 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/264568 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/265177 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/265791 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/266434 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/267055 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/267659 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/268237 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/268848 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/269472 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/270065 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/270633 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/271273 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/271931 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/272554 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/273182 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/273777 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/274395 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/275022 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/275642 (executing program) 2022/10/02 16:00:33 fetching corpus: 4997, signal 194783/276300 (executing program) 2022/10/02 16:00:34 fetching corpus: 4997, signal 194783/276937 (executing program) 2022/10/02 16:00:34 fetching corpus: 4997, signal 194783/277517 (executing program) 2022/10/02 16:00:34 fetching corpus: 4997, signal 194783/278138 (executing program) 2022/10/02 16:00:34 fetching corpus: 4997, signal 194783/278741 (executing program) 2022/10/02 16:00:34 fetching corpus: 4997, signal 194783/279397 (executing program) 2022/10/02 16:00:34 fetching corpus: 4997, signal 194783/280020 (executing program) 2022/10/02 16:00:34 fetching corpus: 4997, signal 194783/280663 (executing program) 2022/10/02 16:00:34 fetching corpus: 4997, signal 194783/281258 (executing program) 2022/10/02 16:00:34 fetching corpus: 4997, signal 194783/281298 (executing program) 2022/10/02 16:00:34 fetching corpus: 4997, signal 194783/281298 (executing program) 2022/10/02 16:00:36 starting 8 fuzzer processes 16:00:36 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x80}, @device_b, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x4}, {0x1, 0x602}}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x144, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x124, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffe00}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xeaf5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x105}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x84d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x20}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x407}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xbfeb}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb8c1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x20}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x200040d4) r3 = syz_open_procfs(0x0, &(0x7f0000000780)='sched\x00') sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10e, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r3) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x10004) r5 = openat$incfs(r3, &(0x7f0000000a40)='.log\x00', 0x18480, 0x73) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000019c0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001980)={&(0x7f0000000ac0)={0xe98, r2, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0xe64, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@measure_req={0x26, 0x18, {0x1, 0x80, 0x3f, "7a6af3355ecf65dcad353910bdcf5f79de01763cbb"}}]}, @NL80211_ATTR_IE={0x144, 0x2a, [@mic={0x8c, 0x10, {0x263, "d01f0745af3f", @short="b5fa2cea5ff35760"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @gcr_ga={0xbd, 0x6}, @challenge={0x10, 0x1, 0x5b}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @peer_mgmt={0x75, 0x14, {0x1, 0x1, @void, @void, @val="9730ca56b27d35a51f0f19eb5570b61f"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xfc, 0x70, 0x6}}, @mic={0x8c, 0x18, {0x475, "e999c4be6c1f", @long="b5da48525b1f55fb2f56e5c127abca94"}}, @random_vendor={0xdd, 0xe0, "505c2ad79e8ecb4a64ab8c5d2a0a25f6e2b42696feebc2277225f3206b8559f54ce98180dc72be0630fd82acf199e9866275e533bf38e8024938b8eade499ed0a75fe0f3a5b50196b47508db2132b62fb93846668baab31ce83716548e0405974ed9d392036c34b070c348e0282c48653933885e2a9430f9e0c48a870058f948e0d345935e3cdbe6e55efefe53f49c09f89f0a5c930cc343730dc67185feefee0dda4177d7dc00841325f3812b67a92d5752739428d2c85e28a13f0d831605b99786bcd798e8bf59c0b4874008b7a450c3d4bfb59c39eca4b9fc55fd6bbf7b4a"}]}, @NL80211_ATTR_IE={0xcd, 0x2a, [@measure_req={0x26, 0x97, {0x7, 0x2, 0x1, "c4b1e84e6d4b74f4504bf9afcbda249bf4bfa9fd289b372c539355f00f34470fdb10337e8704638b02dd372082e33cdc503ab920053a0029177a0afc7416c4b0e6e665b55c75b4264e723240d4c4f04076a7d54df4bf5f49209359d6e857b7300f4875353b09572f6d41f512d4da7c9938ab0ecd8c4e8b0d57c2d04f9b0b07fa6193644f1add1cf10fe49de029946b4502e76cb1"}}, @chsw_timing={0x68, 0x4, {0x45f, 0x7fff}}, @peer_mgmt={0x75, 0x16, {0x1, 0x3467, @val=0x3, @void, @val="1398770948c59f7eba38a5dc9f7f5317"}}, @mic={0x8c, 0x10, {0x525, "92b3a6378c3f", @short="fd9042e7edb7dc64"}}]}, @NL80211_ATTR_BEACON_HEAD={0x441, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_b, @from_mac=@device_b, {0x1, 0x3f}}, @ver_80211n={0x0, 0x9, 0x0, 0x1, 0x0, 0x3}}, 0x8, @random=0x9, 0x4848, @void, @val={0x1, 0x8, [{0xc}, {0x3, 0x1}, {0x18, 0x1}, {0x12}, {0x36, 0x1}, {0x12, 0x1}, {0x12}, {0x18}]}, @val={0x3, 0x1, 0xb6}, @val={0x4, 0x6, {0x9, 0x5, 0x40, 0xa693}}, @val={0x6, 0x2, 0x9ec}, @val={0x5, 0x59, {0x8, 0xf8, 0x4, "83acf1f551d8af88241db42611e31372257f80b22ff12d4bdf8dc138f8b9142e1e3ccf882e51dee3d2d237b0af32c64511b534d53687683bea22ed06b0327cdf72ff9bf47f482aa2124ac256f042006d8f7770be14a6"}}, @val={0x25, 0x3, {0x0, 0x88, 0x9}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0xf6, 0xb3, 0xd}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x0, 0x0, {0x1f, 0x81, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x1000, 0xc2}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x6, 0x8}}, @val={0x76, 0x6, {0xbe, 0x9, 0x2e, 0x3f}}, [{0xdd, 0x6f, "0e9c31598b799ec3cb3e4e597ad454f1c00d1789a1411d9dd56445e0501aaabe8c7511a5fd688d7c8121ef44536d4e568dde6c6b4a51cbb3069bbc12d0b174e925d036d3fc6d4022d523bd051113c7080d44d6976929a5f483b6fe5b844605ea2fbf4b10c0df05c9ad03420ea31e37"}, {0xdd, 0xb9, "e0920a9ea119a81d63a267e5b160e55e63d4583d689c1247ad13e5cb71641f415688e2863cc6d01176e1bc6ac46f464c99698565e6993b4f309dc85f92e7b82124a066a0fdb5474de99e6e61b773887e5ac85d30a2a824afc3f30f4d61adc2ed39e4a183899ce9a7be7b7166cd303d68fd59cd6e28ea7a0ae23d109ce38bcbf177c3c451fac8af27ac04307baffcee5b670c634d558ba77771961340cce5f0183452734828c187d47a9f8268a01c1132e67c874b2965835811"}, {0xdd, 0x3d, "f35a47b093c6cb0f4ba1efa7a06ff6825f7ba26d6c2ea4420adfe125d88b9aff0352cdf8a26d84aba00767e7d9f2db479b3044f766c49e195b21d4f6b5"}, {0xdd, 0xf3, "8f308c42090d66b12105373d7bb3ccb7c428bf038d850cd4fa0ecca346c1275b458a9f7f827a4fba16fc19c34da01ce045e6c245231f7a57c0936844998bc2be1ebfb5d8b41e2d3a4326f3cce660896f0729e384ffa0c17006ef0f612c2ef2d8c0292643395ea01fe6e1c3fc6ab79c96beff5bee2036b2134d5d72e0b2bf3e49e68b697d2d43a90a407b22597f2c8fec975a7d5929c2029e056dd0852d8c8110cc558fba481c2a109f835c1a18c764104b9ce5b72ed46fef973a3365bbd2e2bb3a09c35c38292686dc7e5eb9ad46fc47c8043efcab77c3c12477c6a6640d6e7379a9a92b5b14642c042f86b893cf57cfc212ef"}, {0xdd, 0xbf, "e7226e6c46b54153c730385b3e5b810805bcb631861ad606b4fbc21ba69ee70776f42ea3272681ce201b0d52062c6fd7d6d88701aa89b517739b446b5ad5537ee890dcec20d7c95fb3e4e8522b99dd8d481f4c444966a01ed2c8a94e7e00e875fd3303f12a35db897ec07a7cd1c4160a3e6389ae0d72039313a438a5878918929b09bbf828711050820efbde40b17603bdeed91e6ee9c26f2903b92dd702e6b2a88fa47cca52f6488b21d44f7ba1f98f62ff534dbbb9239bed388455d3e983"}, {0xdd, 0x43, "b9c332200e2814c5be0e8a1e9ccf57f88b81e2f2e12c38b0eb7871c0b506984f71568941f7bee3dfd294f5b5c06fc9be8ad39e73ab94891d6f67051038be62bab7aca6"}]}}, @NL80211_ATTR_BEACON_HEAD={0x3c5, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_b, @device_b, @initial, {0x9, 0x3f}}, @ver_80211n={0x0, 0x3, 0x3, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x7, @random=0x80, 0x4000, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x9, 0x1}, {0x4, 0x1}, {0x2e}, {}, {0x1d, 0x1}, {0x9, 0x1}, {0x4}]}, @val={0x3, 0x1, 0xa}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x95, 0x7f}}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x5, 0x20, 0x30, 0x20}}, [{0xdd, 0xeb, "7010a6c64eff8e2fad81f438de4ef370ac930677b128743b395bc4aed503ebc92941db1a87bf3f1e113f22ba526c1fd889dd10b62a2afa99f5def9144d91d6dfaa5389cb9962385dd5c73a1005b5ebe57c9fd37890854355c16061b07309c44e95ef66ef3720fc663a1cdf076aa7c732c389ae7988edf7299e26ad86d5c410191a205600f11810a6c1cba80326474cd796426fed011d47f0dde0cd243a313f32101d7cea85801f8917fbd5b37afabaad52e834b0a0e32c812cd7eed0ed5ab9bab105cb73ae123cbdc3c4e72404db222f4c1457dc52aceeb55595e5a651f9a880c9b6f2e8aed9c2611ce714"}, {0xdd, 0x26, "6429aa46e8a5f47a3088c57133d5e7d57a76694ab707294fb9418f2c093d29cbe76a70e2d15c"}, {0xdd, 0x58, "008636c2ecf7c22ec605a149c7e77ae7ff0fd8ce6f435f215b312f5213d8e979f7cbb7387262628fd38bb401617ca03ade8f369e4ed80af8232a387861d3ed915a98605f8bbcad5c40ef49d8382ba847d9730c28f728c389"}, {0xdd, 0xb2, "62c0025102b4d0619ef457801eb5442786f150b3768f6d7120772b7c13254664b2b47c98bc50c7fbcaa8f348a8450c27cb7d3c283c812b0b85b5cd7a74286d907cc60d64b991e0694e09de6853e98578f23817ed953256e84dfffd1e22ae77d5699c630890beff26cc5ca83223e59e51a077f13e98a44c9f459826098cf4389d3134a3ae42b0c5cbcffb92dc99c5d443542fc9b9adde05850e0b7fa6a93f8f65f50d560df40f40f1c2bb5da0eb23bf6681d5"}, {0xdd, 0x44, "1893363f3072a23d6816f3c1c08af549145967a4ce9ce8b59459547d7f75a7ebb70b9277f9261abd4f6cf60df82232ae84f6ec33318557016933d0ffc760621c3edb8d98"}, {0xdd, 0x4d, "1e09d4f6c08961a0e4813437bafefb148db39dd96ee980417013f4f31bf0607759a79354ddb01b4b4c6b6d66856e08025cbd79cf2f4b16b4f69218020cd05ddf2d25e4e09f5c037f7dfee18cbb"}, {0xdd, 0x29, "c90917d37fb3e60acaf3adbf71b8b0a69b177233f17b260f173359046e23c40e383dcfced55bb574af"}, {0xdd, 0x8f, "29f2a3f509b9280d3fa295382f758419c480c9653c9d11b487b7b4c2385aab9a7f49f64c8aecae08f4f513f63adab5f456fc6639605b445bd8a31f92cab7d32815c6967fd037371643d382a99316ad79dd902a1a23061e08db709a4c5666fc6ee30cba001260db41f971faa630b0293f675fcea190269924fd3748db743db1ff295dfd6dc2714b042cccaeae62a375"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x2b, 0x7f, [@preq={0x82, 0x25, @not_ext={{0x0, 0x1, 0x1}, 0x20, 0x5, 0x8, @device_b, 0x2, "", 0x80000000, 0x6, 0x1, [{{}, @device_a, 0x8000}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1f4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe8, 0x2, "bc49edc75d79948205e9bf9b544bb4c938cf5bdf3ff825422e9c9e85a5797b9a9fd7347fa2818252f472c5774d54501d3b4c3b16e0f38b7bcad1ba5a8109cf91fb3d8ea92d8e7a951b6e5318c3faa45db24a361064a1410ce3a82991c202f4531b89e8d830aef73cacb051c9dea085bef9b9656e89d88e34121b4edfb5f312039ab70f5ba4503c7f1fddfc1c32cb6976e954c6e6a32f71c32ba8843636374ae70678e0208c8f3153443ceab52f73ba86fde89081d8cddae8aa6fc7f5dab4cfeb323d708c166cde479d4e5df95bfed144e613b0c912606f62efbfb144cd42268c98103fb7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x102, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @ibss={0x6, 0x2, 0x7}, @challenge={0x10, 0x1, 0x75}, @cf={0x4, 0x6, {0x0, 0x6b, 0x1, 0x7fff}}]}, @NL80211_ATTR_BEACON_TAIL={0x3a, 0xf, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}, @random={0x0, 0x24, "d382ea77fa96b857aa17a1896086c1828b9e80d50641167af8540723a3681c86dfdd0f4b"}]}, @NL80211_ATTR_FTM_RESPONDER={0x178, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x26, 0x3, "bed8118ca51f112f474a5f81b64c8dfdeb245f2ea1a169984b03b98081fc11cbc590"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5c, 0x3, "fd1f75d34f30c126ce74ee195481074344f4269d12ddc80b6f19f78081ae8ac2235f9570faa25b0fc7aaf884a5162fa4072de3f7443d1ee0503a083f04d373a1de0137d8d25e6203330b6c3da9a0264fb478e01c3b6881ba"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xea, 0x2, "24d1b5f4e00adf17bb7cd0fd118d55a512ce1ca86d0e49c3670e2be5119eb66cfedb79302438f9c483386b6cd606bdd31058824ef4e07bd7daf0187499200337236314aa7a4b311b3feaf103f6bf417f0b068187a04442513c10c205f970d81f8054dc3fdaf01ad98057113a5c280197840a6f9c402b11990e258ab63ca4e2609eafe91b08d59c2d728325f3bd4712102689a23d7d9b4e62be4aaa26c60bc56cade49667c12643223b06c25fe824534caa556f2237e60e10d5d0953f8cc3c28450df582f33619dfd2ef0ec620ac196492f55b013150ca1c8fc3396c00209668d7563d742a401"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x4, 0x20, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x2, 0x3ff, 0x0, 0x9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x4c, 0x1ff, 0x0, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x3, 0x800, 0x40]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc1}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2c}, @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0xd3f7, 0x0, 0x4, 0xa5]}]}]}, 0xe98}}, 0x8080) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x58, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x58}}, 0x8014) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x34, r0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000881) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001c40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000001cc0)=@add_del={0x2, &(0x7f0000001c80)='geneve1\x00'}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r7) 16:00:36 executing program 6: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24046010) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1a6d}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x440240}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x440c0}, 0x4000001) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/bus/machinecheck', 0x103000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x9}, @device_a, @device_a, @initial, {0x0, 0x3}}, @ver_80211n={0x0, 0xfa, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x13, @val={0x8c, 0x18, {0x21a, "de90d10b1047", @long="c88b037466f7426f18f61ef73b14d251"}}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = signalfd4(r1, &(0x7f0000000600)={[0x8]}, 0x8, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, r3, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x4a}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5d5630f35d205fa213e9517d7d"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4da64ae1e5"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4ee53c96deec96ce86ae3094eb"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x24048000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r6, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}, @NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x41}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x28}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008c01}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000b80)={&(0x7f0000000980), 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x108, r7, 0x8b412b6ad2d242f6, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x54}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x57}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb165}, @NL80211_ATTR_VENDOR_DATA={0xcd, 0xc5, "57f516058005f264b59e9e2ab41e2577c21d8fdaffac311dd6c04bde15a72774bf0cdeb6e900da1c846f71a478a27feab387c72e22dd00dfb7a369918a02cd4ac8769170e9b25db2cb33ef457f533c7106b463daf3239554fd93c063aef1f4456a4552ba345fcef0ee2e5c601c628ddc4550582359362d8dd5c7116fc6d0e4c40a5ac6f4c03caabd43cf20af60355b8690e5579b426de5ea58edbc68f84b1832cf41fa1cccdf162e0ae602b124d4bfd4490aa9788cdafa3dc4895016b966307b83766aa48f0358f3b0"}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_io_uring_setup(0x4471, &(0x7f0000000bc0)={0x0, 0xdc04, 0x20, 0x0, 0x18d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000c40), &(0x7f0000000c80)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008040}, 0x40000c0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2aa1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3f}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8801) 16:00:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x3}, {0x7}, 0x2, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="81da794ef16f13da23dd729f8d7a749069c6fa9fa1c86938f392af7bd9a27940ebf370ab14c67ebb25def21d76b45bf7da9e3dd6f91bf7cd011b044cabad7e1260e71d102bafb44098c9b1681e620acb5ae101f71d32b611b3e7c6667769fb210d8e99c3cb87341bdb18ff69c23c39eb812c68e58b43d56694a6f3768fb0e9d51c1ee2209af8d4dc59ccabaf09651863b2eeb499956d622c384d99348679d93be3ad180f13db6b64a42f13e83645ae6c772e96aa499ab442acfd240ea6d97ee03ea99e9c3fe1f210a95bc7162a17c321830ee9f7922d6562bcfa151e4de2ecfbc20deb8a9852a8d9f367f701", 0xec, 0x0, &(0x7f0000000180)={0x2, 0x90, {0x1, 0xc, 0x50, "52a7e4c55cb1766c751a854d9beaf0905c38ff9ecb7482e88edb6782bf74f3d08205d501fff9c8cfd20c5934147197388dc9284e7b0e37683294affec984ed9af655de03282244ecaa41e8be47d06f3d", 0x33, "1baead4b67989cacc64f6a928a9672558c4a07c12ddb0ed511a6b773e0b891db41f918ccda2d0075847a4994fa6cca4a923971"}, 0xce, "9f49c4f8aacd8ac1e501ea0a3277ea7d7b38c4f3cd5a319990e510d4a44edb34cd36026f45569a707bc9e735c6dd723d41e14f3f9d0b35b177d8aba691867d0f805170c857dec82b0abe710bd75dd9c22e067d882b4b39bcf6f6deba47b43d40a4360546fe48b0454ae63f335c2ac445dfff28fac027b73d7679d017636bf9a19e0b4e0f4ed3a4787eb277a941038f12f4aba988f3e7ec47455ad70ed375b3f102cd77733204de022898710d04cb7aefb41509a1843a5656d8c2a474a1dcaf126f8ac29d6203eba55953f474f4cf"}, 0x16a}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f00000003c0)={0x4d8, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x28}}}}, [@NL80211_ATTR_FRAME={0xbe, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @random="8d9dec990c3b", {0x4, 0xff}}, @ver_80211n={0x0, 0xe66, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x1000, 0x22, @random=0x3b4, @void, @void, [{0xdd, 0x96, "cf4d8a543c7b079a0c89d551fc7cc5013b22c74d2beced00b3219a85276931908be4843cca1e7cd07b072ce53b95b513c7f9bbc6d66fc0c68f0e01f8f69d474841e171154c4d9444a61455988d02f0aa3cf80037bad0a645622d188881ed1433478350a69bea3cb67a3ced565e3357c3148dde5de3686035b506d8c2bd5d13a8b6fb4a82a8c0892413aeeab6a2b84853d8fafb5f94f1"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x96c}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x8, 0x2e4, 0x3ff, 0x1]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x396, 0x33, @probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1bf3}, @broadcast, @device_b, @initial, {0x4, 0x416}}, @ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x4c, @random=0xca, 0x0, @void, @val={0x1, 0x2, [{0x1c, 0x1}, {0x5, 0x1}]}, @void, @val={0x4, 0x6, {0x8, 0x8, 0x1, 0x8000}}, @void, @void, @void, @void, [{0xdd, 0xa0, "adffec61aee350eacb107a47f8b36a81789fbe2484709b949e708819a6a4eeac2bef6f5463e8289f3f317f27ff1de70d4e80ebc2fe21d1ad1b66ebd006f1a49261a269ae4cb20a375c24bba050421b004a878855e3628faafbdd08022bd2f94b862a8722f8a0762852c55d2bbee20732d04fdd7968524cb3a7ec3fb8b103de8cb596b27bd01a00713ab8fe5880acdf894a2a655c95450b7672891505c2a73bc9"}, {0xdd, 0x71, "f2546176905deda35282e67601a2fcdc45918c93e8ec710580f8ddbfca197076d623ff45ad214c2b1d94baaad93d02da4eb779917f0c0839325cf224d24910ee04805154c0b7045fe1ac62e28bef3c9b9665be13dad493fe0aaefa6540fcde257df5e11934e42ceff63d75d952a773d55c"}, {0xdd, 0xc6, "5febc306188e41f54cf28eeb0bb9c817b0e936fe8b0950e0e6ac63aa40faa94a56b8c8b36c3c32646b5df41cd5feb49b0d9b71c41f27ca053171bf85d10e816711101fe219b4f8f8174acd2f49de08763d95b17fc14a7eaaf347e6be79929add74565081c4ebb38a8bfeca1a6d9c037dd72b9521ec506add9f8cfd747e523a0e9be338f9c307009d0dcc25201c6fea384590af4faafa67acd48864a12815909e3ecd99261a911dd7a8fc42309ba27a0b9ae59ef5c610dad7c1b880027849f84d659f3e2d9f61"}, {0xdd, 0xc5, "9f521e5a208a32d049b11f479db13fcbca7af6b1fd976cb2ba56ad3a269d6edc1fc361245c15edcd78f74472ae9c81e7023b62a4d9b356cb425710723c38d3878b9696d78f281b0296e87b246d1300b0fe7a07a353efabca134e1d5e327278cf5656db689fb3e3592d59451c4698aa06c6bc6e2d742b6ce2c1fcf9273181b6b3315d2034b55e6c32228a66dacc1f7971b608f1b4ba7a9c14ae1dcb2565392bd6e3b73a2261bb3a1ca6d57880e2d3c0d90ce98c198e6eb1983d166628def4fd3e41f6abc131"}, {0xdd, 0x9, "c09fd849052300e894"}, {0xdd, 0xad, "7fff95332399b17b7cf3b333ff108699c98cb9f1032bc4e4fc9850a7f8dabb99edee2eb2862556a7caee678d576afbd2924969871d9e97ad4c4140b60404afb49f2b00a5595eb6e1eed87aced3a26d4b127427caa05da82f219c9f10d8fc08f2b0f0feda3e7d783d4f6e679b57781186a31f6078186d75a52ce611118a65e44e5020a8270ad01ad71691e54ac1ed7f87f4a7af63ce722fcac114fd680bf2ed4127b38db7ed2c64f316acd8a7e5"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x3, 0x9, 0xffff, 0x6, 0x6, 0xc0b0, 0x2ec6]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x202000, 0x0) preadv(r1, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/88, 0x58}], 0x1, 0xff, 0x7) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x11c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x11c}}, 0x4000000) accept4$unix(0xffffffffffffffff, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e, 0x80000) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000d00)={0x1, 0x7, @status={[0x9, 0x7, 0x3, 0x10001, 0x3, 0x3]}, [0xd7e, 0x4, 0x400, 0x4, 0x66d, 0xffffffffffffffff, 0x1, 0x5, 0x7fff, 0x3f, 0x0, 0x7, 0x0, 0x5, 0xf511, 0x1, 0x8, 0xfb, 0x0, 0x0, 0x1e6000000, 0x6, 0xfff, 0x6, 0xd, 0x80000000, 0x3ff, 0xc72a, 0x7fff, 0x80000000, 0x4, 0x25, 0x3, 0x3, 0x40, 0x7d, 0x16a8, 0x7b, 0x6, 0x1, 0x868, 0x3e1, 0xfff, 0x86f, 0x9, 0xf41, 0x80, 0x3, 0x7fffffff, 0xb9d7, 0x9, 0x100000000, 0x0, 0x2, 0x7, 0x80000001, 0x9, 0x666, 0xc0f8, 0x2, 0x4, 0x8, 0x3, 0x100000001]}) r2 = syz_open_dev$vcsa(&(0x7f0000001740), 0x1, 0x3050c0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000001780)={0xfffffffe, 0x3, 0x9f1, 0x4, 0x62}) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f00000017c0)={{0xb580, 0x5}, {0x9, 0x9}, 0x1, 0x1}) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000001800)={0x5, "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"}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000050}, 0x50) r8 = openat$cgroup_subtree(r2, &(0x7f0000001cc0), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f0000001d00)=0x80000001) 16:00:36 executing program 3: ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x12, 0xffffffff, 0x10000}) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x80800) fcntl$setown(r0, 0x8, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001400)={{'\x00', 0x1}, {}, 0x21a, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="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", 0x136, 0x0, &(0x7f00000002c0)={0x2, 0xfe, {0x1, 0xc, 0xe6, "9002b57e3caf6c20a71034cda266c7f8b99d8c4e01b4580262e84cdd7a3b14ba676735baa2a09944b1d2390b1054b728fd8c3d94f5aa239576caab1a90075e0b1d42ef5d5329f8c09cfa7b938955027cdfb80743c129daaa7a64c0eb90e9b282c06e2cf93bef11f963d6ca463b806e04721aca74c50b08bfb9ed03f154b5b453886eb141e1d71d5bbdb8921cbca7afe5b3d4339af81a3f7a0add40df616c5337f3ddc2c4c87577ab6d1e7edb9b2ce6351b0d2b67e878a710f941a3dbaf4a7b6dcc6dacda189eb2411aacbb2775f7b626330d405dab0643956885c307020e2c744a899a1d456b", 0xb, "d7f9ff58a7642af7ac6592"}, 0x1000, "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"}, 0x110a}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000001480)={0x3ff, 0x9, 0x7f, 0x101, 0x1, 0x1f}) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000014c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001500)={0x0, r0, 0x0, 0x7ff, 0x1000, 0x5}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000001540)={r0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001580), 0x200, 0x0) io_uring_enter(r1, 0x195e, 0x4785, 0x1, &(0x7f00000015c0)={[0x1]}, 0x8) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x200000c5) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700), 0x200402, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000001740)) r3 = socket$inet(0x2, 0x6, 0x8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r3, 0x40c28000) r4 = open_tree(r1, &(0x7f0000001780)='./file0\x00', 0x100) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) vmsplice(r1, &(0x7f0000001880)=[{&(0x7f00000017c0)="2a92eb16d5bead3c1b1ad1e461463ae80342baed4a0c2ba0875feb9d5e68a0f0f477dd849304dc0223f907398882be18a79a3167f8b7996e06185d2e74fdf69ecb48489634c8cef822ac9671d90258a3577a60da95bbcf916ac2602350ce7000910714c196f6ebe449f5c4f47dab5aefa2be0de752e2b126231864873631f5910e0c0c778d05088799bce7d7270980b0c750f11843b3935daf0239ad8226e70e93c0d45953bf81da8ebd0dd2f3160b4feeeaec9698c042a4e913115e7929", 0xbe}], 0x1, 0x8) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000018c0)=""/4096, &(0x7f00000028c0)=0x1000) [ 73.818369] audit: type=1400 audit(1664726436.507:6): avc: denied { execmem } for pid=288 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:00:36 executing program 4: prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/122) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/75) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/113) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/155) prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/194) prctl$PR_GET_NAME(0x10, &(0x7f0000000340)=""/135) prctl$PR_GET_NAME(0x10, &(0x7f0000000400)=""/132) prctl$PR_GET_NAME(0x10, &(0x7f00000004c0)=""/156) prctl$PR_GET_NAME(0x10, &(0x7f0000000580)=""/189) prctl$PR_GET_NAME(0x10, &(0x7f0000000640)=""/162) prctl$PR_GET_NAME(0x10, &(0x7f0000000700)) prctl$PR_GET_NAME(0x10, &(0x7f0000000740)=""/170) prctl$PR_GET_NAME(0x10, &(0x7f0000000800)=""/40) prctl$PR_GET_NAME(0x10, &(0x7f0000000840)=""/198) prctl$PR_GET_NAME(0x10, &(0x7f0000000940)=""/1) prctl$PR_GET_NAME(0x10, &(0x7f0000000980)=""/128) prctl$PR_GET_NAME(0x10, &(0x7f0000000a00)=""/180) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/120) prctl$PR_GET_NAME(0x10, &(0x7f0000000b40)=""/14) prctl$PR_GET_NAME(0x10, &(0x7f0000000b80)=""/120) 16:00:36 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x841, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x88c1) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x12000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000280)={{r1}, r2, 0x14, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x8, 0x80000001, {0x1c, 0x6, 0x9ef, 0x9, 0x3}, [0x0, 0x1]}}, @subvolid=0x2}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xa6) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000001280)=""/42, 0x2a}, {&(0x7f00000012c0)=""/207, 0xcf}, {&(0x7f00000013c0)=""/3, 0x3}], 0x3, 0x7, 0x3) r4 = fspick(r0, &(0x7f0000001440)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001480)={0x0, 0x80000001, 0x3073f4e73a18ac53, [0x8, 0xb047, 0x3, 0xe437ce6, 0x1], [0x8, 0x8, 0x3f, 0x6, 0x7fffffff, 0xb2b1, 0x7, 0x8000, 0x9, 0x8, 0x0, 0x8, 0xbc1c, 0x0, 0x1, 0x100000000, 0x612c, 0x6, 0x3, 0x61b, 0x9, 0x100000000, 0x200, 0x5, 0xd4f, 0x7fff, 0xffffffff, 0x1, 0x2, 0x7, 0x0, 0x6, 0x8000, 0x8, 0xfffffffffffffffe, 0x3ff, 0x4, 0x7, 0x6, 0x6, 0x80, 0x2646, 0x218a, 0x107, 0x5, 0xffffffff7fffffff, 0x7, 0x3cab, 0x4, 0x4, 0x8da0, 0x20, 0x335, 0x5, 0x10000, 0x1, 0xfffffffffffffffc, 0x5, 0x1, 0x65b, 0xd6c, 0xffff, 0x5, 0x19, 0x4, 0x8, 0xff, 0x6, 0x1, 0x3, 0xf3, 0xfffffffffffffffb, 0x3, 0xfffffffffffffffa, 0x4f6b, 0x8879, 0xfffffffffffffffb, 0x6, 0xfffffffeffffffff, 0x2, 0x0, 0x6, 0x400, 0x8, 0x2, 0x5, 0x62f64954, 0x10000000000, 0x2, 0x0, 0xec, 0x1ff, 0x0, 0x20, 0x400, 0x7, 0x4, 0x1, 0xac4c, 0x8, 0x8, 0x5, 0x200020000000000, 0x2, 0x3, 0x100000001, 0x2, 0xb06, 0x6, 0x8000, 0x3, 0x3, 0x1, 0x8, 0xff, 0x3a00a143, 0x1ff, 0x0, 0xfffffffffffffffd, 0x3f90, 0x1000]}) accept(r1, &(0x7f00000018c0)=@isdn, &(0x7f0000001940)=0x80) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001980), 0x10000, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2) r6 = memfd_secret(0x80000) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f00000019c0)={0x0, r5, 0x0, 0xff, 0x80, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000001a00)={0x2000}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001a40), 0x4400, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r7, 0x80106720, &(0x7f0000002e80)={0x5, &(0x7f0000002dc0)=[{0x8, 0x1000, &(0x7f0000001a80)="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", 0x1}, {0x3, 0xf7, &(0x7f0000002a80)="bcfd2b09d52c6ca8f838cdba38312f121887346eeff3140cf7d8db989896c0a8056e05b41f57b211a5614b628900301be9fe694e515fe49ca886d36bbec8eff1054caa52a9ef2d8c1e9a3a244ff4e3a32786d2b3c384afca958c20bc0aa63f02e530e70b47c3d60019cae9b23674149df701ada388dd966c66b354f69020bd1957ca0172d07b1c5aa3bb8e433b1d02c4ac24af85101ac2602b6c2c01f994a1ad03c72194c85c955cf97dcbf6d7c533327bf0e7e37c9766349b19dd6b78e5d6eb6e34f1450190c07205f6bdd74a99dc6e232a44e4612e22cca51bc9c066775c9979d1cd1b1e0dffe4453f3618b1aa86fc864dfb71e079fe", 0x1}, {0x0, 0xfd, &(0x7f0000002b80)="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"}, {0x20, 0x9d, &(0x7f0000002c80)="27d904b550460db3528c88de6a40ab14b4d9cf82a64138efdb18aacbd31d2056a777dc980972fd315d00f42bdfe7c5807ff96507475ce386e7b8d0fd285426879b67dee64893d7fbef5636b199fd7e36ce34612323b0677cdf9f2b8745944c8a747ed793231600efec69cf620d05430affa3f60301a8a226d376cb99f9405babf438a693adb85f8f4121996c598064847a0800791456e1839b244db749", 0x1}, {0x5, 0x6a, &(0x7f0000002d40)="8e5b8c77e58e2995a5bd647041ee920a284f746241ea8844f59068db683efca255efc26f92e30a55455fa35217061875ca635a4965b480639c836c13269ad8fc6f0390ab3f9584831590bf25f3a2ba9b8877e3e3b1f88b0681c4ed16306b6279cf31588e2ee84b09ac0d"}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002fc0)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12}, 0x1ff) 16:00:36 executing program 7: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x311c3) fallocate(r1, 0xb5dd650982273977, 0x1f, 0x7) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000300)={0x1, 0x1, 0x1000, 0xe8, &(0x7f0000000100)="e24cb511771be8834b83eb8e7fb38d8f983241befae042415d5da0adef431bd1e43a2f4908edf45b491e2eefd17a67c3d4b72d69c419a32e19a3fc9102b6e14e8eac42a794cfc90f1c605c6b9f9f3ffaa4184be442244faaa119d7baf3c78bc1d57a9fb826b7f97807740922b013d958fdbe68ccb3b5fdc9551fb8110e73ff7a1ad970cac3f113b4a4e957ffa2ce10ade36dfde08f7d86988d5702c097f8af31e77bba696e23aeb97e40ef7b05ce755f46b20f3d1369168afcbec76e4ae03e3000f86fbec0511a84e73a8a49bcf66d2b0a6586177cf39b414e35404c7f55a8dfe0a6f3df282ecbd7", 0xc4, 0x0, &(0x7f0000000200)="394e90beee5f4edda732ef4f4bd9e8afa856200becaea1267c84ab01876c6712e65276ad14259a9e3b5159e42257a5296a1fe6fa0f7ef989ac085a8b4be3b951224e2dd89fce4e6b4d1b2256839261ebc0401c57a48cc904025fd11f1f1782cb4f819d00637d86fbf87aa8b4b9e6bef9b43ea37b145307e053ab40afb5a18ead7c75e7241f0d2db78292876c01eaaf27b1f9aa562c825e6a7b8cd7c5df0bdae649365f08cffbd5fc3c57d41ce2b4e4d3e28cef536c33b8c2284df9b9423b9cdc64937545"}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x95}}, './file0\x00'}) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000003c0)) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x70}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x806}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000500)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000540)={0x10000, 0x7}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x480243, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000005c0)) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000740)=@ccm_128={{0x303}, "77bf6f86e2b61f18", "606d2be4afc82f952f06de83086ce900", "7b3e7d90", "394210507382cbea"}, 0x28) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00'}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x410000, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000900)) 16:00:36 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0xe}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xce}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xb188e7fa54df4075}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000041) recvmsg$unix(r0, &(0x7f00000007c0)={&(0x7f0000000440), 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/25, 0x19}, {&(0x7f0000000700)=""/33, 0x21}], 0x4, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x40000002) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000001440)={&(0x7f0000000800), 0xc, &(0x7f0000001400)={&(0x7f0000000840)={0xbb8, 0x1, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0xbe7}, 0x1f, 0x9f, 0x1000, 0x8, 0x4, 'syz0\x00', "d3861f336df05e6cb91ee6a8c398ce2c4aa490006299fbb1fca08ad4e4ea4123", "2dcc0275d95ac784fa207cd698769405c63e3cd35a7e592df518072c153a8078", [{0x8000, 0x2, {0x1, 0xdd5a}}, {0x8, 0x4, {0x3, 0x1ff}}, {0x9, 0x6, {0x0, 0x9}}, {0xfff4, 0x0, {0x1, 0x3ff}}, {0x7, 0xc8b7, {0x2, 0x6}}, {0x8, 0x6b89, {0x2, 0x1}}, {0x5, 0xea4, {0x3, 0x3}}, {0x4, 0x9, {0x3, 0xee9e}}, {0x7fff, 0x100, {0x2, 0x6}}, {0x8, 0xfffa, {0x1, 0x1}}, {0x1, 0x8, {0x2, 0xfffffffc}}, {0x8, 0x9, {0x2, 0x78a}}, {0x800, 0x800, {0x2, 0x9}}, {0x1, 0xf0e, {0x3, 0x2}}, {0xffff, 0x7, {0x1, 0x9}}, {0x4, 0x101, {0x0, 0x4}}, {0x0, 0xfff9, {0x3, 0xffff}}, {0x1f, 0x2, {0x3, 0x8}}, {0x7, 0x4, {0x0, 0x7fff}}, {0x7f, 0x0, {0x2, 0x2}}, {0x0, 0x4, {0x1, 0x20}}, {0x8, 0x4, {0x2, 0xffffce72}}, {0x1c, 0x4302, {0x2, 0x4}}, {0x8001, 0x0, {0x3, 0x6}}, {0x0, 0x7, {0x1, 0x9}}, {0x9, 0x39a0, {0x0, 0x6}}, {0x2, 0x7, {0x3, 0x6}}, {0x7ff, 0x8, {0x3, 0x9}}, {0x0, 0xc88, {0x0, 0x80000001}}, {0x6, 0x7, {0x1, 0x4}}, {0x385, 0x5, {0x0, 0x2}}, {0xe1a, 0x7, {0x0, 0xfffffffe}}, {0x5, 0x0, {0x1, 0x800}}, {0x0, 0x4, {0x3, 0xb01}}, {0x8, 0x200, {0x2, 0x6ee}}, {0x4, 0x5, {0x1}}, {0x7, 0x81, {0x2, 0xf5}}, {0x0, 0x3, {0x2, 0x1}}, {0x3, 0x81, {0x0, 0x556a}}, {0x7, 0xf50c, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x100000}, 0x2, 0x1, 0x3, 0x7519, 0x1f, 'syz0\x00', "0a8df71c4edd4190dff9048be0cc9eb509176a6960c64027afc647949a4a6e29", "1d0b91688045e32263568b9bf0f536e297aae101b248f8a1aaee90ed76790f48", [{0x0, 0xff, {0x0, 0x2}}, {0x8, 0xdf48, {0x1, 0x5}}, {0x8000, 0x800, {0x1, 0x35500000}}, {0xc4e9, 0x3, {0x3, 0x1ff}}, {0x200, 0x3, {0x0, 0x7fffffff}}, {0x1, 0x2, {0x3, 0x8}}, {0xba, 0x8, {0x1, 0x2}}, {0x8, 0x3, {0x0, 0x4}}, {0x8, 0x9, {0x1, 0x4}}, {0x101, 0x6, {0x0, 0xffff}}, {0xff3e, 0x4, {0x2, 0xc855}}, {0x7, 0x3, {0x3, 0x400}}, {0x200, 0x6, {0x0, 0x2}}, {0xffff, 0xdb, {0x2, 0x3}}, {0x5, 0x3, {0x2, 0xfff}}, {0x319e, 0xb3, {0x2, 0xfff}}, {0x7, 0x1, {0x3, 0x4}}, {0x1000, 0xc4, {0x1, 0x3}}, {0x0, 0x3f, {0x0, 0x8}}, {0x9, 0x401, {0x2, 0x101}}, {0x5, 0x6, {0x0, 0x1}}, {0x7, 0xcf, {0x2, 0x8}}, {0x81, 0x1000, {0x2, 0x1}}, {0x1d91, 0x6, {0x2}}, {0x8, 0x8000, {0x0, 0x4}}, {0x5, 0x2, {0x3}}, {0x5, 0xfff, {0x0, 0x592d}}, {0x7fff, 0x2, {0x2, 0x6}}, {0x101, 0x4, {0x0, 0x20}}, {0x4, 0x3, {0x3, 0x4}}, {0x0, 0x1ff, {0x2}}, {0x0, 0x1f, {0x0, 0x1}}, {0x1f, 0x3, {0x2, 0xb278}}, {0xa0c, 0x6, {0x2, 0x1f8c}}, {0x0, 0x20, {0x0, 0xffff8001}}, {0xffc3, 0x80, {0x3, 0x8}}, {0x8, 0x6, {0x1, 0x9}}, {0x8000, 0x5, {0x0, 0x20}}, {0xfff, 0xb99b, {0x0, 0x43}}, {0x9, 0x5, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x1}, 0x5, 0x2, 0x101, 0x9, 0xc, 'syz0\x00', "ff1e4a0b104bb2ea4df3eca2d7444dd5c5cd42dc6203d7eb044760b6a373b85b", "4c30bb9a8880a1c15036c93155d9f1bf8eb99dda63fc18be2df87bcb33b29d0d", [{0xffff, 0x22a, {0x0, 0x1}}, {0x4, 0x1, {0x0, 0x2}}, {0x7, 0x2, {0x1, 0x7f}}, {0x808c, 0x0, {0x3, 0x2}}, {0x6, 0x400, {0x2, 0x9}}, {0x4, 0x20, {0x3, 0x1}}, {0x7c6, 0xf800, {0x3, 0xd580}}, {0x2, 0x83, {0x0, 0x6}}, {0x3, 0x1, {0x2, 0x40}}, {0x1, 0x4, {0x1, 0xffffff2b}}, {0x0, 0x1, {0x2}}, {0x59c, 0x200, {0x2, 0x1f}}, {0x40, 0x9, {0x3, 0x7fffffff}}, {0x3, 0x4, {0x1, 0x81}}, {0x1, 0x6, {0x2, 0x7}}, {0xd3, 0x100, {0x3, 0x8000}}, {0xffff, 0x401, {0x3, 0x2}}, {0x1, 0x5, {0x1, 0xffffff7f}}, {0x8, 0x4, {0x1, 0x7fff}}, {0x3, 0x180, {0x2, 0x2}}, {0x1, 0x5, {0x0, 0x65be}}, {0xfffc, 0x7, {0x1, 0xeece}}, {0xeaf1, 0x8, {0x1, 0xffffffed}}, {0x64, 0x8, {0x1, 0x1}}, {0x5, 0x1, {0x0, 0x1}}, {0x7, 0x7, {0x2}}, {0x3e2, 0x8, {0x0, 0x8bb}}, {0xe1, 0x0, {0x2, 0x7}}, {0x5, 0x3, {0x2, 0x3}}, {0x7, 0x9, {0x0, 0x4a3}}, {0x7ff, 0xff, {0x1, 0x6ec}}, {0x100, 0xb2, {0x3, 0x4}}, {0x8, 0x9, {0x3, 0x80000000}}, {0x6f, 0x1f, {0x1, 0x100}}, {0x8, 0xfff, {0x0, 0x2ea}}, {0x0, 0x34, {0x3, 0x3d7b}}, {0xffff, 0x8, {0x1, 0x7}}, {0x3, 0x449e, {0x3, 0x5}}, {0xfff4, 0x1e3d, {0x0, 0x5}}, {0x0, 0x3, {0x2, 0xd9}}]}}}, {{0x254, 0x1, {{0x3, 0xffff}, 0x94, 0x81, 0x0, 0x1, 0x6, 'syz0\x00', "324ea494ca2fb4847e9e18ff884b27e0a2621dc1a33f33c6562473953010d10b", "54e950d8590896091a05be31d0f55518794d131742959613b74d95c8d948dee7", [{0x76, 0xe8c, {0x2, 0x10000}}, {0x2, 0x8000, {0x2, 0xf0}}, {0xffff, 0x4, {0x1, 0x4}}, {0xfe01, 0x0, {0x1}}, {0x99, 0x800, {0x1, 0x16}}, {0x3, 0xffff, {0x2, 0xff}}, {0x4, 0x4, {0x2, 0x7fff}}, {0x6, 0x9, {0x2, 0x9}}, {0x4, 0x800, {0x1, 0xfffffffb}}, {0x9572, 0x8, {0x2, 0x1f}}, {0xc275, 0x6, {0x0, 0x80000000}}, {0x0, 0x4e, {0x2, 0x4}}, {0x7, 0x7, {0x1, 0xac}}, {0x9, 0x0, {0x0, 0x7}}, {0x7, 0x81, {0x2, 0x2d}}, {0x69, 0x3, {0x2, 0x7}}, {0x2, 0x5, {0x3, 0x7fffffff}}, {0x9, 0x1, {0x0, 0x5}}, {0x0, 0x5, {0x0, 0x5}}, {0xff, 0x2, {0x2, 0xffffffff}}, {0x4, 0x5cf, {0x1, 0x40004000}}, {0x6, 0x3f, {0x2, 0x3c79}}, {0x6, 0x5, {0x1, 0x8001}}, {0xfff, 0x2, {0x2, 0x5}}, {0xb121, 0x1, {0x3, 0x4}}, {0xffff, 0x2, {0x1, 0x5}}, {0x3, 0xf0af, {0x2, 0x80000000}}, {0x7ff, 0x8, {0x0, 0x3}}, {0x2aa5, 0x6, {0x2, 0x5930}}, {0x8, 0x0, {0x2, 0xe7}}, {0x7, 0x1, {0x2, 0xffffffff}}, {0x800, 0x529, {0x3, 0x9}}, {0xffe9, 0xdc7, {0x2, 0x7fffffff}}, {0x5, 0x1, {0x0, 0x20}}, {0x68bb, 0x400, {0x1, 0x3}}, {0x5bd, 0x8ab, {0x3, 0x1ff}}, {0x4, 0x4, {0x1, 0x5}}, {0xfc, 0x27, {0x3, 0x1}}, {0xd6d7, 0x48, {0x3, 0xb}}, {0x5, 0x9, {0xe6da4a1c54eedd2e, 0xfff}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x4, 0x4, 0xd56b, 0x8, 0x15, 'syz0\x00', "689e41865138728907fffd21ff43aa3f0891c6878f283942ac058faf8ba0ce3e", "2cccb09c731554bca828dcc60bfc8179563712e9132381976a7f222119fde930", [{0x7ff, 0x5, {0x3, 0x100}}, {0xe1, 0x5142, {0x3, 0xffffff29}}, {0x7493, 0x0, {0x1, 0xffffffff}}, {0x4, 0x4d, {0x1, 0x20}}, {0x3cb0, 0xfffa, {0xe72e5c09acef3f2d, 0x5}}, {0x5, 0x1000, {0x2, 0xe0000000}}, {0x6, 0x31, {0x1, 0x8}}, {0x1, 0x9, {0x3, 0x4}}, {0xbd2e, 0x1e4, {0x0, 0x9}}, {0x0, 0x800, {0x1, 0x10000000}}, {0x3, 0x7ff, {0x3, 0x7}}, {0xffff, 0x7, {0x1, 0x5}}, {0x8, 0x81, {0x2, 0x7fff}}, {0xa6, 0x621f, {0x0, 0x80}}, {0x9, 0x5, {0x2, 0x5}}, {0x1000, 0x8, {0x2, 0x7f}}, {0x1c, 0xffc6, {0x3, 0x3ff}}, {0x3aa2, 0x20, {0x1, 0x8001}}, {0x3, 0x4, {0x0, 0x10001}}, {0x4, 0x0, {0x0, 0x5}}, {0x1, 0x7, {0x1, 0xfffffff7}}, {0x200, 0xfeff, {0x3, 0x7fffffff}}, {0x2, 0x8, {0x2, 0x8}}, {0x20, 0x5, {0x1, 0x6a83}}, {0x1, 0x100, {0x0, 0x400}}, {0x8, 0x1, {0x2, 0x1}}, {0x6, 0x0, {0x0, 0x3}}, {0x2, 0xf351, {0x2, 0x8}}, {0xd1, 0x6, {0x3, 0x181a}}, {0x5, 0x2, {0x3, 0x9}}, {0x2, 0x0, {0x0, 0xfff}}, {0x5, 0x15f, {0x0, 0x14000000}}, {0x4, 0x101, {0x2, 0xa1}}, {0x3f, 0x6, {0x1, 0x3ff}}, {0x4, 0x8, {0x0, 0x1}}, {0xfff9, 0x5, {0x3, 0x1f}}, {0xd94, 0x7, {0x0, 0x7}}, {0x100, 0x1f, {0x1, 0xc05a}}, {0x240, 0x101, {0x1, 0x6}}, {0xf001, 0x8, {0x2, 0x1}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001580)={{0x1, 0x1, 0x18, r0, {0x7ff, 0x6}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r6) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x1041) r8 = syz_genetlink_get_family_id$team(&(0x7f0000001740), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x58, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0xd88952edcb2e642a}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x50, r3, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc6, 0x14}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d5) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f00000019c0)='ip6_vti0\x00') ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000000) [ 74.987186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.988937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.991009] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.994484] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.996736] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.998171] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.002997] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.044585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.050839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.055730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.061032] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.072040] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.076140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.082898] Bluetooth: hci1: HCI_REQ-0x0c1a [ 75.113536] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.116286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.117893] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.120602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.122051] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.124162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.126390] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.129248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.130926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.133024] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.137292] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.138258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.143033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.179381] Bluetooth: hci4: HCI_REQ-0x0c1a [ 75.238719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.247269] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.278381] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.279688] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.282399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.286551] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.292643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.310063] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.312671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.318599] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.320847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.321818] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.332261] Bluetooth: hci6: HCI_REQ-0x0c1a [ 75.339489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.346573] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.348151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.357339] Bluetooth: hci5: HCI_REQ-0x0c1a [ 75.379413] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.381295] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.383017] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.399879] Bluetooth: hci3: HCI_REQ-0x0c1a [ 77.012159] Bluetooth: hci0: command 0x0409 tx timeout [ 77.138863] Bluetooth: hci1: command 0x0409 tx timeout [ 77.203279] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 77.203454] Bluetooth: hci4: command 0x0409 tx timeout [ 77.204928] Bluetooth: hci2: command 0x0409 tx timeout [ 77.394920] Bluetooth: hci5: command 0x0409 tx timeout [ 77.394957] Bluetooth: hci6: command 0x0409 tx timeout [ 77.458920] Bluetooth: hci3: command 0x0409 tx timeout [ 79.058871] Bluetooth: hci0: command 0x041b tx timeout [ 79.186848] Bluetooth: hci1: command 0x041b tx timeout [ 79.250854] Bluetooth: hci4: command 0x041b tx timeout [ 79.251893] Bluetooth: hci2: command 0x041b tx timeout [ 79.442892] Bluetooth: hci6: command 0x041b tx timeout [ 79.443786] Bluetooth: hci5: command 0x041b tx timeout [ 79.506896] Bluetooth: hci3: command 0x041b tx timeout [ 80.654572] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.657702] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.662072] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.666461] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.688160] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 80.704506] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.722276] Bluetooth: hci7: HCI_REQ-0x0c1a [ 81.107040] Bluetooth: hci0: command 0x040f tx timeout [ 81.235836] Bluetooth: hci1: command 0x040f tx timeout [ 81.298908] Bluetooth: hci4: command 0x040f tx timeout [ 81.298933] Bluetooth: hci2: command 0x040f tx timeout [ 81.490941] Bluetooth: hci6: command 0x040f tx timeout [ 81.490965] Bluetooth: hci5: command 0x040f tx timeout [ 81.554816] Bluetooth: hci3: command 0x040f tx timeout [ 82.770873] Bluetooth: hci7: command 0x0409 tx timeout [ 83.154843] Bluetooth: hci0: command 0x0419 tx timeout [ 83.282803] Bluetooth: hci1: command 0x0419 tx timeout [ 83.346903] Bluetooth: hci4: command 0x0419 tx timeout [ 83.346923] Bluetooth: hci2: command 0x0419 tx timeout [ 83.538912] Bluetooth: hci5: command 0x0419 tx timeout [ 83.538946] Bluetooth: hci6: command 0x0419 tx timeout [ 83.602850] Bluetooth: hci3: command 0x0419 tx timeout [ 84.818839] Bluetooth: hci7: command 0x041b tx timeout [ 86.866918] Bluetooth: hci7: command 0x040f tx timeout [ 88.914859] Bluetooth: hci7: command 0x0419 tx timeout 16:01:35 executing program 0: r0 = semget(0x1, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = semget$private(0x0, 0x4, 0x0) semtimedop(r3, &(0x7f0000000040)=[{0x3, 0xfffe, 0x800}, {0x0, 0x0, 0x1000}], 0x2, 0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) r8 = io_uring_setup(0x7c54, &(0x7f0000000140)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r9) syz_io_uring_submit(0x0, r5, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r7, 0x0, &(0x7f0000000240)="5b1e90f8af41588da711a5550337eff9244220dfb744efdac58289ee64249aa073774bd743b9ea683ca9b8ef6b08b7dcc2fc4b0639f44340eeb1157cca17f2686a7c0477b6d83d4a418ec18b7d1ca38c2168347185b9e87ad97a42f6947b5a96f8855b6a9876c1827ff060441ca8cf45784593ed5dbb5a7261faf7a553e9b54f8f94a94da70ae67de9d83f4e1e1d21dc90b5734afcd8d63413aca9902ac92e68", 0xa0, 0x2, 0x0, {0x0, r9}}, 0x8) semtimedop(r3, &(0x7f0000000140)=[{0x1, 0x0, 0x800}, {0x3, 0x7fff}, {0x4, 0x7fff, 0x1000}, {0x4, 0x2, 0x1000}, {0x2, 0x3f, 0x2000}, {0x0, 0x6}], 0x6, &(0x7f0000000180)) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x6, 0x800}, {0x3, 0x1, 0x800}], 0x2, &(0x7f0000000100)={r1, r2+10000000}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2008, &(0x7f0000000380)=ANY=[@ANYBLOB="6d61736b3d4d41595f524541442c7569643def8b897958b3942f0d7c0100000000000000208b93ed60a96aabc02882ee61a0e068ea445eb2c9282c73bee48fc0af3d8adde814b6e0c4aabd61899f1baa3720ac44b8e54376fe66705008757b9c9e48526bf61f8d5ac3c20a2e0f3b35639e9ce315ab773589d421ac135db279b7ab9ea851ac0f6e3d8e28080000002f59700007ee031f689a2b1a2efac985e31dc0863eb7c3b0e79535eb88f35cc714", @ANYRESDEC=0xee00, @ANYBLOB=',smackfsdef=msdos\x00,permit_directio,\x00']) 16:01:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) execveat(r0, &(0x7f0000000140)='./file1\x00', &(0x7f00000002c0)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='\\$*%\\}\x00', &(0x7f0000000280)='\\$*%\\}\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='/\x00', &(0x7f0000000380)='/dev/sr0\x00'], 0x100) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='ncpfs\x00', 0x50801, &(0x7f00000000c0)='\\$*%\\}\x00') fallocate(r0, 0x3, 0x0, 0x7) 16:01:35 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x5320, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001b80)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="6c65300033338178553b3a05154ce61754de87817d2c43fba817f4410a65bf7fd6f4efffa1e974b9173fd8e8d83f5933b29ce1580456a254183244c8dfde0188f944437c06285d2347e1"]) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000001b40)={{r3}, {@val={r4}, @max}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000) r6 = accept$unix(r2, &(0x7f0000000200), &(0x7f0000000180)=0x6e) preadv(r6, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/195, 0xc3}, {&(0x7f0000001400)=""/29, 0x1d}, {0x0}, {&(0x7f0000001480)=""/56, 0x38}, {&(0x7f00000014c0)=""/151, 0x97}, {&(0x7f0000001580)=""/18, 0x12}, {&(0x7f00000015c0)=""/213, 0xd5}], 0x8, 0x0, 0x9) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r5, r5, 0x0) [ 133.058632] audit: type=1400 audit(1664726495.747:7): avc: denied { open } for pid=3767 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 133.060120] audit: type=1400 audit(1664726495.747:8): avc: denied { kernel } for pid=3767 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 133.075511] ------------[ cut here ]------------ [ 133.075545] [ 133.075551] ====================================================== [ 133.075557] WARNING: possible circular locking dependency detected [ 133.075564] 6.0.0-rc7-next-20220930 #1 Not tainted [ 133.075576] ------------------------------------------------------ [ 133.075582] syz-executor.0/3768 is trying to acquire lock: [ 133.075594] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 133.075661] [ 133.075661] but task is already holding lock: [ 133.075666] ffff88800ee50020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 133.075715] [ 133.075715] which lock already depends on the new lock. [ 133.075715] [ 133.075721] [ 133.075721] the existing dependency chain (in reverse order) is: [ 133.075727] [ 133.075727] -> #3 (&ctx->lock){....}-{2:2}: [ 133.075758] _raw_spin_lock+0x2a/0x40 [ 133.075779] __perf_event_task_sched_out+0x53b/0x18d0 [ 133.075801] __schedule+0xedd/0x2470 [ 133.075828] schedule+0xda/0x1b0 [ 133.075854] futex_wait_queue+0xf5/0x1e0 [ 133.075876] futex_wait+0x28e/0x690 [ 133.075896] do_futex+0x2ff/0x380 [ 133.075914] __x64_sys_futex+0x1c6/0x4d0 [ 133.075934] do_syscall_64+0x3b/0x90 [ 133.075967] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.075992] [ 133.075992] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 133.076018] _raw_spin_lock_nested+0x30/0x40 [ 133.076039] raw_spin_rq_lock_nested+0x1e/0x30 [ 133.076063] task_fork_fair+0x63/0x4d0 [ 133.076095] sched_cgroup_fork+0x3d0/0x540 [ 133.076123] copy_process+0x4183/0x6e20 [ 133.076142] kernel_clone+0xe7/0x890 [ 133.076161] user_mode_thread+0xad/0xf0 [ 133.076181] rest_init+0x24/0x250 [ 133.076204] arch_call_rest_init+0xf/0x14 [ 133.076235] start_kernel+0x4c6/0x4eb [ 133.076265] secondary_startup_64_no_verify+0xe0/0xeb [ 133.076291] [ 133.076291] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 133.076318] _raw_spin_lock_irqsave+0x39/0x60 [ 133.076339] try_to_wake_up+0xab/0x1930 [ 133.076365] up+0x75/0xb0 [ 133.076392] __up_console_sem+0x6e/0x80 [ 133.076422] console_unlock+0x46a/0x590 [ 133.076453] vprintk_emit+0x1bd/0x560 [ 133.076484] vprintk+0x84/0xa0 [ 133.076515] _printk+0xba/0xf1 [ 133.076536] kauditd_hold_skb.cold+0x3f/0x4e [ 133.076569] kauditd_send_queue+0x233/0x290 [ 133.076597] kauditd_thread+0x5f9/0x9c0 [ 133.076624] kthread+0x2ed/0x3a0 [ 133.076651] ret_from_fork+0x22/0x30 [ 133.076675] [ 133.076675] -> #0 ((console_sem).lock){....}-{2:2}: [ 133.076702] __lock_acquire+0x2a02/0x5e70 [ 133.076734] lock_acquire+0x1a2/0x530 [ 133.076765] _raw_spin_lock_irqsave+0x39/0x60 [ 133.076789] down_trylock+0xe/0x70 [ 133.076819] __down_trylock_console_sem+0x3b/0xd0 [ 133.076850] vprintk_emit+0x16b/0x560 [ 133.076882] vprintk+0x84/0xa0 [ 133.076913] _printk+0xba/0xf1 [ 133.076933] report_bug.cold+0x72/0xab [ 133.076965] handle_bug+0x3c/0x70 [ 133.076997] exc_invalid_op+0x14/0x50 [ 133.077030] asm_exc_invalid_op+0x16/0x20 [ 133.077053] group_sched_out.part.0+0x2c7/0x460 [ 133.077097] ctx_sched_out+0x8f1/0xc10 [ 133.077129] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.077151] __schedule+0xedd/0x2470 [ 133.077177] schedule+0xda/0x1b0 [ 133.077203] futex_wait_queue+0xf5/0x1e0 [ 133.077224] futex_wait+0x28e/0x690 [ 133.077244] do_futex+0x2ff/0x380 [ 133.077263] __x64_sys_futex+0x1c6/0x4d0 [ 133.077283] do_syscall_64+0x3b/0x90 [ 133.077315] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.077340] [ 133.077340] other info that might help us debug this: [ 133.077340] [ 133.077345] Chain exists of: [ 133.077345] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 133.077345] [ 133.077374] Possible unsafe locking scenario: [ 133.077374] [ 133.077379] CPU0 CPU1 [ 133.077383] ---- ---- [ 133.077387] lock(&ctx->lock); [ 133.077398] lock(&rq->__lock); [ 133.077410] lock(&ctx->lock); [ 133.077422] lock((console_sem).lock); [ 133.077433] [ 133.077433] *** DEADLOCK *** [ 133.077433] [ 133.077437] 2 locks held by syz-executor.0/3768: [ 133.077450] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 133.077511] #1: ffff88800ee50020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 133.077563] [ 133.077563] stack backtrace: [ 133.077567] CPU: 0 PID: 3768 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220930 #1 [ 133.077591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 133.077605] Call Trace: [ 133.077611] [ 133.077618] dump_stack_lvl+0x8b/0xb3 [ 133.077654] check_noncircular+0x263/0x2e0 [ 133.077686] ? format_decode+0x26c/0xb50 [ 133.077717] ? print_circular_bug+0x450/0x450 [ 133.077751] ? simple_strtoul+0x30/0x30 [ 133.077782] ? format_decode+0x26c/0xb50 [ 133.077816] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 133.077851] __lock_acquire+0x2a02/0x5e70 [ 133.077894] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 133.077938] lock_acquire+0x1a2/0x530 [ 133.077971] ? down_trylock+0xe/0x70 [ 133.078005] ? lock_release+0x750/0x750 [ 133.078045] ? vprintk+0x84/0xa0 [ 133.078080] _raw_spin_lock_irqsave+0x39/0x60 [ 133.078103] ? down_trylock+0xe/0x70 [ 133.078135] down_trylock+0xe/0x70 [ 133.078166] ? vprintk+0x84/0xa0 [ 133.078199] __down_trylock_console_sem+0x3b/0xd0 [ 133.078233] vprintk_emit+0x16b/0x560 [ 133.078271] vprintk+0x84/0xa0 [ 133.078305] _printk+0xba/0xf1 [ 133.078327] ? record_print_text.cold+0x16/0x16 [ 133.078359] ? report_bug.cold+0x66/0xab [ 133.078394] ? group_sched_out.part.0+0x2c7/0x460 [ 133.078431] report_bug.cold+0x72/0xab [ 133.078468] handle_bug+0x3c/0x70 [ 133.078502] exc_invalid_op+0x14/0x50 [ 133.078538] asm_exc_invalid_op+0x16/0x20 [ 133.078563] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 133.078603] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 133.078625] RSP: 0018:ffff88803f8478f8 EFLAGS: 00010006 [ 133.078642] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 133.078657] RDX: ffff888010070000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 133.078671] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 133.078686] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ee50000 [ 133.078700] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 133.078722] ? group_sched_out.part.0+0x2c7/0x460 [ 133.078762] ? group_sched_out.part.0+0x2c7/0x460 [ 133.078801] ctx_sched_out+0x8f1/0xc10 [ 133.078839] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.078868] ? lock_is_held_type+0xd7/0x130 [ 133.078895] ? __perf_cgroup_move+0x160/0x160 [ 133.078916] ? set_next_entity+0x304/0x550 [ 133.078955] ? lock_is_held_type+0xd7/0x130 [ 133.078983] __schedule+0xedd/0x2470 [ 133.079017] ? io_schedule_timeout+0x150/0x150 [ 133.079047] ? futex_wait_setup+0x166/0x230 [ 133.079076] schedule+0xda/0x1b0 [ 133.079106] futex_wait_queue+0xf5/0x1e0 [ 133.079130] futex_wait+0x28e/0x690 [ 133.079155] ? futex_wait_setup+0x230/0x230 [ 133.079182] ? wake_up_q+0x8b/0xf0 [ 133.079208] ? do_raw_spin_unlock+0x4f/0x220 [ 133.079246] ? futex_wake+0x158/0x490 [ 133.079278] ? fd_install+0x1f9/0x640 [ 133.079307] do_futex+0x2ff/0x380 [ 133.079330] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 133.079362] __x64_sys_futex+0x1c6/0x4d0 [ 133.079387] ? __x64_sys_futex_time32+0x480/0x480 [ 133.079413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 133.079441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 133.079472] do_syscall_64+0x3b/0x90 [ 133.079507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.079533] RIP: 0033:0x7f5242362b19 [ 133.079549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.079570] RSP: 002b:00007f523f8d8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.079591] RAX: ffffffffffffffda RBX: 00007f5242475f68 RCX: 00007f5242362b19 [ 133.079607] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5242475f68 [ 133.079621] RBP: 00007f5242475f60 R08: 0000000000000000 R09: 0000000000000000 [ 133.079635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5242475f6c [ 133.079649] R13: 00007ffd739aecaf R14: 00007f523f8d8300 R15: 0000000000022000 [ 133.079674] [ 133.193195] WARNING: CPU: 0 PID: 3768 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 133.194537] Modules linked in: [ 133.195001] CPU: 0 PID: 3768 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220930 #1 [ 133.196130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 133.197734] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 133.198519] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 133.201084] RSP: 0018:ffff88803f8478f8 EFLAGS: 00010006 [ 133.201850] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 133.202857] RDX: ffff888010070000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 133.203868] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 133.204886] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ee50000 [ 133.205915] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 133.206926] FS: 00007f523f8d8700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 133.208074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.208907] CR2: 00007f007e52b4a1 CR3: 00000000407da000 CR4: 0000000000350ef0 [ 133.209928] Call Trace: [ 133.210310] [ 133.210644] ctx_sched_out+0x8f1/0xc10 [ 133.211234] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.211986] ? lock_is_held_type+0xd7/0x130 [ 133.212606] ? __perf_cgroup_move+0x160/0x160 [ 133.213261] ? set_next_entity+0x304/0x550 [ 133.213887] ? lock_is_held_type+0xd7/0x130 [ 133.214515] __schedule+0xedd/0x2470 [ 133.215078] ? io_schedule_timeout+0x150/0x150 [ 133.215744] ? futex_wait_setup+0x166/0x230 [ 133.216383] schedule+0xda/0x1b0 [ 133.216901] futex_wait_queue+0xf5/0x1e0 [ 133.217524] futex_wait+0x28e/0x690 [ 133.218068] ? futex_wait_setup+0x230/0x230 [ 133.218700] ? wake_up_q+0x8b/0xf0 [ 133.219229] ? do_raw_spin_unlock+0x4f/0x220 [ 133.219882] ? futex_wake+0x158/0x490 [ 133.220450] ? fd_install+0x1f9/0x640 [ 133.221026] do_futex+0x2ff/0x380 [ 133.221514] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 133.222339] __x64_sys_futex+0x1c6/0x4d0 [ 133.222931] ? __x64_sys_futex_time32+0x480/0x480 [ 133.223635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 133.224370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 133.225126] do_syscall_64+0x3b/0x90 [ 133.225689] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.226440] RIP: 0033:0x7f5242362b19 [ 133.226972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.229548] RSP: 002b:00007f523f8d8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.230620] RAX: ffffffffffffffda RBX: 00007f5242475f68 RCX: 00007f5242362b19 [ 133.231643] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5242475f68 [ 133.232664] RBP: 00007f5242475f60 R08: 0000000000000000 R09: 0000000000000000 [ 133.233698] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5242475f6c [ 133.234719] R13: 00007ffd739aecaf R14: 00007f523f8d8300 R15: 0000000000022000 [ 133.235743] [ 133.236089] irq event stamp: 696 [ 133.236566] hardirqs last enabled at (695): [] syscall_enter_from_user_mode+0x1d/0x50 [ 133.237930] hardirqs last disabled at (696): [] __schedule+0x1225/0x2470 [ 133.239103] softirqs last enabled at (474): [] __irq_exit_rcu+0x11b/0x180 [ 133.240310] softirqs last disabled at (397): [] __irq_exit_rcu+0x11b/0x180 [ 133.241550] ---[ end trace 0000000000000000 ]--- 16:01:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 16:01:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 16:01:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58d}, 0x0, 0x8, 0xffffffffffffffff, 0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fgetxattr(r1, &(0x7f0000000040)=@random={'security.', '(\x00'}, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x998, 0x73) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fgetxattr(r2, &(0x7f0000000040)=@random={'security.', '(\x00'}, 0x0, 0x0) syncfs(r2) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x417, 0x0) 16:01:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58d}, 0x0, 0x8, 0xffffffffffffffff, 0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fgetxattr(r1, &(0x7f0000000040)=@random={'security.', '(\x00'}, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x998, 0x73) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fgetxattr(r2, &(0x7f0000000040)=@random={'security.', '(\x00'}, 0x0, 0x0) syncfs(r2) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x417, 0x0) [ 134.138766] hrtimer: interrupt took 18464 ns 16:01:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x81, 0x0, 0x54, @loopback, @ipv4={'\x00', '\xff\xff', @dev}, 0x40, 0x80, 0x7ff, 0x32ee}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fbdbdf25100000004400018008000300000700001400020076657468315f746f5f7465616d000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="719a28244cc5ecb35d86b92614a4069dd213960d1d16b1a60c30aef04c06adfc8015b7a5850dab3b166435efd61010662af97d25c08b576f7215a7c03001c2fd9832d24cbbe5b81aeaa15e5428a67c0924446e86645282b9b2aee12370fef83adfff2527fdc9bc3206b46e52487385db995a6daa33263e5bdec972d6c9be8878247d274df464425c53cd2d14a2bbce4225ff7778784c857c88feeefe4a7a2c4a438f9457b2ba9041", @ANYRES32=r4, @ANYBLOB="2c00018014000200766c616e30000000000000000000000014000200767863616e3100"/44], 0x84}, 0x1, 0x0, 0x0, 0x2000c011}, 0x20000015) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r5, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0xfffffffffffffffc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x0, 0x0, 0x200480c, &(0x7f0000000400)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) readlinkat(r1, &(0x7f00000001c0)='./file1\x00', &(0x7f00000009c0)=""/4096, 0x1000) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, 0x0) [ 134.507872] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 134.559023] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 135.935397] audit: type=1400 audit(1664726498.624:9): avc: denied { create } for pid=3900 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 138.770881] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 138.898811] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 138.898822] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 138.899691] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 138.900492] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 141.084048] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.085495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.087691] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.090084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.092722] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.094087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.098362] Bluetooth: hci1: HCI_REQ-0x0c1a [ 142.994792] Bluetooth: hci0: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 16:01:36 Registers: info registers vcpu 0 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803f847340 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000063 R11=0000000000000001 R12=0000000000000063 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f523f8d8700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f007e52b4a1 CR3=00000000407da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f52424497c0 00007f52424497c8 YMM02=0000000000000000 0000000000000000 00007f52424497e0 00007f52424497c0 YMM03=0000000000000000 0000000000000000 00007f52424497c8 00007f52424497c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3f080 RCX=0000000000000000 RDX=ffff88800ff88000 RSI=ffffffff813bbaa7 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff888040827958 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9c7e11 R14=ffff88806ce3f088 R15=0000000000000001 RIP=ffffffff813bbaa9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556f41400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f52424720a0 CR3=00000000407da000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f52424497c0 00007f52424497c8 YMM02=0000000000000000 0000000000000000 00007f52424497e0 00007f52424497c0 YMM03=0000000000000000 0000000000000000 00007f52424497c8 00007f52424497c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000