Warning: Permanently added '[localhost]:33535' (ECDSA) to the list of known hosts. 2022/10/03 01:31:24 fuzzer started 2022/10/03 01:31:24 dialing manager at localhost:35095 syzkaller login: [ 44.175650] cgroup: Unknown subsys name 'net' [ 44.264872] cgroup: Unknown subsys name 'rlimit' 2022/10/03 01:31:39 syscalls: 2215 2022/10/03 01:31:39 code coverage: enabled 2022/10/03 01:31:39 comparison tracing: enabled 2022/10/03 01:31:39 extra coverage: enabled 2022/10/03 01:31:39 setuid sandbox: enabled 2022/10/03 01:31:39 namespace sandbox: enabled 2022/10/03 01:31:39 Android sandbox: enabled 2022/10/03 01:31:39 fault injection: enabled 2022/10/03 01:31:39 leak checking: enabled 2022/10/03 01:31:39 net packet injection: enabled 2022/10/03 01:31:39 net device setup: enabled 2022/10/03 01:31:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 01:31:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 01:31:39 USB emulation: enabled 2022/10/03 01:31:39 hci packet injection: enabled 2022/10/03 01:31:39 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 01:31:39 802.15.4 emulation: enabled 2022/10/03 01:31:39 fetching corpus: 50, signal 17279/19168 (executing program) 2022/10/03 01:31:39 fetching corpus: 100, signal 29979/33594 (executing program) 2022/10/03 01:31:39 fetching corpus: 150, signal 39866/45062 (executing program) 2022/10/03 01:31:39 fetching corpus: 200, signal 46093/52855 (executing program) 2022/10/03 01:31:39 fetching corpus: 250, signal 55744/63842 (executing program) 2022/10/03 01:31:40 fetching corpus: 300, signal 59508/69075 (executing program) 2022/10/03 01:31:40 fetching corpus: 350, signal 66117/76946 (executing program) 2022/10/03 01:31:40 fetching corpus: 400, signal 70428/82612 (executing program) 2022/10/03 01:31:40 fetching corpus: 450, signal 74245/87714 (executing program) 2022/10/03 01:31:40 fetching corpus: 500, signal 77319/92055 (executing program) 2022/10/03 01:31:40 fetching corpus: 550, signal 78860/95013 (executing program) 2022/10/03 01:31:40 fetching corpus: 600, signal 81840/99246 (executing program) 2022/10/03 01:31:40 fetching corpus: 650, signal 84969/103532 (executing program) 2022/10/03 01:31:40 fetching corpus: 700, signal 88382/108047 (executing program) 2022/10/03 01:31:41 fetching corpus: 750, signal 93768/114271 (executing program) 2022/10/03 01:31:41 fetching corpus: 800, signal 96852/118400 (executing program) 2022/10/03 01:31:41 fetching corpus: 850, signal 100818/123241 (executing program) 2022/10/03 01:31:41 fetching corpus: 900, signal 103294/126722 (executing program) 2022/10/03 01:31:41 fetching corpus: 950, signal 105890/130245 (executing program) 2022/10/03 01:31:41 fetching corpus: 1000, signal 108073/133450 (executing program) 2022/10/03 01:31:41 fetching corpus: 1050, signal 109513/135968 (executing program) 2022/10/03 01:31:42 fetching corpus: 1100, signal 110713/138236 (executing program) 2022/10/03 01:31:42 fetching corpus: 1150, signal 112736/141185 (executing program) 2022/10/03 01:31:42 fetching corpus: 1200, signal 114088/143595 (executing program) 2022/10/03 01:31:42 fetching corpus: 1250, signal 115794/146265 (executing program) 2022/10/03 01:31:42 fetching corpus: 1300, signal 117226/148660 (executing program) 2022/10/03 01:31:42 fetching corpus: 1350, signal 118350/150785 (executing program) 2022/10/03 01:31:42 fetching corpus: 1400, signal 120410/153633 (executing program) 2022/10/03 01:31:42 fetching corpus: 1450, signal 122160/156193 (executing program) 2022/10/03 01:31:43 fetching corpus: 1500, signal 124178/158964 (executing program) 2022/10/03 01:31:43 fetching corpus: 1550, signal 126161/161680 (executing program) 2022/10/03 01:31:43 fetching corpus: 1600, signal 127736/164031 (executing program) 2022/10/03 01:31:43 fetching corpus: 1650, signal 130131/166999 (executing program) 2022/10/03 01:31:43 fetching corpus: 1700, signal 132061/169605 (executing program) 2022/10/03 01:31:43 fetching corpus: 1750, signal 132844/171311 (executing program) 2022/10/03 01:31:43 fetching corpus: 1800, signal 134632/173755 (executing program) 2022/10/03 01:31:43 fetching corpus: 1850, signal 136287/176082 (executing program) 2022/10/03 01:31:43 fetching corpus: 1900, signal 137656/178163 (executing program) 2022/10/03 01:31:44 fetching corpus: 1950, signal 140168/181107 (executing program) 2022/10/03 01:31:44 fetching corpus: 2000, signal 141184/182899 (executing program) 2022/10/03 01:31:44 fetching corpus: 2050, signal 142037/184567 (executing program) 2022/10/03 01:31:44 fetching corpus: 2100, signal 143651/186734 (executing program) 2022/10/03 01:31:44 fetching corpus: 2150, signal 145282/188984 (executing program) 2022/10/03 01:31:44 fetching corpus: 2200, signal 146806/191102 (executing program) 2022/10/03 01:31:44 fetching corpus: 2250, signal 148286/193170 (executing program) 2022/10/03 01:31:45 fetching corpus: 2300, signal 149288/194861 (executing program) 2022/10/03 01:31:45 fetching corpus: 2350, signal 150789/196902 (executing program) 2022/10/03 01:31:45 fetching corpus: 2400, signal 151888/198623 (executing program) 2022/10/03 01:31:45 fetching corpus: 2450, signal 153188/200419 (executing program) 2022/10/03 01:31:45 fetching corpus: 2500, signal 154143/201976 (executing program) 2022/10/03 01:31:45 fetching corpus: 2550, signal 155755/203952 (executing program) 2022/10/03 01:31:45 fetching corpus: 2600, signal 156467/205356 (executing program) 2022/10/03 01:31:45 fetching corpus: 2650, signal 157784/207115 (executing program) 2022/10/03 01:31:46 fetching corpus: 2700, signal 158608/208567 (executing program) 2022/10/03 01:31:46 fetching corpus: 2750, signal 159261/209880 (executing program) 2022/10/03 01:31:46 fetching corpus: 2800, signal 160317/211418 (executing program) 2022/10/03 01:31:46 fetching corpus: 2850, signal 161309/212924 (executing program) 2022/10/03 01:31:46 fetching corpus: 2900, signal 162311/214398 (executing program) 2022/10/03 01:31:46 fetching corpus: 2950, signal 163143/215747 (executing program) 2022/10/03 01:31:46 fetching corpus: 3000, signal 164979/217708 (executing program) 2022/10/03 01:31:47 fetching corpus: 3050, signal 166721/219658 (executing program) 2022/10/03 01:31:47 fetching corpus: 3100, signal 167469/220973 (executing program) 2022/10/03 01:31:47 fetching corpus: 3150, signal 168267/222275 (executing program) 2022/10/03 01:31:47 fetching corpus: 3200, signal 168886/223465 (executing program) 2022/10/03 01:31:47 fetching corpus: 3250, signal 169643/224711 (executing program) 2022/10/03 01:31:47 fetching corpus: 3300, signal 170277/225927 (executing program) 2022/10/03 01:31:47 fetching corpus: 3350, signal 170878/227078 (executing program) 2022/10/03 01:31:47 fetching corpus: 3400, signal 172085/228629 (executing program) 2022/10/03 01:31:48 fetching corpus: 3450, signal 173180/230061 (executing program) 2022/10/03 01:31:48 fetching corpus: 3500, signal 174006/231297 (executing program) 2022/10/03 01:31:48 fetching corpus: 3550, signal 174469/232321 (executing program) 2022/10/03 01:31:48 fetching corpus: 3600, signal 175140/233400 (executing program) 2022/10/03 01:31:48 fetching corpus: 3650, signal 175895/234579 (executing program) 2022/10/03 01:31:48 fetching corpus: 3700, signal 176950/235966 (executing program) 2022/10/03 01:31:48 fetching corpus: 3750, signal 177600/237056 (executing program) 2022/10/03 01:31:48 fetching corpus: 3800, signal 178315/238227 (executing program) 2022/10/03 01:31:48 fetching corpus: 3850, signal 179180/239470 (executing program) 2022/10/03 01:31:49 fetching corpus: 3900, signal 180081/240674 (executing program) 2022/10/03 01:31:49 fetching corpus: 3950, signal 180649/241649 (executing program) 2022/10/03 01:31:49 fetching corpus: 4000, signal 181252/242691 (executing program) 2022/10/03 01:31:49 fetching corpus: 4050, signal 181768/243685 (executing program) 2022/10/03 01:31:49 fetching corpus: 4100, signal 182582/244787 (executing program) 2022/10/03 01:31:49 fetching corpus: 4150, signal 183205/245792 (executing program) 2022/10/03 01:31:49 fetching corpus: 4200, signal 183482/246630 (executing program) 2022/10/03 01:31:49 fetching corpus: 4250, signal 184379/247712 (executing program) 2022/10/03 01:31:49 fetching corpus: 4300, signal 185109/248732 (executing program) 2022/10/03 01:31:50 fetching corpus: 4350, signal 185593/249697 (executing program) 2022/10/03 01:31:50 fetching corpus: 4400, signal 186056/250733 (executing program) 2022/10/03 01:31:50 fetching corpus: 4450, signal 186847/251769 (executing program) 2022/10/03 01:31:50 fetching corpus: 4500, signal 187909/252912 (executing program) 2022/10/03 01:31:50 fetching corpus: 4550, signal 188953/254022 (executing program) 2022/10/03 01:31:50 fetching corpus: 4600, signal 190639/255316 (executing program) 2022/10/03 01:31:50 fetching corpus: 4650, signal 191152/256219 (executing program) 2022/10/03 01:31:50 fetching corpus: 4700, signal 191660/257085 (executing program) 2022/10/03 01:31:51 fetching corpus: 4750, signal 192031/257897 (executing program) 2022/10/03 01:31:51 fetching corpus: 4800, signal 192487/258791 (executing program) 2022/10/03 01:31:51 fetching corpus: 4850, signal 193343/259745 (executing program) 2022/10/03 01:31:51 fetching corpus: 4900, signal 193882/260591 (executing program) 2022/10/03 01:31:51 fetching corpus: 4950, signal 194289/261400 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/262214 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/262918 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/263613 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/264308 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/264962 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/265644 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/266341 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/267016 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/267707 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/268340 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/268991 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/269641 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/270326 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/271020 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/271719 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/272381 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/273067 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/273729 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/274407 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/275045 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/275697 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/276416 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/277061 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/277748 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/278431 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/279074 (executing program) 2022/10/03 01:31:51 fetching corpus: 4997, signal 194783/279723 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/280413 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/281098 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/281776 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/282452 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/283136 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/283814 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/284466 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/285122 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/285778 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/286492 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/287174 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/287825 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/288499 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/289169 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/289831 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/290481 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/291129 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/291802 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/292091 (executing program) 2022/10/03 01:31:52 fetching corpus: 4997, signal 194783/292091 (executing program) 2022/10/03 01:31:55 starting 8 fuzzer processes 01:31:55 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x63}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d91742f4d649"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}], @NL80211_ATTR_SSID={0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x80}, 0x1, 0x0, 0x0, 0x4000005}, 0x2004080) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000300)=0x3) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffffff9}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40080c0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=@sha1={0x1, "fafaa69aac7ebe9504b3612cd9757bdc66e13a7e"}, 0x15, 0x1) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000580), 0x434201, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r1, 0x800, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0xf7, 0xa, @device_a, 0x1, "", 0x7f, 0xfbef, @broadcast, 0x3ff}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x400d4) r8 = pidfd_getfd(r3, r6, 0x0) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r9 = open$dir(&(0x7f0000000840)='./file0\x00', 0x432500, 0x19) r10 = dup3(r9, r3, 0x80000) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r4, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4f}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0xa, 0xc5, "b7cfd0058cd2"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd0, r1, 0x101, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0xa}}}}, [@NL80211_ATTR_VENDOR_DATA={0xa7, 0xc5, "6e573f5aacf3353361a97a96f55e6eaab42f34120fec2bc3805675d22e2a684b86bcdccd476c9224630e28e52936249f109f7126d5ca3ff1bad81ecfa71bf508b01a973f77cb98981c8b8666410187a116174f8ff643969c788a9203a709a17690cad5726833d3810c78e8140afbd4cdda1882b935a1a3969476cf0901ba91aea5774c3c64cfe6554cd13c3696bfa5400823808cb07e4051e09a91be96aafd4929f53c"}]}, 0xd0}}, 0x40040) 01:31:55 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x121000) pwrite64(r0, &(0x7f0000000040)="3fe6d30022e678390a4a8bab90dd2a9cec425e38ee788dd4f9f83471fe93de40778839221d1f7746f4f04afc8940d164923c719dd53f15214c02392260b809e957090d48930ebf667c664ecac2e9489532e1f5f7aa3033d619f7f3db8af5127b6d87d6890320ed6d844d34a4eca2c1e4d213a36ccc7601c10533d29ad2f121f5113a6ab785051d4576fcb38d14612a8949cec88e5cd68f7ff73ef383bf27c53237dd244a838dc7f882114967a352ca1358070ec16d6ac0c468dceac454c9c6e8648a8261a36962c6a6", 0xc9, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = signalfd(r0, &(0x7f0000000140)={[0xffffffffffffff00]}, 0x8) r2 = syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000200)="8f906a79782dfb3f26829210a8bfde2682545f5d7fbcee1edfe409a9369b04b1bd103fa1716e4ddd88ef59236b6c66af9ddc2e46a6675b6cf83897bac849f37c14299c2311793cc738b2bbafe61fa088a1a8f1556fbb5646532b48d83de8dd0ac79d596588d5a2fb953222f7e5c5f06b87995dc29013dc32b50bcc39e7c4f5011fdcdb3a169877cf9d7f66b3875e2a3750f93f0fa4ca1b471bc86cec91c822cd659f7030fda4a794d801", 0xaa, 0x80}, {&(0x7f00000002c0)="3e5405af2ffa03a61ea3d567ae4f3be48f50bb7b3d603f8922c7fe6f33b86be3ea0508f19ec8643b555eaddd8c59dbf9c2c7f2ce08624b6a5cc42e6cfa712e403970b047041b8c7f001930248eac2a1cb97ba4455f14b1777d4f5df17bcd4948cd3bdaefc1ea5408d7a460659f4c2d10ad82d17976211fa48ddba82b761b4c4af64f0e4c78ebc8136f46e962291735bed91d95d5ae90da710ad396", 0x9b, 0x100000000}, {&(0x7f0000000380)="8b3dc0e5c0", 0x5, 0xff}], 0x2000, &(0x7f0000000440)={[], [{@fowner_gt={'fowner>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '+/'}}, {@smackfsroot={'smackfsroot', 0x3d, 'c'}}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xaa7ed) r3 = openat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x20200, 0x10, 0x8}, 0x18) r4 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000580)=0x1) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x2000, 0x100) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000680)={{r2}, 0x0, 0x0, @unused=[0xffffffffffffffe1, 0xac5, 0x81, 0x9], @name="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"}) r6 = signalfd(0xffffffffffffffff, &(0x7f0000001680)={[0x764]}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x74, 0x0, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_MARK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x63}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8}]}}]}, 0x74}}, 0x40000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x54, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8401) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000001980)) sendfile(r4, 0xffffffffffffffff, &(0x7f00000019c0)=0x7f, 0x3) 01:31:55 executing program 2: ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x100000000]}, 0x8) fcntl$setsig(r0, 0xa, 0x32) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x105080) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6c040, 0x0) r3 = dup2(r1, r2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/block/sr0', 0x2a2002, 0x20) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0xc855}, 0x40004) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, 0x0, 0x424, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)) write$binfmt_misc(r3, &(0x7f0000000480)={'syz1', "5aa228108710e5dbe949a622a2384072a6f502d92397868010f178425ec093c9da7adbeb9b2f23d955714b"}, 0x2f) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0xd, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f00000005c0)) ioctl$FIONCLEX(r3, 0x5450) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000600)) syz_open_dev$sg(&(0x7f0000000640), 0x4, 0x301000) fsetxattr$security_capability(r0, &(0x7f0000000680), &(0x7f00000006c0)=@v3={0x3000000, [{0x8, 0x6}, {0x5, 0xfffffffb}], 0xee01}, 0x18, 0x1) sendto(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x4040, 0x0, 0x0) 01:31:55 executing program 3: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xaa56f34dcb16fa66}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0xc000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x7800, 0x10, 0x9, 0x7, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x67, 0x0, 0x6c, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_addr={0x44, 0x24, 0xc1, 0x1, 0x5, [{@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x6}, {@remote, 0x1}, {@multicast2, 0x8}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0xffffff85, 0x100, {{0xa, 0x4, 0x1, 0x8, 0x28, 0x65, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @empty, {[@generic={0x88, 0xa, "8d3cb00cebf4a3fe"}, @generic={0x7, 0x8, "21598fb89ac8"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xfc, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1000}, 0x2004c051) r2 = syz_open_dev$vcsn(&(0x7f0000000600), 0x6, 0x109000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl1\x00', r0, 0x29, 0x9, 0x6, 0xff, 0x10, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80, 0x8000, 0x1, 0xbc2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000700)={'gretap0\x00', r3, 0x8, 0x1, 0x7, 0x11e, {{0x1c, 0x4, 0x0, 0x7, 0x70, 0x64, 0x0, 0x9, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp={0x44, 0x20, 0xc0, 0x0, 0x0, [0x7, 0x6, 0x6, 0x1, 0x2, 0x7, 0x1ff]}, @timestamp_addr={0x44, 0x3c, 0x1b, 0x1, 0x5, [{@remote, 0x4}, {@loopback, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x9}, {@multicast1, 0x5cbbd58f}, {@multicast2, 0x5}, {@broadcast, 0x702}, {@multicast2, 0x2}]}]}}}}}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x404c084) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r5, 0xf253297dd5204a4f, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4070) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, r9, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x424a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x44050}, 0x20044000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x88, 0x3, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_LABELS_MASK={0x8, 0x17, [0x8]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xe6b}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x200}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x800]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x7fff, 0xf85, 0x7ff]}, @CTA_STATUS={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x10894) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044088) [ 74.858264] audit: type=1400 audit(1664760715.307:6): avc: denied { execmem } for pid=288 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:31:55 executing program 5: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "c908918e27c9bcff17cbabaece2d76b9d716f93e57a82e9aa47d901bc076c08913cb26ba3cfa21aaea9d2c0d9459c1c756f8721182b5b93ba5e50be606c7f36956cfe7567e2cfe2020ca25d7a39bb3ced424706cf1b034"}, 0x5b) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/105, 0x69}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/224, 0xe0}, {&(0x7f00000013c0)=""/147, 0x93}, {&(0x7f0000001480)=""/43, 0x2b}, {&(0x7f00000014c0)=""/37, 0x25}, {&(0x7f0000001500)=""/166, 0xa6}], 0x8, &(0x7f0000001640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x1, 0x140, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x13}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000) r5 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000001800)) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000001840)) accept$packet(r1, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000018c0)=0x14) r6 = accept(r2, 0x0, &(0x7f0000001900)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001980), r2) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r7, 0x2, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24040004) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000001a80)) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001ac0)={'\x00', {0x2, 0x0, @initdev}}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001b00)) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r6, {r8}}, './file0\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000001bc0)={0x3, &(0x7f0000001b80)=[{0x30c, 0x58, 0x9, 0x3}, {0x1f, 0x3f, 0xc2, 0x9}, {0x9107, 0x3, 0x3f, 0xc}]}, 0x10) 01:31:55 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x5, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c084}, 0x1) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9534}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xc768}]}, 0x48}, 0x1, 0x0, 0x0, 0xa168d6a7ae25f047}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x5f, 0x20, 0x3}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x185800, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000340)=""/164) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1e0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x98d7}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x1b}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0xffe0}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xf8c}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xbe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffff7f}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1456}, {0x8}}]}, 0x1e0}}, 0x24044094) r5 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) signalfd(r5, &(0x7f0000000700)={[0x1000]}, 0x8) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x200800, 0x0, 0x14}, 0x18) fsetxattr$trusted_overlay_origin(r6, &(0x7f00000007c0), &(0x7f0000000800), 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) openat$cgroup_freezer_state(r7, &(0x7f0000000880), 0x2, 0x0) shutdown(r4, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000008c0)=0x4) openat(r6, &(0x7f0000000900)='./file0\x00', 0x200100, 0x120) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000940)=0x5, 0x4) 01:31:55 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x2d}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe6}]}, 0x38}}, 0x15) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000180)={0x1034, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xda1, 0x4a}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x1034}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xd8, r0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x69}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x6b}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xec}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x42}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7fff}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xe}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x80}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x24}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x65}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x9}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xfe01}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xbb}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5d}]}, 0xd8}, 0x1, 0x0, 0x0, 0x844}, 0x8c) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x28}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001540), 0x2c8400, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r0, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001780)={'syztnl1\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x4, 0x1e, 0x31, 0x80000001, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x80, 0x6, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000017c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001940)={'gretap0\x00', &(0x7f0000001880)={'syztnl0\x00', 0x0, 0x7, 0x80, 0xeef5, 0x84c, {{0x21, 0x4, 0x0, 0x5, 0x84, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @remote, {[@end, @timestamp={0x44, 0x8, 0x9a, 0x0, 0xd, [0x3f]}, @generic={0x89, 0x6, "2e5c9346"}, @timestamp_prespec={0x44, 0x34, 0xcc, 0x3, 0x5, [{@broadcast, 0x40}, {@broadcast, 0xcee}, {@local, 0x9}, {@private=0xa010101, 0x7fffffff}, {@remote, 0x7fff80}, {@loopback, 0x3}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x6, 0x2}, {0x1, 0x6, "54c59d4d"}, {0x5, 0xf, "82b5ab69191e77438c9569421a"}]}, @cipso={0x86, 0xe, 0x3, [{0x2, 0x8, "1313173c7816"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000004040)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000004280)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004240)={&(0x7f0000004080)={0x188, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4004}, 0xc004) syz_genetlink_get_family_id$SEG6(&(0x7f00000042c0), r2) clock_gettime(0x0, &(0x7f0000006dc0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000004300)=""/189, 0xbd}, {&(0x7f00000043c0)=""/70, 0x46}, {&(0x7f0000004440)=""/47, 0x2f}, {&(0x7f0000004480)=""/40, 0x28}, {&(0x7f00000044c0)=""/189, 0xbd}, {&(0x7f0000004580)=""/246, 0xf6}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/4096, 0x1000}], 0x8, &(0x7f0000005740)=""/148, 0x94}, 0x80000001}, {{&(0x7f0000005800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x80, &(0x7f0000005880), 0x0, &(0x7f00000058c0)=""/86, 0x56}, 0x8001}, {{&(0x7f0000005940)=@nl=@proc, 0x80, &(0x7f0000005a40)=[{&(0x7f00000059c0)=""/93, 0x5d}], 0x1, &(0x7f0000005a80)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000006a80)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000006b00)=""/229, 0xe5}], 0x1, &(0x7f0000006c40)=""/100, 0x64}, 0x80000000}], 0x4, 0x40, &(0x7f0000006e00)={r8, r9+60000000}) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000006e40), 0x600101, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r10, 0x89fa, &(0x7f0000006f00)={'syztnl1\x00', &(0x7f0000006e80)={'syztnl0\x00', r4, 0x29, 0x80, 0x48, 0xcfe00, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0xf800, 0x40, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000007040)={'syztnl0\x00', &(0x7f0000007000)={'syztnl2\x00', 0x0, 0x7800, 0x8007, 0xfffffff8, 0x4, {{0x7, 0x4, 0x1, 0x25, 0x1c, 0x64, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0x86, [@rand_addr=0x64010101]}]}}}}}) 01:31:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x10000) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/130, 0x82}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)}], 0x6, &(0x7f00000013c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}, 0x20000100) recvmmsg$unix(r3, &(0x7f0000002bc0)=[{{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000002800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/123, 0x7b}, {&(0x7f0000002540)=""/81, 0x51}, {&(0x7f00000025c0)=""/176, 0xb0}, {&(0x7f0000002680)=""/168, 0xa8}, {&(0x7f0000002740)=""/26, 0x1a}, {&(0x7f0000002780)=""/116, 0x74}], 0x7, &(0x7f0000002880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000028c0), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002940)=""/1, 0x1}, {&(0x7f0000002980)=""/55, 0x37}, {&(0x7f00000029c0)=""/181, 0xb5}, {&(0x7f0000002a80)=""/61, 0x3d}], 0x4, &(0x7f0000002b00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x2, 0x100, &(0x7f0000002c40)) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000002c80)) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002d00), r6) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002d40)={0xf8, r8, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x71c}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x275}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x41eaa2b3}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x33, 0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002f40), r5) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f0000003680)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003640)={&(0x7f0000002f80)={0x698, r10, 0x400, 0x7f, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ebd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e78}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x368, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd1, 0x3, "665195339636fce400fe4fc985254f33f6069fc8f6ae71935beac2d22ffdb3f13be6ede72bff9ef17b0327550e6c41d719bc09ef2184f98318b2c75b1ca81eea738bcaeaf7f6a59c4c75b8ce9a0e3ffc949265bf0f7654dc91669687d1d8f8e3ed8a0a3b38c08db5d98fa685c774739b8c0c07fe16b485b9e4e3a98dafdb592b975d7dedd750558a1941d2577d215cfc283f3569990809903064170d73fb1ffed2c557c873fbbb35013aea2147aeeb135678db0655d63d9451245c672e5f0390e0ba804b032afd0eb10c3d2297"}, @TIPC_NLA_NODE_ID={0x38, 0x3, "b2df568fc07db131af70b36e4ae5284030b1a3409bc35b828c8e0f13fd961aaa81a1c5c89371239fd025bc29ce1fbd94ee704074"}, @TIPC_NLA_NODE_ID={0x7b, 0x3, "5c3692de817ba56fa626313637713a4ce57b8880434385a03be795f3e31fb4880638505632b1339c0dc564e4fe0b1cbe085e1f1e8f5414536e011407972b85b90f9dacb4b6b0577f94d79e19ed25bb28ffb947d90b187f80fcf398fac4076b1cfcfb2dc6182ce3adc6d34547dbe85ab6694d35bd21764d"}, @TIPC_NLA_NODE_ID={0x26, 0x3, "3e7527a93fe845d14591941cff6e2ede4b95a601dcbfeb6e90046a633a12caf71317"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ed8822841525eb24a18e50ef6a2abe57aa7a296d74c6"}}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "1d543ff8b616155807d60d6ba549d0c076e59d3565666e6f2c749a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x27, 0x3, "21af77c8ebb04c38e45213240f2dc60b7f921cacfe3c45663b58aee607728edfd827e9"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff696}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffad}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2d, 0x3, "1c9e47d88ca48202a0e6d7616b6be21c7c508d5ac53531791ad19290bb8679ef59edb4aeaf0f0fa303"}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa1, 0x3, "65a8b09c4e558befff25175ff545db6406d3e080a61cca386abbf3486823663bd15fd9d33909a3d5e45d2dd67c6acfad9c6e573a907fcd9ce1eb1796ebe6b8d4af95c185d7fc17611de64ae7fe72bffcca026fb1308e927be9389f5be79d996b2a6a1377af0b0b8b9e122552dcff30defd9bea0035b7c5898b72e2c040d4229dffea70c6722408f3a274fe97f1c9d63d96d66bb00cf658b5996502fc77"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "3014a02823f55671e968160a33f0605d676ed0066cf816a0de7401ab7667"}}, @TIPC_NLA_NODE_ID={0x6a, 0x3, "df03a00b25aaeac49289b77c2409078194fbb947511aa2e285921d395b4d478521006b510c4a1062413f593cad45cf05650f69527219266885e04018f102cf1e26e54cece39f66e27f2993cfc87e39814bd3658d0155f4ea648fa4784990263548c0f191526a"}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x225e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x622}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x698}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount$cgroup(0x0, &(0x7f00000036c0)='./file0\x00', &(0x7f0000003700), 0x2002, &(0x7f0000003740)={[{@subsystem='perf_event'}, {@name={'name', 0x3d, '\\.:'}}, {@clone_children}, {@cpuset_v2_mode}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@xattr}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@clone_children}], [{@smackfsroot={'smackfsroot', 0x3d, 'ovf\x00'}}]}) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000003800), 0x4000, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r11, &(0x7f0000003f40)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003880)={0x658, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa9, 0x80, [@ibss={0x6, 0x2, 0x3f}, @tim={0x5, 0x80, {0x40, 0xc9, 0x4, "0b9f72ffe172b73c1af577f7e22e517da08af12f834e3a6c79d9c2be819a7ef48853b3506dc81768e4dd7b154b61dc20890c0a62f89cb94dc82f6799ce9ae66c5c2be16e64b3c38264da3fa74bd47f906e66bd03ef59ed55275e2234c47775a94b532a97d8f6dad82d54b2e4e64b8a6b5611f09aef85e6e297276fe2d5"}}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x3}, @gcr_ga={0xbd, 0x6}, @supported_rates={0x1, 0x7, [{0x36, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0xb}, {0x1b, 0x1}, {0x36, 0x1}]}, @challenge={0x10, 0x1, 0x6c}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@supported_rates={0x1, 0x6, [{0x4, 0x1}, {0xc, 0x1}, {0x16}, {0x6c, 0x1}, {0x2}, {0x24}]}]}, @NL80211_ATTR_BEACON_HEAD={0x1e5, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_b, @broadcast, @random="785be0abf53d", {0x9, 0xff}}, @ver_80211n={0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x3, @random=0x8001, 0x200, @val={0x0, 0x1b, @random="9df71ad16cf4e812e303d282eafe3ca37c77d2e067bede57ad9fbb"}, @val={0x1, 0x4, [{0x1b, 0x1}, {0x1}, {0x4}, {0x1, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x4}, @void, @val={0x25, 0x3, {0x1, 0xb3, 0x7}}, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x4, 0x0, {0x100, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x2}, 0x400, 0x5, 0x81}}, @void, @void, @void, [{0xdd, 0xb8, "667c4a101812ecd389c18a6fadb933ac897e5364c75546e37e3edfe96f27c9279554f77adf85f63040795637c320d0ad642b7ddee186a1a418b7e055cd643fd091a1d129efbafccadebd251e275be1213d260325336591a15fab333a1cb998220fd8a3b34fcb71a2d9127afbbd9071e77a0f327d616ef9fd75ea70cbb25c68adac5327638e2bd12882513c778d0db0e83066facfb5d6b454ad7698267b8eb2a57d9e490a0375919e40ca03c61f499df674987cb389a54e66"}, {0xdd, 0xb5, "aa82f61484c441bd3b7067c815339f7b97b62e997d4f3cd6faf2a87f4021a8140401db47684ff15816f5c5c56a5e9258be22f14983cca55a82d58e4d83456375e3e4a9c910cda5f82760bc390310859a90a98e23f238a454205b5dea6a31ffb7d8acaec61aca25aaf9bc6cf60d7a73f6d6dd50db51a5836d123c30df6686a95025a6e2b9346bb0ed321afc478affeb16c50d94d8b7a9e477618c4f3357ab8ab36290ec90f3bfdb9a229a38384f01912b5a011279e1"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x1d, 0x7f, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x41}}, @cf={0x4, 0x6, {0x8, 0x8, 0x1, 0x1}}, @supported_rates={0x1, 0x2, [{0x1b}, {0x24}]}, @supported_rates={0x1, 0x2, [{0x5}, {0x18, 0x1}]}]}, @NL80211_ATTR_BEACON_HEAD={0x272, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x20}, @broadcast, @broadcast, @random="4ef366bc9599", {0xf, 0x2}}, @ver_80211n={0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x5, @default, 0x8038, @val, @void, @void, @val={0x4, 0x6, {0x20, 0x7, 0x20, 0x1}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x300, 0x2, 0x2, 0x0, {0x6, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3}, 0x800, 0x8001, 0x7f}}, @void, @void, @val={0x76, 0x6, {0xe7, 0xf5, 0x13, 0xffe1}}, [{0xdd, 0x42, "07dc8318b366db6d8dfa4789d55fed8b5ea8c3cd6903a4cc43a292908b13be9040107fd7a04c4543622712c5bae2d0011c82d43684e59d34f17c14f4101787cf8c5f"}, {0xdd, 0x32, "c23a8f16ea68e070f8138bb13051bd6c362c388be4891450ed5ee354bbd00ea60fe2de633e1b0cfcce6eee962a85b758ec5d"}, {0xdd, 0xc0, "a385cfc7ab947eb99a80778492a1338c148a5fa003fd702005a96a5a8f687d6e9a5fd72f63ebb60a1cf8d47738ccb2420f050ba204a541d96fe4bb28b69d5558c0073b954c0b883f2f7093b751d04815112b842584839a41f53c4859e98694c65ff4f607dc9259b8a28768a7d9f9db6f48c7c3ac7b760ba1cfcd22748d66f7e3b4aaf2e23c94bfc59609c3e73b918a4bd5131d919faaf5147f16b46d5ff6c68a32579f9471d98957f065ca7cf74e3272fb4fbaeb871d4118514c5cd562dcf380"}, {0xdd, 0xd9, "9e6cbcbeb5c392ec5586e3d108eb4a3e26bb3f56fa90cdae918cf318644f6004e6231cd3e7e427c8ba2a93f4217df4539f0cc54d275a420c8122189811043917938b5e6a0f8c780b0a1033d64fce2bbf1b0ea77d827db3f1f6cdd812eb9c5064e641aeb49ce3adb2b0aecf9c71632ad34f521f04ec047d149810513ec682707eecbebc3323540a658661c6d3c7ea57d36a8d5c55e310d148007e2cf79f5ab4e7f695b9727e9fbbf4f82d73a99211402489125cfbeffc2d2f419a406dbee0b29319ecc3b9965be40adf4ece6fb7e782262d66e2e678bd33e397"}]}}, @NL80211_ATTR_FTM_RESPONDER={0xfc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb, 0x3, "b8d6056546eaf9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc7, 0x3, "c7c51476781b5f927109e1999fa8f38b160ea893b0f611ecaa247edf1f36727f1423993e1c9dc1e9d3e425d8a3c31cd912433489ff1aed5fed24bff17282c496b54e2b6c866d3687b2080812304cd5ccfffa8f51c48540aad7be1ce894a8e13f46105ea93f01afea43de4347ea9b07db6926762b85e3c37bcb0c497871f2df05594fe4dfe93ab32585b3173133a7dbd5fbaa8cf676739059d37f3fecdb55e7b9dbacf6c3a24059764cb91e7fff0c15f0638855dba2b2b80c29ba55eaf406d977270a16"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1b, 0x2, "e8d0a4670e4d827cc4ec5598be2e9c297b170cc17da327"}]}]}, 0x658}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000891) recvmsg$unix(r4, &(0x7f0000004480)={&(0x7f0000004040), 0x6e, &(0x7f0000004300)=[{&(0x7f00000040c0)=""/157, 0x9d}, {&(0x7f0000004180)=""/119, 0x77}, {&(0x7f0000004200)=""/247, 0xf7}], 0x3, &(0x7f0000004340)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x21) perf_event_open(&(0x7f0000003fc0)={0x3, 0x80, 0x8, 0x48, 0x3, 0xa7, 0x0, 0x0, 0x4010, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000003f80), 0x7}, 0x11020, 0x7, 0x7, 0x7, 0x80000001, 0x5, 0x5, 0x0, 0x8, 0x0, 0x5}, r12, 0xa, 0xffffffffffffffff, 0x9) r13 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000044c0)={{0x1, 0x1, 0x18, r13, @in_args={0x4}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000006a840)={0x0, [], 0x9, "55856287329afd"}) [ 76.108070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.111380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.113080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.122344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.125706] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.127368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.133822] Bluetooth: hci0: HCI_REQ-0x0c1a [ 76.158507] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.160412] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.164446] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.174689] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.177573] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.179635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.186306] Bluetooth: hci1: HCI_REQ-0x0c1a [ 76.233555] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.235640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.237938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.239255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.241577] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.243388] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.245360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.249688] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.253007] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.254730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.256003] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.261087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.265217] Bluetooth: hci3: HCI_REQ-0x0c1a [ 76.266256] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.281245] Bluetooth: hci2: HCI_REQ-0x0c1a [ 76.301464] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.302543] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.304654] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.306602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.310417] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.313411] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.315035] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.315124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.318155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.320201] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.327086] Bluetooth: hci4: HCI_REQ-0x0c1a [ 76.368989] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.385015] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.389160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.399900] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 76.401546] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 76.424180] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 76.425518] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.427905] Bluetooth: hci6: HCI_REQ-0x0c1a [ 76.438888] Bluetooth: hci5: HCI_REQ-0x0c1a [ 78.196407] Bluetooth: hci1: command 0x0409 tx timeout [ 78.197153] Bluetooth: hci0: command 0x0409 tx timeout [ 78.323890] Bluetooth: hci2: command 0x0409 tx timeout [ 78.324555] Bluetooth: hci3: command 0x0409 tx timeout [ 78.387856] Bluetooth: hci4: command 0x0409 tx timeout [ 78.388187] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 78.515835] Bluetooth: hci5: command 0x0409 tx timeout [ 78.515859] Bluetooth: hci6: command 0x0409 tx timeout [ 80.244896] Bluetooth: hci0: command 0x041b tx timeout [ 80.244915] Bluetooth: hci1: command 0x041b tx timeout [ 80.372811] Bluetooth: hci3: command 0x041b tx timeout [ 80.373284] Bluetooth: hci2: command 0x041b tx timeout [ 80.435835] Bluetooth: hci4: command 0x041b tx timeout [ 80.563809] Bluetooth: hci5: command 0x041b tx timeout [ 80.564833] Bluetooth: hci6: command 0x041b tx timeout [ 81.282408] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.286561] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.296547] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.303480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.344610] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.349349] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.353944] Bluetooth: hci7: HCI_REQ-0x0c1a [ 82.291836] Bluetooth: hci0: command 0x040f tx timeout [ 82.292873] Bluetooth: hci1: command 0x040f tx timeout [ 82.419849] Bluetooth: hci2: command 0x040f tx timeout [ 82.420322] Bluetooth: hci3: command 0x040f tx timeout [ 82.483886] Bluetooth: hci4: command 0x040f tx timeout [ 82.612856] Bluetooth: hci6: command 0x040f tx timeout [ 82.613337] Bluetooth: hci5: command 0x040f tx timeout [ 83.444822] Bluetooth: hci7: command 0x0409 tx timeout [ 84.339856] Bluetooth: hci1: command 0x0419 tx timeout [ 84.340308] Bluetooth: hci0: command 0x0419 tx timeout [ 84.468799] Bluetooth: hci3: command 0x0419 tx timeout [ 84.469245] Bluetooth: hci2: command 0x0419 tx timeout [ 84.532841] Bluetooth: hci4: command 0x0419 tx timeout [ 84.660884] Bluetooth: hci5: command 0x0419 tx timeout [ 84.661365] Bluetooth: hci6: command 0x0419 tx timeout [ 85.492783] Bluetooth: hci7: command 0x041b tx timeout [ 87.540848] Bluetooth: hci7: command 0x040f tx timeout [ 89.587834] Bluetooth: hci7: command 0x0419 tx timeout 01:32:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x800, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000ff0300000000000000000000000000000000004020000000"]) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') close_range(r2, 0xffffffffffffffff, 0x0) io_uring_setup(0x5a63, &(0x7f0000000180)={0x0, 0x736f, 0x10, 0x1, 0x202, 0x0, r2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) creat(&(0x7f0000000240)='./file1\x00', 0x54) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) [ 132.227936] loop5: detected capacity change from 0 to 40 [ 132.355214] audit: type=1400 audit(1664760772.803:7): avc: denied { open } for pid=3688 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.357151] audit: type=1400 audit(1664760772.804:8): avc: denied { kernel } for pid=3688 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.374364] ------------[ cut here ]------------ [ 132.374387] [ 132.374390] ====================================================== [ 132.374395] WARNING: possible circular locking dependency detected [ 132.374399] 6.0.0-rc7-next-20220930 #1 Not tainted [ 132.374407] ------------------------------------------------------ [ 132.374411] syz-executor.5/3690 is trying to acquire lock: [ 132.374418] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 132.374464] [ 132.374464] but task is already holding lock: [ 132.374468] ffff88800d4e2020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 132.374500] [ 132.374500] which lock already depends on the new lock. [ 132.374500] [ 132.374504] [ 132.374504] the existing dependency chain (in reverse order) is: [ 132.374507] [ 132.374507] -> #3 (&ctx->lock){....}-{2:2}: [ 132.374524] _raw_spin_lock+0x2a/0x40 [ 132.374538] __perf_event_task_sched_out+0x53b/0x18d0 [ 132.374552] __schedule+0xedd/0x2470 [ 132.374569] schedule+0xda/0x1b0 [ 132.374586] futex_wait_queue+0xf5/0x1e0 [ 132.374601] futex_wait+0x28e/0x690 [ 132.374613] do_futex+0x2ff/0x380 [ 132.374625] __x64_sys_futex+0x1c6/0x4d0 [ 132.374638] do_syscall_64+0x3b/0x90 [ 132.374659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.374675] [ 132.374675] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 132.374699] _raw_spin_lock_nested+0x30/0x40 [ 132.374712] raw_spin_rq_lock_nested+0x1e/0x30 [ 132.374728] task_fork_fair+0x63/0x4d0 [ 132.374752] sched_cgroup_fork+0x3d0/0x540 [ 132.374769] copy_process+0x4183/0x6e20 [ 132.374782] kernel_clone+0xe7/0x890 [ 132.374794] user_mode_thread+0xad/0xf0 [ 132.374807] rest_init+0x24/0x250 [ 132.374821] arch_call_rest_init+0xf/0x14 [ 132.374842] start_kernel+0x4c6/0x4eb [ 132.374861] secondary_startup_64_no_verify+0xe0/0xeb [ 132.374878] [ 132.374878] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 132.374895] _raw_spin_lock_irqsave+0x39/0x60 [ 132.374908] try_to_wake_up+0xab/0x1930 [ 132.374924] up+0x75/0xb0 [ 132.374942] __up_console_sem+0x6e/0x80 [ 132.374961] console_unlock+0x46a/0x590 [ 132.374981] vprintk_emit+0x1bd/0x560 [ 132.375001] vprintk+0x84/0xa0 [ 132.375020] _printk+0xba/0xf1 [ 132.375034] kauditd_hold_skb.cold+0x3f/0x4e [ 132.375055] kauditd_send_queue+0x233/0x290 [ 132.375073] kauditd_thread+0x5f9/0x9c0 [ 132.375091] kthread+0x2ed/0x3a0 [ 132.375112] ret_from_fork+0x22/0x30 [ 132.375127] [ 132.375127] -> #0 ((console_sem).lock){....}-{2:2}: [ 132.375144] __lock_acquire+0x2a02/0x5e70 [ 132.375164] lock_acquire+0x1a2/0x530 [ 132.375184] _raw_spin_lock_irqsave+0x39/0x60 [ 132.375197] down_trylock+0xe/0x70 [ 132.375215] __down_trylock_console_sem+0x3b/0xd0 [ 132.375235] vprintk_emit+0x16b/0x560 [ 132.375255] vprintk+0x84/0xa0 [ 132.375275] _printk+0xba/0xf1 [ 132.375288] report_bug.cold+0x72/0xab [ 132.375308] handle_bug+0x3c/0x70 [ 132.375328] exc_invalid_op+0x14/0x50 [ 132.375349] asm_exc_invalid_op+0x16/0x20 [ 132.375364] group_sched_out.part.0+0x2c7/0x460 [ 132.375386] ctx_sched_out+0x8f1/0xc10 [ 132.375406] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.375420] __schedule+0xedd/0x2470 [ 132.375437] schedule+0xda/0x1b0 [ 132.375453] futex_wait_queue+0xf5/0x1e0 [ 132.375466] futex_wait+0x28e/0x690 [ 132.375479] do_futex+0x2ff/0x380 [ 132.375491] __x64_sys_futex+0x1c6/0x4d0 [ 132.375503] do_syscall_64+0x3b/0x90 [ 132.375524] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.375539] [ 132.375539] other info that might help us debug this: [ 132.375539] [ 132.375543] Chain exists of: [ 132.375543] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 132.375543] [ 132.375561] Possible unsafe locking scenario: [ 132.375561] [ 132.375564] CPU0 CPU1 [ 132.375567] ---- ---- [ 132.375569] lock(&ctx->lock); [ 132.375576] lock(&rq->__lock); [ 132.375584] lock(&ctx->lock); [ 132.375592] lock((console_sem).lock); [ 132.375599] [ 132.375599] *** DEADLOCK *** [ 132.375599] [ 132.375601] 2 locks held by syz-executor.5/3690: [ 132.375609] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 132.375646] #1: ffff88800d4e2020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 132.375679] [ 132.375679] stack backtrace: [ 132.375682] CPU: 1 PID: 3690 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 132.375697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.375707] Call Trace: [ 132.375711] [ 132.375716] dump_stack_lvl+0x8b/0xb3 [ 132.375739] check_noncircular+0x263/0x2e0 [ 132.375760] ? format_decode+0x26c/0xb50 [ 132.375779] ? print_circular_bug+0x450/0x450 [ 132.375801] ? simple_strtoul+0x30/0x30 [ 132.375821] ? format_decode+0x26c/0xb50 [ 132.375842] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 132.375864] __lock_acquire+0x2a02/0x5e70 [ 132.375891] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 132.375919] lock_acquire+0x1a2/0x530 [ 132.375940] ? down_trylock+0xe/0x70 [ 132.375961] ? lock_release+0x750/0x750 [ 132.375986] ? vprintk+0x84/0xa0 [ 132.376009] _raw_spin_lock_irqsave+0x39/0x60 [ 132.376023] ? down_trylock+0xe/0x70 [ 132.376043] down_trylock+0xe/0x70 [ 132.376063] ? vprintk+0x84/0xa0 [ 132.376084] __down_trylock_console_sem+0x3b/0xd0 [ 132.376105] vprintk_emit+0x16b/0x560 [ 132.376129] vprintk+0x84/0xa0 [ 132.376150] _printk+0xba/0xf1 [ 132.376165] ? record_print_text.cold+0x16/0x16 [ 132.376185] ? report_bug.cold+0x66/0xab [ 132.376207] ? group_sched_out.part.0+0x2c7/0x460 [ 132.376230] report_bug.cold+0x72/0xab [ 132.376253] handle_bug+0x3c/0x70 [ 132.376275] exc_invalid_op+0x14/0x50 [ 132.376298] asm_exc_invalid_op+0x16/0x20 [ 132.376314] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 132.376339] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 132.376353] RSP: 0018:ffff888019e3f8f8 EFLAGS: 00010006 [ 132.376364] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.376373] RDX: ffff888019d95040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 132.376383] RBP: ffff88803fb98000 R08: 0000000000000005 R09: 0000000000000001 [ 132.376392] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800d4e2000 [ 132.376401] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 132.376415] ? group_sched_out.part.0+0x2c7/0x460 [ 132.376440] ? group_sched_out.part.0+0x2c7/0x460 [ 132.376465] ctx_sched_out+0x8f1/0xc10 [ 132.376489] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.376507] ? lock_is_held_type+0xd7/0x130 [ 132.376524] ? __perf_cgroup_move+0x160/0x160 [ 132.376537] ? set_next_entity+0x304/0x550 [ 132.376562] ? lock_is_held_type+0xd7/0x130 [ 132.376580] __schedule+0xedd/0x2470 [ 132.376601] ? io_schedule_timeout+0x150/0x150 [ 132.376623] ? futex_wait_setup+0x166/0x230 [ 132.376641] schedule+0xda/0x1b0 [ 132.376659] futex_wait_queue+0xf5/0x1e0 [ 132.376675] futex_wait+0x28e/0x690 [ 132.376690] ? futex_wait_setup+0x230/0x230 [ 132.376707] ? wake_up_q+0x8b/0xf0 [ 132.376723] ? do_raw_spin_unlock+0x4f/0x220 [ 132.376747] ? futex_wake+0x158/0x490 [ 132.376768] ? fd_install+0x1f9/0x640 [ 132.376787] do_futex+0x2ff/0x380 [ 132.376801] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 132.376821] __x64_sys_futex+0x1c6/0x4d0 [ 132.376837] ? __x64_sys_futex_time32+0x480/0x480 [ 132.376853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.376870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.376889] do_syscall_64+0x3b/0x90 [ 132.376911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.376928] RIP: 0033:0x7f4b18753b19 [ 132.376938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.376952] RSP: 002b:00007f4b15cc9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.376965] RAX: ffffffffffffffda RBX: 00007f4b18866f68 RCX: 00007f4b18753b19 [ 132.376975] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b18866f68 [ 132.376983] RBP: 00007f4b18866f60 R08: 0000000000000000 R09: 0000000000000000 [ 132.376992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18866f6c [ 132.377001] R13: 00007fff1928597f R14: 00007f4b15cc9300 R15: 0000000000022000 [ 132.377017] [ 132.446761] hrtimer: interrupt took 27131 ns [ 132.447165] WARNING: CPU: 1 PID: 3690 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 132.451494] Modules linked in: [ 132.451779] CPU: 1 PID: 3690 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 132.452492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.453456] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 132.453949] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 132.455542] RSP: 0018:ffff888019e3f8f8 EFLAGS: 00010006 [ 132.456012] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.456639] RDX: ffff888019d95040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 132.457266] RBP: ffff88803fb98000 R08: 0000000000000005 R09: 0000000000000001 [ 132.457892] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800d4e2000 [ 132.458515] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 132.459166] FS: 00007f4b15cc9700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 132.459870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.460383] CR2: 00007fd360afa1f0 CR3: 000000003ed54000 CR4: 0000000000350ee0 [ 132.461011] Call Trace: [ 132.461239] [ 132.461445] ctx_sched_out+0x8f1/0xc10 [ 132.461797] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.462260] ? lock_is_held_type+0xd7/0x130 [ 132.462642] ? __perf_cgroup_move+0x160/0x160 [ 132.463048] ? set_next_entity+0x304/0x550 [ 132.463436] ? lock_is_held_type+0xd7/0x130 [ 132.463819] __schedule+0xedd/0x2470 [ 132.464159] ? io_schedule_timeout+0x150/0x150 [ 132.464566] ? futex_wait_setup+0x166/0x230 [ 132.464953] schedule+0xda/0x1b0 [ 132.465262] futex_wait_queue+0xf5/0x1e0 [ 132.465627] futex_wait+0x28e/0x690 [ 132.465954] ? futex_wait_setup+0x230/0x230 [ 132.466336] ? wake_up_q+0x8b/0xf0 [ 132.466651] ? do_raw_spin_unlock+0x4f/0x220 [ 132.467058] ? futex_wake+0x158/0x490 [ 132.467400] ? fd_install+0x1f9/0x640 [ 132.467740] do_futex+0x2ff/0x380 [ 132.468047] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 132.468553] __x64_sys_futex+0x1c6/0x4d0 [ 132.468912] ? __x64_sys_futex_time32+0x480/0x480 [ 132.469336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.469789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.470239] do_syscall_64+0x3b/0x90 [ 132.470581] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.471058] RIP: 0033:0x7f4b18753b19 [ 132.471393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.473041] RSP: 002b:00007f4b15cc9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.473705] RAX: ffffffffffffffda RBX: 00007f4b18866f68 RCX: 00007f4b18753b19 [ 132.474325] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b18866f68 [ 132.474949] RBP: 00007f4b18866f60 R08: 0000000000000000 R09: 0000000000000000 [ 132.475560] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18866f6c [ 132.476170] R13: 00007fff1928597f R14: 00007f4b15cc9300 R15: 0000000000022000 [ 132.476796] [ 132.477004] irq event stamp: 4452 [ 132.477303] hardirqs last enabled at (4451): [] syscall_enter_from_user_mode+0x1d/0x50 [ 132.478124] hardirqs last disabled at (4452): [] __schedule+0x1225/0x2470 [ 132.478863] softirqs last enabled at (4288): [] __irq_exit_rcu+0x11b/0x180 [ 132.479605] softirqs last disabled at (4261): [] __irq_exit_rcu+0x11b/0x180 [ 132.480349] ---[ end trace 0000000000000000 ]--- 01:32:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000b00)={[0x3ff]}, 0x8, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x2, 0xf7, 0x1f, 0x0, 0x7fffffff, 0x80000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x6030, 0x10be7b21, 0x3ff, 0x5, 0xbc8, 0x5, 0x7, 0x0, 0xffffffff, 0x0, 0x7fff}, r0, 0x3, r1, 0x4) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) r2 = syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r2, &(0x7f0000000540)={{0x10b, 0x80, 0x1, 0x380, 0x27d, 0x1, 0x1cd, 0x39f6}, "d130c4f232a886e5b28ff1391a08808fd9c6a11b9c78e297d6f7c54d76d6100aad7208761f15ff0fb7bc57bd16f6ecac769e767384ab42fb1c98d63d08a6956c0da279ebd6709e8216a497887fa1436970d012b741f0393c025e3f7e1a93df09c57039fdb6ac7304a1708b5d8fab64f24cb1e055bc93effb7074455c3fd237d1593dc6e2f3d0754412cb", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5aa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:32:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801002000400000000000000000008000292fe711f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e202020202020202020201000ace670325132510000e67032510300000000002e2e2020202020202020201000ace670325132510000e670325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000ace670325132510000e670325104001a040000", 0x80, 0x1000}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1200}, {&(0x7f0000010b00)="73797a6b616c6c65727300000000000015000000000000aa0000000080000000", 0x20, 0x1800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x3e00}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6086cded91663ee22129eff6e2bc0568a228eeaec62b1b7410fff9c35b06549a4f352d7fe8043f619498b7ad263caa5f0be28de65406afcdf04b8d4b8fb62f34c1eb8db97bad402cd16616aad2e41dda1c8b0f924a4a2eed20e96569b5fd436d48fc604811cd69e4707682370df9324fab75350e1dd215dd19d90660c7e880fcce874781e877b65563680874fe6fd1953439fe803ff21b68c4abb7a9b98500c911aa2c71ebc8e22ef738aad3d470b90f9220b2d45cddd80038d1b3f1c1ee84529f0b4fc26a1f92f602e2e310ee873d"]) [ 132.970409] loop2: detected capacity change from 0 to 128 [ 132.985940] FAT-fs (loop2): Unrecognized mount option "`†Íí‘f>â!)ïöâ¼h¢(î®Æ+tÿùÃ[TšO5-è?a”˜·­&<ª_ âæT¯ÍðKK¶/4Áë¹{­@" or missing value [ 133.028627] loop2: detected capacity change from 0 to 128 [ 133.029425] FAT-fs (loop2): Unrecognized mount option "`†Íí‘f>â!)ïöâ¼h¢(î®Æ+tÿùÃ[TšO5-è?a”˜·­&<ª_ âæT¯ÍðKK¶/4Áë¹{­@" or missing value 01:32:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80000001) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x28e4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') close_range(r3, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x2582, 0x80) 01:32:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000b00)={[0x3ff]}, 0x8, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x2, 0xf7, 0x1f, 0x0, 0x7fffffff, 0x80000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x6030, 0x10be7b21, 0x3ff, 0x5, 0xbc8, 0x5, 0x7, 0x0, 0xffffffff, 0x0, 0x7fff}, r0, 0x3, r1, 0x4) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) r2 = syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r2, &(0x7f0000000540)={{0x10b, 0x80, 0x1, 0x380, 0x27d, 0x1, 0x1cd, 0x39f6}, "d130c4f232a886e5b28ff1391a08808fd9c6a11b9c78e297d6f7c54d76d6100aad7208761f15ff0fb7bc57bd16f6ecac769e767384ab42fb1c98d63d08a6956c0da279ebd6709e8216a497887fa1436970d012b741f0393c025e3f7e1a93df09c57039fdb6ac7304a1708b5d8fab64f24cb1e055bc93effb7074455c3fd237d1593dc6e2f3d0754412cb", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5aa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:32:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80000001) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x28e4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') close_range(r3, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x2582, 0x80) 01:32:54 executing program 2: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x3000)=nil, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(r0, &(0x7f0000ff6000/0x4000)=nil, 0x7000) shmget(0x0, 0x1000, 0x4, &(0x7f0000ffa000/0x1000)=nil) shmat(r0, &(0x7f0000fe9000/0x3000)=nil, 0xeb64bf0ffddbc32) 01:32:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x41, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x1eb, 0xd1dc}}, '.\x00'}) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r5, 0x7d1b, 0xffffffffffffff80, 0x9, 0x2}) [ 137.356583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.357803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.358983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.361264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.364000] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.367941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.371451] Bluetooth: hci1: HCI_REQ-0x0c1a [ 137.463148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.464200] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.465102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.466520] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.467620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.468430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.471858] Bluetooth: hci2: HCI_REQ-0x0c1a [ 137.500039] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.502555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.503381] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.518445] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.519498] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 137.521006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.524900] Bluetooth: hci4: HCI_REQ-0x0c1a [ 137.526072] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.568189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.569548] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.587183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.588727] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.594895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.603523] Bluetooth: hci5: HCI_REQ-0x0c1a [ 139.379870] Bluetooth: hci1: command 0x0409 tx timeout [ 139.507797] Bluetooth: hci2: command 0x0409 tx timeout [ 139.572098] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 139.572620] Bluetooth: hci4: command 0x0409 tx timeout [ 139.635785] Bluetooth: hci5: command 0x0409 tx timeout [ 141.428778] Bluetooth: hci1: command 0x041b tx timeout [ 141.555859] Bluetooth: hci2: command 0x041b tx timeout [ 141.620806] Bluetooth: hci4: command 0x041b tx timeout [ 141.684849] Bluetooth: hci5: command 0x041b tx timeout VM DIAGNOSIS: 01:32:53 Registers: info registers vcpu 0 RAX=ffffed1003031e9c RBX=1ffff11003031e9c RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888008b6e5b8 RBP=0000000000000001 RSP=ffff88801818f4d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff888008b6e5b8 R15=0000000000000000 RIP=ffffffff812a23d9 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005644129a3080 CR3=000000003ce5c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000003e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888019e3f340 R8 =0000000000000001 R9 =000000000000000a R10=000000000000003e R11=0000000000000001 R12=000000000000003e R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4b15cc9700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd360afa1f0 CR3=000000003ed54000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000