Warning: Permanently added '[localhost]:26361' (ECDSA) to the list of known hosts. 2022/10/03 06:18:34 fuzzer started 2022/10/03 06:18:35 dialing manager at localhost:35095 syzkaller login: [ 36.227711] cgroup: Unknown subsys name 'net' [ 36.314506] cgroup: Unknown subsys name 'rlimit' 2022/10/03 06:18:48 syscalls: 2215 2022/10/03 06:18:48 code coverage: enabled 2022/10/03 06:18:48 comparison tracing: enabled 2022/10/03 06:18:48 extra coverage: enabled 2022/10/03 06:18:48 setuid sandbox: enabled 2022/10/03 06:18:48 namespace sandbox: enabled 2022/10/03 06:18:48 Android sandbox: enabled 2022/10/03 06:18:48 fault injection: enabled 2022/10/03 06:18:48 leak checking: enabled 2022/10/03 06:18:48 net packet injection: enabled 2022/10/03 06:18:48 net device setup: enabled 2022/10/03 06:18:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 06:18:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 06:18:48 USB emulation: enabled 2022/10/03 06:18:48 hci packet injection: enabled 2022/10/03 06:18:48 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 06:18:48 802.15.4 emulation: enabled 2022/10/03 06:18:48 fetching corpus: 50, signal 27851/29658 (executing program) 2022/10/03 06:18:48 fetching corpus: 100, signal 35141/38657 (executing program) 2022/10/03 06:18:48 fetching corpus: 150, signal 40713/45853 (executing program) 2022/10/03 06:18:48 fetching corpus: 200, signal 48363/55009 (executing program) 2022/10/03 06:18:49 fetching corpus: 250, signal 54854/62977 (executing program) 2022/10/03 06:18:49 fetching corpus: 300, signal 60452/69981 (executing program) 2022/10/03 06:18:49 fetching corpus: 350, signal 65931/76825 (executing program) 2022/10/03 06:18:49 fetching corpus: 400, signal 71453/83583 (executing program) 2022/10/03 06:18:49 fetching corpus: 450, signal 74374/87825 (executing program) 2022/10/03 06:18:49 fetching corpus: 500, signal 77526/92253 (executing program) 2022/10/03 06:18:49 fetching corpus: 550, signal 80218/96241 (executing program) 2022/10/03 06:18:49 fetching corpus: 600, signal 82898/100182 (executing program) 2022/10/03 06:18:49 fetching corpus: 650, signal 84955/103490 (executing program) 2022/10/03 06:18:50 fetching corpus: 700, signal 89360/108959 (executing program) 2022/10/03 06:18:50 fetching corpus: 750, signal 93653/114175 (executing program) 2022/10/03 06:18:50 fetching corpus: 800, signal 97271/118762 (executing program) 2022/10/03 06:18:50 fetching corpus: 850, signal 101451/123832 (executing program) 2022/10/03 06:18:50 fetching corpus: 900, signal 103364/126807 (executing program) 2022/10/03 06:18:50 fetching corpus: 950, signal 106950/131265 (executing program) 2022/10/03 06:18:50 fetching corpus: 1000, signal 107732/133182 (executing program) 2022/10/03 06:18:50 fetching corpus: 1050, signal 110272/136680 (executing program) 2022/10/03 06:18:51 fetching corpus: 1100, signal 111346/138870 (executing program) 2022/10/03 06:18:51 fetching corpus: 1150, signal 112968/141484 (executing program) 2022/10/03 06:18:51 fetching corpus: 1200, signal 114513/144082 (executing program) 2022/10/03 06:18:51 fetching corpus: 1250, signal 116192/146733 (executing program) 2022/10/03 06:18:51 fetching corpus: 1300, signal 117566/149120 (executing program) 2022/10/03 06:18:51 fetching corpus: 1350, signal 118658/151254 (executing program) 2022/10/03 06:18:51 fetching corpus: 1400, signal 120662/154073 (executing program) 2022/10/03 06:18:51 fetching corpus: 1450, signal 122426/156678 (executing program) 2022/10/03 06:18:51 fetching corpus: 1500, signal 124239/159302 (executing program) 2022/10/03 06:18:52 fetching corpus: 1550, signal 126379/162155 (executing program) 2022/10/03 06:18:52 fetching corpus: 1600, signal 127736/164376 (executing program) 2022/10/03 06:18:52 fetching corpus: 1650, signal 129616/166955 (executing program) 2022/10/03 06:18:52 fetching corpus: 1700, signal 131611/169577 (executing program) 2022/10/03 06:18:52 fetching corpus: 1750, signal 133307/171986 (executing program) 2022/10/03 06:18:52 fetching corpus: 1800, signal 134948/174310 (executing program) 2022/10/03 06:18:52 fetching corpus: 1850, signal 136705/176750 (executing program) 2022/10/03 06:18:52 fetching corpus: 1900, signal 137410/178317 (executing program) 2022/10/03 06:18:53 fetching corpus: 1950, signal 139322/180818 (executing program) 2022/10/03 06:18:53 fetching corpus: 2000, signal 141433/183432 (executing program) 2022/10/03 06:18:53 fetching corpus: 2050, signal 142551/185363 (executing program) 2022/10/03 06:18:53 fetching corpus: 2100, signal 143861/187332 (executing program) 2022/10/03 06:18:53 fetching corpus: 2150, signal 145595/189562 (executing program) 2022/10/03 06:18:53 fetching corpus: 2200, signal 146906/191587 (executing program) 2022/10/03 06:18:53 fetching corpus: 2250, signal 148571/193770 (executing program) 2022/10/03 06:18:53 fetching corpus: 2300, signal 149442/195358 (executing program) 2022/10/03 06:18:54 fetching corpus: 2350, signal 150866/197302 (executing program) 2022/10/03 06:18:54 fetching corpus: 2400, signal 152203/199138 (executing program) 2022/10/03 06:18:54 fetching corpus: 2450, signal 153135/200758 (executing program) 2022/10/03 06:18:54 fetching corpus: 2500, signal 154416/202580 (executing program) 2022/10/03 06:18:54 fetching corpus: 2550, signal 155883/204526 (executing program) 2022/10/03 06:18:54 fetching corpus: 2600, signal 156898/206135 (executing program) 2022/10/03 06:18:54 fetching corpus: 2650, signal 157604/207489 (executing program) 2022/10/03 06:18:54 fetching corpus: 2700, signal 158584/209028 (executing program) 2022/10/03 06:18:55 fetching corpus: 2750, signal 159578/210614 (executing program) 2022/10/03 06:18:55 fetching corpus: 2800, signal 160579/212168 (executing program) 2022/10/03 06:18:55 fetching corpus: 2850, signal 161232/213468 (executing program) 2022/10/03 06:18:55 fetching corpus: 2900, signal 162327/215070 (executing program) 2022/10/03 06:18:55 fetching corpus: 2950, signal 163321/216611 (executing program) 2022/10/03 06:18:55 fetching corpus: 3000, signal 164516/218279 (executing program) 2022/10/03 06:18:55 fetching corpus: 3050, signal 165837/219981 (executing program) 2022/10/03 06:18:55 fetching corpus: 3100, signal 167608/221952 (executing program) 2022/10/03 06:18:56 fetching corpus: 3150, signal 168598/223397 (executing program) 2022/10/03 06:18:56 fetching corpus: 3200, signal 169260/224661 (executing program) 2022/10/03 06:18:56 fetching corpus: 3250, signal 169946/225885 (executing program) 2022/10/03 06:18:56 fetching corpus: 3300, signal 170571/227053 (executing program) 2022/10/03 06:18:56 fetching corpus: 3350, signal 171144/228221 (executing program) 2022/10/03 06:18:56 fetching corpus: 3400, signal 172222/229682 (executing program) 2022/10/03 06:18:56 fetching corpus: 3450, signal 173052/230977 (executing program) 2022/10/03 06:18:56 fetching corpus: 3500, signal 174256/232467 (executing program) 2022/10/03 06:18:56 fetching corpus: 3550, signal 174697/233529 (executing program) 2022/10/03 06:18:56 fetching corpus: 3600, signal 175289/234646 (executing program) 2022/10/03 06:18:57 fetching corpus: 3650, signal 176073/235849 (executing program) 2022/10/03 06:18:57 fetching corpus: 3700, signal 177006/237113 (executing program) 2022/10/03 06:18:57 fetching corpus: 3750, signal 177936/238435 (executing program) 2022/10/03 06:18:57 fetching corpus: 3800, signal 178640/239586 (executing program) 2022/10/03 06:18:57 fetching corpus: 3850, signal 179272/240708 (executing program) 2022/10/03 06:18:57 fetching corpus: 3900, signal 180400/242017 (executing program) 2022/10/03 06:18:57 fetching corpus: 3950, signal 180781/242990 (executing program) 2022/10/03 06:18:57 fetching corpus: 4000, signal 181370/244091 (executing program) 2022/10/03 06:18:57 fetching corpus: 4050, signal 181940/245166 (executing program) 2022/10/03 06:18:58 fetching corpus: 4100, signal 182829/246348 (executing program) 2022/10/03 06:18:58 fetching corpus: 4150, signal 183471/247422 (executing program) 2022/10/03 06:18:58 fetching corpus: 4200, signal 183763/248345 (executing program) 2022/10/03 06:18:58 fetching corpus: 4250, signal 184211/249336 (executing program) 2022/10/03 06:18:58 fetching corpus: 4300, signal 185316/250551 (executing program) 2022/10/03 06:18:58 fetching corpus: 4350, signal 185873/251584 (executing program) 2022/10/03 06:18:58 fetching corpus: 4400, signal 186304/252557 (executing program) 2022/10/03 06:18:58 fetching corpus: 4450, signal 186817/253529 (executing program) 2022/10/03 06:18:58 fetching corpus: 4500, signal 187698/254594 (executing program) 2022/10/03 06:18:59 fetching corpus: 4550, signal 188919/255828 (executing program) 2022/10/03 06:18:59 fetching corpus: 4600, signal 190796/257317 (executing program) 2022/10/03 06:18:59 fetching corpus: 4650, signal 191384/258254 (executing program) 2022/10/03 06:18:59 fetching corpus: 4700, signal 191754/259085 (executing program) 2022/10/03 06:18:59 fetching corpus: 4750, signal 192246/259983 (executing program) 2022/10/03 06:18:59 fetching corpus: 4800, signal 192655/260845 (executing program) 2022/10/03 06:18:59 fetching corpus: 4850, signal 193417/261808 (executing program) 2022/10/03 06:18:59 fetching corpus: 4900, signal 194106/262722 (executing program) 2022/10/03 06:19:00 fetching corpus: 4950, signal 194389/263510 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/264312 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/265041 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/265755 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/266403 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/267071 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/267753 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/268454 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/269123 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/269778 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/270464 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/271153 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/271871 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/272577 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/273280 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/273957 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/274622 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/275311 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/275978 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/276694 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/277369 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/278031 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/278706 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/279426 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/280092 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/280791 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/281499 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/282215 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/282882 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/283596 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/284282 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/284981 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/285686 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/286340 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/287042 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/287749 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/288435 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/289162 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/289839 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/290546 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/291240 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/291968 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/292676 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/293397 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/294119 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/294834 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/295488 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/296190 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/296758 (executing program) 2022/10/03 06:19:00 fetching corpus: 4997, signal 194783/296758 (executing program) 2022/10/03 06:19:03 starting 8 fuzzer processes 06:19:03 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044040) r1 = syz_io_uring_setup(0x3536, &(0x7f0000000240)={0x0, 0xcc22, 0x2, 0x3, 0x36d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x6, 0x1000, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x3) accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x10c, 0x0, 0x30, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r0}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c800) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6_vti0\x00', r0, 0x0, 0x1, 0xbb, 0x6, 0x10, @local, @local, 0x7, 0x20, 0xea, 0xef}}) faccessat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x40) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x13, r1, 0x10000000) syz_io_uring_submit(r2, r6, &(0x7f0000000840)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x9, 0x800, 0x1, 0x4, 0x1d, 0x0, {0x2}}, 0x7) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000880)={@ipv4={'\x00', '\xff\xff', @local}, 0x2, r4}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) r8 = accept(0xffffffffffffffff, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000980)=0x80) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000009c0)={0x0, @broadcast, @local}, &(0x7f0000000a00)=0xc) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x308, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x64}}, 0x40000) connect$inet6(r7, &(0x7f0000000b80)={0xa, 0x4e24, 0xdda, @empty, 0x658f}, 0x1c) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000bc0)) accept$unix(r8, &(0x7f0000000dc0), &(0x7f0000000e40)=0x6e) 06:19:03 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xe30653054f0cbdbe}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)={0x3d0, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x17, 0x9}}}}, [@NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x3}, {0x5, 0x5}, {0x5, 0x5}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x9}, {0x4, 0x1}, {0x2, 0x4}, {0x7, 0x7}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x8}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x4}, {0x6}, {0x0, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x7}, {0x6, 0x2}, {0x3, 0x2}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0xa}, {0x7, 0x3}, {0x1}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x1}, {0x7, 0x9}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x1}, {0x4, 0x9}, {0x1, 0x4}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0x2}, {0x0, 0xa}, {0x3}, {0x2, 0x5}, {0x6, 0x7}, {0x6, 0x1}, {0x3, 0x5}, {0x3, 0x2}, {0x4, 0x7}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7}, {0x2, 0x1}, {0x6, 0x5}, {0x4, 0x2}, {0x1, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0xa}, {0x0, 0x8}, {}, {0x5, 0x2}, {0x4, 0x6}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0x9}, {0x7, 0x5}, {0x2}, {0x4, 0x6}, {0x1, 0x6}, {0x2, 0x6}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0x7}, {0x2, 0x9}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x1}, {0x3, 0x2}, {0x1, 0x3}, {}, {0x6, 0x8}, {0x5, 0x6}, {0x6, 0x3}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x2}, {}, {0x5, 0x5}, {0x5, 0x9}, {0x0, 0x7}, {0x5}, {0x3, 0x7}, {0x3, 0x6}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x4, 0x48, 0x60, 0x30, 0x60, 0x30, 0x18, 0x36, 0x36, 0x12, 0x6, 0x60, 0x36, 0x6c, 0x16, 0xc, 0x5, 0x1, 0x24]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7f, 0x3, 0x5, 0x8001, 0x4, 0x7, 0x7965]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x28, 0x1, 0x1b, 0x48]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0xc, 0x60, 0x1b, 0x18, 0x12, 0x9, 0x2, 0x9]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x3, 0x4, 0x24, 0xa, 0x2, 0x6c, 0x6, 0x0, 0x16, 0x4, 0x60, 0x6, 0x12, 0x18, 0x60, 0x16, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xe8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x1b, 0xb, 0x6c, 0x12, 0x18, 0x30, 0x9331b456bdd64a35, 0x1, 0x2, 0x6c, 0x4, 0x24, 0x18, 0xc, 0xb, 0x12, 0x6c, 0x1b, 0x4, 0x5, 0x12, 0x3, 0x1, 0xc, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x53c5, 0x1, 0x6, 0xfbff, 0x7ff, 0x401, 0x6, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xdb910258d8a77866, 0x6c, 0x18, 0x6, 0x24, 0x48, 0x9, 0x1b, 0x69, 0x4, 0xc, 0x6, 0x1b, 0x12, 0x0, 0x24, 0x18, 0x12, 0x18, 0x24, 0x36]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x2}, {0x7, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x1, 0x2}, {0x3, 0x3}, {0x5}, {0x2, 0x6}, {0x1, 0x9}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {}, {0x3, 0xa}, {0x3, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x3}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x9}, {0x7, 0x7}, {0x2}, {0x4, 0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x9}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0xa}, {0x5, 0x7}, {0x6, 0x1}, {0x2, 0x3}, {0x5, 0x6}, {0x0, 0x8}, {0x2}, {0x7, 0x9}, {0x4, 0x8}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0x9}, {0x3, 0x9}, {0x5, 0x1}, {0x4, 0x9}, {0x2, 0x2}, {0x7, 0x4}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0x7}, {0x6, 0x2}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x30, 0x1, 0x36, 0x17b6e9cc5af8582, 0x9, 0x3, 0x6c, 0x6, 0x18, 0x51, 0x1b, 0x24, 0x2, 0x9, 0x30, 0x16, 0x9, 0x5, 0xb, 0x16, 0x60, 0xb, 0x16, 0x60, 0x60, 0x6c, 0x36, 0x60, 0x5, 0x48, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x3, 0x7, 0x5, 0x1, 0x4, 0xdf3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x1, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7fff, 0x2, 0x4, 0x5, 0x6c, 0x4, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x3}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x5, 0x7}, {0x2, 0x6}, {0x7, 0x4}, {0x0, 0x4}, {0x7, 0x2}, {0x6, 0x3}, {}, {0x5, 0xa}, {0x7, 0xa}, {0x6, 0x1}, {0x2}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x7}, {0x5, 0x8}, {0x7, 0xa}, {0x6, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0x5}, {0x6, 0xa}, {0x2, 0x3}, {0x3, 0x3}, {0x6, 0xa}, {0x7, 0xa}, {0x1, 0x2}, {0x5}, {0x1, 0x7}, {0x3, 0x7}, {0x2}, {0x6, 0x9}, {0x7, 0x1}, {0x2, 0xa}, {0x4}, {0x2}, {0x2}, {0x4, 0x8}, {0x2, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0xa}, {0x4}, {0x5, 0x4}, {0x7}, {0x1, 0x3}, {0x2, 0x2}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x5}, {0x7, 0x8}, {0x5, 0x9}, {0x2, 0x5}, {}, {0x2, 0x7}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0xa}, {0x3, 0x4}, {0x4, 0xa}, {0x6, 0x2}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2aea, 0x1, 0x1, 0x0, 0x800, 0x0, 0xb66, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0x60, 0x5d, 0x2, 0x4, 0x12, 0x1, 0x5, 0x30, 0x34, 0x4, 0x6c, 0x12, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xae, 0x72, 0x0, 0x4, 0x7ff, 0x0, 0x4, 0xa2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x2, 0xfd8c, 0x7, 0x2395, 0x1ff, 0x5, 0x100]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x2, 0xfd, 0xff81, 0x3, 0x8, 0x8, 0x4a4a]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x6}, {0x3, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0xa}, {0x7, 0xa}, {0x1, 0x2}, {0x2, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x5, 0x2}, {0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x7, 0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x5, 0x1}, {0x1, 0x3}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x3}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x1c}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x2}, {0x4}, {0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x2}, {0x4, 0x9}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x9}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {0x5, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x7}, {0x4, 0x3}, {0x0, 0x2}, {0x7, 0x5}, {0x2, 0x1}, {0x7, 0x7}, {0x5, 0x9}, {0x7}, {0x7, 0x3}, {0x2, 0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x36, 0x30, 0x3, 0x5, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x3ff, 0x7, 0x1f, 0x9, 0x9, 0xfff]}}]}]}]}, 0x3d0}}, 0x14) r3 = signalfd(r1, &(0x7f00000006c0)={[0x8eba]}, 0x8) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000700)=""/4096) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x94, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4841}, 0x4000) r5 = syz_mount_image$iso9660(&(0x7f00000018c0), &(0x7f0000001900)='./file0\x00', 0x1f, 0x5, &(0x7f0000001c40)=[{&(0x7f0000001940)="47bf20b1439d41519f34c641ed38a202dcc05104a9af9f55ca22690e50692cc573135de06cefc4e77a0f25cef19dbc6c759fed8d530874a787b32f99929a9841291639b8e041cec1559fcfeb53b445b9f64a9073130c557adf7455ed94ff477c10ee02b0d1cc8f642d41c4e16899da799ce67a62be100733f213a17ab0ec5d114bad1b0cdaeb75210c1c51f3ae170d1a17e0aaa8d04f294e541c0363f9b37f9a91a8a225562106d70df6529af23c667c525fcf6298248e43b9a406a6", 0xbc, 0x9}, {&(0x7f0000001a00)="f7379673e8ac447844ee1b503f8994b5741bd9493542b6dcfdaf3bbb95d7ce12553b0ace320ba475133a918341ed20ad92143758554ef3705171af1aa968b1839e7d35cf3add61478a3eb191c50dea0c75046695478ea9009cd9684f53cbaac083be3b87bf2e6b2bde6dc4fb956352c7ed1ccce05e2c41a047d0d0d17584923e9a17ad2bf8666fdfc2bbdfa76dec3061a4d88c7e1e7cd7ec703fff153921633fbb7729d678be18417f351f0be037aac9a9bbbbb5", 0xb4, 0x49}, {&(0x7f0000001ac0)="a1648572dafbb7b70c0f084047859a32e403bac289de5728b095b1bce545ef8de802caa62cb841b5327de6cbb8b53675a3bbb303421bbef9f1a08efa3ddd8fecee473f288dcbf37b01f27e7c4b5e9e243c508e97ad5ec5ebc85d30d89a90e3498e0c99b8c31facdc1635f24133e6eeb8875c715e01f3003ae6945fabeb4bd431a2b12949b53431985a603904c2815f3e2386ad2d12a83ef5837e67a509a74323e6c9a540148d65d8d97a4acf5f6143528798e4805cd69c14283398923a984b955887f7d0df4194a365ad9dddea73025b2aaaa611e0056febfda88f17d1f09c", 0xdf, 0x6}, {&(0x7f0000001bc0)="de1e534318daa9e201f2fa7267e86b177fa09a272792e962e57f", 0x1a, 0x6e57}, {&(0x7f0000001c00)="a1c75d32737e8ff1d97a4fa23f6b3ba89bdae0c6c4491dbc9b04589facc7808105702afee6d77875deb38233202a876b7acaff314764a56c84", 0x39, 0x3294}], 0x79da3a17e991653b, &(0x7f0000001cc0)={[{@session={'session', 0x3d, 0x1c}}, {@hide}, {@map_off}], [{@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, 'wlan1\x00'}}, {@pcr={'pcr', 0x3d, 0x1d}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@appraise_type}, {@euid_gt}, {@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'wlan1\x00'}}]}) name_to_handle_at(r5, &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)=@reiserfs_3={0xc, 0x3, {0x5, 0x4, 0x56}}, &(0x7f0000001e40), 0x400) statx(r5, &(0x7f0000001ec0)='./file0\x00', 0x3000, 0xe61, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fchownat(r1, &(0x7f0000001e80)='./file0/file0\x00', r6, r8, 0x1000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x74, r0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b4f1c10486"}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f7f89059db84f8f04c0bf598e3"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1ae647d94b2f67bad53624df34"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "2c28233b142dc4e3"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002280)={'ip6gre0\x00', &(0x7f0000002200)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0xfa, 0x9, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x8000, 0xf800, 0xa0, 0x8000}}) r9 = syz_open_dev$loop(&(0x7f0000002340), 0x4, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000002380)={{0x1, 0x1, 0x18, r1, {r6, r7}}, './file0/file0\x00'}) mount$9p_fd(0x0, &(0x7f00000022c0)='./file0\x00', &(0x7f0000002300), 0x20801, &(0x7f00000023c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@posixacl}, {@afid={'afid', 0x3d, 0x101}}, {@version_9p2000}, {@privport}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@uid_eq={'uid', 0x3d, r10}}]}}) 06:19:03 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x40, 0xb0080) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='}!#&}@!}[&)),\xc1}\x00'], &(0x7f0000000380)=[&(0x7f0000000100)='\'\\{/\x00', &(0x7f0000000140)='%+{\x00', &(0x7f0000000180)='/(}\x00', &(0x7f00000001c0)='+,$\'@!.\\\x00', &(0x7f0000000200)='*+\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='!\x00', &(0x7f0000000300)='[!-.,\x00', &(0x7f0000000340)='&]}.\x00'], 0x800) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000400)={0x1, 0x200, 0x0, 0x400, 0x6, 0x1}) r1 = syz_io_uring_complete(0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000440)) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000480)={0x100000001, 0x3f00000000000, 0x0, 0x1, 0x4, [{0x4f82, 0xd9e1, 0x2}, {0x0, 0xffffffff, 0x4, '\x00', 0x288}, {0x81, 0x1, 0x6, '\x00', 0x3000}, {0xfffffffffffffff7, 0x8, 0xa7bc}]}) r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0xfdd918b, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = fsmount(r2, 0x1, 0x2) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb2ae, 0x46}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x8480) execveat(r3, &(0x7f0000000900)='./file0\x00', &(0x7f0000000980)=[&(0x7f0000000940)='^-]/\x00'], &(0x7f0000000a40)=[&(0x7f00000009c0)='\x00', &(0x7f0000000a00)='*+\x00'], 0x1000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000a80)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ac0)='net/nf_conntrack\x00') fcntl$getown(r2, 0x9) mknodat$null(r1, &(0x7f0000000b00)='./file0\x00', 0x40, 0x103) execveat(r0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000bc0)=[&(0x7f0000000b80)=']\x00'], &(0x7f0000000d40)=[&(0x7f0000000c00)='[!-.,\x00', &(0x7f0000000c40)='!/@${(\x00', &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)='-:${&+@\xe4{)\x00', &(0x7f0000000d00)='-,}\x00'], 0x100) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d80)={'wlan1\x00'}) syz_open_dev$hiddev(&(0x7f0000000dc0), 0x200, 0x480) renameat(r0, &(0x7f0000000e00)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000e80)='./file0\x00') 06:19:03 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) write$binfmt_aout(r1, &(0x7f0000000080)={{0x107, 0x12, 0x2, 0x3d6, 0x37f, 0x0, 0x349}, "7d44f7c06846d62b51aa694b500c6ad4e8445b696c7dde6fba349f87d0e43e04d99ff7c4d8c8d9fbecd7ff950d5a7d89da888191e936d92a378ffd0d091312aa6f4bb9d6a592f5a8803c71f2871d3737a42b093b10c51a5b56a5415dffa5466c65b3b5717ebda3a0b3f060be188329bdfc43d16303690ad40e295a96e89080ca5d743e23c23a28095aeeb741d603c7f5617b64d1dc6299306bf071aad7a8fa87747a730f20b32680df321d24a656de30d92fb9bf9135596a13c830039bf8f980b5264df886bbf4a02994185b884822dcda5cfa54de84f50b698463d69dcad90529290dbf9c3f9480", ['\x00']}, 0x208) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x40, 0x20, 0x5, 0xffff, {{0xc, 0x4, 0x3, 0x21, 0x30, 0x67, 0x0, 0x21, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x68, [@rand_addr=0x64010100]}, @end, @noop, @timestamp={0x44, 0x10, 0x49, 0x0, 0x1, [0x1ff, 0x101, 0x10000]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000380)={'tunl0\x00', r2, 0x20, 0x700, 0x1200, 0x720f, {{0xb, 0x4, 0x1, 0x9, 0x2c, 0x66, 0x0, 0x3, 0x4, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xa, 0x3, 0x9, [{@local, 0x1}, {@empty, 0x3}]}]}}}}}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000440)={0x400, 0x20, 0x3}) r4 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'gretap0\x00', r3, 0x7f00, 0x80, 0x785d, 0x5, {{0xc, 0x4, 0x2, 0xa, 0x30, 0x64, 0x0, 0xc6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x2f, 0x0, 0x0, [0x8, 0x10001, 0x8001, 0x6, 0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', r3, 0x29, 0x3f, 0x1, 0x3, 0xb, @loopback, @private1, 0x1, 0x0, 0x86, 0x4}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x20008041) renameat(r0, &(0x7f0000000700)='./file0\x00', r4, &(0x7f0000000740)='./file0\x00') r6 = openat$incfs(r0, &(0x7f0000000780)='.log\x00', 0x1, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000880)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', r2, 0x708, 0x40, 0xc5, 0x1, {{0x1e, 0x4, 0x2, 0xc, 0x78, 0x67, 0x0, 0x1, 0x4, 0x0, @private=0xa010101, @private=0xa010101, {[@ra={0x94, 0x4}, @generic={0x94, 0x12, "7f2b33fe747cb2d63eb863c6f4b62b2f"}, @noop, @rr={0x7, 0xf, 0x64, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}, @lsrr={0x83, 0x17, 0x4f, [@multicast1, @rand_addr=0x64010102, @empty, @private=0xa010100, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x11, 0x1, 0x7, [{@local, 0xa5}]}, @lsrr={0x83, 0x17, 0xd, [@loopback, @rand_addr=0xff, @multicast1, @empty, @rand_addr=0x64010101]}]}}}}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/module/rfkill', 0xc0000, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0xf891, 0x40, 0x3, 0xfffffffe, {{0x9, 0x4, 0x3, 0x9, 0x24, 0x64, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @multicast2, {[@lsrr={0x83, 0x7, 0x74, [@dev={0xac, 0x14, 0x14, 0x13}]}, @lsrr={0x83, 0x7, 0x1c, [@private=0xa010102]}]}}}}}) preadv(r7, &(0x7f0000001dc0)=[{&(0x7f00000009c0)=""/252, 0xfc}, {&(0x7f0000000ac0)=""/177, 0xb1}, {&(0x7f0000000b80)=""/9, 0x9}, {&(0x7f0000000bc0)=""/214, 0xd6}, {&(0x7f0000000cc0)=""/246, 0xf6}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x6, 0x3, 0x8) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001f80)={'gretap0\x00', &(0x7f0000001e40)={'syztnl1\x00', 0x0, 0x700, 0x700, 0xfffffffe, 0xfffffffc, {{0x48, 0x4, 0x3, 0x9, 0x120, 0x65, 0x0, 0x5f, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2, {[@end, @rr={0x7, 0x7, 0x7f, [@rand_addr=0x64010100]}, @rr={0x7, 0x23, 0xd7, [@dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @dev={0xac, 0x14, 0x14, 0x26}]}, @rr={0x7, 0x2b, 0xa5, [@dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010102, @remote, @private=0xa010101, @private=0xa010100, @private=0xa010102, @multicast2, @private=0xa010102, @rand_addr=0x64010101, @multicast1]}, @cipso={0x86, 0x51, 0x1, [{0x7, 0x11, "5b386d9b32fb647659cba9a5ee27cb"}, {0x1, 0x10, "390232d80be9dfe769eea980f2c5"}, {0x1, 0xa, "43d61f76a9481d19"}, {0x6, 0xd, "b79102354f80f2a12e87d3"}, {0x7, 0x11, "73f400a4d4387ca7e9e7930033495b"}, {0x7, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x1a, 0x1, 0x1, [{@loopback}]}, @rr={0x7, 0x17, 0xb9, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @loopback, @loopback]}, @timestamp_addr={0x44, 0x24, 0xc2, 0x1, 0x2, [{@remote, 0x7ff}, {@rand_addr=0x64010102, 0xfffeffff}, {@multicast2, 0x1}, {@broadcast, 0x5}]}, @generic={0x1c, 0x5, "a6867b"}, @timestamp={0x44, 0x18, 0x9a, 0x0, 0x9, [0xffffffff, 0x66, 0x7fffffff, 0x100, 0x1ff]}]}}}}}) fremovexattr(r1, &(0x7f0000001fc0)=@random={'user.', '#(\xa8:\x00'}) 06:19:03 executing program 4: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x5, 0x7, 0x7f, 0xf83, 0x3ff, 0xfffffe00}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x7, 0x4, 0x2, 0x9, 0x1f, 0xffffff81}) capset(&(0x7f0000000100)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000140)={0xffffffff, 0x5, 0x401, 0x3, 0x7, 0x6}) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x8, 0x100, 0x4, 0x800, 0x43, 0x7fffffff}) capset(&(0x7f0000000200)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000240)={0x95, 0x80000000, 0x0, 0x6, 0xde, 0x16400000}) capset(&(0x7f0000000280)={0x19980330, 0xffffffffffffffff}, &(0x7f00000002c0)={0x3ff, 0x3, 0x7f, 0x6, 0xcb, 0x7fffffff}) r0 = fcntl$getown(0xffffffffffffffff, 0x9) capset(&(0x7f0000000300)={0x20071026, r0}, &(0x7f0000000340)={0x2, 0x0, 0x8, 0x3, 0x7, 0x5}) capget(&(0x7f0000000380)={0x20071026}, &(0x7f00000003c0)={0x2, 0x7, 0xfffffffd, 0x81, 0x20df, 0x5}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)=0x0) capset(&(0x7f0000000440)={0x19980330, r1}, &(0x7f0000000480)={0x8001, 0x23b0, 0x3, 0x7ff, 0x80000001, 0x3f}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f00000004c0)) capset(&(0x7f0000000500)={0x20071026, r0}, &(0x7f0000000540)={0x9, 0xb1, 0x1, 0x8, 0x4, 0x8}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000005c0)={0x2, 0x1c, 0x2}) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x9, 0x40, 0x5, 0x9, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x567, 0x1, @perf_bp={&(0x7f0000000600), 0x1}, 0x834c, 0x7, 0x7, 0x3, 0x40, 0x800, 0x7f, 0x0, 0x0, 0x0, 0x2000000000000}, r0, 0x9, r3, 0xa) r5 = getpgrp(r1) capset(&(0x7f00000006c0)={0x20080522, r5}, &(0x7f0000000700)={0x0, 0x5, 0x1, 0x0, 0xf1b7, 0x7}) perf_event_open(&(0x7f0000000740)={0x4, 0x80, 0x0, 0x5, 0x5, 0x5e, 0x0, 0x4, 0x1, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x10000}, 0x44a1, 0x20000000000000, 0x9, 0x7, 0x4, 0x6, 0xff, 0x0, 0x80000001}, 0xffffffffffffffff, 0xf, r4, 0x2) 06:19:03 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x60}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4604d2574886c077) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)=@acquire={0x330, 0x17, 0x2, 0x70bd25, 0x25dfdbfe, {{@in=@loopback, 0x4d2, 0x33}, @in=@remote, {@in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x9, 0x4e21, 0x5, 0xa, 0x0, 0x0, 0x29, 0x0, 0xee00}, {{@in6=@private1, @in6=@loopback, 0x4e20, 0xfd47, 0x4e24, 0x3, 0xa, 0xa0, 0x0, 0x32, 0x0, 0xee01}, {0x400, 0x7, 0x7, 0x5, 0x4, 0xa30, 0x20, 0x200}, {0x6a8, 0xfffffffffffffffc, 0x1, 0x4}, 0x80, 0x6e6bbf, 0x2, 0x0, 0x1, 0x3}, 0x8, 0x0, 0x9f8, 0x70bd2d}, [@tmpl={0x184, 0x5, [{{@in6=@empty, 0x4d6, 0xff}, 0x2, @in=@local, 0x0, 0x2, 0x3, 0x80, 0x5, 0x2, 0xffffffff}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in=@loopback, 0x3504, 0x2, 0x0, 0x4, 0xffffff26, 0x1abd, 0x1}, {{@in=@local, 0x4d2, 0xff}, 0xcf70c2b3f59c40ba, @in=@local, 0x0, 0x0, 0x2, 0x21, 0x401, 0x39, 0xf9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x34ff, 0x2, 0x3, 0x9, 0x7d, 0x81, 0xebf4}, {{@in6=@loopback, 0x4d3, 0x6c}, 0x2, @in6=@mcast2, 0x3506, 0x1, 0x2, 0x1, 0x1000, 0x2, 0xe1d}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x32}, 0xa, @in6=@private0, 0x3502, 0x2, 0x3, 0x2, 0x101, 0x2, 0x4}]}, @tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x4d4, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34ff, 0x6, 0x0, 0x2, 0x7fffffff, 0x8000, 0xffffffff}, {{@in=@local, 0x4d2, 0x33}, 0xc, @in6=@empty, 0x3504, 0x4, 0x3, 0x0, 0x6, 0x9, 0x50693d81}]}]}, 0x330}, 0x1, 0x0, 0x0, 0xc000890}, 0x4040) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'veth0_to_batadv\x00'}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000980)={0x1, 0x5, 0x7}) r6 = dup(0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xb}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) r7 = syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x81, 0x4, &(0x7f0000000f40)=[{&(0x7f0000000b80)="1b36f8170f462c990ba72a6aca29c963d54f65cdc36fdc314b9f4970e4b1dbd5c7136a7169c15b10899f1ac8c4195226b5455a5b4146a50df0ae33af1b8f19667be739b2f47d6ca568efbc0afbf6a3e08be469d6546cf82f56da0496a6af1dab6fff25800b0fb89c8344a42a9c9d3cfbeec5769347fbac8c796af696d392fd29fac61b3ebbb8835002456ceb800af656c5d4ef76a80aef41c1159bdf990567750499434e493bd66c076d23d3774a1fcda98decca00438f28b0ef5bb5a892b342f7c8f3e569a5d4d957e541893b0287a70ad458755ede95195bda02ac64ad60a30f658ce3fc5f", 0xe6, 0x3f}, {&(0x7f0000000c80)="3ce0032fa8dcb4450942b348a697849162ea0fe59169291caaf5d5bcf48fbd5bc0b7b67a21c7b70cf614e1983b5a3ba7e0607417f7887a1029c4c364f04a7660b4dc8d862440b3c7a2bf97831b2bedde5eb675c6f56c6cb7c626a744f06bb4218d932e80a7dda68ceacbd54d32bc28ed1e0ece35bdf0bbe654876e42338b0ce03afab3fe1ea602c3b20de61e140f4a78d29ea41721024865b22400e84c34b1ac36a63100e5d0b636977b381e931a546fb014cc24704dfbfd3b941c1d17627d9c7572d68c685e849238a2c3552feab639f714675cd7445a296ce059ee5d817a4a61709202", 0xe4, 0xfffffffffffffffb}, {&(0x7f0000000d80)="02bd62fa74a7a8e339c6e88947d195101d817a2fc9b486567d2aad93136d57870e5f16b06cdabf21be5a21be301f728aae3a8181e7675e098f9db68142e1227b0b7c7c7c2831390fc62c28cc807c9d69cf9d4a31148fb6d7d00949068f59f961be1a49db2efb00e87ae8c893ea5c6815a7b72afc500d7fb72f7b821d2fa809c2f7a5db9a3cc48c468fee09409892f540185c858cc36d749cf92ccded31f3d0df27e566e1a84e652567e001134d5228aee32d62712e18f9005967a756566057b003dc4d18281edfe4f5623d5c9e8737431a89be34fa947ea279dd452b531599b2", 0xe0, 0x2}, {&(0x7f0000000e80)="5698771721167c46edf2cd27b128bc8bfaa4d3f1e7a3d6d7f0c1ef7fa345278cd1bdf9b5670b14c54f600cb3b8c049971f8b44b5294a5c6d74a922e9f03462f7d49fb800199b80912bff597ee35afac6892101ea496e1f7b273240eec478b05a4373347190d92822abb60e032386fc89af6ea5c142285a7f4acd7cfeee40791b9ad3303826e66857521e18fe86bc312ba9c52e2dd1d59d", 0x97, 0x7}], 0x82, &(0x7f0000000fc0)={[{@unhide}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@overriderock}, {@map_normal}], [{@euid_lt={'euid<', 0xffffffffffffffff}}]}) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000001080)) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), r6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000011c0)={'ip6tnl0\x00', &(0x7f0000001140)={'ip6gre0\x00', 0x0, 0x4, 0x1f, 0x1f, 0x7, 0x10, @loopback, @remote, 0x1, 0x7800, 0x5264, 0xfff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x6c, r8, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x6c}}, 0x404c843) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r4, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 06:19:03 executing program 7: r0 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='}#\xb7]&\x00', 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) r1 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="825aeab12806c64d4d81d15302d5aa9db77dff3bb4f8f22d0de747ad7c66c2608e15770eb3c0e1b394020f85ade9d44e1e3ca468c75ef69d54087d7e21e0be17e3c13e2cc815447f284de1ca424a2651ff5ab1f713d377c552e128d4217a69607149cd33dc1e7772c1609bb239ab7460f5a1347b6139cfbf1c69ee394eecc85de522ae5da861c0cb013221bca1ca715a9343e42ef3de94a619cc67e860d0bc2da2a79a6bec6c26d5cb4170ba1595bcfeff2d781217f875", 0xb7, 0xfffffffffffffffb) r2 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)={0x1, 0x0, @a}, 0x48, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='logon\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r4 = add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)={0x0, 0x0, @b}, 0x48, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000500)='trusted\x00', &(0x7f0000000540)) keyctl$KEYCTL_MOVE(0x1e, r3, r1, r0, 0x1) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x30, 0x32, 0x62, 0x51, 0x32, 0x36, 0x63, 0x32, 0x30, 0x66, 0x63, 0x31, 0x34, 0x38, 0x32, 0x62]}, &(0x7f0000000600)={0x0, "2c777eb07aab06922d08d1656444fd53b93646686ba268cd3057d0c4f119d76372dfcf6543bb134ad994d4fcf073ed9a05f5216a0c947874b1ecca36a4c065f9", 0x12}, 0x48, r0) keyctl$describe(0x6, r2, &(0x7f0000000680)=""/240, 0xf0) r5 = add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)="f2690ef6bdb36dd685e26eea9a6131d67a16820eb2f3fb55798aaa4e41e4ba77286ae8e3b2a21c23bf909e824f08e0c6fe9cd26f8f73f0bd3b88c6fb65131d8fb0b0df76e5cbcd11bf47a22d45e1cce64c986f6f586ac191be06d2c141723e7f7c15f61600b8dd5276107a", 0x6b, r3) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r3, 0x1) add_key(&(0x7f0000000880)='rxrpc_s\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="24534252f9d22650a36a5003a36a7f0f89d0941e0646f7b3ab43df735390a6d45cefd80cc6f2bab9520ebb656774caab3c8e8564a40f0a302c26f525cc6f98f944", 0x41, r0) r6 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x1}, 0x0, 0x0, r3) r7 = request_key(&(0x7f0000000a00)='rxrpc_s\x00', &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)='keyring\x00', r6) r8 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$setperm(0x5, r8, 0x8000000) r9 = add_key$keyring(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$invalidate(0x15, r9) 06:19:03 executing program 6: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x1, 0x1, 0x20, @private0={0xfc, 0x0, '\x00', 0x65}, @local, 0x20, 0x80, 0x6, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7, 0x700, 0xffff, 0x800, {{0xe, 0x4, 0x2, 0x8, 0x38, 0x64, 0x0, 0xfa, 0x2f, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x2, 0x11, "a218651988c9b74a99e14924d767a7"}]}, @generic={0x44, 0x5, "46c302"}, @timestamp={0x44, 0x8, 0xa3, 0x0, 0xd, [0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0x81, 0x40, 0x1ff, 0x5, @loopback, @empty, 0x8, 0x40, 0x66, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x1e, 0x80000001, 0x41, @private2, @mcast1, 0x8, 0x10, 0x358}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x80, 0x2, 0x34, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x7800, 0x7800, 0x9, 0xa4}}) recvmmsg(0xffffffffffffffff, &(0x7f00000053c0)=[{{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000640)=""/89, 0x59}], 0x2, &(0x7f0000000700)=""/74, 0x4a}, 0x493}, {{&(0x7f0000000780)=@generic, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000800)=""/119, 0x77}, {&(0x7f0000000880)=""/120, 0x78}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000a00)=""/103, 0x67}, {&(0x7f0000000a80)=""/31, 0x1f}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x7, &(0x7f0000002b40)=""/249, 0xf9}, 0x4}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000002c40)=""/122, 0x7a}, {&(0x7f0000002cc0)=""/229, 0xe5}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/138, 0x8a}, {&(0x7f0000003e80)=""/53, 0x35}, {&(0x7f0000003ec0)=""/253, 0xfd}, {&(0x7f0000003fc0)=""/67, 0x43}, {&(0x7f0000004040)=""/140, 0x8c}], 0x8, &(0x7f0000004180)=""/8, 0x8}, 0x3f}, {{&(0x7f00000041c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004240)=""/109, 0x6d}, {&(0x7f00000042c0)=""/221, 0xdd}], 0x2, &(0x7f0000004400)=""/224, 0xe0}, 0x8001}, {{&(0x7f0000004500)=@un=@abs, 0x80, &(0x7f0000004800)=[{&(0x7f0000004580)=""/200, 0xc8}, {&(0x7f0000004680)=""/70, 0x46}, {&(0x7f0000004700)=""/38, 0x26}, {&(0x7f0000004740)=""/107, 0x6b}, {&(0x7f00000047c0)}], 0x5, &(0x7f0000004880)=""/12, 0xc}, 0x3}, {{&(0x7f00000048c0)=@generic, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004940)=""/2, 0x2}, {&(0x7f0000004980)=""/61, 0x3d}, {&(0x7f00000049c0)=""/112, 0x70}, {&(0x7f0000004a40)=""/127, 0x7f}, {&(0x7f0000004ac0)=""/228, 0xe4}, {&(0x7f0000004bc0)=""/96, 0x60}, {&(0x7f0000004c40)=""/202, 0xca}, {&(0x7f0000004d40)=""/4, 0x4}, {&(0x7f0000004d80)=""/194, 0xc2}], 0x9, &(0x7f0000004f40)=""/91, 0x5b}, 0x9}, {{&(0x7f0000004fc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005040)=""/157, 0x9d}, {&(0x7f0000005100)=""/156, 0x9c}, {&(0x7f00000051c0)=""/220, 0xdc}, {&(0x7f00000052c0)=""/107, 0x6b}], 0x4, &(0x7f0000005380)=""/45, 0x2d}, 0xaa2c}], 0x7, 0x40000004, &(0x7f0000005580)={0x77359400}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000005bc0)={&(0x7f0000000180), 0xc, &(0x7f0000005b80)={&(0x7f00000055c0)={0x5a0, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r2}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6000, 0x80, 0x80, 0x5}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcf}}, {0x8, 0x6, r7}}}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000044) getsockname$packet(r6, &(0x7f0000005c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005c80)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000005dc0)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005d80)={&(0x7f0000005cc0)={0xa8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x40810) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000005e00), 0x80000, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000005e40)=0x5, 0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005ec0), r6) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000006000)={&(0x7f0000005e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f00)={0x84, r10, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000006080), r9) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000006180)={&(0x7f0000006040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006140)={&(0x7f00000060c0)={0x50, r11, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000006640)={&(0x7f00000061c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006600)={&(0x7f0000006200)={0x3d4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1b9cc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff0001}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "b6d5c01780a99b2942511443075c5c9ffc90904f7a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x95f5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "32bf27f33f458e971fb7eadd1e687056c41485326c76fb4c"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "5b7c7dc575e27850ca8d55f62882026aafe8f473b1df"}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x43a}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fb5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5356}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcbe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8f86, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x445}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0xc014}, 0x4000800) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f00000068c0)={&(0x7f0000006680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006880)={&(0x7f00000066c0)={0x1b8, r10, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000006a80)={&(0x7f0000006900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006a40)={&(0x7f0000006980)={0x98, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c1}, 0x4008040) [ 64.204559] audit: type=1400 audit(1664777943.249:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 65.554865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.557041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.558724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.560535] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.562899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.565513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.575711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.577079] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.578342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.598184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.603122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.604363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.606794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.609727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.612422] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.615948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.620695] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.621847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.623014] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.625414] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.627530] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.631506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.631594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.637364] Bluetooth: hci0: HCI_REQ-0x0c1a [ 65.640226] Bluetooth: hci1: HCI_REQ-0x0c1a [ 65.640806] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.642564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.646433] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.647772] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.649050] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.651153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.653315] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.655151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.657388] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.663853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.665474] Bluetooth: hci2: HCI_REQ-0x0c1a [ 65.667256] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.668498] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.669932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.671131] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 65.672740] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 65.673713] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.674999] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.678440] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.680387] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.681918] Bluetooth: hci7: HCI_REQ-0x0c1a [ 65.683507] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.683856] Bluetooth: hci6: HCI_REQ-0x0c1a [ 65.689483] Bluetooth: hci4: HCI_REQ-0x0c1a [ 65.711543] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.712720] Bluetooth: hci3: HCI_REQ-0x0c1a [ 65.714864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.732812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.736865] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.741718] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.748467] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.692336] Bluetooth: hci7: command 0x0409 tx timeout [ 67.692352] Bluetooth: hci6: command 0x0409 tx timeout [ 67.693270] Bluetooth: hci0: command 0x0409 tx timeout [ 67.693953] Bluetooth: hci1: command 0x0409 tx timeout [ 67.755749] Bluetooth: hci3: command 0x0409 tx timeout [ 67.756380] Bluetooth: hci4: command 0x0409 tx timeout [ 67.756937] Bluetooth: hci5: command 0x0409 tx timeout [ 67.757411] Bluetooth: hci2: command 0x0409 tx timeout [ 69.739748] Bluetooth: hci1: command 0x041b tx timeout [ 69.740223] Bluetooth: hci0: command 0x041b tx timeout [ 69.740682] Bluetooth: hci6: command 0x041b tx timeout [ 69.741073] Bluetooth: hci7: command 0x041b tx timeout [ 69.803681] Bluetooth: hci2: command 0x041b tx timeout [ 69.804126] Bluetooth: hci5: command 0x041b tx timeout [ 69.804535] Bluetooth: hci4: command 0x041b tx timeout [ 69.804981] Bluetooth: hci3: command 0x041b tx timeout [ 71.787693] Bluetooth: hci7: command 0x040f tx timeout [ 71.788499] Bluetooth: hci6: command 0x040f tx timeout [ 71.789700] Bluetooth: hci0: command 0x040f tx timeout [ 71.790409] Bluetooth: hci1: command 0x040f tx timeout [ 71.851707] Bluetooth: hci3: command 0x040f tx timeout [ 71.852527] Bluetooth: hci4: command 0x040f tx timeout [ 71.853314] Bluetooth: hci5: command 0x040f tx timeout [ 71.854059] Bluetooth: hci2: command 0x040f tx timeout [ 73.835680] Bluetooth: hci1: command 0x0419 tx timeout [ 73.836146] Bluetooth: hci0: command 0x0419 tx timeout [ 73.836618] Bluetooth: hci6: command 0x0419 tx timeout [ 73.837031] Bluetooth: hci7: command 0x0419 tx timeout [ 73.899735] Bluetooth: hci2: command 0x0419 tx timeout [ 73.900189] Bluetooth: hci5: command 0x0419 tx timeout [ 73.900626] Bluetooth: hci4: command 0x0419 tx timeout [ 73.901050] Bluetooth: hci3: command 0x0419 tx timeout 06:19:58 executing program 7: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000800)={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000440)='./file1\x00', 0x8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) io_submit(r0, 0x6, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x9, r1, &(0x7f0000000240)="9eb27c2613fa5f97b553da3729385d6d505cb2c15b23bed2524b98f7fe409ff5cd11bc04f9eba2593175990d7be42767f0e4b47e32866c371301ce2d8aabbfafdbce1fa44a2c1daa2498237fd175b9c2685ecf6faf7b7e2dea6d5975a004de4e845955a8950979de2e64cf12f2f41d57b79bb2289a458201649d24e21484114a62092170ee129fe40ea77dc84bde506fa706b8c69ebc8d5f03941169b5bea5f5a79f899cd193cb44c0aee3c81d9e8f31a02a", 0xb2, 0x6, 0x0, 0x2, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9b0b5aee98f1e8e3, 0x5, r3, &(0x7f0000000300)="1b5ec63e250dc3cb69b1eca6c68d9c95719176ed3e72051bafaba991e3d8c6f3faf886c168a4a00421d35bb8c5bee719d99f9b6ad77b14d170923b008f5bb85bc98640defe1710d1b6f53027765130c64dcfe6d2b76940f0317ca17b32869935de8207f328cf8bd7e2e49718141908b5a6c0e9a3ad8976caf81f1370a21212663f412b3ccba0def423ac296acf10381da4b61109f5e44050ea4d5be7213fff9797de662efc4eb936ac5b7758b04997afe7bcd18d1ef8cb878aece5292d96c165a781cb476bd4b235d76d34a4306e89fd21cb468833f264a7cf8367f73f3ba503d0b33c14f4d5f2a2770c9886", 0xec, 0x72b, 0x0, 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x81, r4, &(0x7f0000000140)="5112ff27146ed2e0b94abafd2a9bf3bb82f1cac465dc5b788faaf63247ee59f4a51b53465408a637841b5f540a2c5b56e3b21d94f50d5569fbf26194ab6e5bcc8da7", 0x42, 0x4, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f0000000500)="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", 0xfe, 0x6, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, r5, &(0x7f0000000600)="0b820352dbf984d29d784f2f5eccd2f2c1ae88f91e89c14bd42c61fe3680390cf50233833d31cce4eabac174de002d58573266a280c5c050435213f6a99586c8f9f97ed87a5a08b19b912d042ac20099420c01aab8b38bd72a0286357e3f389f853190dd16ff6cab60fa97ed5990658b040ffb", 0x73, 0x6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x40, r4, &(0x7f0000000680)="8c86154a1a0e91dadc635c13a906f469cb9bf09c8d5c2620841f95cd11be2f691717d3e9fdd4d7ed14663fc2aaddcac64cc981c2ba1b4794383bb169357a9b780cb2390260a304b149d2d9aa00ec2de030709b5383358944efa39b0720c3086d657222dfe9af71e6d183376f22b4cc8a93336f2ffadf322246dd42929668b5b113eea9b505a27e5aa2d63546e9b034285a2acd216b7a3589dac2fe03d5fff469e53d8f3146594a3cf20bbe6b571696c2503c1afb0fe873ff079cc4c1d56c22282f69d5a6974e808f391666b7a9f724bd7faec8f546e4dec615", 0xd9, 0x10000, 0x0, 0x2, r6}]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x8008, 0xf, 0x1, 0x0, r7, &(0x7f00000001c0)="10", 0x1}]) 06:19:58 executing program 7: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000800)={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000440)='./file1\x00', 0x8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) io_submit(r0, 0x6, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x9, r1, &(0x7f0000000240)="9eb27c2613fa5f97b553da3729385d6d505cb2c15b23bed2524b98f7fe409ff5cd11bc04f9eba2593175990d7be42767f0e4b47e32866c371301ce2d8aabbfafdbce1fa44a2c1daa2498237fd175b9c2685ecf6faf7b7e2dea6d5975a004de4e845955a8950979de2e64cf12f2f41d57b79bb2289a458201649d24e21484114a62092170ee129fe40ea77dc84bde506fa706b8c69ebc8d5f03941169b5bea5f5a79f899cd193cb44c0aee3c81d9e8f31a02a", 0xb2, 0x6, 0x0, 0x2, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9b0b5aee98f1e8e3, 0x5, r3, &(0x7f0000000300)="1b5ec63e250dc3cb69b1eca6c68d9c95719176ed3e72051bafaba991e3d8c6f3faf886c168a4a00421d35bb8c5bee719d99f9b6ad77b14d170923b008f5bb85bc98640defe1710d1b6f53027765130c64dcfe6d2b76940f0317ca17b32869935de8207f328cf8bd7e2e49718141908b5a6c0e9a3ad8976caf81f1370a21212663f412b3ccba0def423ac296acf10381da4b61109f5e44050ea4d5be7213fff9797de662efc4eb936ac5b7758b04997afe7bcd18d1ef8cb878aece5292d96c165a781cb476bd4b235d76d34a4306e89fd21cb468833f264a7cf8367f73f3ba503d0b33c14f4d5f2a2770c9886", 0xec, 0x72b, 0x0, 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x81, r4, &(0x7f0000000140)="5112ff27146ed2e0b94abafd2a9bf3bb82f1cac465dc5b788faaf63247ee59f4a51b53465408a637841b5f540a2c5b56e3b21d94f50d5569fbf26194ab6e5bcc8da7", 0x42, 0x4, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f0000000500)="c6b0a33f2626a68ff09f964bcf184e2002a8a69c367e9a0f6b860806e9de1514d6d14e9cc9d2649fa10637d86dd99899ffd5d3df1b2dbe1df20b77568db2e1e87770579f8beed1b1f5d9387dcb7e1c7cb2baa349fd1ba3eb6e10c0867eaafc26412e3aca2d14025d8a44cab33e7ab4bc10a3e3a158b213575c7e66a1769ccd58ca4ae94e8d2e299d7f6f7349c6a72866f3dc717b0efeee0f0f25fa71929f9fe06ee589ad9c2586d064cc10b61db5ec543cadb1bbccf0d5309bac47bfdcff1b6ca5805f7e820f4c7d42aac9db4acca066e95a31e25736fb5034b9addd42cbef998509b3ad1c3d6d2d936dced1142dc382c95cf36b103607bcf0aca07cb8c0", 0xfe, 0x6, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, r5, &(0x7f0000000600)="0b820352dbf984d29d784f2f5eccd2f2c1ae88f91e89c14bd42c61fe3680390cf50233833d31cce4eabac174de002d58573266a280c5c050435213f6a99586c8f9f97ed87a5a08b19b912d042ac20099420c01aab8b38bd72a0286357e3f389f853190dd16ff6cab60fa97ed5990658b040ffb", 0x73, 0x6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x40, r4, &(0x7f0000000680)="8c86154a1a0e91dadc635c13a906f469cb9bf09c8d5c2620841f95cd11be2f691717d3e9fdd4d7ed14663fc2aaddcac64cc981c2ba1b4794383bb169357a9b780cb2390260a304b149d2d9aa00ec2de030709b5383358944efa39b0720c3086d657222dfe9af71e6d183376f22b4cc8a93336f2ffadf322246dd42929668b5b113eea9b505a27e5aa2d63546e9b034285a2acd216b7a3589dac2fe03d5fff469e53d8f3146594a3cf20bbe6b571696c2503c1afb0fe873ff079cc4c1d56c22282f69d5a6974e808f391666b7a9f724bd7faec8f546e4dec615", 0xd9, 0x10000, 0x0, 0x2, r6}]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x8008, 0xf, 0x1, 0x0, r7, &(0x7f00000001c0)="10", 0x1}]) 06:19:58 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 06:19:58 executing program 7: timer_create(0x9, 0x0, &(0x7f0000000080)=0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_delete(r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x25}}, './file0\x00'}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xa2, 0x16, 0x7, 0x4a, 0x0, 0x3f, 0x5, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0xd4c}, 0x200, 0x4, 0x1, 0x5, 0x800, 0x7, 0x1f, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r2, 0x2) [ 119.516376] audit: type=1400 audit(1664777998.561:7): avc: denied { open } for pid=3855 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.517909] audit: type=1400 audit(1664777998.561:8): avc: denied { kernel } for pid=3855 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.544878] ------------[ cut here ]------------ [ 119.544918] [ 119.544924] ====================================================== [ 119.544930] WARNING: possible circular locking dependency detected [ 119.544937] 6.0.0-rc7-next-20220930 #1 Not tainted [ 119.544949] ------------------------------------------------------ [ 119.544955] syz-executor.7/3857 is trying to acquire lock: [ 119.544967] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 119.545037] [ 119.545037] but task is already holding lock: [ 119.545042] ffff88800d845820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.545091] [ 119.545091] which lock already depends on the new lock. [ 119.545091] [ 119.545097] [ 119.545097] the existing dependency chain (in reverse order) is: [ 119.545103] [ 119.545103] -> #3 (&ctx->lock){....}-{2:2}: [ 119.545129] _raw_spin_lock+0x2a/0x40 [ 119.545151] __perf_event_task_sched_out+0x53b/0x18d0 [ 119.545173] __schedule+0xedd/0x2470 [ 119.545200] preempt_schedule_common+0x45/0xc0 [ 119.545229] __cond_resched+0x17/0x30 [ 119.545257] unmap_page_range+0xd89/0x2a10 [ 119.545289] unmap_single_vma+0x190/0x380 [ 119.545321] unmap_vmas+0x21e/0x370 [ 119.545351] exit_mmap+0x154/0x680 [ 119.545375] mmput+0xd1/0x390 [ 119.545408] do_exit+0xa2e/0x27f0 [ 119.545435] do_group_exit+0xd0/0x2a0 [ 119.545463] get_signal+0x2195/0x22d0 [ 119.545494] arch_do_signal_or_restart+0x89/0x1be0 [ 119.545516] exit_to_user_mode_prepare+0x131/0x1a0 [ 119.545539] syscall_exit_to_user_mode+0x19/0x40 [ 119.545568] do_syscall_64+0x48/0x90 [ 119.545600] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.545625] [ 119.545625] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 119.545652] _raw_spin_lock_nested+0x30/0x40 [ 119.545673] raw_spin_rq_lock_nested+0x1e/0x30 [ 119.545696] task_fork_fair+0x63/0x4d0 [ 119.545729] sched_cgroup_fork+0x3d0/0x540 [ 119.545756] copy_process+0x4183/0x6e20 [ 119.545775] kernel_clone+0xe7/0x890 [ 119.545793] user_mode_thread+0xad/0xf0 [ 119.545814] rest_init+0x24/0x250 [ 119.545836] arch_call_rest_init+0xf/0x14 [ 119.545868] start_kernel+0x4c6/0x4eb [ 119.545898] secondary_startup_64_no_verify+0xe0/0xeb [ 119.545924] [ 119.545924] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 119.545951] _raw_spin_lock_irqsave+0x39/0x60 [ 119.545972] try_to_wake_up+0xab/0x1930 [ 119.545998] up+0x75/0xb0 [ 119.546025] __up_console_sem+0x6e/0x80 [ 119.546055] console_unlock+0x46a/0x590 [ 119.546086] do_con_write+0xc05/0x1d50 [ 119.546105] con_write+0x21/0x40 [ 119.546123] n_tty_write+0x4d4/0xfe0 [ 119.546145] file_tty_write.constprop.0+0x455/0x8a0 [ 119.546167] vfs_write+0x9c3/0xd90 [ 119.546198] ksys_write+0x127/0x250 [ 119.546228] do_syscall_64+0x3b/0x90 [ 119.546261] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.546286] [ 119.546286] -> #0 ((console_sem).lock){....}-{2:2}: [ 119.546313] __lock_acquire+0x2a02/0x5e70 [ 119.546345] lock_acquire+0x1a2/0x530 [ 119.546376] _raw_spin_lock_irqsave+0x39/0x60 [ 119.546397] down_trylock+0xe/0x70 [ 119.546426] __down_trylock_console_sem+0x3b/0xd0 [ 119.546458] vprintk_emit+0x16b/0x560 [ 119.546489] vprintk+0x84/0xa0 [ 119.546520] _printk+0xba/0xf1 [ 119.546541] report_bug.cold+0x72/0xab [ 119.546573] handle_bug+0x3c/0x70 [ 119.546605] exc_invalid_op+0x14/0x50 [ 119.546638] asm_exc_invalid_op+0x16/0x20 [ 119.546661] group_sched_out.part.0+0x2c7/0x460 [ 119.546696] ctx_sched_out+0x8f1/0xc10 [ 119.546728] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.546750] __schedule+0xedd/0x2470 [ 119.546776] preempt_schedule_common+0x45/0xc0 [ 119.546806] __cond_resched+0x17/0x30 [ 119.546833] unmap_page_range+0xd89/0x2a10 [ 119.546864] unmap_single_vma+0x190/0x380 [ 119.546896] unmap_vmas+0x21e/0x370 [ 119.546926] exit_mmap+0x154/0x680 [ 119.546951] mmput+0xd1/0x390 [ 119.546982] do_exit+0xa2e/0x27f0 [ 119.547009] do_group_exit+0xd0/0x2a0 [ 119.547037] get_signal+0x2195/0x22d0 [ 119.547067] arch_do_signal_or_restart+0x89/0x1be0 [ 119.547089] exit_to_user_mode_prepare+0x131/0x1a0 [ 119.547110] syscall_exit_to_user_mode+0x19/0x40 [ 119.547134] do_syscall_64+0x48/0x90 [ 119.547167] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.547192] [ 119.547192] other info that might help us debug this: [ 119.547192] [ 119.547197] Chain exists of: [ 119.547197] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 119.547197] [ 119.547226] Possible unsafe locking scenario: [ 119.547226] [ 119.547230] CPU0 CPU1 [ 119.547234] ---- ---- [ 119.547238] lock(&ctx->lock); [ 119.547249] lock(&rq->__lock); [ 119.547261] lock(&ctx->lock); [ 119.547274] lock((console_sem).lock); [ 119.547285] [ 119.547285] *** DEADLOCK *** [ 119.547285] [ 119.547288] 3 locks held by syz-executor.7/3857: [ 119.547301] #0: ffff88801b837158 (&mm->mmap_lock#2){++++}-{3:3}, at: exit_mmap+0xe5/0x680 [ 119.547362] #1: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 119.547419] #2: ffff88800d845820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.547470] [ 119.547470] stack backtrace: [ 119.547475] CPU: 0 PID: 3857 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 119.547499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 119.547514] Call Trace: [ 119.547519] [ 119.547527] dump_stack_lvl+0x8b/0xb3 [ 119.547563] check_noncircular+0x263/0x2e0 [ 119.547596] ? format_decode+0x26c/0xb50 [ 119.547627] ? print_circular_bug+0x450/0x450 [ 119.547661] ? simple_strtoul+0x30/0x30 [ 119.547691] ? perf_trace_lock+0x308/0x560 [ 119.547719] ? format_decode+0x26c/0xb50 [ 119.547755] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 119.547791] __lock_acquire+0x2a02/0x5e70 [ 119.547837] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 119.547885] lock_acquire+0x1a2/0x530 [ 119.547918] ? down_trylock+0xe/0x70 [ 119.547953] ? lock_release+0x750/0x750 [ 119.547996] ? vprintk+0x84/0xa0 [ 119.548033] _raw_spin_lock_irqsave+0x39/0x60 [ 119.548055] ? down_trylock+0xe/0x70 [ 119.548087] down_trylock+0xe/0x70 [ 119.548119] ? vprintk+0x84/0xa0 [ 119.548152] __down_trylock_console_sem+0x3b/0xd0 [ 119.548187] vprintk_emit+0x16b/0x560 [ 119.548225] vprintk+0x84/0xa0 [ 119.548260] _printk+0xba/0xf1 [ 119.548283] ? record_print_text.cold+0x16/0x16 [ 119.548317] ? report_bug.cold+0x66/0xab [ 119.548353] ? group_sched_out.part.0+0x2c7/0x460 [ 119.548390] report_bug.cold+0x72/0xab [ 119.548428] handle_bug+0x3c/0x70 [ 119.548463] exc_invalid_op+0x14/0x50 [ 119.548499] asm_exc_invalid_op+0x16/0x20 [ 119.548524] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.548564] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.548586] RSP: 0018:ffff88801896f378 EFLAGS: 00010012 [ 119.548603] RAX: 0000000040000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.548618] RDX: ffff88801d278000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 119.548632] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 119.548647] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d845800 [ 119.548661] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 119.548685] ? group_sched_out.part.0+0x2c7/0x460 [ 119.548726] ? group_sched_out.part.0+0x2c7/0x460 [ 119.548766] ctx_sched_out+0x8f1/0xc10 [ 119.548806] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.548846] ? lock_is_held_type+0xd7/0x130 [ 119.548874] ? __perf_cgroup_move+0x160/0x160 [ 119.548895] ? set_next_entity+0x304/0x550 [ 119.548930] ? update_curr+0x267/0x740 [ 119.548968] ? lock_is_held_type+0xd7/0x130 [ 119.548997] __schedule+0xedd/0x2470 [ 119.549033] ? io_schedule_timeout+0x150/0x150 [ 119.549067] ? lock_is_held_type+0xd7/0x130 [ 119.549094] ? __cond_resched+0x17/0x30 [ 119.549125] preempt_schedule_common+0x45/0xc0 [ 119.549158] __cond_resched+0x17/0x30 [ 119.549187] unmap_page_range+0xd89/0x2a10 [ 119.549243] ? vm_normal_page+0x2e0/0x2e0 [ 119.549278] ? mas_find+0x209/0xdd0 [ 119.549298] ? uprobe_munmap+0x1c/0x560 [ 119.549333] unmap_single_vma+0x190/0x380 [ 119.549371] unmap_vmas+0x21e/0x370 [ 119.549406] ? unmap_mapping_range+0x280/0x280 [ 119.549440] ? find_held_lock+0x2c/0x110 [ 119.549477] ? lock_downgrade+0x6d0/0x6d0 [ 119.549527] exit_mmap+0x154/0x680 [ 119.549557] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 119.549605] ? delayed_uprobe_remove+0x27/0x230 [ 119.549644] mmput+0xd1/0x390 [ 119.549679] do_exit+0xa2e/0x27f0 [ 119.549713] ? lock_release+0x3b2/0x750 [ 119.549745] ? get_signal+0x88b/0x22d0 [ 119.549779] ? mm_update_next_owner+0x7e0/0x7e0 [ 119.549814] ? lock_is_held_type+0xd7/0x130 [ 119.549843] do_group_exit+0xd0/0x2a0 [ 119.549876] get_signal+0x2195/0x22d0 [ 119.549914] ? fd_install+0x1c7/0x640 [ 119.549941] ? lock_downgrade+0x6d0/0x6d0 [ 119.549976] ? exit_signals+0x8b0/0x8b0 [ 119.550011] ? lock_is_held_type+0xd7/0x130 [ 119.550042] arch_do_signal_or_restart+0x89/0x1be0 [ 119.550068] ? __do_sys_perf_event_open+0xcb/0x32c0 [ 119.550098] ? get_sigframe_size+0x10/0x10 [ 119.550122] ? perf_compat_ioctl+0x130/0x130 [ 119.550144] ? xfd_validate_state+0x59/0x180 [ 119.550190] ? exit_to_user_mode_prepare+0x109/0x1a0 [ 119.550219] exit_to_user_mode_prepare+0x131/0x1a0 [ 119.550244] syscall_exit_to_user_mode+0x19/0x40 [ 119.550271] do_syscall_64+0x48/0x90 [ 119.550306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.550332] RIP: 0033:0x7fc73da47b19 [ 119.550348] Code: Unable to access opcode bytes at 0x7fc73da47aef. [ 119.550357] RSP: 002b:00007fc73afbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 119.550378] RAX: 0000000000000003 RBX: 00007fc73db5af60 RCX: 00007fc73da47b19 [ 119.550393] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 119.550407] RBP: 00007fc73daa1f6d R08: 0000000000000000 R09: 0000000000000000 [ 119.550421] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 119.550435] R13: 00007fff16c7f20f R14: 00007fc73afbd300 R15: 0000000000022000 [ 119.550465] [ 119.694846] WARNING: CPU: 0 PID: 3857 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 119.696242] Modules linked in: [ 119.696725] CPU: 0 PID: 3857 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 119.697956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 119.699633] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.700466] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.703156] RSP: 0018:ffff88801896f378 EFLAGS: 00010012 [ 119.703963] RAX: 0000000040000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.705026] RDX: ffff88801d278000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 119.706090] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 119.707146] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d845800 [ 119.708210] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 119.709291] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 119.710490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.711367] CR2: 00007f81a89374a0 CR3: 0000000005226000 CR4: 0000000000350ef0 [ 119.712428] Call Trace: [ 119.712847] [ 119.713210] ctx_sched_out+0x8f1/0xc10 [ 119.713830] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.714618] ? lock_is_held_type+0xd7/0x130 [ 119.715275] ? __perf_cgroup_move+0x160/0x160 [ 119.715949] ? set_next_entity+0x304/0x550 [ 119.716583] ? update_curr+0x267/0x740 [ 119.717171] ? lock_is_held_type+0xd7/0x130 [ 119.717798] __schedule+0xedd/0x2470 [ 119.718349] ? io_schedule_timeout+0x150/0x150 [ 119.719038] ? lock_is_held_type+0xd7/0x130 [ 119.719700] ? __cond_resched+0x17/0x30 [ 119.720316] preempt_schedule_common+0x45/0xc0 [ 119.721037] __cond_resched+0x17/0x30 [ 119.721623] unmap_page_range+0xd89/0x2a10 [ 119.722306] ? vm_normal_page+0x2e0/0x2e0 [ 119.722955] ? mas_find+0x209/0xdd0 [ 119.723518] ? uprobe_munmap+0x1c/0x560 [ 119.724139] unmap_single_vma+0x190/0x380 [ 119.724802] unmap_vmas+0x21e/0x370 [ 119.725393] ? unmap_mapping_range+0x280/0x280 [ 119.726100] ? find_held_lock+0x2c/0x110 [ 119.726726] ? lock_downgrade+0x6d0/0x6d0 [ 119.727375] exit_mmap+0x154/0x680 [ 119.727926] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 119.728737] ? delayed_uprobe_remove+0x27/0x230 [ 119.729477] mmput+0xd1/0x390 [ 119.729984] do_exit+0xa2e/0x27f0 [ 119.730534] ? lock_release+0x3b2/0x750 [ 119.731156] ? get_signal+0x88b/0x22d0 [ 119.731771] ? mm_update_next_owner+0x7e0/0x7e0 [ 119.732502] ? lock_is_held_type+0xd7/0x130 [ 119.733170] do_group_exit+0xd0/0x2a0 [ 119.733766] get_signal+0x2195/0x22d0 [ 119.734364] ? fd_install+0x1c7/0x640 [ 119.734966] ? lock_downgrade+0x6d0/0x6d0 [ 119.735600] ? exit_signals+0x8b0/0x8b0 [ 119.736237] ? lock_is_held_type+0xd7/0x130 [ 119.736896] arch_do_signal_or_restart+0x89/0x1be0 [ 119.737657] ? __do_sys_perf_event_open+0xcb/0x32c0 [ 119.738434] ? get_sigframe_size+0x10/0x10 [ 119.739074] ? perf_compat_ioctl+0x130/0x130 [ 119.739749] ? xfd_validate_state+0x59/0x180 [ 119.740454] ? exit_to_user_mode_prepare+0x109/0x1a0 [ 119.741257] exit_to_user_mode_prepare+0x131/0x1a0 [ 119.742010] syscall_exit_to_user_mode+0x19/0x40 [ 119.742732] do_syscall_64+0x48/0x90 [ 119.743317] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.744110] RIP: 0033:0x7fc73da47b19 [ 119.744677] Code: Unable to access opcode bytes at 0x7fc73da47aef. [ 119.745607] RSP: 002b:00007fc73afbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 119.746741] RAX: 0000000000000003 RBX: 00007fc73db5af60 RCX: 00007fc73da47b19 [ 119.747817] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 119.748906] RBP: 00007fc73daa1f6d R08: 0000000000000000 R09: 0000000000000000 [ 119.749969] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 119.751042] R13: 00007fff16c7f20f R14: 00007fc73afbd300 R15: 0000000000022000 [ 119.752130] [ 119.752486] irq event stamp: 1226 [ 119.753018] hardirqs last enabled at (1225): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 119.754485] hardirqs last disabled at (1226): [] __schedule+0x1225/0x2470 [ 119.755729] softirqs last enabled at (1224): [] __irq_exit_rcu+0x11b/0x180 [ 119.757009] softirqs last disabled at (1217): [] __irq_exit_rcu+0x11b/0x180 [ 119.758278] ---[ end trace 0000000000000000 ]--- 06:19:58 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x7, 0xbbe, 0xff, 0x2}}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 06:19:58 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x7, 0xbbe, 0xff, 0x2}}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 06:19:59 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)) ioctl$KDENABIO(r0, 0x4b36) 06:19:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000007c1710a1ad003eca36e0b0ac6067c5af940712a794b29ce3bde88117cf1cf12ddc57336d20f27a673f2d579e723b10d5a665cb6b8e35161b94b4fd8031215916e8dab2b9365ba19189be465d662f5711d44718e4ca468f1e3ac0eb5fe21f50f0c7a50409871e316c94178f259088c5d4a5b11f0fc2e6a77dbc300dc652da07d042e37dcd0077eaddcff26ae40b29fe370c2ea23b60ae7d77334e54512af788f4188cf0ad4ada98a99fc77932e0044c7be5b00b6d271979ac7318b1bfa32119a7e91cfbdd194057fbe8", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e\x00\x00\x00'], 0x14}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x8927, &(0x7f0000000000)) [ 121.201621] loop1: detected capacity change from 0 to 110 [ 121.887120] loop5: detected capacity change from 0 to 16383 [ 122.818988] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 122.819980] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) VM DIAGNOSIS: 06:19:58 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88801896edc8 R8 =0000000000000001 R9 =ffff88801896ed53 R10=ffffed100312ddaa R11=0000000000000001 R12=000000000000003e R13=ffffffff8765a960 R14=ffffffff8765a9b0 R15=ffffffff8765ac10 RIP=ffffffff823bb0c1 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f81a89374a0 CR3=0000000005226000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM01=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff YMM03=0000000000000000 0000000000000000 0000000000000000 0000ff00000000ff YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 676f6c206d6f7473 7563000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=ffffffff85dff444 RCX=ffffffff8424eb7a RDX=0000000000000000 RSI=ffffffff862445cc RDI=ffffffff85dff420 RBP=ffffffff85dff43c RSP=ffff88801d19f6f8 R8 =ffffffff862445cc R9 =ffffffff85ed04d6 R10=ffffed1003a33f05 R11=000000000003603d R12=ffffffff85dff450 R13=ffffffff85dff420 R14=ffffffff85dff438 R15=dffffc0000000000 RIP=ffffffff81119b7c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f746995f620 CR3=000000000dab6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000