Warning: Permanently added '[localhost]:56373' (ECDSA) to the list of known hosts. 2022/09/13 20:50:27 fuzzer started 2022/09/13 20:50:27 dialing manager at localhost:36597 syzkaller login: [ 36.237823] cgroup: Unknown subsys name 'net' [ 36.368911] cgroup: Unknown subsys name 'rlimit' 2022/09/13 20:50:41 syscalls: 2215 2022/09/13 20:50:41 code coverage: enabled 2022/09/13 20:50:41 comparison tracing: enabled 2022/09/13 20:50:41 extra coverage: enabled 2022/09/13 20:50:41 setuid sandbox: enabled 2022/09/13 20:50:41 namespace sandbox: enabled 2022/09/13 20:50:41 Android sandbox: enabled 2022/09/13 20:50:41 fault injection: enabled 2022/09/13 20:50:41 leak checking: enabled 2022/09/13 20:50:41 net packet injection: enabled 2022/09/13 20:50:41 net device setup: enabled 2022/09/13 20:50:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/13 20:50:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/13 20:50:41 USB emulation: enabled 2022/09/13 20:50:41 hci packet injection: enabled 2022/09/13 20:50:41 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913) 2022/09/13 20:50:41 802.15.4 emulation: enabled 2022/09/13 20:50:41 fetching corpus: 50, signal 34814/36598 (executing program) 2022/09/13 20:50:41 fetching corpus: 100, signal 50479/53804 (executing program) 2022/09/13 20:50:41 fetching corpus: 150, signal 62794/67497 (executing program) 2022/09/13 20:50:42 fetching corpus: 200, signal 71281/77318 (executing program) 2022/09/13 20:50:42 fetching corpus: 250, signal 77807/85128 (executing program) 2022/09/13 20:50:42 fetching corpus: 300, signal 83833/92322 (executing program) 2022/09/13 20:50:42 fetching corpus: 350, signal 87013/96834 (executing program) 2022/09/13 20:50:42 fetching corpus: 400, signal 90843/101872 (executing program) 2022/09/13 20:50:42 fetching corpus: 450, signal 96258/108295 (executing program) 2022/09/13 20:50:42 fetching corpus: 500, signal 100997/114118 (executing program) 2022/09/13 20:50:43 fetching corpus: 550, signal 104602/118739 (executing program) 2022/09/13 20:50:43 fetching corpus: 600, signal 108135/123271 (executing program) 2022/09/13 20:50:43 fetching corpus: 650, signal 111137/127257 (executing program) 2022/09/13 20:50:43 fetching corpus: 700, signal 113181/130353 (executing program) 2022/09/13 20:50:43 fetching corpus: 750, signal 116076/134154 (executing program) 2022/09/13 20:50:43 fetching corpus: 800, signal 119140/138083 (executing program) 2022/09/13 20:50:43 fetching corpus: 850, signal 122541/142226 (executing program) 2022/09/13 20:50:44 fetching corpus: 900, signal 125064/145614 (executing program) 2022/09/13 20:50:44 fetching corpus: 950, signal 128130/149421 (executing program) 2022/09/13 20:50:44 fetching corpus: 1000, signal 130912/152938 (executing program) 2022/09/13 20:50:44 fetching corpus: 1050, signal 133592/156328 (executing program) 2022/09/13 20:50:44 fetching corpus: 1100, signal 135419/158895 (executing program) 2022/09/13 20:50:44 fetching corpus: 1150, signal 137714/161903 (executing program) 2022/09/13 20:50:44 fetching corpus: 1200, signal 139355/164265 (executing program) 2022/09/13 20:50:44 fetching corpus: 1250, signal 141018/166664 (executing program) 2022/09/13 20:50:45 fetching corpus: 1300, signal 143045/169423 (executing program) 2022/09/13 20:50:45 fetching corpus: 1350, signal 144490/171550 (executing program) 2022/09/13 20:50:45 fetching corpus: 1400, signal 146959/174516 (executing program) 2022/09/13 20:50:45 fetching corpus: 1450, signal 148166/176437 (executing program) 2022/09/13 20:50:45 fetching corpus: 1500, signal 149409/178380 (executing program) 2022/09/13 20:50:45 fetching corpus: 1550, signal 151240/180767 (executing program) 2022/09/13 20:50:45 fetching corpus: 1600, signal 152527/182666 (executing program) 2022/09/13 20:50:45 fetching corpus: 1650, signal 154026/184731 (executing program) 2022/09/13 20:50:46 fetching corpus: 1700, signal 155572/186853 (executing program) 2022/09/13 20:50:46 fetching corpus: 1750, signal 156993/188816 (executing program) 2022/09/13 20:50:46 fetching corpus: 1800, signal 159118/191291 (executing program) 2022/09/13 20:50:46 fetching corpus: 1850, signal 160273/193082 (executing program) 2022/09/13 20:50:46 fetching corpus: 1900, signal 161912/195104 (executing program) 2022/09/13 20:50:46 fetching corpus: 1950, signal 163751/197294 (executing program) 2022/09/13 20:50:46 fetching corpus: 2000, signal 164911/198982 (executing program) 2022/09/13 20:50:47 fetching corpus: 2050, signal 167243/201474 (executing program) 2022/09/13 20:50:47 fetching corpus: 2100, signal 169025/203529 (executing program) 2022/09/13 20:50:47 fetching corpus: 2150, signal 170396/205361 (executing program) 2022/09/13 20:50:47 fetching corpus: 2200, signal 172260/207469 (executing program) 2022/09/13 20:50:47 fetching corpus: 2250, signal 173324/208965 (executing program) 2022/09/13 20:50:47 fetching corpus: 2300, signal 174735/210720 (executing program) 2022/09/13 20:50:47 fetching corpus: 2350, signal 175659/212140 (executing program) 2022/09/13 20:50:47 fetching corpus: 2400, signal 176766/213663 (executing program) 2022/09/13 20:50:48 fetching corpus: 2450, signal 177690/215046 (executing program) 2022/09/13 20:50:48 fetching corpus: 2500, signal 178905/216593 (executing program) 2022/09/13 20:50:48 fetching corpus: 2550, signal 179969/218026 (executing program) 2022/09/13 20:50:48 fetching corpus: 2600, signal 180768/219269 (executing program) 2022/09/13 20:50:48 fetching corpus: 2650, signal 181844/220699 (executing program) 2022/09/13 20:50:48 fetching corpus: 2700, signal 182810/222058 (executing program) 2022/09/13 20:50:48 fetching corpus: 2750, signal 184461/223797 (executing program) 2022/09/13 20:50:48 fetching corpus: 2800, signal 185738/225249 (executing program) 2022/09/13 20:50:48 fetching corpus: 2850, signal 186521/226411 (executing program) 2022/09/13 20:50:49 fetching corpus: 2900, signal 188209/228107 (executing program) 2022/09/13 20:50:49 fetching corpus: 2950, signal 189979/229796 (executing program) 2022/09/13 20:50:49 fetching corpus: 3000, signal 191599/231449 (executing program) 2022/09/13 20:50:49 fetching corpus: 3050, signal 192835/232745 (executing program) 2022/09/13 20:50:49 fetching corpus: 3100, signal 194313/234215 (executing program) 2022/09/13 20:50:49 fetching corpus: 3150, signal 195275/235458 (executing program) 2022/09/13 20:50:49 fetching corpus: 3200, signal 196481/236772 (executing program) 2022/09/13 20:50:50 fetching corpus: 3250, signal 197222/237859 (executing program) 2022/09/13 20:50:50 fetching corpus: 3300, signal 198177/238989 (executing program) 2022/09/13 20:50:50 fetching corpus: 3350, signal 199298/240182 (executing program) 2022/09/13 20:50:50 fetching corpus: 3400, signal 200289/241308 (executing program) 2022/09/13 20:50:50 fetching corpus: 3450, signal 201396/242481 (executing program) 2022/09/13 20:50:50 fetching corpus: 3500, signal 202817/243854 (executing program) 2022/09/13 20:50:50 fetching corpus: 3550, signal 204199/245107 (executing program) 2022/09/13 20:50:50 fetching corpus: 3600, signal 205577/246331 (executing program) 2022/09/13 20:50:51 fetching corpus: 3650, signal 206373/247312 (executing program) 2022/09/13 20:50:51 fetching corpus: 3700, signal 207793/248549 (executing program) 2022/09/13 20:50:51 fetching corpus: 3750, signal 208868/249622 (executing program) 2022/09/13 20:50:51 fetching corpus: 3800, signal 210124/250771 (executing program) 2022/09/13 20:50:51 fetching corpus: 3850, signal 211062/251739 (executing program) 2022/09/13 20:50:51 fetching corpus: 3899, signal 211597/252492 (executing program) 2022/09/13 20:50:51 fetching corpus: 3949, signal 212460/253436 (executing program) 2022/09/13 20:50:52 fetching corpus: 3999, signal 213545/254379 (executing program) 2022/09/13 20:50:52 fetching corpus: 4049, signal 214158/255166 (executing program) 2022/09/13 20:50:52 fetching corpus: 4099, signal 214642/255908 (executing program) 2022/09/13 20:50:52 fetching corpus: 4149, signal 215347/256723 (executing program) 2022/09/13 20:50:52 fetching corpus: 4199, signal 216432/257696 (executing program) 2022/09/13 20:50:52 fetching corpus: 4249, signal 217255/258509 (executing program) 2022/09/13 20:50:52 fetching corpus: 4299, signal 218523/259508 (executing program) 2022/09/13 20:50:53 fetching corpus: 4349, signal 219206/260275 (executing program) 2022/09/13 20:50:53 fetching corpus: 4399, signal 220090/261080 (executing program) 2022/09/13 20:50:53 fetching corpus: 4449, signal 221280/262017 (executing program) 2022/09/13 20:50:53 fetching corpus: 4499, signal 222433/262911 (executing program) 2022/09/13 20:50:53 fetching corpus: 4549, signal 223316/263719 (executing program) 2022/09/13 20:50:53 fetching corpus: 4599, signal 224029/264428 (executing program) 2022/09/13 20:50:53 fetching corpus: 4649, signal 224718/265063 (executing program) 2022/09/13 20:50:54 fetching corpus: 4699, signal 225272/265659 (executing program) 2022/09/13 20:50:54 fetching corpus: 4749, signal 226038/266331 (executing program) 2022/09/13 20:50:54 fetching corpus: 4799, signal 226952/267060 (executing program) 2022/09/13 20:50:54 fetching corpus: 4849, signal 227564/267684 (executing program) 2022/09/13 20:50:54 fetching corpus: 4899, signal 228344/268397 (executing program) 2022/09/13 20:50:54 fetching corpus: 4949, signal 229064/269074 (executing program) 2022/09/13 20:50:54 fetching corpus: 4999, signal 229825/269700 (executing program) 2022/09/13 20:50:55 fetching corpus: 5049, signal 230516/270340 (executing program) 2022/09/13 20:50:55 fetching corpus: 5099, signal 231180/270913 (executing program) 2022/09/13 20:50:55 fetching corpus: 5149, signal 231614/271410 (executing program) 2022/09/13 20:50:55 fetching corpus: 5199, signal 232070/271925 (executing program) 2022/09/13 20:50:55 fetching corpus: 5249, signal 232804/272495 (executing program) 2022/09/13 20:50:55 fetching corpus: 5299, signal 233387/273045 (executing program) 2022/09/13 20:50:55 fetching corpus: 5349, signal 233939/273539 (executing program) 2022/09/13 20:50:56 fetching corpus: 5399, signal 234566/274035 (executing program) 2022/09/13 20:50:56 fetching corpus: 5449, signal 235207/274583 (executing program) 2022/09/13 20:50:56 fetching corpus: 5499, signal 235717/275058 (executing program) 2022/09/13 20:50:56 fetching corpus: 5549, signal 236075/275495 (executing program) 2022/09/13 20:50:56 fetching corpus: 5599, signal 236838/276001 (executing program) 2022/09/13 20:50:56 fetching corpus: 5649, signal 237689/276541 (executing program) 2022/09/13 20:50:56 fetching corpus: 5699, signal 238377/277006 (executing program) 2022/09/13 20:50:56 fetching corpus: 5749, signal 239034/277492 (executing program) 2022/09/13 20:50:57 fetching corpus: 5799, signal 239950/277990 (executing program) 2022/09/13 20:50:57 fetching corpus: 5849, signal 240404/278382 (executing program) 2022/09/13 20:50:57 fetching corpus: 5899, signal 240809/278734 (executing program) 2022/09/13 20:50:57 fetching corpus: 5949, signal 241334/279099 (executing program) 2022/09/13 20:50:57 fetching corpus: 5999, signal 241811/279481 (executing program) 2022/09/13 20:50:57 fetching corpus: 6049, signal 242313/279877 (executing program) 2022/09/13 20:50:57 fetching corpus: 6099, signal 242795/280305 (executing program) 2022/09/13 20:50:57 fetching corpus: 6149, signal 243443/280689 (executing program) 2022/09/13 20:50:58 fetching corpus: 6199, signal 244204/281119 (executing program) 2022/09/13 20:50:58 fetching corpus: 6249, signal 244935/281542 (executing program) 2022/09/13 20:50:58 fetching corpus: 6299, signal 245389/281904 (executing program) 2022/09/13 20:50:58 fetching corpus: 6349, signal 245752/282234 (executing program) 2022/09/13 20:50:58 fetching corpus: 6399, signal 246254/282593 (executing program) 2022/09/13 20:50:58 fetching corpus: 6449, signal 247096/282995 (executing program) 2022/09/13 20:50:58 fetching corpus: 6499, signal 247526/283313 (executing program) 2022/09/13 20:50:59 fetching corpus: 6549, signal 247953/283643 (executing program) 2022/09/13 20:50:59 fetching corpus: 6599, signal 248408/283939 (executing program) 2022/09/13 20:50:59 fetching corpus: 6649, signal 248780/284249 (executing program) 2022/09/13 20:50:59 fetching corpus: 6699, signal 249630/284575 (executing program) 2022/09/13 20:50:59 fetching corpus: 6749, signal 250210/284857 (executing program) 2022/09/13 20:50:59 fetching corpus: 6799, signal 250804/285170 (executing program) 2022/09/13 20:50:59 fetching corpus: 6849, signal 251604/285439 (executing program) 2022/09/13 20:51:00 fetching corpus: 6899, signal 252123/285720 (executing program) 2022/09/13 20:51:00 fetching corpus: 6949, signal 252666/286017 (executing program) 2022/09/13 20:51:00 fetching corpus: 6999, signal 253218/286260 (executing program) 2022/09/13 20:51:00 fetching corpus: 7049, signal 253665/286291 (executing program) 2022/09/13 20:51:00 fetching corpus: 7099, signal 254261/286321 (executing program) 2022/09/13 20:51:00 fetching corpus: 7149, signal 254519/286322 (executing program) 2022/09/13 20:51:01 fetching corpus: 7199, signal 255218/286324 (executing program) 2022/09/13 20:51:01 fetching corpus: 7249, signal 255800/286325 (executing program) 2022/09/13 20:51:01 fetching corpus: 7299, signal 256144/286325 (executing program) 2022/09/13 20:51:01 fetching corpus: 7349, signal 256602/286352 (executing program) 2022/09/13 20:51:01 fetching corpus: 7399, signal 257221/286352 (executing program) 2022/09/13 20:51:01 fetching corpus: 7449, signal 257823/286383 (executing program) 2022/09/13 20:51:01 fetching corpus: 7499, signal 258185/286385 (executing program) 2022/09/13 20:51:01 fetching corpus: 7549, signal 258798/286391 (executing program) 2022/09/13 20:51:02 fetching corpus: 7599, signal 259512/286394 (executing program) 2022/09/13 20:51:02 fetching corpus: 7649, signal 259986/286402 (executing program) 2022/09/13 20:51:02 fetching corpus: 7699, signal 260653/286450 (executing program) 2022/09/13 20:51:02 fetching corpus: 7749, signal 261085/286483 (executing program) 2022/09/13 20:51:02 fetching corpus: 7799, signal 261774/286485 (executing program) 2022/09/13 20:51:02 fetching corpus: 7849, signal 262189/286523 (executing program) 2022/09/13 20:51:03 fetching corpus: 7899, signal 262807/286578 (executing program) 2022/09/13 20:51:03 fetching corpus: 7949, signal 263434/286611 (executing program) 2022/09/13 20:51:03 fetching corpus: 7999, signal 263841/286621 (executing program) 2022/09/13 20:51:03 fetching corpus: 8049, signal 264339/286623 (executing program) 2022/09/13 20:51:03 fetching corpus: 8099, signal 265114/286641 (executing program) 2022/09/13 20:51:03 fetching corpus: 8149, signal 265699/286643 (executing program) 2022/09/13 20:51:03 fetching corpus: 8199, signal 266052/286647 (executing program) 2022/09/13 20:51:04 fetching corpus: 8249, signal 266744/286662 (executing program) 2022/09/13 20:51:04 fetching corpus: 8299, signal 267163/286665 (executing program) 2022/09/13 20:51:04 fetching corpus: 8349, signal 267463/286685 (executing program) 2022/09/13 20:51:04 fetching corpus: 8399, signal 267826/286685 (executing program) 2022/09/13 20:51:04 fetching corpus: 8449, signal 268383/286690 (executing program) 2022/09/13 20:51:04 fetching corpus: 8499, signal 268854/286690 (executing program) 2022/09/13 20:51:04 fetching corpus: 8549, signal 269145/286694 (executing program) 2022/09/13 20:51:04 fetching corpus: 8599, signal 269617/286696 (executing program) 2022/09/13 20:51:04 fetching corpus: 8649, signal 269936/286711 (executing program) 2022/09/13 20:51:05 fetching corpus: 8699, signal 270352/286728 (executing program) 2022/09/13 20:51:05 fetching corpus: 8749, signal 270709/286752 (executing program) 2022/09/13 20:51:05 fetching corpus: 8799, signal 271026/286754 (executing program) 2022/09/13 20:51:05 fetching corpus: 8849, signal 271536/286778 (executing program) 2022/09/13 20:51:05 fetching corpus: 8899, signal 272098/286788 (executing program) 2022/09/13 20:51:05 fetching corpus: 8949, signal 272672/286843 (executing program) 2022/09/13 20:51:05 fetching corpus: 8999, signal 273083/286852 (executing program) 2022/09/13 20:51:06 fetching corpus: 9049, signal 273267/286856 (executing program) 2022/09/13 20:51:06 fetching corpus: 9099, signal 273526/286862 (executing program) 2022/09/13 20:51:06 fetching corpus: 9149, signal 274069/286881 (executing program) 2022/09/13 20:51:06 fetching corpus: 9199, signal 274526/286893 (executing program) 2022/09/13 20:51:06 fetching corpus: 9249, signal 275261/286917 (executing program) 2022/09/13 20:51:06 fetching corpus: 9255, signal 275334/286917 (executing program) 2022/09/13 20:51:06 fetching corpus: 9255, signal 275334/286917 (executing program) 2022/09/13 20:51:09 starting 8 fuzzer processes 20:51:09 executing program 0: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "1fe96d6eec6526b52244be485b579ef02b828a19dd082319229164665fee26599efe5c5b022a1e05c558389efc5612ba6cec9fc9629ae1d8b3d99eb7ea1ad2d414df9aca48a2effa7a9220a9675a6a2af3efedcb5254e30e31714c081e571ac0a758adefbbc2a5116bd1c416eb739299d3fc68bb587fbb5020beeab0b50c7b4ab01f1857d67ed7fa978992898a0337c231875de85eac1ec1a41e539f380e9e68d56d1ee58b4e62a0fbfcc1bbe1d572d77ef30e6d48bfed5c1108b61de327291f7db3a47688ed35ed11414420295d90c958adea39af00f2af1f8e3baac17196d864cc3076b3"}, 0xe9) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000100)) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000140)={0x1ff, 0x6}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) r1 = dup2(r0, r0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xa9a) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1a0, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_IE={0x178, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa, 0x37}}, @fast_bss_trans={0x37, 0x11e, {0x11, 0xa, "b3789783c95296ecc4c08005287b6534", "e0c115d668bc7aebdcfab2f4aeb777b7ecc4a07c8981dbb51bd727c11f9e4665", "8535ae73b46860d66d6f20499abf75d0c4426b02ca2bd32ff901ecfb0a56affe", [{0x2, 0x14, "7a554a011f5dd56464b902529f557c2775f7b38b"}, {0x2, 0x20, "9c782d80738b05e42112326a6b9b48be25f5ed4a5a3ff3b029eb3fab40c7152d"}, {0x2, 0x10, "4e89a14fd28d162d3d0d3818c7c0cab7"}, {0x4, 0x1a, "5d04ba76870a46d9dad52135cfb4a89e325cbd2e45a0ed563dc3"}, {0x4, 0xc, "c804b051e297fdb76fe2a174"}, {0x4, 0x12, "15e9ba09df5ac1243267599a290a5897ea23"}, {0x1, 0x2, "d573"}, {0x2, 0xa, "4272e10ac97f6d09a8c7"}, {0x2, 0xc, "87a9d5e04f15ff07209ea20f"}, {0x4, 0x24, "5b1ad0cffaa28669572dcb1a7b61dc9c51796ce1f61a559c651add576c0cc576ffc82438"}]}}, @random_vendor={0xdd, 0x4a, "216a5f05daeed76438917e6e623f65a46fe27fdafb5318409047c24c0df5623c8bf2c172f8cd4a78584b982094fb5da6965e69a1f69c397f180d7d8406ec6154d001ba2a54958776b689"}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000580)={0x3}) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a00)={0xd4, 0x0, &(0x7f0000000840)=[@register_looper, @acquire={0x40046305, 0x1}, @increfs_done, @decrefs={0x40046307, 0x1}, @acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/239, 0xef, 0x0, 0x31}, @flat=@handle={0x73682a85, 0x2900}}, &(0x7f0000000740)={0x0, 0x18, 0x40}}, 0x40}, @release={0x40046306, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000780)={@flat=@weak_handle={0x77682a85, 0x1000}, @flat=@binder={0x73622a85, 0xc5ab80d02973bcc, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000800)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x2}, @enter_looper], 0x85, 0x0, &(0x7f0000000940)="4f368cb4668921eba86bc053719de3d210d0235b6989c9c7b4457dc25856c553e412d2051591d3a024bc4e28029790e000e0756fb579a901334b4f8b5f74af520b7fb9adaaac422a6ffaf0d30b54a59c091cf978ac6e1e4aeabb7a9f38ff2daac22b78beeef2e171f1fdc4484c3a998adc7a0a5e9238f5ac225db9c9cf6efc333932eb4d89"}) pread64(r0, &(0x7f0000000a40)=""/97, 0x61, 0x7) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r4) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1fc, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x77}}}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@dsss={0x3, 0x1, 0xb0}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb3, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0xd4}, @peer_mgmt={0x75, 0x14, {0x1, 0x200, @void, @void, @val="52f30986be0ccceafe04fb9179fd93e4"}}, @measure_req={0x26, 0x8c, {0x10, 0x4, 0x1, "c2c6a2f0c04c95b1c4f1e692d22243ff3f65ecab6b44100f95a0067f984bebb8955fc2a2baba0e258311d79bde6e7ac04a0791bf75d46e44cc18cda7296615fb3ce1a0e77136379be8abc7327ca9aa148f10515982976188bfdba07d09b142edd18cfb43ef60e6a5a875c75f2100d6c24ce4481a1d5cfbd7f2c43d895aa8613a3b2e2a9081ff0d6f3d"}}]}, @NL80211_ATTR_IE={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xc9, 0xfa, "3bd5c768829623cc48483d0f7efe55e0a0742cb3178cb908c736f771f3446b72e49644241ff201a958db426cf60e39f55bfc92c12d8ccf77ee84ec28260a5149b4f370a99f01dedcaf784a9abbfa52be30a511db6611b975a798a690da0545966d23457c3477331c41467061ae7d74defa94ab924f0ac975109f139f41ac4f53858a5de74e9f5ba1913f337897d8f8f505394f28af0e210847b919723fa15af978fae584f6334dba158883fb941eafd32106f0bcbfc819e2c2e89d14e98f5c980d9a7d594c"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "06e8fc8531c7800ceb8f62"}], @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x4000, 0x3, 0x1, 0x0, {0x4, 0x1d, 0x0, 0x2, 0x0, 0x1}, 0x1, 0xff, 0x6}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x6, 0xfa, "f429"}]]}, 0x1fc}, 0x1, 0x0, 0x0, 0x2b1734c05a0b0897}, 0x4) 20:51:09 executing program 1: sync() syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioperm(0x6d, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x4000010, 0xffffffffffffffff, 0xbb676000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040844}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'nl80211\x00'}, {0x20, '-,--}:#\''}, {0x20, 'nl80211\x00'}, {0x20, '@{'}, {0x20, 'nl80211\x00'}, {0x20, '\\--'}], 0xa, "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"}, 0x133) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @empty, @local}, 0xc) sync() syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f0000000380), 0x9a, 0x828c0) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f00000003c0)=0x7fff, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xe0, 0x8001, 0x0, @remote, @mcast1, 0x8, 0x700, 0x753e7ccc}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x20, 0x7, 0x9, {{0x37, 0x4, 0x2, 0x8, 0xdc, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x1c, 0xd0, 0x3, 0xe, [{@loopback, 0x3}, {@multicast1, 0x1}, {@remote, 0x4}]}, @rr={0x7, 0x13, 0xe6, [@private=0xa010100, @empty, @remote, @private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0x3f, 0x1, 0x6, [{@multicast1, 0xffff0000}, {@multicast2, 0xfffffffc}]}, @lsrr={0x83, 0xf, 0x3a, [@rand_addr=0x64010101, @remote, @empty]}, @cipso={0x86, 0x38, 0x2, [{0x1, 0x9, "6c6de3d0a0c980"}, {0x1, 0x6, "94f7442a"}, {0x6, 0x3, "ec"}, {0x0, 0x7, "8aaf10860c"}, {0x5, 0x10, "00c1b3d27c3e71eb69dbd7b30a20"}, {0x1, 0x9, "b4ca0ec1d99179"}]}, @ssrr={0x89, 0xb, 0xdb, [@dev={0xac, 0x14, 0x14, 0x5}, @broadcast]}, @cipso={0x86, 0x2f, 0x3, [{0x0, 0xd, "e3836b1120208b811e6ffc"}, {0x6, 0x10, "6f0f7f4d572ef1b4307862957fd8"}, {0x6, 0x7, "fb1067cc36"}, {0x6, 0x5, "bfca09"}]}, @generic={0x89, 0x3, "e3"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x81}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x20}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x8}, 0x40800) r5 = openat2(r2, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x88202, 0xb6, 0x18}, 0x18) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xac, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xed}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xce5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xffff}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 20:51:09 executing program 3: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x40, 0x8, 0x20, @dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x7, 0x10001}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x1) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x12c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x90) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48041}, 0x8081) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000007c0)={@local, 0x5c, r3}) getsockname$packet(r2, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000980)={'gre0\x00', r1, 0x7, 0x7, 0x3, 0xff, {{0x14, 0x4, 0x0, 0x3, 0x50, 0x68, 0x0, 0xf8, 0x0, 0x0, @local, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x65, [@local]}, @lsrr={0x83, 0x2b, 0x60, [@broadcast, @loopback, @rand_addr=0x64010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010100, @empty, @loopback, @multicast1]}]}}}}}) accept$packet(r2, &(0x7f0000000a40)={0x11, 0x0, 0x0}, &(0x7f0000000a80)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ac0)={0x43c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x1, 0x0, 0x4}, {0x8, 0x9, 0x9, 0x7fff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x150, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x8, 0x6, 0x5}, {0xfff, 0x2, 0x2, 0xfe}, {0x3, 0xe0, 0x7, 0x9}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x2, 0x9, 0x6}, {0xfffb, 0x5, 0xc3}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xff, 0x7f, 0x3, 0x1}, {0x3f1, 0x4, 0xf9, 0x81}, {0x2, 0x2, 0x6, 0xe000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r1}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000f80), 0x420600, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r10, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040891) [ 77.415655] audit: type=1400 audit(1663102269.280:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:51:09 executing program 2: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4033}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d295cde}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc564}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ce0f7f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77dc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37dadc6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54df0617}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf20c815}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65b6289b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5020f9e0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x549d602d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13282ed4}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf7c2f04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x521091b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2475e164}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e0d893c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000004) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8002}, 0x20040010) r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x8, 0x40001) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000004440)={'ip6gre0\x00', &(0x7f00000043c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x0, 0x3f, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7800, 0x7800, 0x81, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004500)={'syztnl1\x00', &(0x7f0000004480)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x9, 0x7, 0x2b, @local, @mcast1, 0x8000, 0x80, 0x7, 0xfffffeff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000045c0)={'ip_vti0\x00', &(0x7f0000004540)={'syztnl0\x00', 0x0, 0x40, 0x8, 0x401, 0xc2, {{0x10, 0x4, 0x0, 0x2, 0x40, 0x67, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x3, 0xe, "a004711f1fb4218f8adc63d5"}, {0x7, 0xa, "a1cc07192313c1cb"}, {0x2, 0xe, "90416e55a17e610327ab4f4b"}]}]}}}}}) accept4$packet(0xffffffffffffffff, &(0x7f0000004600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004640)=0x14, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000004680)={0x0, @generic={0x2, "d176f77286b5699a8aae031911c3"}, @can={0x1d, 0x0}, @nl=@kern={0x10, 0x0, 0x0, 0x8000000}, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x8, 0x4, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000004780)={'ip6_vti0\x00', &(0x7f0000004700)={'sit0\x00', 0x0, 0x29, 0xc5, 0x2, 0x8001, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x1, 0x1ff, 0x1f}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000004840)={'ip6gre0\x00', &(0x7f00000047c0)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x0, 0x5ac, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8081, 0x8, 0x401, 0x2b3}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004880)={{{@in=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000004980)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000053c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005380)={&(0x7f00000049c0)={0x984, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe334}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff6db}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0x238, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff21c}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x101, 0x7b, 0x9, 0x5}, {0x5, 0x20, 0x0, 0xfffffff8}, {0x6, 0x6, 0x3, 0x1ff}, {0x80, 0x6, 0x1f, 0x4}, {0x8001, 0x1, 0x4, 0x85}, {0x9, 0x80, 0x6, 0x400}, {0x0, 0x5}, {0x1f, 0x3, 0xe, 0x80000000}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5f}}, {0x8}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x20, 0x3, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0x4, 0x1, 0x1}, {0xa3, 0xbc, 0x4, 0x7}, {0x360b, 0xfe, 0xb2, 0xd9c}, {0xfffb, 0x9c, 0x2, 0x49d}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x4, 0x3, 0x3}]}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x70b}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1fe00}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x984}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000054c0)={&(0x7f0000005400), 0xc, &(0x7f0000005480)={&(0x7f0000005440)={0x20, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000005540), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000005640)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005600)={&(0x7f0000005580)={0x60, r10, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5af}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x44) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005700)={'sit0\x00', &(0x7f0000005680)={'syztnl2\x00', r6, 0x29, 0x7f, 0x80, 0x1, 0x10, @private2, @remote, 0x8, 0x7, 0x0, 0x4}}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000005740)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x2, 0x1c3, 0x1, 0x400, 0x7, 0x2000000, r11}) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f00000057c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xad, 0x9, 0x8001, 0x900, 0x1, 0x120250, r9}) 20:51:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xedc, 0x8, 0x6, 0x34, 0x3f}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) fcntl$getflags(r1, 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0xf2) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:wireless_device_t:s0\x00', 0x27, 0x1) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0xc00) clock_gettime(0x0, &(0x7f0000005740)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f00000002c0)=""/136, 0x88}], 0x4}, 0x78a}, {{&(0x7f00000003c0)=@pptp, 0x80, &(0x7f0000001740)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/140, 0x8c}, {&(0x7f0000001500)=""/113, 0x71}, {&(0x7f0000001580)=""/217, 0xd9}, {&(0x7f0000001680)=""/111, 0x6f}, {&(0x7f0000001700)=""/42, 0x2a}], 0x6}, 0x1}, {{&(0x7f00000017c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001840)=""/72, 0x48}, {&(0x7f00000018c0)=""/182, 0xb6}, {&(0x7f0000001980)}, {&(0x7f00000019c0)=""/208, 0xd0}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/160, 0xa0}, {&(0x7f0000001c40)=""/237, 0xed}, {&(0x7f0000001d40)=""/142, 0x8e}], 0x8, &(0x7f0000001e80)=""/146, 0x92}, 0x2}, {{&(0x7f0000001f40)=@in6, 0x80, &(0x7f0000004580)=[{&(0x7f0000001fc0)=""/32, 0x20}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/193, 0xc1}, {&(0x7f0000003100)=""/92, 0x5c}, {&(0x7f0000003180)=""/208, 0xd0}, {&(0x7f0000003280)=""/250, 0xfa}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/110, 0x6e}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/191, 0xbf}], 0xa, &(0x7f0000004640)=""/4096, 0x1000}, 0x4}], 0x4, 0x2160, &(0x7f0000005780)={r4, r5+10000000}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000057c0)) r6 = signalfd(r1, &(0x7f0000005800)={[0x8]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000005840)={0x80000000}) r7 = syz_open_dev$vcsu(&(0x7f0000005880), 0x5, 0x1) clock_gettime(0x0, &(0x7f000000b040)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000ae40)=[{{&(0x7f00000058c0)=@abs, 0x6e, &(0x7f0000007bc0)=[{&(0x7f0000005940)=""/22, 0x16}, {&(0x7f0000005980)=""/162, 0xa2}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/4096, 0x1000}, {&(0x7f0000007a40)=""/80, 0x50}, {&(0x7f0000007ac0)=""/150, 0x96}, {&(0x7f0000007b80)=""/45, 0x2d}], 0x7, &(0x7f0000007c40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x0, &(0x7f0000009340)=[{&(0x7f0000007cc0)=""/4096, 0x1000}, {&(0x7f0000008cc0)=""/252, 0xfc}, {&(0x7f0000008dc0)=""/41, 0x29}, {&(0x7f0000008e00)=""/238, 0xee}, {&(0x7f0000008f00)=""/12, 0xc}, {&(0x7f0000008f40)=""/172, 0xac}, {&(0x7f0000009000)=""/220, 0xdc}, {&(0x7f0000009100)=""/184, 0xb8}, {&(0x7f00000091c0)=""/112, 0x70}, {&(0x7f0000009240)=""/194, 0xc2}], 0xa, &(0x7f0000009400)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000009680)=[{&(0x7f0000009440)=""/196, 0xc4}, {&(0x7f0000009540)}, {&(0x7f0000009580)=""/116, 0x74}, {&(0x7f0000009600)=""/82, 0x52}], 0x4, &(0x7f00000096c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000009780), 0x6e, &(0x7f0000009900)=[{&(0x7f0000009800)=""/218, 0xda}], 0x1}}, {{&(0x7f0000009940)=@abs, 0x6e, &(0x7f0000009dc0)=[{&(0x7f00000099c0)=""/197, 0xc5}, {&(0x7f0000009ac0)=""/20, 0x14}, {&(0x7f0000009b00)=""/38, 0x26}, {&(0x7f0000009b40)=""/4, 0x4}, {&(0x7f0000009b80)=""/165, 0xa5}, {&(0x7f0000009c40)}, {&(0x7f0000009c80)=""/25, 0x19}, {&(0x7f0000009cc0)=""/249, 0xf9}], 0x8, &(0x7f0000009e40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f000000a540)=[{&(0x7f0000009e80)=""/172, 0xac}, {&(0x7f0000009f40)}, {&(0x7f0000009f80)=""/124, 0x7c}, {&(0x7f000000a000)=""/195, 0xc3}, {&(0x7f000000a100)=""/136, 0x88}, {&(0x7f000000a1c0)=""/119, 0x77}, {&(0x7f000000a240)=""/247, 0xf7}, {&(0x7f000000a340)=""/129, 0x81}, {&(0x7f000000a400)=""/156, 0x9c}, {&(0x7f000000a4c0)=""/68, 0x44}], 0xa}}, {{&(0x7f000000a600), 0x6e, &(0x7f000000aa40)=[{&(0x7f000000a680)=""/145, 0x91}, {&(0x7f000000a740)=""/114, 0x72}, {&(0x7f000000a7c0)=""/57, 0x39}, {&(0x7f000000a800)=""/1, 0x1}, {&(0x7f000000a840)=""/4, 0x4}, {&(0x7f000000a880)=""/43, 0x2b}, {&(0x7f000000a8c0)=""/113, 0x71}, {&(0x7f000000a940)=""/75, 0x4b}, {&(0x7f000000a9c0)=""/21, 0x15}, {&(0x7f000000aa00)=""/7, 0x7}], 0xa, &(0x7f000000ab00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f000000ac80), 0x6e, &(0x7f000000ad80)=[{&(0x7f000000ad00)=""/79, 0x4f}], 0x1, &(0x7f000000adc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}], 0x8, 0x10000, &(0x7f000000b080)={r8, r9+10000000}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r13, &(0x7f000000b0c0)) clock_gettime(0x3, &(0x7f000000b100)) ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f000000b140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmmsg$unix(r11, &(0x7f000000e000)=[{{&(0x7f000000b380)=@abs, 0x6e, &(0x7f000000b5c0)=[{&(0x7f000000b400)=""/148, 0x94}, {&(0x7f000000b4c0)=""/159, 0x9f}, {&(0x7f000000b580)=""/9, 0x9}], 0x3, &(0x7f000000b600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f000000b6c0)=@abs, 0x6e, &(0x7f000000b840)=[{&(0x7f000000b740)=""/230, 0xe6}], 0x1, &(0x7f000000b880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f000000b8c0), 0x6e, &(0x7f000000dc00)=[{&(0x7f000000b940)=""/29, 0x1d}, {&(0x7f000000b980)=""/4096, 0x1000}, {&(0x7f000000c980)=""/14, 0xe}, {&(0x7f000000c9c0)=""/10, 0xa}, {&(0x7f000000ca00)=""/231, 0xe7}, {&(0x7f000000cb00)=""/171, 0xab}, {&(0x7f000000cbc0)=""/29, 0x1d}, {&(0x7f000000cc00)=""/4096, 0x1000}], 0x8, &(0x7f000000dc80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f000000dd00), 0x6e, &(0x7f000000df00)=[{&(0x7f000000dd80)=""/49, 0x31}, {&(0x7f000000ddc0)=""/81, 0x51}, {&(0x7f000000de40)=""/99, 0x63}, {&(0x7f000000dec0)=""/18, 0x12}], 0x4, &(0x7f000000df40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0x4, 0x10003, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r14, 0xc018937c, &(0x7f000000e100)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) 20:51:09 executing program 6: ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x1ff) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0xfc00, 0x7}) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000080)="a109ae97ed135fa3818dc70e4d32e891f4e0c2c455421ae5b6147452bba6106a3310b660a7e0f41a17be4c9779b6e234281719190b0c92b01f403a8a66448eefa0777c95c96827f39222a0bec24576eb0756b0b04a1da57732ac7197e5f91e34ca0269345655e69b09d1d7f0654c7cf79fb4aad28de361c553ae6f118c70775d6eb2724e04c295a5734dd0cfe1bb90e2c10bdfd2a857c775d3c617f5862b5120a3344e337a4d") ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000200)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000240)={0x7, "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"}) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000480)=0x4) preadv2(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/242, 0xf2}], 0x1, 0x1, 0x0, 0x18) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000600)={0x0, 0x6e1, [0xcf, 0xffff, 0x3, 0x8, 0x0, 0x3]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000680)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd2) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000006c0)={0x3, 0x3, 0x2, 0x9, 0x9, "3499d020a23a5a102818b45e9acd11e78f4286"}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000700), 0x8e6ca58d6837ba60, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000740)={0x1, 0x1, 0x1}) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000007c0)) 20:51:09 executing program 5: ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = timerfd_create(0x4, 0x80000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x1, [0x80, 0x40, 0x7ff, 0x1, 0x5, 0x7]}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x967a917861e1898e) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="9f9fd855812e77fbe4896027feada47a4a89c259c74b228bb1", 0x19, 0x800}, {&(0x7f0000000140)="168ac4dceac2baf030709e22", 0xc, 0xec90}], 0x400, &(0x7f00000001c0)={[{@nojoliet}, {@dmode={'dmode', 0x3d, 0x100}}, {@map_off}, {@dmode={'dmode', 0x3d, 0x8}}], [{@smackfsdef={'smackfsdef', 0x3d, '.^'}}, {@euid_lt={'euid<', 0xee01}}, {@permit_directio}, {@appraise_type}]}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r3 = dup2(r1, r2) sync_file_range(r1, 0x400, 0x2, 0x0) timerfd_gettime(r3, &(0x7f00000002c0)) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000400)) read(r1, &(0x7f0000000440)=""/123, 0x7b) r4 = open_tree(r3, &(0x7f00000004c0)='./file0\x00', 0x81000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r4, 0xb464e000) bind$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r5 = memfd_secret(0x80000) connect$unix(r5, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket$packet(0x11, 0x3, 0x300) sendfile(r6, r5, 0x0, 0x2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x120, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 20:51:09 executing program 7: r0 = dup(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x3f, 0xb5, 0x47, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8000, 0x5e5, 0xffff0001}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r1, 0x29, 0x4, 0x3, 0x7, 0x4, @local, @remote, 0x1, 0x20, 0x8000, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r1, 0x4, 0x7f, 0x2, 0x4, 0x44, @empty, @private2, 0x700, 0x7, 0x100, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x811) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xfb}}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={0xffffffffffffffff, 0x9, 0x7ff, 0x2}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r6, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r8, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3e49}]}, 0x50}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r6, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x89f9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8040) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000e80)={'ip6tnl0\x00', &(0x7f0000000e00)={'sit0\x00', r2, 0x2f, 0x3, 0x31, 0x3, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x8000, 0x8, 0x6}}) r9 = accept4$bt_l2cap(r0, &(0x7f0000000ec0)={0x1f, 0x0, @none}, &(0x7f0000000f00)=0xe, 0x400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r9) lsetxattr$trusted_overlay_redirect(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0x8, 0x0) accept(0xffffffffffffffff, &(0x7f0000001040)=@generic, &(0x7f00000010c0)=0x80) [ 78.677572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.679630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.695125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.695545] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.703569] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.703757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.704677] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.705341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.707259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.709000] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.709935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.710987] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.711829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.712917] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.713826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.714575] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.715178] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.716593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.719408] Bluetooth: hci2: HCI_REQ-0x0c1a [ 78.721705] Bluetooth: hci0: HCI_REQ-0x0c1a [ 78.741154] Bluetooth: hci1: HCI_REQ-0x0c1a [ 78.802055] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.804864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.805000] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.812476] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.813733] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.814845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.815937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.817597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.818160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.819118] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.821131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.822363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.834171] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.835185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.835908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.836864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.838163] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 78.838884] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.839646] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.840197] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 78.840931] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.841720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.842346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.843213] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.853388] Bluetooth: hci7: HCI_REQ-0x0c1a [ 78.861638] Bluetooth: hci5: HCI_REQ-0x0c1a [ 78.862552] Bluetooth: hci3: HCI_REQ-0x0c1a [ 78.863954] Bluetooth: hci4: HCI_REQ-0x0c1a [ 80.752450] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 80.753020] Bluetooth: hci0: command 0x0409 tx timeout [ 80.754352] Bluetooth: hci2: command 0x0409 tx timeout [ 80.816856] Bluetooth: hci1: command 0x0409 tx timeout [ 80.944379] Bluetooth: hci3: command 0x0409 tx timeout [ 80.944980] Bluetooth: hci7: command 0x0409 tx timeout [ 80.945456] Bluetooth: hci4: command 0x0409 tx timeout [ 80.945976] Bluetooth: hci5: command 0x0409 tx timeout [ 82.801399] Bluetooth: hci2: command 0x041b tx timeout [ 82.801932] Bluetooth: hci0: command 0x041b tx timeout [ 82.867531] Bluetooth: hci1: command 0x041b tx timeout [ 82.992334] Bluetooth: hci7: command 0x041b tx timeout [ 82.993397] Bluetooth: hci5: command 0x041b tx timeout [ 82.993915] Bluetooth: hci4: command 0x041b tx timeout [ 82.994384] Bluetooth: hci3: command 0x041b tx timeout [ 84.180777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.183520] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.184191] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.186414] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.187380] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.188083] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.190744] Bluetooth: hci6: HCI_REQ-0x0c1a [ 84.848393] Bluetooth: hci0: command 0x040f tx timeout [ 84.848882] Bluetooth: hci2: command 0x040f tx timeout [ 84.912615] Bluetooth: hci1: command 0x040f tx timeout [ 85.041485] Bluetooth: hci3: command 0x040f tx timeout [ 85.041967] Bluetooth: hci4: command 0x040f tx timeout [ 85.042408] Bluetooth: hci5: command 0x040f tx timeout [ 85.042797] Bluetooth: hci7: command 0x040f tx timeout [ 86.192406] Bluetooth: hci6: command 0x0409 tx timeout [ 86.896349] Bluetooth: hci2: command 0x0419 tx timeout [ 86.896856] Bluetooth: hci0: command 0x0419 tx timeout [ 86.960404] Bluetooth: hci1: command 0x0419 tx timeout [ 87.088421] Bluetooth: hci7: command 0x0419 tx timeout [ 87.089337] Bluetooth: hci5: command 0x0419 tx timeout [ 87.089755] Bluetooth: hci4: command 0x0419 tx timeout [ 87.090131] Bluetooth: hci3: command 0x0419 tx timeout [ 88.240349] Bluetooth: hci6: command 0x041b tx timeout [ 90.288440] Bluetooth: hci6: command 0x040f tx timeout [ 92.336347] Bluetooth: hci6: command 0x0419 tx timeout 20:52:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r3, r3, 0x0, 0x100000) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f00000006c0)={0x3, &(0x7f0000000640)=[{0x7, 0x50, &(0x7f0000000480)="29de1bf29a9ea34d2094b2c6f69fa33e19a47fd4fba75c9226f1f5a7c80344ade95894a9fbdce562bd762423c28296d5b0096169097bb61efff0e9023a19d6abcbcff89968ee912bac1b860bc37ca630", 0x1}, {0x200, 0xd0, &(0x7f0000000500)="84bf3a876dad5e7c2ee64249ae82a6c56102f47df70d06a10da5aa3f292df30f4875ef105dd16729eae1f641f2e09f0817e46f7b4cfd7e8d16ce7f6499f845b917b7322b6568867b94c03cedaab84e59a644d88538e978b00bb1a3fc2fc7b573475ed3dd74c383398f02db251e89b34cfcc2dad37da4f8b43dbb3a0422e81832d8dd4eba1879fa7d3a0576b7b28f57221163632f6797260501bfbb24d382a34a908bf832c7ac9e766e6bb4d4ce1410ba3ab427fac87b7e6e2a6c93e3493c26a810bce13bdd22db674ec29abdbb368d88"}, {0x5, 0x25, &(0x7f0000000600)="d8e51636db3626f2f19cb59a18400d93b65b7c68cae18e04ef9896015e6113e6f8a4ee686c"}]}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="51a18263b7ba7a660d7c5c5529020e20d9f80dcc2762d45f747f3d79771cd9ac90f7a9f46e", 0x25}, {&(0x7f0000000180)="6a0286c19ccb17ea2ff51d7aebde1991b36306558ca1f9545994195d3da7819a3267d8962a4b96726964903001f62011bdc60d20a503350f585c8de55c375866749a6345dc28a018c5eadedbf57fe0b09997deabcffc9d339fe212c59170079f98a45feb06e6c9d1419f97db94846791870a4b8ed432aff754314be9acc82c1e4be3e3f6efbe799255a6b87f8420c828c989433b071698c703d396d9130e8e695924d4917e788bc6db53a4ae8fb6926fe328663c5054fa1d6964609713a89732d2bba629ae06", 0xc6}, {&(0x7f0000000300)="0e2ac7d910c662eade81f9bb4727b7d7fc6910d60c072edddb200ad8e11c539c8369f6186266e27b7fd428d1a516f23349db75dee5bfac4f5ca218bcf1f88b7f8e03340dd4722daa3cd39dc4b11605f3bd0b8fac7030789f72c4ec7a7a529d9740c81a80404e16c99ccca4bae26bb4db8b6c46267c71e280fdac07e9d506dd0614f363d5b44b1b782e4c3623", 0x8c}, {&(0x7f00000003c0)="ad550dba4e5dddc8a5c5fa6aca274c9b700fea76a39424501e848c777fd5b4d43f54be44675cef976e0e413e139e2949387ba6bd2590996b3ec8c8819e116809306c806f30ad37cf4b3e12faa3be40bdf55152ff74ad64d92d2bc8989bc7b7a6213c23adc4d3e17b3006ec0a3eb3631d0ebc970f59199e94cc14c1e4839d720fbbc7dab2154cf9f9f553fac58d5685dfb622aecc45134ad4e0ac3cc1795c0dc58e294e9728a895d216feb521bd9525f3c17a50ba9834", 0xb6}], 0x4, 0x8) [ 129.240019] audit: type=1400 audit(1663102321.104:7): avc: denied { open } for pid=3830 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.244433] audit: type=1400 audit(1663102321.105:8): avc: denied { kernel } for pid=3830 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.269315] ------------[ cut here ]------------ [ 129.269348] [ 129.269352] ====================================================== [ 129.269359] WARNING: possible circular locking dependency detected [ 129.269365] 6.0.0-rc5-next-20220913 #1 Not tainted [ 129.269377] ------------------------------------------------------ [ 129.269382] syz-executor.2/3834 is trying to acquire lock: [ 129.269393] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 129.269453] [ 129.269453] but task is already holding lock: [ 129.269458] ffff88800dd3dc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.269506] [ 129.269506] which lock already depends on the new lock. [ 129.269506] [ 129.269511] [ 129.269511] the existing dependency chain (in reverse order) is: [ 129.269517] [ 129.269517] -> #3 (&ctx->lock){....}-{2:2}: [ 129.269542] _raw_spin_lock+0x2a/0x40 [ 129.269571] __perf_event_task_sched_out+0x53b/0x18d0 [ 129.269593] __schedule+0xedd/0x2470 [ 129.269611] schedule+0xda/0x1b0 [ 129.269628] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.269663] syscall_exit_to_user_mode+0x19/0x40 [ 129.269694] do_syscall_64+0x48/0x90 [ 129.269718] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.269748] [ 129.269748] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 129.269773] _raw_spin_lock_nested+0x30/0x40 [ 129.269800] raw_spin_rq_lock_nested+0x1e/0x30 [ 129.269822] task_fork_fair+0x63/0x4d0 [ 129.269852] sched_cgroup_fork+0x3d0/0x540 [ 129.269877] copy_process+0x3f9e/0x6df0 [ 129.269895] kernel_clone+0xe7/0x890 [ 129.269913] user_mode_thread+0xad/0xf0 [ 129.269931] rest_init+0x24/0x250 [ 129.269960] arch_call_rest_init+0xf/0x14 [ 129.269993] start_kernel+0x4c1/0x4e6 [ 129.270023] secondary_startup_64_no_verify+0xe0/0xeb [ 129.270048] [ 129.270048] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 129.270073] _raw_spin_lock_irqsave+0x39/0x60 [ 129.270100] try_to_wake_up+0xab/0x1920 [ 129.270123] up+0x75/0xb0 [ 129.270144] __up_console_sem+0x6e/0x80 [ 129.270172] console_unlock+0x46a/0x590 [ 129.270200] vprintk_emit+0x1bd/0x560 [ 129.270229] vprintk+0x84/0xa0 [ 129.270258] _printk+0xba/0xf1 [ 129.270288] kauditd_hold_skb.cold+0x3f/0x4e [ 129.270313] kauditd_send_queue+0x233/0x290 [ 129.270338] kauditd_thread+0x5da/0x9a0 [ 129.270363] kthread+0x2ed/0x3a0 [ 129.270389] ret_from_fork+0x22/0x30 [ 129.270411] [ 129.270411] -> #0 ((console_sem).lock){....}-{2:2}: [ 129.270436] __lock_acquire+0x2a02/0x5e70 [ 129.270466] lock_acquire+0x1a2/0x530 [ 129.270494] _raw_spin_lock_irqsave+0x39/0x60 [ 129.270521] down_trylock+0xe/0x70 [ 129.270543] __down_trylock_console_sem+0x3b/0xd0 [ 129.270572] vprintk_emit+0x16b/0x560 [ 129.270601] vprintk+0x84/0xa0 [ 129.270630] _printk+0xba/0xf1 [ 129.270659] report_bug.cold+0x72/0xab [ 129.270681] handle_bug+0x3c/0x70 [ 129.270703] exc_invalid_op+0x14/0x50 [ 129.270727] asm_exc_invalid_op+0x16/0x20 [ 129.270756] group_sched_out.part.0+0x2c7/0x460 [ 129.270775] ctx_sched_out+0x8f1/0xc10 [ 129.270792] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.270815] __schedule+0xedd/0x2470 [ 129.270832] schedule+0xda/0x1b0 [ 129.270849] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.270883] syscall_exit_to_user_mode+0x19/0x40 [ 129.270914] do_syscall_64+0x48/0x90 [ 129.270937] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.270967] [ 129.270967] other info that might help us debug this: [ 129.270967] [ 129.270972] Chain exists of: [ 129.270972] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 129.270972] [ 129.271000] Possible unsafe locking scenario: [ 129.271000] [ 129.271004] CPU0 CPU1 [ 129.271008] ---- ---- [ 129.271012] lock(&ctx->lock); [ 129.271022] lock(&rq->__lock); [ 129.271033] lock(&ctx->lock); [ 129.271045] lock((console_sem).lock); [ 129.271055] [ 129.271055] *** DEADLOCK *** [ 129.271055] [ 129.271059] 2 locks held by syz-executor.2/3834: [ 129.271071] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 129.271118] #1: ffff88800dd3dc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.271169] [ 129.271169] stack backtrace: [ 129.271173] CPU: 1 PID: 3834 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220913 #1 [ 129.271196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.271210] Call Trace: [ 129.271216] [ 129.271222] dump_stack_lvl+0x8b/0xb3 [ 129.271248] check_noncircular+0x263/0x2e0 [ 129.271278] ? format_decode+0x26c/0xb50 [ 129.271304] ? print_circular_bug+0x450/0x450 [ 129.271335] ? enable_ptr_key_workfn+0x20/0x20 [ 129.271362] ? format_decode+0x26c/0xb50 [ 129.271390] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 129.271422] __lock_acquire+0x2a02/0x5e70 [ 129.271462] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 129.271503] lock_acquire+0x1a2/0x530 [ 129.271533] ? down_trylock+0xe/0x70 [ 129.271559] ? rcu_read_unlock+0x40/0x40 [ 129.271597] ? vprintk+0x84/0xa0 [ 129.271629] _raw_spin_lock_irqsave+0x39/0x60 [ 129.271657] ? down_trylock+0xe/0x70 [ 129.271682] down_trylock+0xe/0x70 [ 129.271706] ? vprintk+0x84/0xa0 [ 129.271736] __down_trylock_console_sem+0x3b/0xd0 [ 129.271768] vprintk_emit+0x16b/0x560 [ 129.271802] vprintk+0x84/0xa0 [ 129.271834] _printk+0xba/0xf1 [ 129.271865] ? record_print_text.cold+0x16/0x16 [ 129.271928] ? report_bug.cold+0x66/0xab [ 129.271954] ? group_sched_out.part.0+0x2c7/0x460 [ 129.271975] report_bug.cold+0x72/0xab [ 129.272002] handle_bug+0x3c/0x70 [ 129.272027] exc_invalid_op+0x14/0x50 [ 129.272053] asm_exc_invalid_op+0x16/0x20 [ 129.272083] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.272107] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.272128] RSP: 0018:ffff88801ec97c48 EFLAGS: 00010006 [ 129.272145] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.272159] RDX: ffff88800bf49ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 129.272173] RBP: ffff888015d68000 R08: 0000000000000005 R09: 0000000000000001 [ 129.272187] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800dd3dc00 [ 129.272201] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 129.272221] ? group_sched_out.part.0+0x2c7/0x460 [ 129.272248] ? group_sched_out.part.0+0x2c7/0x460 [ 129.272273] ctx_sched_out+0x8f1/0xc10 [ 129.272296] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.272325] ? lock_is_held_type+0xd7/0x130 [ 129.272358] ? __perf_cgroup_move+0x160/0x160 [ 129.272379] ? set_next_entity+0x304/0x550 [ 129.272411] ? update_curr+0x267/0x740 [ 129.272444] ? lock_is_held_type+0xd7/0x130 [ 129.272478] __schedule+0xedd/0x2470 [ 129.272502] ? io_schedule_timeout+0x150/0x150 [ 129.272525] ? rcu_read_lock_sched_held+0x3e/0x80 [ 129.272561] schedule+0xda/0x1b0 [ 129.272581] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.272618] syscall_exit_to_user_mode+0x19/0x40 [ 129.272651] do_syscall_64+0x48/0x90 [ 129.272676] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.272708] RIP: 0033:0x7f235fe96b19 [ 129.272723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.272744] RSP: 002b:00007f235d40c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.272763] RAX: 0000000000000001 RBX: 00007f235ffa9f68 RCX: 00007f235fe96b19 [ 129.272777] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f235ffa9f6c [ 129.272791] RBP: 00007f235ffa9f60 R08: 000000000000000e R09: 0000000000000000 [ 129.272805] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f235ffa9f6c [ 129.272818] R13: 00007ffcfc718b4f R14: 00007f235d40c300 R15: 0000000000022000 [ 129.272842] [ 129.375541] WARNING: CPU: 1 PID: 3834 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 129.376817] Modules linked in: [ 129.377266] CPU: 1 PID: 3834 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220913 #1 [ 129.378375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.379921] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.380670] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.383152] RSP: 0018:ffff88801ec97c48 EFLAGS: 00010006 [ 129.383909] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.384898] RDX: ffff88800bf49ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 129.385879] RBP: ffff888015d68000 R08: 0000000000000005 R09: 0000000000000001 [ 129.386859] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800dd3dc00 [ 129.387838] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 129.388833] FS: 00007f235d40c700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 129.389922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.390726] CR2: 00007f12cb00b028 CR3: 0000000041746000 CR4: 0000000000350ee0 [ 129.391707] Call Trace: [ 129.392084] [ 129.392408] ctx_sched_out+0x8f1/0xc10 [ 129.392960] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.393681] ? lock_is_held_type+0xd7/0x130 [ 129.394293] ? __perf_cgroup_move+0x160/0x160 [ 129.394927] ? set_next_entity+0x304/0x550 [ 129.395533] ? update_curr+0x267/0x740 [ 129.396097] ? lock_is_held_type+0xd7/0x130 [ 129.396701] __schedule+0xedd/0x2470 [ 129.397223] ? io_schedule_timeout+0x150/0x150 [ 129.397866] ? rcu_read_lock_sched_held+0x3e/0x80 [ 129.398553] schedule+0xda/0x1b0 [ 129.399034] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.399726] syscall_exit_to_user_mode+0x19/0x40 [ 129.400409] do_syscall_64+0x48/0x90 [ 129.400935] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.401662] RIP: 0033:0x7f235fe96b19 [ 129.402178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.404695] RSP: 002b:00007f235d40c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.405734] RAX: 0000000000000001 RBX: 00007f235ffa9f68 RCX: 00007f235fe96b19 [ 129.406708] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f235ffa9f6c [ 129.407686] RBP: 00007f235ffa9f60 R08: 000000000000000e R09: 0000000000000000 [ 129.408669] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f235ffa9f6c [ 129.409634] R13: 00007ffcfc718b4f R14: 00007f235d40c300 R15: 0000000000022000 [ 129.410619] [ 129.410947] irq event stamp: 1114 [ 129.411416] hardirqs last enabled at (1113): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 129.412707] hardirqs last disabled at (1114): [] __schedule+0x1225/0x2470 [ 129.413842] softirqs last enabled at (890): [] __irq_exit_rcu+0x11b/0x180 [ 129.415021] softirqs last disabled at (873): [] __irq_exit_rcu+0x11b/0x180 [ 129.416202] ---[ end trace 0000000000000000 ]--- [ 129.594314] hrtimer: interrupt took 18605 ns [ 129.641606] audit: type=1400 audit(1663102321.507:9): avc: denied { write } for pid=3830 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.150473] loop5: detected capacity change from 0 to 236 20:52:02 executing program 5: ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = timerfd_create(0x4, 0x80000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x1, [0x80, 0x40, 0x7ff, 0x1, 0x5, 0x7]}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x967a917861e1898e) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="9f9fd855812e77fbe4896027feada47a4a89c259c74b228bb1", 0x19, 0x800}, {&(0x7f0000000140)="168ac4dceac2baf030709e22", 0xc, 0xec90}], 0x400, &(0x7f00000001c0)={[{@nojoliet}, {@dmode={'dmode', 0x3d, 0x100}}, {@map_off}, {@dmode={'dmode', 0x3d, 0x8}}], [{@smackfsdef={'smackfsdef', 0x3d, '.^'}}, {@euid_lt={'euid<', 0xee01}}, {@permit_directio}, {@appraise_type}]}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r3 = dup2(r1, r2) sync_file_range(r1, 0x400, 0x2, 0x0) timerfd_gettime(r3, &(0x7f00000002c0)) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000400)) read(r1, &(0x7f0000000440)=""/123, 0x7b) r4 = open_tree(r3, &(0x7f00000004c0)='./file0\x00', 0x81000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r4, 0xb464e000) bind$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r5 = memfd_secret(0x80000) connect$unix(r5, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket$packet(0x11, 0x3, 0x300) sendfile(r6, r5, 0x0, 0x2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x120, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 20:52:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r3, r3, 0x0, 0x100000) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f00000006c0)={0x3, &(0x7f0000000640)=[{0x7, 0x50, &(0x7f0000000480)="29de1bf29a9ea34d2094b2c6f69fa33e19a47fd4fba75c9226f1f5a7c80344ade95894a9fbdce562bd762423c28296d5b0096169097bb61efff0e9023a19d6abcbcff89968ee912bac1b860bc37ca630", 0x1}, {0x200, 0xd0, &(0x7f0000000500)="84bf3a876dad5e7c2ee64249ae82a6c56102f47df70d06a10da5aa3f292df30f4875ef105dd16729eae1f641f2e09f0817e46f7b4cfd7e8d16ce7f6499f845b917b7322b6568867b94c03cedaab84e59a644d88538e978b00bb1a3fc2fc7b573475ed3dd74c383398f02db251e89b34cfcc2dad37da4f8b43dbb3a0422e81832d8dd4eba1879fa7d3a0576b7b28f57221163632f6797260501bfbb24d382a34a908bf832c7ac9e766e6bb4d4ce1410ba3ab427fac87b7e6e2a6c93e3493c26a810bce13bdd22db674ec29abdbb368d88"}, {0x5, 0x25, &(0x7f0000000600)="d8e51636db3626f2f19cb59a18400d93b65b7c68cae18e04ef9896015e6113e6f8a4ee686c"}]}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="51a18263b7ba7a660d7c5c5529020e20d9f80dcc2762d45f747f3d79771cd9ac90f7a9f46e", 0x25}, {&(0x7f0000000180)="6a0286c19ccb17ea2ff51d7aebde1991b36306558ca1f9545994195d3da7819a3267d8962a4b96726964903001f62011bdc60d20a503350f585c8de55c375866749a6345dc28a018c5eadedbf57fe0b09997deabcffc9d339fe212c59170079f98a45feb06e6c9d1419f97db94846791870a4b8ed432aff754314be9acc82c1e4be3e3f6efbe799255a6b87f8420c828c989433b071698c703d396d9130e8e695924d4917e788bc6db53a4ae8fb6926fe328663c5054fa1d6964609713a89732d2bba629ae06", 0xc6}, {&(0x7f0000000300)="0e2ac7d910c662eade81f9bb4727b7d7fc6910d60c072edddb200ad8e11c539c8369f6186266e27b7fd428d1a516f23349db75dee5bfac4f5ca218bcf1f88b7f8e03340dd4722daa3cd39dc4b11605f3bd0b8fac7030789f72c4ec7a7a529d9740c81a80404e16c99ccca4bae26bb4db8b6c46267c71e280fdac07e9d506dd0614f363d5b44b1b782e4c3623", 0x8c}, {&(0x7f00000003c0)="ad550dba4e5dddc8a5c5fa6aca274c9b700fea76a39424501e848c777fd5b4d43f54be44675cef976e0e413e139e2949387ba6bd2590996b3ec8c8819e116809306c806f30ad37cf4b3e12faa3be40bdf55152ff74ad64d92d2bc8989bc7b7a6213c23adc4d3e17b3006ec0a3eb3631d0ebc970f59199e94cc14c1e4839d720fbbc7dab2154cf9f9f553fac58d5685dfb622aecc45134ad4e0ac3cc1795c0dc58e294e9728a895d216feb521bd9525f3c17a50ba9834", 0xb6}], 0x4, 0x8) [ 130.364560] loop5: detected capacity change from 0 to 236 20:52:02 executing program 5: ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = timerfd_create(0x4, 0x80000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x1, [0x80, 0x40, 0x7ff, 0x1, 0x5, 0x7]}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x967a917861e1898e) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="9f9fd855812e77fbe4896027feada47a4a89c259c74b228bb1", 0x19, 0x800}, {&(0x7f0000000140)="168ac4dceac2baf030709e22", 0xc, 0xec90}], 0x400, &(0x7f00000001c0)={[{@nojoliet}, {@dmode={'dmode', 0x3d, 0x100}}, {@map_off}, {@dmode={'dmode', 0x3d, 0x8}}], [{@smackfsdef={'smackfsdef', 0x3d, '.^'}}, {@euid_lt={'euid<', 0xee01}}, {@permit_directio}, {@appraise_type}]}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r3 = dup2(r1, r2) sync_file_range(r1, 0x400, 0x2, 0x0) timerfd_gettime(r3, &(0x7f00000002c0)) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000400)) read(r1, &(0x7f0000000440)=""/123, 0x7b) r4 = open_tree(r3, &(0x7f00000004c0)='./file0\x00', 0x81000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r4, 0xb464e000) bind$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r5 = memfd_secret(0x80000) connect$unix(r5, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket$packet(0x11, 0x3, 0x300) sendfile(r6, r5, 0x0, 0x2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x120, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 20:52:02 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000100)='#)[:^\\^\'\x00'], &(0x7f00000003c0)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='$\x00', &(0x7f0000000240)='tmpfs\x00', &(0x7f0000000280)=')\x00', &(0x7f00000002c0)='/dev/autofs\x00', &(0x7f0000000300)='/dev/autofs\x00', &(0x7f0000000340)='+&^@,/!,\x00', &(0x7f0000000380)='/dev/autofs\x00'], 0x1000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=']) umount2(&(0x7f0000000080)='./file0\x00', 0x4) execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) [ 130.510507] loop5: detected capacity change from 0 to 236 [ 130.576208] tmpfs: Bad value for 'gid' [ 130.577109] process 'syz-executor.6' launched '/dev/fd/-1/./file0' with NULL argv: empty string added 20:52:02 executing program 5: ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = timerfd_create(0x4, 0x80000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x1, [0x80, 0x40, 0x7ff, 0x1, 0x5, 0x7]}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x967a917861e1898e) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="9f9fd855812e77fbe4896027feada47a4a89c259c74b228bb1", 0x19, 0x800}, {&(0x7f0000000140)="168ac4dceac2baf030709e22", 0xc, 0xec90}], 0x400, &(0x7f00000001c0)={[{@nojoliet}, {@dmode={'dmode', 0x3d, 0x100}}, {@map_off}, {@dmode={'dmode', 0x3d, 0x8}}], [{@smackfsdef={'smackfsdef', 0x3d, '.^'}}, {@euid_lt={'euid<', 0xee01}}, {@permit_directio}, {@appraise_type}]}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r3 = dup2(r1, r2) sync_file_range(r1, 0x400, 0x2, 0x0) timerfd_gettime(r3, &(0x7f00000002c0)) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000400)) read(r1, &(0x7f0000000440)=""/123, 0x7b) r4 = open_tree(r3, &(0x7f00000004c0)='./file0\x00', 0x81000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r4, 0xb464e000) bind$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r5 = memfd_secret(0x80000) connect$unix(r5, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket$packet(0x11, 0x3, 0x300) sendfile(r6, r5, 0x0, 0x2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x120, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 130.623940] tmpfs: Bad value for 'gid' [ 130.657647] loop5: detected capacity change from 0 to 236 20:52:02 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000100)='#)[:^\\^\'\x00'], &(0x7f00000003c0)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='$\x00', &(0x7f0000000240)='tmpfs\x00', &(0x7f0000000280)=')\x00', &(0x7f00000002c0)='/dev/autofs\x00', &(0x7f0000000300)='/dev/autofs\x00', &(0x7f0000000340)='+&^@,/!,\x00', &(0x7f0000000380)='/dev/autofs\x00'], 0x1000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=']) umount2(&(0x7f0000000080)='./file0\x00', 0x4) execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 20:52:02 executing program 5: ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = timerfd_create(0x4, 0x80000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x1, [0x80, 0x40, 0x7ff, 0x1, 0x5, 0x7]}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x967a917861e1898e) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="9f9fd855812e77fbe4896027feada47a4a89c259c74b228bb1", 0x19, 0x800}, {&(0x7f0000000140)="168ac4dceac2baf030709e22", 0xc, 0xec90}], 0x400, &(0x7f00000001c0)={[{@nojoliet}, {@dmode={'dmode', 0x3d, 0x100}}, {@map_off}, {@dmode={'dmode', 0x3d, 0x8}}], [{@smackfsdef={'smackfsdef', 0x3d, '.^'}}, {@euid_lt={'euid<', 0xee01}}, {@permit_directio}, {@appraise_type}]}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r3 = dup2(r1, r2) sync_file_range(r1, 0x400, 0x2, 0x0) timerfd_gettime(r3, &(0x7f00000002c0)) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000400)) read(r1, &(0x7f0000000440)=""/123, 0x7b) r4 = open_tree(r3, &(0x7f00000004c0)='./file0\x00', 0x81000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r4, 0xb464e000) bind$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r5 = memfd_secret(0x80000) connect$unix(r5, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket$packet(0x11, 0x3, 0x300) sendfile(r6, r5, 0x0, 0x2) [ 130.799702] loop5: detected capacity change from 0 to 236 [ 130.818972] tmpfs: Bad value for 'gid' [ 131.081334] syz-executor.2 (3891) used greatest stack depth: 24408 bytes left VM DIAGNOSIS: 20:52:01 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800d857860 RCX=000000000000000a RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88800d8577e8 RBP=ffff888041f91ac0 RSP=ffff88800d857770 R8 =0000000000000001 R9 =ffff88800d8577c8 R10=ffffed1001b0af06 R11=0000000000000001 R12=0000000000000000 R13=ffff88800d8577f0 R14=ffff888041f91ac0 R15=ffff88800d8577c8 RIP=ffffffff8413c714 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f375ed96368 CR3=0000000015ec0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88801ec97698 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002e R11=0000000000000001 R12=000000000000002e R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0 RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f235d40c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f12cb00b028 CR3=0000000041746000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f235ff7d7c0 00007f235ff7d7c8 YMM02=0000000000000000 0000000000000000 00007f235ff7d7e0 00007f235ff7d7c0 YMM03=0000000000000000 0000000000000000 00007f235ff7d7c8 00007f235ff7d7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000