Warning: Permanently added '[localhost]:11054' (ECDSA) to the list of known hosts. 2022/10/03 23:13:35 fuzzer started 2022/10/03 23:13:35 dialing manager at localhost:35095 syzkaller login: [ 44.254241] cgroup: Unknown subsys name 'net' [ 44.338125] cgroup: Unknown subsys name 'rlimit' 2022/10/03 23:13:49 syscalls: 2215 2022/10/03 23:13:49 code coverage: enabled 2022/10/03 23:13:49 comparison tracing: enabled 2022/10/03 23:13:49 extra coverage: enabled 2022/10/03 23:13:49 setuid sandbox: enabled 2022/10/03 23:13:49 namespace sandbox: enabled 2022/10/03 23:13:49 Android sandbox: enabled 2022/10/03 23:13:49 fault injection: enabled 2022/10/03 23:13:49 leak checking: enabled 2022/10/03 23:13:49 net packet injection: enabled 2022/10/03 23:13:49 net device setup: enabled 2022/10/03 23:13:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 23:13:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 23:13:49 USB emulation: enabled 2022/10/03 23:13:49 hci packet injection: enabled 2022/10/03 23:13:49 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 23:13:49 802.15.4 emulation: enabled 2022/10/03 23:13:49 fetching corpus: 50, signal 27527/29351 (executing program) 2022/10/03 23:13:50 fetching corpus: 100, signal 39431/42905 (executing program) 2022/10/03 23:13:50 fetching corpus: 150, signal 45837/50935 (executing program) 2022/10/03 23:13:50 fetching corpus: 200, signal 57492/63976 (executing program) 2022/10/03 23:13:50 fetching corpus: 250, signal 60488/68518 (executing program) 2022/10/03 23:13:50 fetching corpus: 300, signal 66497/75939 (executing program) 2022/10/03 23:13:50 fetching corpus: 350, signal 68915/79830 (executing program) 2022/10/03 23:13:50 fetching corpus: 400, signal 72984/85272 (executing program) 2022/10/03 23:13:50 fetching corpus: 450, signal 74813/88503 (executing program) 2022/10/03 23:13:50 fetching corpus: 500, signal 77938/92982 (executing program) 2022/10/03 23:13:51 fetching corpus: 550, signal 80744/97058 (executing program) 2022/10/03 23:13:51 fetching corpus: 600, signal 83691/101231 (executing program) 2022/10/03 23:13:51 fetching corpus: 650, signal 86115/104917 (executing program) 2022/10/03 23:13:51 fetching corpus: 700, signal 89281/109220 (executing program) 2022/10/03 23:13:51 fetching corpus: 750, signal 93259/114253 (executing program) 2022/10/03 23:13:51 fetching corpus: 800, signal 96143/118216 (executing program) 2022/10/03 23:13:51 fetching corpus: 850, signal 98826/122012 (executing program) 2022/10/03 23:13:51 fetching corpus: 900, signal 101619/125837 (executing program) 2022/10/03 23:13:52 fetching corpus: 950, signal 104574/129740 (executing program) 2022/10/03 23:13:52 fetching corpus: 1000, signal 106136/132410 (executing program) 2022/10/03 23:13:52 fetching corpus: 1050, signal 108391/135696 (executing program) 2022/10/03 23:13:52 fetching corpus: 1100, signal 110541/138839 (executing program) 2022/10/03 23:13:52 fetching corpus: 1150, signal 111824/141193 (executing program) 2022/10/03 23:13:52 fetching corpus: 1200, signal 117261/147086 (executing program) 2022/10/03 23:13:52 fetching corpus: 1250, signal 118719/149561 (executing program) 2022/10/03 23:13:52 fetching corpus: 1300, signal 120173/151982 (executing program) 2022/10/03 23:13:52 fetching corpus: 1350, signal 122165/154903 (executing program) 2022/10/03 23:13:53 fetching corpus: 1400, signal 123919/157571 (executing program) 2022/10/03 23:13:53 fetching corpus: 1450, signal 125603/160213 (executing program) 2022/10/03 23:13:53 fetching corpus: 1500, signal 127677/163063 (executing program) 2022/10/03 23:13:53 fetching corpus: 1550, signal 128684/165030 (executing program) 2022/10/03 23:13:53 fetching corpus: 1600, signal 130692/167791 (executing program) 2022/10/03 23:13:53 fetching corpus: 1650, signal 132708/170544 (executing program) 2022/10/03 23:13:53 fetching corpus: 1700, signal 134148/172802 (executing program) 2022/10/03 23:13:53 fetching corpus: 1750, signal 135681/175080 (executing program) 2022/10/03 23:13:54 fetching corpus: 1800, signal 137563/177653 (executing program) 2022/10/03 23:13:54 fetching corpus: 1850, signal 138666/179631 (executing program) 2022/10/03 23:13:54 fetching corpus: 1900, signal 140345/181994 (executing program) 2022/10/03 23:13:54 fetching corpus: 1950, signal 140947/183579 (executing program) 2022/10/03 23:13:54 fetching corpus: 2000, signal 142028/185500 (executing program) 2022/10/03 23:13:54 fetching corpus: 2050, signal 143347/187565 (executing program) 2022/10/03 23:13:54 fetching corpus: 2100, signal 144177/189297 (executing program) 2022/10/03 23:13:54 fetching corpus: 2150, signal 145820/191588 (executing program) 2022/10/03 23:13:54 fetching corpus: 2200, signal 146691/193293 (executing program) 2022/10/03 23:13:55 fetching corpus: 2250, signal 149109/196084 (executing program) 2022/10/03 23:13:55 fetching corpus: 2300, signal 150347/198005 (executing program) 2022/10/03 23:13:55 fetching corpus: 2350, signal 152453/200567 (executing program) 2022/10/03 23:13:55 fetching corpus: 2400, signal 153478/202286 (executing program) 2022/10/03 23:13:55 fetching corpus: 2450, signal 154272/203815 (executing program) 2022/10/03 23:13:55 fetching corpus: 2500, signal 155111/205403 (executing program) 2022/10/03 23:13:55 fetching corpus: 2550, signal 155790/206906 (executing program) 2022/10/03 23:13:55 fetching corpus: 2600, signal 156513/208354 (executing program) 2022/10/03 23:13:55 fetching corpus: 2650, signal 157929/210407 (executing program) 2022/10/03 23:13:56 fetching corpus: 2700, signal 159281/212283 (executing program) 2022/10/03 23:13:56 fetching corpus: 2750, signal 160143/213881 (executing program) 2022/10/03 23:13:56 fetching corpus: 2800, signal 160710/215193 (executing program) 2022/10/03 23:13:56 fetching corpus: 2850, signal 161585/216685 (executing program) 2022/10/03 23:13:56 fetching corpus: 2900, signal 162480/218216 (executing program) 2022/10/03 23:13:56 fetching corpus: 2950, signal 163694/219939 (executing program) 2022/10/03 23:13:56 fetching corpus: 3000, signal 164541/221419 (executing program) 2022/10/03 23:13:56 fetching corpus: 3050, signal 165403/222887 (executing program) 2022/10/03 23:13:57 fetching corpus: 3100, signal 166250/224359 (executing program) 2022/10/03 23:13:57 fetching corpus: 3150, signal 167459/226043 (executing program) 2022/10/03 23:13:57 fetching corpus: 3200, signal 168167/227409 (executing program) 2022/10/03 23:13:57 fetching corpus: 3250, signal 168824/228707 (executing program) 2022/10/03 23:13:57 fetching corpus: 3300, signal 169477/230016 (executing program) 2022/10/03 23:13:57 fetching corpus: 3350, signal 170540/231516 (executing program) 2022/10/03 23:13:57 fetching corpus: 3400, signal 171296/232858 (executing program) 2022/10/03 23:13:57 fetching corpus: 3450, signal 171710/234033 (executing program) 2022/10/03 23:13:57 fetching corpus: 3500, signal 172447/235385 (executing program) 2022/10/03 23:13:57 fetching corpus: 3550, signal 173431/236830 (executing program) 2022/10/03 23:13:58 fetching corpus: 3600, signal 174082/238086 (executing program) 2022/10/03 23:13:58 fetching corpus: 3650, signal 174541/239277 (executing program) 2022/10/03 23:13:58 fetching corpus: 3700, signal 175454/240656 (executing program) 2022/10/03 23:13:58 fetching corpus: 3750, signal 176719/242175 (executing program) 2022/10/03 23:13:58 fetching corpus: 3800, signal 177547/243434 (executing program) 2022/10/03 23:13:58 fetching corpus: 3850, signal 179569/245311 (executing program) 2022/10/03 23:13:58 fetching corpus: 3900, signal 180374/246508 (executing program) 2022/10/03 23:13:58 fetching corpus: 3950, signal 180778/247539 (executing program) 2022/10/03 23:13:59 fetching corpus: 4000, signal 181270/248618 (executing program) 2022/10/03 23:13:59 fetching corpus: 4050, signal 181748/249692 (executing program) 2022/10/03 23:13:59 fetching corpus: 4100, signal 182778/250956 (executing program) 2022/10/03 23:13:59 fetching corpus: 4150, signal 183426/252076 (executing program) 2022/10/03 23:13:59 fetching corpus: 4200, signal 183754/253064 (executing program) 2022/10/03 23:13:59 fetching corpus: 4250, signal 184325/254147 (executing program) 2022/10/03 23:13:59 fetching corpus: 4300, signal 185195/255353 (executing program) 2022/10/03 23:13:59 fetching corpus: 4350, signal 185603/256333 (executing program) 2022/10/03 23:13:59 fetching corpus: 4400, signal 186064/257375 (executing program) 2022/10/03 23:14:00 fetching corpus: 4450, signal 186574/258399 (executing program) 2022/10/03 23:14:00 fetching corpus: 4500, signal 187473/259570 (executing program) 2022/10/03 23:14:00 fetching corpus: 4550, signal 188280/260698 (executing program) 2022/10/03 23:14:00 fetching corpus: 4600, signal 189037/261785 (executing program) 2022/10/03 23:14:00 fetching corpus: 4650, signal 189987/262992 (executing program) 2022/10/03 23:14:00 fetching corpus: 4700, signal 190404/263940 (executing program) 2022/10/03 23:14:00 fetching corpus: 4750, signal 191052/264966 (executing program) 2022/10/03 23:14:00 fetching corpus: 4800, signal 191493/265919 (executing program) 2022/10/03 23:14:00 fetching corpus: 4850, signal 191849/266922 (executing program) 2022/10/03 23:14:01 fetching corpus: 4900, signal 192535/267957 (executing program) 2022/10/03 23:14:01 fetching corpus: 4950, signal 193308/269019 (executing program) 2022/10/03 23:14:01 fetching corpus: 5000, signal 194612/270215 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/271014 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/271748 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/272525 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/273287 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/274009 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/274751 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/275479 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/276214 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/276988 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/277747 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/278481 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/279289 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/280056 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/280800 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/281571 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/282298 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/283042 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/283785 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/284560 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/285323 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/286111 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/286828 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/287576 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/288325 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/289046 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/289808 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/290569 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/291332 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/292062 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/292808 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/293593 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/294373 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/295131 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/295916 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/296689 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/297454 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/298206 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/299003 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/299752 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/300537 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/301260 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/302008 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/302739 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/303480 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/304239 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/304988 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/305715 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/306478 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/307207 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/307964 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/308718 (executing program) 2022/10/03 23:14:01 fetching corpus: 5001, signal 194785/309483 (executing program) 2022/10/03 23:14:02 fetching corpus: 5001, signal 194785/310212 (executing program) 2022/10/03 23:14:02 fetching corpus: 5001, signal 194785/310875 (executing program) 2022/10/03 23:14:02 fetching corpus: 5001, signal 194785/310875 (executing program) 2022/10/03 23:14:04 starting 8 fuzzer processes 23:14:04 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @broadcast, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, @local}}}}, &(0x7f0000000080)={0x1, 0x2, [0xe41, 0x40, 0x5f2, 0xd7b]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xf70f7f20bc99a82, 0x14) write$tun(r0, &(0x7f0000000100)={@void, @val={0x2, 0x0, 0x0, 0x101}, @mpls={[{0x1, 0x0, 0x1}, {0xe9e}, {0x5}, {0x8000}, {0x90}], @ipv6=@udp={0x2, 0x6, "57a075", 0x398, 0x11, 0xb8fc43b52b6a69c3, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x40, 0x4, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x0, 0x26, '\x00', [@generic={0x3, 0xc8, "5e82d40eed0f9672242ee27d6cd7f268185d5f88e6c5e6578aed088ad82b496aea30d6fb619bf2d918e7c1fde2ba291e44dc64bba100586a0661d6baeb5b06673cb48fff038ffebb0d9854663bcc5ecf929cb40ec6f1da7678cc5ce7b56cce7c836e32d91aa7928e2d6ac6d512c83c5cd74a65e5e854a6db9cb66220ad7f88a39c2a12b8fb2e0034a1a1f59aa1a95169ccf96b1f7d262cf60bf893c15a6171253ce78624f319b564f92c8e842468df58bc335c3e82bf49acb255ebca1bc6224d1ddf848523c32323"}, @calipso={0x7, 0x48, {0x7, 0x10, 0x7f, 0x3, [0x101, 0x0, 0xff, 0x7, 0x8, 0x0, 0x401, 0x3]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x9, 0x6, [0x2, 0x4, 0x1b]}}]}, @routing={0x2b, 0xe, 0x1, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0, @local, @dev={0xfe, 0x80, '\x00', 0x34}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @empty]}, @dstopts={0x32, 0x23, '\x00', [@enc_lim, @generic={0x3, 0x14, "7cfb9fd2de8e71b21ce546763f774c4798928c31"}, @ra={0x5, 0x2, 0x100}, @pad1, @ra={0x5, 0x2, 0x80}, @jumbo, @generic={0x1f, 0xec, "01e76c035a0d2e2f7824c9b700515120498459fcb131e8e6954abe06c92a011284fa86385bd9b655017bdcbe54b6bf78dd0b94a7eb39725c1370bcd7c520df0ed9d0c2b759c4c34884a2c2b70663d7f31af5f2915d62eed4c71ee14962cc3e80eb93782447bf6548e157e5a1fccaf30607fb753bd8528c8458e56a9f8ba877eed439431e0d34a69f882a0a611210be1a39af264f3bb13ee8fae84f0a83ed18772eb6f0289615f23489ae5c170f380ba7c2b7c1e38a3b2ed61d3ffb376dc35812e8c68854890f0d294a13158b6c7217b53eb5111cb61486349125144f98fb3ef8828d08adb58f81a1e87698e1"}]}, @routing={0x2f, 0x8, 0x0, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}], {0x4e22, 0x4e24, 0x60, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x100, @val=0x80}, "307b1160f5ac5a19875cfd74e5a492d93a9cb2e2bdb4a1693a41e7f3404be83c9e5727b032f15b1783d54b4e90bf2c5686688dfcb7b8089bb2b5c5422743ea6ca47b080fd06c461acb1e995461c63315"}}}}}}, 0x3de) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180800) move_mount(r0, &(0x7f0000000500)='./file0\x00', r1, &(0x7f0000000580)='./file0\x00', 0x55) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = signalfd4(r2, &(0x7f00000005c0)={[0xfffffffffffffffb]}, 0x8, 0x800) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x509843, 0x0) symlinkat(&(0x7f0000000600)='./file0\x00', r4, &(0x7f0000000680)='./file0\x00') ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) fremovexattr(r6, &(0x7f0000000700)=@random={'os2.', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000740)) openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0xa0) r7 = socket$packet(0x11, 0x3, 0x300) fcntl$getflags(r7, 0x401) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r5) syz_extract_tcp_res(&(0x7f0000000800), 0x626, 0x973) 23:14:04 executing program 1: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1, 0x0, 0x1c}, 0x18) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x10000, 0x81) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "fd19364ca7251e2928811bcc3be48c80e3fd074c202b01980389d4ebfa06bf7aedb418563c4d4bf259a9637488cdd5424de908c0920287cb0bf3dcc336a72b99", 0x30}, 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000200)={@id={0x2, 0x0, @c}, 0x4, r2, '\x00', @auto=[0x2c, 0x35, 0x2a, 0x3f]}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "c5de318a8013759c20460137c61226c39a18c6aadc20af77867e8c033e1b32ef2effffc25d12fb22603e85cf020b014f7bda20e84688c6ad9e83ba9f350dcb12", 0x2b}, 0x48, r2) request_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='%\\.-\\\x00', r4) mkdirat(r0, &(0x7f0000000480)='.\x00', 0x4) openat2(r0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x1930c0, 0x8, 0x1}, 0x18) r5 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8000, 0x2, &(0x7f00000006c0)=[{&(0x7f00000005c0)="a28b35681dbdb775540d5e5a2da73856ee50dcb7a92e2ca23534c2fd91318975366e5d22dc469cee5054d8124895683b568bea6edd0ec4f6be5aecde6ba84ac678becdc956fe85b0ed9af7639c21d96e65a01bd14fafb50f396bb63613d80c0688737db05d22b57d6e85a1ae05c2b6d22dceb434054db0e134ba8489ef13dbb232", 0x81, 0x3}, {&(0x7f0000000680)="dc71637d6eaf458d44a20a170b9ded027400050f6d4ca7e3ad42c9347f27", 0x1e, 0x1}], 0x22, &(0x7f0000000700)={[{@utf8no}], [{@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@obj_user={'obj_user', 0x3d, '%\\.-\\\x00'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000000780)={@id={0x2, 0x0, @a}}) chdir(&(0x7f0000000800)='./file0\x00') r6 = openat(r1, &(0x7f0000000840)='./file0\x00', 0x2, 0x162) mknodat(r0, &(0x7f0000000880)='./file0\x00', 0x1, 0x2) r7 = accept$inet6(r6, &(0x7f00000008c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000900)=0x1c) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000940)=0x4) openat(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', 0xc2, 0x7) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000a00)=0x4) [ 72.762655] audit: type=1400 audit(1664838844.444:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:14:04 executing program 3: clone3(&(0x7f0000000200)={0x258040080, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0xc}, &(0x7f00000000c0)=""/148, 0x94, &(0x7f0000000180)=""/26, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000280)={0x2, 0xfffffffffffffc01, @status={[0x5, 0x5, 0x5, 0x3, 0x2, 0xfb1]}, [0x1, 0x6, 0x9, 0x4474, 0x3, 0x23c6, 0x8001, 0x7, 0x80000000, 0xfffffffffffffcef, 0xfffffffffffffff7, 0x2, 0x1ff, 0x1, 0x7ff, 0x4, 0x9, 0xf91c, 0x8000, 0x4, 0xff, 0x5, 0x1, 0xffff, 0x8000, 0x4, 0x3, 0x0, 0x100000000, 0x9, 0x200, 0x1, 0x10000, 0x81, 0x5e, 0x1, 0x7f, 0x80000000, 0x6, 0x9, 0x1, 0x4, 0x5, 0x0, 0x5, 0x10001, 0x1a63, 0x1, 0x13c, 0x0, 0x8001, 0x4, 0xfa0, 0xfc, 0xf6, 0x7, 0xff, 0x2753, 0x3, 0x8, 0x3, 0x3ff, 0x1, 0x3a3c]}) r1 = epoll_create(0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000cc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x94) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000f00)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7ccaf68a) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000f40)=0x7f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', 0x300, 0x41) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000fc0)=0x3) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000001000)=0x10) r5 = socket$netlink(0x10, 0x3, 0x1) open_by_handle_at(r5, &(0x7f0000001040)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x3, 0x2, 0x10, 0xff, 0x6}}, 0x40800) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000001080)={0x1000, 0x3ff, 0x7f}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000010c0)={0x20000000}) r6 = eventfd(0x576) getpeername(r4, &(0x7f0000001100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001180)=0x80) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000011c0), 0x200100, 0x0) poll(&(0x7f0000001200)=[{r6, 0x40}, {r3, 0x2080}, {r1, 0x1009}, {r7, 0x510}, {r8, 0x8234}], 0x5, 0x9) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000001240)) 23:14:04 executing program 4: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x814}, 0x800) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffeff]}, 0x8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x2c8, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6cb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6f13}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1136f810}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x852}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x181}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x600000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "d5b17d901066ae0ec8dc4157f91daa820ff4f2ebcf213f3487ce6fd7e4a9d627fb"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "4296738ed08a89a6859d451a102069d3dbb8d0efdd"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x90}, 0xc000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3be3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfff}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4c000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x101040, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x1, 0x2, 0x6, 0x7, 0x3fe, 0x4]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x45d}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x114f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x98040}, 0x80041) pwritev2(r0, &(0x7f0000000a40), 0x0, 0x3, 0x4, 0x11) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r4) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x94, r7, 0x519, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x48811) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000c40)=0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6}}}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "11c93a5b3a"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1edb53a7f3"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x20000004) sendfile(r8, r0, 0x0, 0x80) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x9003040}, 0xc, &(0x7f0000001980)={&(0x7f0000000e80)={0xadc, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x22, 0xf, [@mic={0x8c, 0x18, {0xe0d, "ba5526fb133c", @long="257575366ba62d928ba7915d5cec8afb"}}, @ibss={0x6, 0x2, 0x3}]}, @NL80211_ATTR_PROBE_RESP={0x3e1, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x295, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x80}, @device_a, @device_a, @initial, {0x0, 0xa01}}, 0x3ff, @default, 0x2800, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x24, 0x1}, {0xc, 0x1}]}, @void, @val={0x4, 0x6, {0x8, 0x1, 0xbbe7}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0xb4, 0x2}}, @void, @void, @void, @val={0x76, 0x6, {0x40, 0x2, 0x3d, 0x4}}, [{0xdd, 0x37, "cd74019e6a634d86f1e608080b3d9a347024de911d4008aefea93f82899a60007b4e661c490bc92fd2c2db2bbded6c4eba02fa38456917"}, {0xdd, 0xa4, "c02334432e5689e36e8f565b61e20d57ac64bc36d0e7424527dff1291df6b58a7805fb99780c910c2f22e1015bd94ecf82cef78d3ae6bbf820eff0a6c3e81f80d8c6b8d20da2cb4970eb1e75c4ece764a39af1b7f9bc9ec4eb8ecba4666eeab37a075a4f2be14fea3a4ed3c4e2887474f4b91377d501d194cdee859ba14749bbb77e53fb71052988cc8e8041b92802c0f41e6a76cc0bf91c30500f29e3e932c9359678d0"}, {0xdd, 0x27, "e1e4f5521696edab6daaf3288f7e87f4d1919c5d3c2379c0466308e3cf1ce4c80bed8fa380b647"}, {0xdd, 0xd2, "d1e26fe8452d0aef065693250b7adf4ea6b53a3697579534445c4e4b1372282326dbb263beab3fde440eb580105a970cd3978dacb0ca1768a1b38a2840db32751847b9a7ad44e6665d94e7520c6bdec771fd58a4f4f10aa7d40bfa7f7a006269202470d4d31b68bed8fd9cd88d7b718eae83bf71c067e95b512cff59c087663cc67dab4440ff6e6d844fe45ba963bb42cf77f72ff5660647d9d09273a0a9cfe0da328b1f6c68da6bce00d2995e6048636dae1ba1d7d1fa396da194bea6b3843555fc8c263919d9a072a8ef53cd088b5fc2f6"}, {0xdd, 0x6d, "689e46c83fdf931f6bc2b8804790b044aec937ddff66b9daff1ba7a19aade3e069912e19381ad714856c348b9dcbb470eddbc517015f0efbdb9f6cd504f8288c057c3633902c4b4e24eec6adf78a7ccad82bb9a9a99b40f7a874b1e1e698e1172ec62ad16a0bcbe9fbf77c3785"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x2b, 0x7f, [@rann={0x7e, 0x15, {{0x1, 0x2}, 0x8, 0xf1, @device_a, 0x0, 0x8001, 0x9}}, @mesh_chsw={0x76, 0x6, {0x6, 0x9, 0x8, 0x80}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @challenge={0x10, 0x1, 0xcd}, @ssid]}, @NL80211_ATTR_IE={0xc6, 0x2a, [@supported_rates={0x1, 0x1, [{0x1}]}, @random_vendor={0xdd, 0xaf, "02ed88282a21d4db74ab97b17998fd4cd05babe72ee3165bfbe9025ccff2e92913657dde278b4bee28092ef2838ac4bfe86ddb3b32ac25517af0a03783542d126da54d7dd3e5c912d07371ff2ee9180ba2e2ef2d4ef3d5bb186faeb4753680b4b4d96221cf3cea88870ed0def8b96a4659ba8810bbcfbdd74cd00322a936cc455c74167d185a843e7eaa41f1acbd210bbf3f89ec655267da716520d5e8c062880e8d858c2f5fff5f07a25d34b39899"}, @channel_switch={0x25, 0x3, {0x0, 0xb5, 0x7}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x8}}]}, @NL80211_ATTR_BEACON_TAIL={0x35, 0xf, [@dsss={0x3, 0x1, 0x84}, @challenge={0x10, 0x1, 0x7e}, @link_id={0x65, 0x12, {@random="68898b9342f9"}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0xab, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @device_b, @broadcast, @initial, {0x6, 0x5}}, 0x2, @random=0xb, 0x40, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0x8c}, @void, @void, @val={0x5, 0x3e, {0x1f, 0xfd, 0xff, "0c24f0938140d1dbcccf2eeeefbbe49b2172781a88080cf302875446896716d99aa3e6a20af864eb9c2bbb124a0f79b09a986c9c374eafcf6fdc07"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x2, 0x70, 0x9}}, @val={0x2d, 0x1a, {0x4000, 0x1, 0x3, 0x0, {0xffffffffffff7fff, 0x1b60, 0x0, 0x2e7, 0x0, 0x1, 0x0, 0x3}, 0x800, 0x5, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x60}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x244, 0x91, "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"}]}, 0xadc}, 0x1, 0x0, 0x0, 0x40000}, 0x30) 23:14:04 executing program 5: ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) ioctl$CDROMREADCOOKED(0xffffffffffffffff, 0x5315, &(0x7f0000000040)) r0 = open(&(0x7f0000000ac0)='./file0\x00', 0x10000, 0xdc) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001000)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000b40)={0x464, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff12c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa0d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa84}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6bae1378}]}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x319, @empty, 0x1f}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x174, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private1, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x16, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @local, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xd61572b, @private0, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0xff}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}]}, 0x464}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000001040)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x74, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x38}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000001) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r2 = syz_open_dev$loop(&(0x7f0000001200), 0x45ba, 0x2) r3 = signalfd(r2, &(0x7f0000001240), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) openat(r0, &(0x7f0000001280)='./file0\x00', 0x400, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r3) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f00000013c0)) r5 = epoll_create1(0x80000) fremovexattr(r5, &(0x7f0000001400)=@known='trusted.overlay.redirect\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, 0x0, 0x80, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x88, 0x33}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40890}, 0x6c015) 23:14:04 executing program 7: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) capset(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000080)={0x0, 0x3, 0x5, 0x41d, 0x0, 0xff}) capget(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x7, 0x80000000, 0x1ff, 0x4, 0xfff, 0x2}) capset(&(0x7f0000000140)={0x19980330, r0}, &(0x7f0000000180)={0x80000000, 0x2a, 0x5, 0xfffffff9, 0x9, 0x4}) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f00000001c0)) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000200)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) capset(&(0x7f0000000240)={0x19980330, r0}, &(0x7f0000000280)={0x3, 0x1, 0xfff, 0x8001, 0x6, 0x2691}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000000440)=""/255, 0xff}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000600)=""/52, 0x34}], 0x5, &(0x7f00000006c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x130}, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000840)) r11 = accept4$unix(r9, &(0x7f0000001980)=@abs, &(0x7f0000001a00)=0x6e, 0x800) fsetxattr$trusted_overlay_upper(r11, &(0x7f0000001a40), &(0x7f0000001a80)={0x0, 0xfb, 0x9b, 0x1, 0x1, "52873d702b82e659d43c4da7ac97e49d", "99e742ea6427ff1bea9373a51b701833dc35eadab264cfe338786c992ee1254d6dcba6950df0e283a54d755ebd1dc33b5077140e821f798650d05ac8f95fabe5c8ca0a3175e0fde2fd50937c065aade8c5f678e1735273792b3d6434796e15873c6facfda850332333ba30acb0b1964c5e2021c7b2dd8d31089001dc027674300ab2cef0e0ef"}, 0x9b, 0x2) capset(&(0x7f0000001b40)={0x20071026, r5}, &(0x7f0000001b80)={0x100, 0x3, 0x4, 0x1, 0x4, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VT_SETMODE(r8, 0x5602, &(0x7f0000001bc0)={0x2, 0x1, 0x8, 0x8, 0x9}) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000001c00)) perf_event_open$cgroup(&(0x7f0000001c80)={0x5, 0x80, 0x1, 0x0, 0x6, 0xff, 0x0, 0x100000001, 0xa980, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000001c40)}, 0x100, 0x7e, 0xfff, 0x5, 0x8, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x34}, r1, 0x7, r4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r7, {r10, r6}}, './file0\x00'}) fcntl$setsig(r12, 0xa, 0x26) 23:14:04 executing program 6: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) fstatfs(0xffffffffffffffff, &(0x7f0000000080)=""/160) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x200001, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r1 = memfd_secret(0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x120, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}}]}, 0x120}, 0x1, 0x0, 0x0, 0x21}, 0x400c004) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8044000) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000540)=@ccm_128={{0x304}, "9843d96e2ee96531", "b1fa1eadf763111737c48227a2ff65ea", "57ef6afb", "760ce3df01b1eddc"}, 0x28) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000700)={&(0x7f0000000580), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r3, 0x201, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x226b43c22af6e074}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '#:\xc7+}]\x00'}]}, 0x48}}, 0xc000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8bbef6d488"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "27d2976448"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008841}, 0x81) bind(r0, &(0x7f0000000a40)=@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x1, 0x1, "93a6316d348d5beb62f94634c47830f4d03551e48054011e375c37c12ed215e663f794248879420693b84d217aa5db2921b3690595ae658f7ff488b4250660", 0x2}, 0x80) r7 = creat(&(0x7f0000000ac0)='./file0\x00', 0x20) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x70000}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x40021}, 0x8010) 23:14:04 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xd7, 0xfd, 0x7, 0x6, 0x0, 0x3, 0x4100, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x1e}, 0x1800, 0x0, 0x3, 0x9, 0xdcd3, 0x8001, 0xfffd, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x80000000, 0x2, 0xfffff25a, 0xcf, 0x4}) r3 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3ff, 0x0, &(0x7f00000001c0), 0x80e002, &(0x7f0000000200)={[{@utf8}, {@uid={'uid', 0x3d, 0xee01}}, {}, {@gid}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', 0xee00}}, {@appraise_type}, {@permit_directio}]}) ioctl$FIONCLEX(r3, 0x5450) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x2, 0x20800) r5 = getuid() fchownat(r4, &(0x7f0000000300)='./file0\x00', r5, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x4}}, './file1\x00'}) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000380)={0x2, 0x3f, 0x7, 0x40, 0x4, [{0xff, 0x7, 0x2, '\x00', 0x2000}, {0x7f, 0x1, 0x80000001, '\x00', 0x3202}, {0x200, 0x20, 0x7f, '\x00', 0x1100}, {0x10000, 0x7f, 0xf7d, '\x00', 0x1}]}) lchown(&(0x7f0000000480)='./file0\x00', r5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000004c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xff, "93f2c2f393113f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000014c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000016c0)={0x0, 0x0, "5138c00664807bb941f4c9abd94a38a82cbf443d2c145d37a75b5ab9aac3832f38354c45e23da50a56c5f39b3437dacd7f6db97e5f9cfbdf8d622521d8d90797d2b2c9d436668dc33a85dbf1ad105c63f2f49eca74912924e9dc639c8fcdd9ac8addc3568459ee6fd1aca395300d7c3294b87b9773918b33af160f2e1a5503f9c00f77bc5066d61e1a74b1bb94326020dc323635a1272048fba268a0c0562620cfa06f7d1f1efca5f902236dcaae42ac3235a46b006706522c21be36961b72a064f1f8bc8d801c316b2ab9b9d5a271ee175bd88fa6c84751a4b36f09fca7659ce2eb2f3ca7aaa6477fd5ce27726076507f138f0d53489472cbf3f1ad476e591b", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000026c0)={{0x0, 0x8, 0x8001, 0x3, 0xd8, 0x3, 0xfffffffffffff41f, 0x400, 0x6, 0x7fffffff, 0xf9, 0x4, 0x81, 0x4000, 0x859b}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002780)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002980)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "d42aa083db2845"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000003980)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000062340)={0x8, [{}, {}, {r7, r8}, {0x0, r9}, {}, {}, {}, {}, {}, {r10}, {r11}, {r12}, {0x0, r13}], 0x81, "81192d04caf9fa"}) [ 73.961390] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.963271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.964985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.970822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.980234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.981881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.987273] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.014601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.020494] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.021848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.023359] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.025614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.027209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.039438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.044691] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.046594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.046673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.052117] Bluetooth: hci2: HCI_REQ-0x0c1a [ 74.053228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.063206] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.074159] Bluetooth: hci1: HCI_REQ-0x0c1a [ 74.197889] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.208457] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.211623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.214064] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.215745] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.218993] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.221370] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.223136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.228246] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.229389] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.231060] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.246257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.248084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.249839] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.251228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.255841] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.262888] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.281258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.292225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.297390] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.324040] Bluetooth: hci5: HCI_REQ-0x0c1a [ 76.047480] Bluetooth: hci0: command 0x0409 tx timeout [ 76.111400] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 76.111472] Bluetooth: hci1: command 0x0409 tx timeout [ 76.112905] Bluetooth: hci2: command 0x0409 tx timeout [ 76.113721] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 76.238997] Bluetooth: hci7: command 0x0409 tx timeout [ 76.302985] Bluetooth: hci6: command 0x0409 tx timeout [ 76.366996] Bluetooth: hci5: command 0x0409 tx timeout [ 78.094984] Bluetooth: hci0: command 0x041b tx timeout [ 78.159003] Bluetooth: hci1: command 0x041b tx timeout [ 78.160096] Bluetooth: hci2: command 0x041b tx timeout [ 78.288063] Bluetooth: hci7: command 0x041b tx timeout [ 78.351953] Bluetooth: hci6: command 0x041b tx timeout [ 78.414970] Bluetooth: hci5: command 0x041b tx timeout [ 80.143008] Bluetooth: hci0: command 0x040f tx timeout [ 80.207108] Bluetooth: hci2: command 0x040f tx timeout [ 80.207144] Bluetooth: hci1: command 0x040f tx timeout [ 80.334979] Bluetooth: hci7: command 0x040f tx timeout [ 80.398982] Bluetooth: hci6: command 0x040f tx timeout [ 80.462977] Bluetooth: hci5: command 0x040f tx timeout [ 81.167192] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 81.295012] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 82.250161] Bluetooth: hci0: command 0x0419 tx timeout [ 82.255015] Bluetooth: hci2: command 0x0419 tx timeout [ 82.255791] Bluetooth: hci1: command 0x0419 tx timeout [ 82.383007] Bluetooth: hci7: command 0x0419 tx timeout [ 82.447133] Bluetooth: hci6: command 0x0419 tx timeout [ 82.511028] Bluetooth: hci5: command 0x0419 tx timeout [ 84.027338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.029638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.031496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.038119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.039733] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.041287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.046159] Bluetooth: hci3: HCI_REQ-0x0c1a [ 86.094986] Bluetooth: hci3: command 0x0409 tx timeout [ 86.223027] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 88.143982] Bluetooth: hci3: command 0x041b tx timeout [ 88.832022] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.833413] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.834115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.836168] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.837034] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.837706] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.854718] Bluetooth: hci4: HCI_REQ-0x0c1a [ 90.191187] Bluetooth: hci3: command 0x040f tx timeout [ 90.895034] Bluetooth: hci4: command 0x0409 tx timeout [ 92.240038] Bluetooth: hci3: command 0x0419 tx timeout [ 92.943971] Bluetooth: hci4: command 0x041b tx timeout [ 94.991008] Bluetooth: hci4: command 0x040f tx timeout [ 97.040008] Bluetooth: hci4: command 0x0419 tx timeout [ 123.558416] loop1: detected capacity change from 0 to 64 [ 123.595375] loop1: detected capacity change from 0 to 64 23:14:55 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001880), 0x20080, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl(r1, 0x8, &(0x7f0000000040)="e19092487becf6fe36a0f0733013a380fb62a99989530d874058491d54e16d747b92e3eedc6f9955d2c08dc5510cbc446721c7d3d64f4f6f2661e7ae668cf65e9c82d3811eafdcd7bfb6d708e9c382") 23:14:55 executing program 1: syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="75ee6e6964fd3d69be82e23de3fd400826d2875a1f2b986825ba6a54fab19a8b577e4dad217290201e3833df925813f2acd8748c1972da32365790a97c5ac1ea778b78b776de1bc2ec4f37cd558af0b367e2688e7881254ceb9a954c0cffc26264cfc645b850187c39f346"]) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x8, &(0x7f0000000600)=[{&(0x7f0000000100)="bd7c2d5b66bc790f9e359ffa10e2b008f6901083a6a842fb0043dd618351f6e0b928980decbbd04e4882dfa63575c084febe56468177ae24e3dab08b22d67b520a419824c1df624f0a4e3631f458b315d57da7d25fa08c3160eddf036be73b1568424b2c946dc549765423f0b9", 0x6d, 0x100000001}, {&(0x7f0000000180)="6b90439948c95be408fd525140230dab63d5f1f790a601b1012d4cfad427c427bee816b90f31e145d28000c293ddc281f55e035a791c2714a5ea662e571fad17f08175b184074b4262bd2d3555673b7dd586ccf03e9ce681d07a16655b9e92334e3be25856b48296998cd50230230030b881f0223ff4c93277da068dc54904ce0fca718aa17fda8bd2b0f0031fca75cce4c1c6c4e5d81d18daaa49a4345326dc86e1c40c5403b2476d0ce94c58be0efe7081cd3ce399bb07c7cfcc9378a98ca0059febd0", 0xc4, 0x800000000000}, {&(0x7f0000000380)="81c3aefd693f51d04481f9741b0d032be7ed8cef524cfb480e430e4dcf245314e2c9b3be22ccf83cb1d3368cf2ce82fbd0a3e34e55dbbfcf0fe7b80ab5063466760bf9bfcd3add239bd7e22560476fa621918226f6b9dfd300405684c2ba114be0e4098fe0b0ea8f5f80516b3468ae2820d3211d7832847829f9fed45bc26e171aa2fb29a173d15a250e87f386b396f4d7ded561f877ce863cd92ff82bd2aeb05bf3ef853078c55696bca96820e7f42ec88c26eb23d5ebd4d98021b0c48827005669230642aa03e2b472876c463c0976fafdac23746a421fa7c294a45262bf834f15132bbdaf199645b6193207a2355858817162", 0xf4, 0xd84}, {&(0x7f0000000280)="3f0e76c1cd0b219c560c29831ee78ed3d147b49b53b6", 0x16, 0x7}, {&(0x7f0000000480)="6632973a5e91a3679c8d88ebf559f1f316445f35d7ba8a0bafbe65aa59bf03ca16451b668fe78b733297d8bb650485a73c08745c7ae8edb91da2a7eb684572523530a2df946800f3d13144ef10c759f46c593f62e4ab80703aefcd8feefa46bb67d4", 0x62, 0x9}, {&(0x7f0000000500)="94cc567532fd0e14949125d690de0d8c6d3bbb9ab50a178546d8f3ba028342aa52f0087587eedb5d4525a6d57582b2d79ce987f737db8f2a69e27ad2f04a8284ee7d4f08fbee250c16f3df47ad6d5aa47cf42e0b2df6d4449a7c9270b177d232f065a9df0528920fbab8", 0x6a, 0x101}, {&(0x7f00000002c0)="cd19dc4fa607", 0x6, 0xfffffffffffffffc}, {&(0x7f0000000580)="628608bf6629124848db881344d0977dac3dd6e7b555ced791f39bbc807f147df93c5c13fb310dafd6cc8d856d2a49609adceea8a05e00ff91b8f3e5b8fb8c7dfb494314c7ca99e3d8930f1b8890121d6794ea", 0x53, 0xfff}], 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='8,gid=', @ANYRESHEX, @ANYBLOB=',hide,map=normal,nocompress,iocharset=koi8-u,hide,hide,smackfshat=-\',\x00']) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) openat(r0, &(0x7f0000000740)='./file0\x00', 0x101040, 0x182) 23:14:55 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x10}], 0x1, 0x0, 0x0) 23:14:55 executing program 1: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29}], 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="2fe0acb278e880791cc1eb9e9b7aca5209958592e8fe3ae5c10b6b9d620a27c4ba6aa0920c12716aacb89eeef00828d5698ab40c87f9e84d74df8fe4f51ec9e4e2ba73da54b915ba79c2c9af4bc5c568c5482f55d3d4e58ce8658003799bf5db1ed222bc7d", 0x65, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="18419cc68448de3ae8f97ea6a46d823d4f19cecbf569a58b79851d91f3da031fecf4dfebf4ac3b13988a048b4e35761cb05a5d5b28e1ca6ceebae02cbbf7e894098749d5f99cb226f14f00b6034bfb02a7a5af409f531820bd319b9d7c3405022b550d32ad368fdbbddb8ed631d1dde9a4ed", 0xff10, r2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1ff, 0x401}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfff, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0xa9a0470178233a3b) statx(r4, &(0x7f00000004c0)='./file0\x00', 0x3000, 0x2, &(0x7f0000000500)) 23:14:56 executing program 1: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30656, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='n/file0\x00']) r2 = fcntl$dupfd(r0, 0x406, r1) getgid() perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x3, 0x1, 0x7f, 0x0, 0x0, 0x42, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp, 0x111, 0x5, 0x1, 0x5, 0x1, 0xfff, 0x5, 0x0, 0x5, 0x0, 0x878}, r3, 0x4, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) [ 124.406291] audit: type=1400 audit(1664838896.086:7): avc: denied { open } for pid=3489 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.407848] audit: type=1400 audit(1664838896.087:8): avc: denied { kernel } for pid=3489 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.427767] ------------[ cut here ]------------ [ 124.427798] [ 124.427803] ====================================================== [ 124.427809] WARNING: possible circular locking dependency detected [ 124.427814] 6.0.0-rc7-next-20220930 #1 Not tainted [ 124.427824] ------------------------------------------------------ [ 124.427829] syz-executor.1/3490 is trying to acquire lock: [ 124.427839] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 124.427897] [ 124.427897] but task is already holding lock: [ 124.427901] ffff88800d6c1020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.427946] [ 124.427946] which lock already depends on the new lock. [ 124.427946] [ 124.427951] [ 124.427951] the existing dependency chain (in reverse order) is: [ 124.427955] [ 124.427955] -> #3 (&ctx->lock){....}-{2:2}: [ 124.427977] _raw_spin_lock+0x2a/0x40 [ 124.427994] __perf_event_task_sched_out+0x53b/0x18d0 [ 124.428011] __schedule+0xedd/0x2470 [ 124.428033] schedule+0xda/0x1b0 [ 124.428054] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.428073] syscall_exit_to_user_mode+0x19/0x40 [ 124.428093] do_syscall_64+0x48/0x90 [ 124.428120] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.428140] [ 124.428140] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 124.428161] _raw_spin_lock_nested+0x30/0x40 [ 124.428178] raw_spin_rq_lock_nested+0x1e/0x30 [ 124.428198] task_fork_fair+0x63/0x4d0 [ 124.428224] sched_cgroup_fork+0x3d0/0x540 [ 124.428246] copy_process+0x4183/0x6e20 [ 124.428263] kernel_clone+0xe7/0x890 [ 124.428278] user_mode_thread+0xad/0xf0 [ 124.428294] rest_init+0x24/0x250 [ 124.428312] arch_call_rest_init+0xf/0x14 [ 124.428338] start_kernel+0x4c6/0x4eb [ 124.428362] secondary_startup_64_no_verify+0xe0/0xeb [ 124.428384] [ 124.428384] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 124.428405] _raw_spin_lock_irqsave+0x39/0x60 [ 124.428423] try_to_wake_up+0xab/0x1930 [ 124.428443] up+0x75/0xb0 [ 124.428465] __up_console_sem+0x6e/0x80 [ 124.428490] console_unlock+0x46a/0x590 [ 124.428515] do_con_write+0xc05/0x1d50 [ 124.428530] con_write+0x21/0x40 [ 124.428545] n_tty_write+0x4d4/0xfe0 [ 124.428563] file_tty_write.constprop.0+0x455/0x8a0 [ 124.428581] vfs_write+0x9c3/0xd90 [ 124.428605] ksys_write+0x127/0x250 [ 124.428630] do_syscall_64+0x3b/0x90 [ 124.428656] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.428676] [ 124.428676] -> #0 ((console_sem).lock){....}-{2:2}: [ 124.428697] __lock_acquire+0x2a02/0x5e70 [ 124.428724] lock_acquire+0x1a2/0x530 [ 124.428748] _raw_spin_lock_irqsave+0x39/0x60 [ 124.428765] down_trylock+0xe/0x70 [ 124.428789] __down_trylock_console_sem+0x3b/0xd0 [ 124.428814] vprintk_emit+0x16b/0x560 [ 124.428840] vprintk+0x84/0xa0 [ 124.428865] _printk+0xba/0xf1 [ 124.428882] report_bug.cold+0x72/0xab [ 124.428907] handle_bug+0x3c/0x70 [ 124.428937] exc_invalid_op+0x14/0x50 [ 124.428964] asm_exc_invalid_op+0x16/0x20 [ 124.428983] group_sched_out.part.0+0x2c7/0x460 [ 124.429011] ctx_sched_out+0x8f1/0xc10 [ 124.429037] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.429054] __schedule+0xedd/0x2470 [ 124.429076] schedule+0xda/0x1b0 [ 124.429097] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.429114] syscall_exit_to_user_mode+0x19/0x40 [ 124.429134] do_syscall_64+0x48/0x90 [ 124.429160] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.429187] [ 124.429187] other info that might help us debug this: [ 124.429187] [ 124.429191] Chain exists of: [ 124.429191] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 124.429191] [ 124.429215] Possible unsafe locking scenario: [ 124.429215] [ 124.429219] CPU0 CPU1 [ 124.429222] ---- ---- [ 124.429225] lock(&ctx->lock); [ 124.429234] lock(&rq->__lock); [ 124.429244] lock(&ctx->lock); [ 124.429254] lock((console_sem).lock); [ 124.429263] [ 124.429263] *** DEADLOCK *** [ 124.429263] [ 124.429266] 2 locks held by syz-executor.1/3490: [ 124.429276] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 124.429323] #1: ffff88800d6c1020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.429365] [ 124.429365] stack backtrace: [ 124.429369] CPU: 0 PID: 3490 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 124.429389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.429401] Call Trace: [ 124.429406] [ 124.429412] dump_stack_lvl+0x8b/0xb3 [ 124.429441] check_noncircular+0x263/0x2e0 [ 124.429467] ? format_decode+0x26c/0xb50 [ 124.429492] ? print_circular_bug+0x450/0x450 [ 124.429519] ? simple_strtoul+0x30/0x30 [ 124.429544] ? format_decode+0x26c/0xb50 [ 124.429572] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 124.429600] __lock_acquire+0x2a02/0x5e70 [ 124.429634] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 124.429670] lock_acquire+0x1a2/0x530 [ 124.429696] ? down_trylock+0xe/0x70 [ 124.429723] ? lock_release+0x750/0x750 [ 124.429756] ? vprintk+0x84/0xa0 [ 124.429784] _raw_spin_lock_irqsave+0x39/0x60 [ 124.429802] ? down_trylock+0xe/0x70 [ 124.429828] down_trylock+0xe/0x70 [ 124.429853] ? vprintk+0x84/0xa0 [ 124.429879] __down_trylock_console_sem+0x3b/0xd0 [ 124.429907] vprintk_emit+0x16b/0x560 [ 124.429937] vprintk+0x84/0xa0 [ 124.429964] _printk+0xba/0xf1 [ 124.429983] ? record_print_text.cold+0x16/0x16 [ 124.430008] ? report_bug.cold+0x66/0xab [ 124.430036] ? group_sched_out.part.0+0x2c7/0x460 [ 124.430066] report_bug.cold+0x72/0xab [ 124.430095] handle_bug+0x3c/0x70 [ 124.430123] exc_invalid_op+0x14/0x50 [ 124.430152] asm_exc_invalid_op+0x16/0x20 [ 124.430172] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.430204] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.430221] RSP: 0018:ffff88803f6a7c48 EFLAGS: 00010006 [ 124.430236] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.430247] RDX: ffff8880370a1ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 124.430259] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 124.430271] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d6c1000 [ 124.430283] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 124.430300] ? group_sched_out.part.0+0x2c7/0x460 [ 124.430332] ? group_sched_out.part.0+0x2c7/0x460 [ 124.430364] ctx_sched_out+0x8f1/0xc10 [ 124.430395] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.430417] ? lock_is_held_type+0xd7/0x130 [ 124.430439] ? __perf_cgroup_move+0x160/0x160 [ 124.430456] ? set_next_entity+0x304/0x550 [ 124.430484] ? update_curr+0x267/0x740 [ 124.430513] ? lock_is_held_type+0xd7/0x130 [ 124.430535] __schedule+0xedd/0x2470 [ 124.430563] ? io_schedule_timeout+0x150/0x150 [ 124.430589] ? rcu_read_lock_sched_held+0x3e/0x80 [ 124.430621] schedule+0xda/0x1b0 [ 124.430644] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.430664] syscall_exit_to_user_mode+0x19/0x40 [ 124.430686] do_syscall_64+0x48/0x90 [ 124.430714] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.430735] RIP: 0033:0x7f88d8166b19 [ 124.430748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.430765] RSP: 002b:00007f88d56dc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.430782] RAX: 0000000000000001 RBX: 00007f88d8279f68 RCX: 00007f88d8166b19 [ 124.430794] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88d8279f6c [ 124.430805] RBP: 00007f88d8279f60 R08: 000000000000000e R09: 0000000000000000 [ 124.430816] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f88d8279f6c [ 124.430828] R13: 00007ffcbf28948f R14: 00007f88d56dc300 R15: 0000000000022000 [ 124.430848] [ 124.519370] WARNING: CPU: 0 PID: 3490 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 124.520377] Modules linked in: [ 124.520731] CPU: 0 PID: 3490 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 124.521622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.522830] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.523429] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.525403] RSP: 0018:ffff88803f6a7c48 EFLAGS: 00010006 [ 124.525975] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.526744] RDX: ffff8880370a1ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 124.527504] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 124.528267] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d6c1000 [ 124.529026] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 124.529822] FS: 00007f88d56dc700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 124.530672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.531299] CR2: 00007f7ad3492620 CR3: 000000003ebc2000 CR4: 0000000000350ef0 [ 124.532055] Call Trace: [ 124.532339] [ 124.532592] ctx_sched_out+0x8f1/0xc10 [ 124.533024] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.533590] ? lock_is_held_type+0xd7/0x130 [ 124.534058] ? __perf_cgroup_move+0x160/0x160 [ 124.534533] ? set_next_entity+0x304/0x550 [ 124.534992] ? update_curr+0x267/0x740 [ 124.535416] ? lock_is_held_type+0xd7/0x130 [ 124.535889] __schedule+0xedd/0x2470 [ 124.536304] ? io_schedule_timeout+0x150/0x150 [ 124.536815] ? rcu_read_lock_sched_held+0x3e/0x80 [ 124.537337] schedule+0xda/0x1b0 [ 124.537717] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.538262] syscall_exit_to_user_mode+0x19/0x40 [ 124.538782] do_syscall_64+0x48/0x90 [ 124.539201] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.539753] RIP: 0033:0x7f88d8166b19 [ 124.540150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.542049] RSP: 002b:00007f88d56dc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.542866] RAX: 0000000000000001 RBX: 00007f88d8279f68 RCX: 00007f88d8166b19 [ 124.543618] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88d8279f6c [ 124.544360] RBP: 00007f88d8279f60 R08: 000000000000000e R09: 0000000000000000 [ 124.545101] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f88d8279f6c [ 124.545854] R13: 00007ffcbf28948f R14: 00007f88d56dc300 R15: 0000000000022000 [ 124.546618] [ 124.546872] irq event stamp: 932 [ 124.547229] hardirqs last enabled at (931): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 124.548197] hardirqs last disabled at (932): [] __schedule+0x1225/0x2470 [ 124.549056] softirqs last enabled at (816): [] __irq_exit_rcu+0x11b/0x180 [ 124.549958] softirqs last disabled at (739): [] __irq_exit_rcu+0x11b/0x180 [ 124.550855] ---[ end trace 0000000000000000 ]--- 23:14:56 executing program 1: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) syz_emit_ethernet(0x80, &(0x7f0000000180)={@local, @random="2722b090ea1b", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0x4a, 0x2f, 0x0, @local, @local, {[@hopopts={0x32}], {0x0, 0x0, 0x42, 0x0, @opaque="bda01972685ececa7ef8a46503bcc2f3e7725404d915713563985191a376413f359bf4e157f1bee7c9b0cc1dada54ade0e9f0b30b585efb3f9ee"}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x20, 0xa00200) r3 = syz_open_dev$evdev(&(0x7f0000000ac0), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000140)="d10836cdfe7f4bc1c7"}) fcntl$addseals(r2, 0x409, 0x1) r4 = fsmount(r1, 0x0, 0x70) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000040)=0x7) 23:14:56 executing program 3: set_mempolicy(0x2, &(0x7f0000000040)=0x3, 0x3ff) set_mempolicy(0x2, &(0x7f0000000000)=0x3f, 0x184) set_mempolicy(0x4000, &(0x7f0000000080)=0x1000, 0x4) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x50, r0, 0x69969000) 23:14:56 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fork() tkill(r2, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xff, 0xc8, 0x8, 0x1f, 0x0, 0x3, 0x301c8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7fffffff, 0x7}, 0x22000, 0x255, 0xffffff71, 0x3, 0x7, 0x2, 0x400, 0x0, 0x0, 0x0, 0x44b0}, r2, 0x6, r0, 0x1) perf_event_open(&(0x7f0000002940)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgid(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffc1}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x9, 0x7f, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x10240, 0x42, 0x5, 0x2, 0x2, 0x7, 0xfa24, 0x0, 0x5c, 0x0, 0xfffffffeffffffff}, r3, 0x4, r4, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x408400, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x7, 0x7f, 0xff, 0x0, 0x81, 0xab403, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5990e878, 0x2, @perf_config_ext={0x7}, 0x40, 0xde, 0x0, 0x9, 0x3ff, 0x1, 0x7, 0x0, 0xf85, 0x0, 0x101}, r2, 0xb, r5, 0x0) [ 125.703112] loop2: detected capacity change from 0 to 1 [ 125.725281] loop2: detected capacity change from 0 to 1 [ 130.078534] capability: warning: `syz-executor.7' uses deprecated v2 capabilities in a way that may be insecure [ 130.081281] capability: warning: `syz-executor.7' uses 32-bit capabilities (legacy support in use) VM DIAGNOSIS: 23:14:56 Registers: info registers vcpu 0 RAX=0000000000000071 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803f6a7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000071 R11=0000000000000001 R12=0000000000000071 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f88d56dc700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7ad3492620 CR3=000000003ebc2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 YMM01=0000000000000000 0000000000000000 2323232323232323 2323232323232323 YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000080000000 RBX=00007fa1c65ff000 RCX=ffffffff81006fee RDX=ffff88801f0c3580 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000001 RSP=ffff88803f5f7940 R8 =0000000000000007 R9 =ffffffffff600000 R10=00007fa1c65ff000 R11=000000000003603d R12=ffff88803f5f7a88 R13=0000000000000000 R14=ffff88801f0c3580 R15=ffff88800eaab290 RIP=ffffffff81460c37 RFL=00000207 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa1c65b6260 CR3=0000000036f80000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000