Warning: Permanently added '[localhost]:17903' (ECDSA) to the list of known hosts. 2022/09/19 08:03:55 fuzzer started 2022/09/19 08:03:55 dialing manager at localhost:36051 syzkaller login: [ 44.081797] cgroup: Unknown subsys name 'net' [ 44.203303] cgroup: Unknown subsys name 'rlimit' 2022/09/19 08:04:09 syscalls: 2215 2022/09/19 08:04:09 code coverage: enabled 2022/09/19 08:04:09 comparison tracing: enabled 2022/09/19 08:04:09 extra coverage: enabled 2022/09/19 08:04:09 setuid sandbox: enabled 2022/09/19 08:04:09 namespace sandbox: enabled 2022/09/19 08:04:09 Android sandbox: enabled 2022/09/19 08:04:09 fault injection: enabled 2022/09/19 08:04:09 leak checking: enabled 2022/09/19 08:04:09 net packet injection: enabled 2022/09/19 08:04:09 net device setup: enabled 2022/09/19 08:04:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/19 08:04:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/19 08:04:09 USB emulation: enabled 2022/09/19 08:04:09 hci packet injection: enabled 2022/09/19 08:04:09 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220916) 2022/09/19 08:04:09 802.15.4 emulation: enabled 2022/09/19 08:04:10 fetching corpus: 50, signal 18663/20541 (executing program) 2022/09/19 08:04:10 fetching corpus: 100, signal 35050/38583 (executing program) 2022/09/19 08:04:10 fetching corpus: 150, signal 48182/53194 (executing program) 2022/09/19 08:04:10 fetching corpus: 200, signal 53730/60286 (executing program) 2022/09/19 08:04:10 fetching corpus: 250, signal 61796/69706 (executing program) 2022/09/19 08:04:10 fetching corpus: 300, signal 68631/77813 (executing program) 2022/09/19 08:04:10 fetching corpus: 350, signal 72729/83233 (executing program) 2022/09/19 08:04:10 fetching corpus: 400, signal 77925/89638 (executing program) 2022/09/19 08:04:11 fetching corpus: 450, signal 81851/94788 (executing program) 2022/09/19 08:04:11 fetching corpus: 500, signal 86488/100516 (executing program) 2022/09/19 08:04:11 fetching corpus: 550, signal 89863/105024 (executing program) 2022/09/19 08:04:11 fetching corpus: 600, signal 93058/109347 (executing program) 2022/09/19 08:04:11 fetching corpus: 650, signal 94719/112212 (executing program) 2022/09/19 08:04:11 fetching corpus: 700, signal 97326/115910 (executing program) 2022/09/19 08:04:11 fetching corpus: 750, signal 100173/119785 (executing program) 2022/09/19 08:04:12 fetching corpus: 800, signal 103227/123826 (executing program) 2022/09/19 08:04:12 fetching corpus: 850, signal 106559/128079 (executing program) 2022/09/19 08:04:12 fetching corpus: 900, signal 110379/132700 (executing program) 2022/09/19 08:04:12 fetching corpus: 950, signal 112663/135914 (executing program) 2022/09/19 08:04:12 fetching corpus: 1000, signal 114366/138572 (executing program) 2022/09/19 08:04:12 fetching corpus: 1050, signal 116882/141928 (executing program) 2022/09/19 08:04:12 fetching corpus: 1100, signal 119015/144885 (executing program) 2022/09/19 08:04:12 fetching corpus: 1150, signal 120184/147066 (executing program) 2022/09/19 08:04:13 fetching corpus: 1200, signal 121841/149614 (executing program) 2022/09/19 08:04:13 fetching corpus: 1250, signal 123753/152375 (executing program) 2022/09/19 08:04:13 fetching corpus: 1300, signal 125619/155035 (executing program) 2022/09/19 08:04:13 fetching corpus: 1350, signal 127307/157567 (executing program) 2022/09/19 08:04:13 fetching corpus: 1400, signal 129560/160544 (executing program) 2022/09/19 08:04:13 fetching corpus: 1450, signal 131004/162834 (executing program) 2022/09/19 08:04:13 fetching corpus: 1500, signal 133520/165944 (executing program) 2022/09/19 08:04:13 fetching corpus: 1550, signal 134981/168183 (executing program) 2022/09/19 08:04:13 fetching corpus: 1600, signal 136299/170298 (executing program) 2022/09/19 08:04:14 fetching corpus: 1650, signal 139133/173503 (executing program) 2022/09/19 08:04:14 fetching corpus: 1700, signal 141016/176012 (executing program) 2022/09/19 08:04:14 fetching corpus: 1750, signal 142214/177935 (executing program) 2022/09/19 08:04:14 fetching corpus: 1800, signal 144232/180453 (executing program) 2022/09/19 08:04:14 fetching corpus: 1850, signal 145579/182499 (executing program) 2022/09/19 08:04:14 fetching corpus: 1900, signal 146724/184354 (executing program) 2022/09/19 08:04:14 fetching corpus: 1950, signal 148921/186958 (executing program) 2022/09/19 08:04:14 fetching corpus: 2000, signal 150203/188867 (executing program) 2022/09/19 08:04:14 fetching corpus: 2050, signal 150673/190176 (executing program) 2022/09/19 08:04:15 fetching corpus: 2100, signal 151821/191968 (executing program) 2022/09/19 08:04:15 fetching corpus: 2150, signal 153021/193768 (executing program) 2022/09/19 08:04:15 fetching corpus: 2200, signal 154724/195881 (executing program) 2022/09/19 08:04:15 fetching corpus: 2250, signal 156130/197775 (executing program) 2022/09/19 08:04:15 fetching corpus: 2300, signal 157183/199474 (executing program) 2022/09/19 08:04:15 fetching corpus: 2350, signal 159208/201724 (executing program) 2022/09/19 08:04:16 fetching corpus: 2400, signal 160924/203749 (executing program) 2022/09/19 08:04:16 fetching corpus: 2450, signal 162107/205527 (executing program) 2022/09/19 08:04:16 fetching corpus: 2500, signal 163167/207078 (executing program) 2022/09/19 08:04:16 fetching corpus: 2550, signal 164067/208496 (executing program) 2022/09/19 08:04:16 fetching corpus: 2600, signal 165090/210024 (executing program) 2022/09/19 08:04:16 fetching corpus: 2650, signal 167121/212218 (executing program) 2022/09/19 08:04:16 fetching corpus: 2700, signal 168427/213906 (executing program) 2022/09/19 08:04:16 fetching corpus: 2750, signal 169499/215423 (executing program) 2022/09/19 08:04:17 fetching corpus: 2800, signal 170659/216958 (executing program) 2022/09/19 08:04:17 fetching corpus: 2850, signal 172190/218693 (executing program) 2022/09/19 08:04:17 fetching corpus: 2900, signal 173606/220330 (executing program) 2022/09/19 08:04:17 fetching corpus: 2950, signal 174901/221919 (executing program) 2022/09/19 08:04:17 fetching corpus: 3000, signal 176213/223590 (executing program) 2022/09/19 08:04:17 fetching corpus: 3050, signal 177079/224915 (executing program) 2022/09/19 08:04:17 fetching corpus: 3100, signal 177798/226132 (executing program) 2022/09/19 08:04:17 fetching corpus: 3150, signal 178475/227301 (executing program) 2022/09/19 08:04:18 fetching corpus: 3200, signal 179532/228684 (executing program) 2022/09/19 08:04:18 fetching corpus: 3250, signal 180115/229791 (executing program) 2022/09/19 08:04:18 fetching corpus: 3300, signal 180807/230918 (executing program) 2022/09/19 08:04:18 fetching corpus: 3350, signal 181451/232012 (executing program) 2022/09/19 08:04:18 fetching corpus: 3400, signal 182991/233565 (executing program) 2022/09/19 08:04:18 fetching corpus: 3450, signal 183868/234757 (executing program) 2022/09/19 08:04:18 fetching corpus: 3500, signal 184902/236029 (executing program) 2022/09/19 08:04:18 fetching corpus: 3550, signal 185681/237137 (executing program) 2022/09/19 08:04:19 fetching corpus: 3600, signal 186524/238263 (executing program) 2022/09/19 08:04:19 fetching corpus: 3650, signal 187224/239391 (executing program) 2022/09/19 08:04:19 fetching corpus: 3700, signal 187787/240369 (executing program) 2022/09/19 08:04:19 fetching corpus: 3750, signal 188989/241644 (executing program) 2022/09/19 08:04:19 fetching corpus: 3800, signal 190224/242965 (executing program) 2022/09/19 08:04:19 fetching corpus: 3850, signal 190511/243760 (executing program) 2022/09/19 08:04:19 fetching corpus: 3900, signal 191128/244739 (executing program) 2022/09/19 08:04:19 fetching corpus: 3950, signal 191957/245855 (executing program) 2022/09/19 08:04:20 fetching corpus: 4000, signal 192442/246737 (executing program) 2022/09/19 08:04:20 fetching corpus: 4050, signal 193201/247765 (executing program) 2022/09/19 08:04:20 fetching corpus: 4100, signal 194820/249076 (executing program) 2022/09/19 08:04:20 fetching corpus: 4150, signal 195864/250205 (executing program) 2022/09/19 08:04:20 fetching corpus: 4200, signal 196564/251150 (executing program) 2022/09/19 08:04:20 fetching corpus: 4250, signal 197286/252120 (executing program) 2022/09/19 08:04:20 fetching corpus: 4300, signal 198729/253349 (executing program) 2022/09/19 08:04:21 fetching corpus: 4350, signal 199561/254313 (executing program) 2022/09/19 08:04:21 fetching corpus: 4400, signal 200281/255252 (executing program) 2022/09/19 08:04:21 fetching corpus: 4450, signal 201018/256126 (executing program) 2022/09/19 08:04:21 fetching corpus: 4500, signal 201582/256930 (executing program) 2022/09/19 08:04:21 fetching corpus: 4550, signal 202422/257849 (executing program) 2022/09/19 08:04:21 fetching corpus: 4600, signal 203043/258714 (executing program) 2022/09/19 08:04:21 fetching corpus: 4650, signal 203940/259666 (executing program) 2022/09/19 08:04:21 fetching corpus: 4700, signal 204566/260452 (executing program) 2022/09/19 08:04:22 fetching corpus: 4750, signal 205499/261365 (executing program) 2022/09/19 08:04:22 fetching corpus: 4800, signal 206500/262329 (executing program) 2022/09/19 08:04:22 fetching corpus: 4850, signal 206980/263102 (executing program) 2022/09/19 08:04:22 fetching corpus: 4900, signal 207556/263879 (executing program) 2022/09/19 08:04:22 fetching corpus: 4950, signal 208262/264724 (executing program) 2022/09/19 08:04:22 fetching corpus: 5000, signal 208988/265501 (executing program) 2022/09/19 08:04:22 fetching corpus: 5050, signal 209455/266222 (executing program) 2022/09/19 08:04:22 fetching corpus: 5100, signal 210164/266975 (executing program) 2022/09/19 08:04:22 fetching corpus: 5150, signal 210914/267776 (executing program) 2022/09/19 08:04:23 fetching corpus: 5200, signal 211451/268450 (executing program) 2022/09/19 08:04:23 fetching corpus: 5250, signal 212171/269194 (executing program) 2022/09/19 08:04:23 fetching corpus: 5300, signal 212834/269934 (executing program) 2022/09/19 08:04:23 fetching corpus: 5350, signal 213427/270606 (executing program) 2022/09/19 08:04:23 fetching corpus: 5400, signal 214132/271328 (executing program) 2022/09/19 08:04:23 fetching corpus: 5450, signal 215150/272155 (executing program) 2022/09/19 08:04:23 fetching corpus: 5500, signal 215756/272840 (executing program) 2022/09/19 08:04:24 fetching corpus: 5550, signal 216635/273566 (executing program) 2022/09/19 08:04:24 fetching corpus: 5600, signal 216963/274134 (executing program) 2022/09/19 08:04:24 fetching corpus: 5650, signal 217407/274718 (executing program) 2022/09/19 08:04:24 fetching corpus: 5700, signal 218090/275343 (executing program) 2022/09/19 08:04:24 fetching corpus: 5750, signal 219349/276124 (executing program) 2022/09/19 08:04:24 fetching corpus: 5800, signal 220287/276795 (executing program) 2022/09/19 08:04:24 fetching corpus: 5850, signal 220718/277374 (executing program) 2022/09/19 08:04:25 fetching corpus: 5900, signal 221742/278102 (executing program) 2022/09/19 08:04:25 fetching corpus: 5950, signal 222923/278804 (executing program) 2022/09/19 08:04:25 fetching corpus: 6000, signal 223363/279352 (executing program) 2022/09/19 08:04:25 fetching corpus: 6050, signal 224080/279953 (executing program) 2022/09/19 08:04:25 fetching corpus: 6100, signal 224440/280439 (executing program) 2022/09/19 08:04:25 fetching corpus: 6150, signal 224963/281012 (executing program) 2022/09/19 08:04:25 fetching corpus: 6200, signal 225335/281464 (executing program) 2022/09/19 08:04:25 fetching corpus: 6250, signal 226450/282036 (executing program) 2022/09/19 08:04:26 fetching corpus: 6300, signal 226806/282516 (executing program) 2022/09/19 08:04:26 fetching corpus: 6350, signal 227408/283039 (executing program) 2022/09/19 08:04:26 fetching corpus: 6400, signal 227837/283520 (executing program) 2022/09/19 08:04:26 fetching corpus: 6450, signal 228498/284074 (executing program) 2022/09/19 08:04:26 fetching corpus: 6500, signal 229467/284610 (executing program) 2022/09/19 08:04:26 fetching corpus: 6550, signal 229705/285037 (executing program) 2022/09/19 08:04:26 fetching corpus: 6600, signal 230176/285536 (executing program) 2022/09/19 08:04:26 fetching corpus: 6650, signal 230651/285975 (executing program) 2022/09/19 08:04:27 fetching corpus: 6700, signal 231197/286567 (executing program) 2022/09/19 08:04:27 fetching corpus: 6750, signal 231630/286972 (executing program) 2022/09/19 08:04:27 fetching corpus: 6800, signal 232016/287392 (executing program) 2022/09/19 08:04:27 fetching corpus: 6850, signal 232307/287808 (executing program) 2022/09/19 08:04:27 fetching corpus: 6900, signal 233287/288218 (executing program) 2022/09/19 08:04:27 fetching corpus: 6950, signal 233866/288681 (executing program) 2022/09/19 08:04:27 fetching corpus: 7000, signal 234361/289079 (executing program) 2022/09/19 08:04:27 fetching corpus: 7050, signal 234812/289500 (executing program) 2022/09/19 08:04:28 fetching corpus: 7100, signal 235478/289943 (executing program) 2022/09/19 08:04:28 fetching corpus: 7150, signal 235945/290230 (executing program) 2022/09/19 08:04:28 fetching corpus: 7200, signal 236231/290233 (executing program) 2022/09/19 08:04:28 fetching corpus: 7250, signal 237158/290233 (executing program) 2022/09/19 08:04:28 fetching corpus: 7300, signal 238035/290234 (executing program) 2022/09/19 08:04:28 fetching corpus: 7350, signal 238567/290238 (executing program) 2022/09/19 08:04:28 fetching corpus: 7400, signal 238876/290243 (executing program) 2022/09/19 08:04:28 fetching corpus: 7450, signal 239359/290246 (executing program) 2022/09/19 08:04:29 fetching corpus: 7500, signal 239834/290247 (executing program) 2022/09/19 08:04:29 fetching corpus: 7550, signal 240248/290250 (executing program) 2022/09/19 08:04:29 fetching corpus: 7600, signal 240467/290252 (executing program) 2022/09/19 08:04:29 fetching corpus: 7650, signal 241241/290292 (executing program) 2022/09/19 08:04:29 fetching corpus: 7700, signal 241776/290293 (executing program) 2022/09/19 08:04:29 fetching corpus: 7750, signal 242667/290519 (executing program) 2022/09/19 08:04:29 fetching corpus: 7800, signal 242992/290519 (executing program) 2022/09/19 08:04:29 fetching corpus: 7850, signal 243536/290525 (executing program) 2022/09/19 08:04:29 fetching corpus: 7900, signal 243974/290543 (executing program) 2022/09/19 08:04:30 fetching corpus: 7950, signal 244474/290546 (executing program) 2022/09/19 08:04:30 fetching corpus: 8000, signal 244959/290570 (executing program) 2022/09/19 08:04:30 fetching corpus: 8050, signal 245362/290574 (executing program) 2022/09/19 08:04:30 fetching corpus: 8100, signal 245710/290574 (executing program) 2022/09/19 08:04:30 fetching corpus: 8150, signal 246062/290574 (executing program) 2022/09/19 08:04:30 fetching corpus: 8200, signal 246306/290574 (executing program) 2022/09/19 08:04:30 fetching corpus: 8211, signal 246464/290574 (executing program) 2022/09/19 08:04:30 fetching corpus: 8211, signal 246464/290574 (executing program) 2022/09/19 08:04:33 starting 8 fuzzer processes 08:04:33 executing program 0: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x7fffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20e00, 0x0) fallocate(r0, 0x21, 0x80000000, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1b8, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1cc1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf937}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf074}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcb70}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x99}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x56ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6d}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xa17efcaf62a6b628}, 0x4000) openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x40, 0x0) fcntl$getflags(r1, 0x3) r3 = fcntl$dupfd(r1, 0x406, r1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x118, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa78}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb01}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2e85}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7bbf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000085}, 0x4044cc1) openat(r1, &(0x7f0000000740)='./file0\x00', 0x1, 0x100) syz_open_dev$loop(&(0x7f0000000780), 0x80, 0x8000) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffe0, 0x29}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6be3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = accept4(r1, 0x0, &(0x7f00000008c0), 0x80000) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r2, 0x422, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "571d37cfe8f2b2ab9703e6b6262a8bd1c73de0a076c85d64893f4857118ea6eab4df"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x40000c0) 08:04:33 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)=""/159, 0x9f}, {&(0x7f00000000c0)=""/205, 0xcd}, {&(0x7f00000001c0)=""/146, 0x92}], 0x3, 0x6, 0x8) r0 = socket(0x23, 0xc, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/142, 0x8e}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/90, 0x5a}], 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="57adbe0d"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_SSID={0xe, 0x34, @random="025ffce8e582595ca882"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000009c0)={0x0, 'vlan0\x00', {0x4}, 0x800}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x1f0, r1, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x25}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x8, 0x1f, 0x18d]}, @NL80211_ATTR_FRAME={0x1ba, 0x33, @beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @broadcast, @initial, {0xa, 0x2}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x0, @default, 0x0, @void, @val={0x1, 0x1, [{0x30, 0x1}]}, @void, @void, @void, @val={0x5, 0x14, {0x8, 0xa9, 0x76, "90d00c8c4abb9e59e12027828c0b292590"}}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x0, 0x0, {0xffffffffffff7fff, 0x7f, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x8000, 0x99}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x8}}, @val={0x76, 0x6, {0x7, 0x4, 0x38, 0x1}}, [{0xdd, 0x50, "b20280b7d56b50159f58b2620baf16c1c3873da0ff10142ef54beb580c8234dc12a565188cd77fbfb4bf35f108cde0d3b865e3accd0884f195d8451770f4acee0d9fff03b3d8e48c28ec0b232b987c53"}, {0xdd, 0xe9, "416a7b18b147dc0bfdfc1ac0d432f3b5ec01beed7bca19a6a36a7363d76523064870d07b11313e61c62220bac852beb0d330e80cae38a4d58d8828d2a66eabf8b192d70c3860a0f8895d6938efee747a25fe880184b452e2cd5fe819c405deb52b09db5151fe25e38dd6d76804b3e6535b138390b34a9251fff9856ece8c720457530e1c20d235d4081d141f8428d15ba5acaa64211f1ad1beb4150f49229bde49bc83e913097588b07b92553e503d6381c51eeb205e678c1553af7239062c51f60e010107f1e86f7ce0a4e13cfcf46c95d1a2643c9c8d3d30237b9d07cba856e48b371e682ca0cfd7"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6a7}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x801}, 0x4040040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x58, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0xb318e7630f7416e9}, 0x0) r4 = dup2(r0, r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r5 = syz_open_dev$vcsu(&(0x7f0000001000), 0x10000, 0x400000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2ae2869d0718a997}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001140)={'wpan3\x00'}) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x10, 0x3f5, 0xa00, 0x70bd2b, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}}, 0x20000805) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80010}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xd0, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x4}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) 08:04:33 executing program 2: keyctl$set_timeout(0xf, 0x0, 0x0) r0 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x65, 0x33, 0x65, 0x31, 0x31, 0x32, 0x23, 0x35, 0x32, 0x37, 0x33, 0x66, 0x36, 0x66, 0x62, 0x34]}, &(0x7f0000000180)={0x0, "28de94562e382b97a7ec7c1eefc2e83ab9f184f707c3f51a8766ea623e12c80d32fd26ff04e15d17058cdc4f4e1ad0bef08f5dad881149c40d3d40308792a811", 0x32}, 0x48, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', r1}) r2 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='&\x00', r0) r3 = add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="652ba832e6d4fdde8ae545910b5f0ffee3df54f00afb8b679ffdb0c8cc9fe7fd03d284074778ca2e65462355e6e6988d3a97112b7e7e1cb1d5aae3a071573844c93eb9f869b6122ea3f81987533733a2748d3bbee6cea51193155a9e062a745c15f6bde1485150235ec6c3a45c1359569bd8eec9f9dae55cca653762485909816786ee88a91dfa2a5d968185a7d511d58cc04647197280c6366f5bc86b8f6806f4d99a261cb1e3c634691eefe77237bf9e922db340da4727511b8450e90b4f786042d3f4a48139ec0879813cdd08545362b0fca66a28ebbf6f0dd2f4409eceb1acbbf30f0698", 0xe6, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000000580)=0xe8) keyctl$get_persistent(0x16, r4, r1) r5 = add_key(&(0x7f00000005c0)='encrypted\x00', &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, r1) add_key(&(0x7f0000000640)='trusted\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)="554f94e8af3140e614a59097ec2c53e60109feb10087309fdca7000c0417ace448592bb719b2d1e674e6cbb34655792a1ebd31b7b56bfbbd3373af531cb5b37ace5e769277bc7a6e10e988b10ea52acc210e0d4e8917c15ca9d76a1cc9c4472a3a6d4ab1ac8f917993540024c8d23901ece772c4f6bf8df70b8530f1ca690c24f7618b5537dd7d45861e6932e383bb8b7c7a3a2893039d38b2a54e94bd8fd04e3d23d645c1d5a960fbdbafe0c52b1ef174ff02cd409cc4d7454a2d212876d590f80a83efef68086ea88bd499876534d1de8b40d631ad9f", 0xd7, r3) add_key$user(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x2}, &(0x7f0000000840)="5b6ad7d9e22d38afe49cb63fc4cbfbdb49cfa53e6671dc88110b009e7be10f19565728b53160a9be71607f", 0x2b, r2) r6 = request_key(&(0x7f0000000940)='encrypted\x00', &(0x7f0000000980)={'syz', 0x1}, &(0x7f00000009c0)='user\x00', r3) add_key(&(0x7f0000000880)='.dead\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)="64e9309d45ca41d9", 0x8, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f0000000a00)=@keyring={'key_or_keyring:', r2}) r7 = add_key(&(0x7f0000000a40)='id_resolver\x00', &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000ac0)="00e551ea2204c8d542d20ef88e7fe567a4e400fa182df2306c99c0eed8980e1eb80dbb295c6252da5b7ddc4b7a34d3dee9433ddf85a65cf3d38a94188e97752d19a25b398d1ade2ac782c93789e326484f0b81877515ad99640690743a9bf69cc667654c5b7ed10f638125fbb63949fb0548aa30bea3e45ea17d54517f010c0f223420d10a99e3128c9d3ecc7d636624b85e1ef21dcc204f3efacc4ca88f5d9cf71fddf5df1ab0c0c6114a37bbca149d575b150ea490f1425205040e5fda02d5f7dc5a9b9822f745d57900f875a8eaf995a0c771cea3497e6dfba9545210e2994a1640b44a49c3c198d5916f527bef976aafb3be709efeb8", 0xf8, r5) keyctl$KEYCTL_MOVE(0x1e, r6, r1, r7, 0x0) socketpair(0x1, 0x4, 0x4570937e, &(0x7f0000000bc0)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r9, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) [ 81.311870] audit: type=1400 audit(1663574673.050:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:04:33 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/105, 0x69}], 0x1, 0x4, 0x67) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/4\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) recvmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000180), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/201, 0xc9}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f00000004c0)=""/34, 0x22}, {&(0x7f0000000500)=""/205, 0xcd}], 0x6, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x103) syncfs(r1) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000780)=0x7) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000007c0)) r3 = fsmount(r2, 0x1, 0x84) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r4 = io_uring_setup(0x6c0f, &(0x7f0000000840)={0x0, 0xf76f, 0x1, 0x1, 0x217, 0x0, r3}) recvmsg$unix(r0, &(0x7f0000000a00)={&(0x7f0000000900), 0x6e, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x400100c0) io_submit(0x0, 0x1, &(0x7f0000000a80)=[&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f00000008c0), 0x0, 0x40, 0x0, 0x0, r5}]) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/power/pm_wakeup_irq', 0x105040, 0x81) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000b00), 0x4000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) fcntl$setsig(r6, 0xa, 0x26) dup2(r6, r7) pwritev(r2, &(0x7f0000000b80)=[{&(0x7f0000000b40)}], 0x1, 0x9, 0x5) 08:04:33 executing program 4: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="625ff660e755"}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x7, 0x7f, 0x4a, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x10, 0x40, 0x4, 0x7ff}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r0, 0x1, 0x6, @link_local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r0, 0x4, 0x4, 0x0, 0xc1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x7800, 0x9, 0x3}}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r1, 0x29, 0xd9, 0x80, 0x5, 0x3a, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x8, 0x8, 0x1}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', r1, 0x4, 0xdb, 0x5, 0x1f, 0x1a, @private0, @private1, 0x20, 0x7, 0xff, 0x2f78}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'gre0\x00', r0, 0x700, 0x7800, 0x3, 0x3, {{0xa, 0x4, 0x1, 0x1a, 0x28, 0x65, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, {[@generic={0x7, 0x11, "19aa6f8f3a1e4a2010465c3f445fe5"}]}}}}}) accept$packet(0xffffffffffffffff, &(0x7f0000004280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000042c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000004480)={'ip6tnl0\x00', &(0x7f0000004400)={'syztnl1\x00', r1, 0x4, 0x9, 0x4, 0x8, 0x83, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x40, 0x10, 0x7ff, 0x4}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000044c0)={'ip6erspan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004500)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000004540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000004580)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000004640)={'syztnl2\x00', &(0x7f00000045c0)={'syztnl2\x00', r0, 0x29, 0x2, 0x80, 0xfb, 0x9, @empty, @remote, 0x69c022defd2461fc, 0x700, 0x7, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000046c0)={'ip_vti0\x00', &(0x7f0000004680)={'syztnl1\x00', r0, 0x7838, 0x8000, 0xc7, 0x1, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x65, 0x0, 0x8, 0x29, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000004840)={'sit0\x00', &(0x7f00000047c0)={'ip6_vti0\x00', r1, 0x0, 0x2, 0x0, 0x5, 0xa, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7, 0x400, 0x7ff}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000052c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005280)={&(0x7f0000004880)={0x9d8, r2, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x118, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0x0, 0x40, 0x8001}, {0x3, 0x1, 0x3, 0x4}, {0x100, 0x3, 0x88, 0x2}, {0xffff, 0x80, 0x0, 0x200}, {0xfe01, 0x4a, 0x7, 0x1}, {0x83bd, 0x63, 0x80, 0x707aa7ae}]}}}]}}, {{0x8, 0x1, r4}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r0}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r1}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x501d}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r10}, {0x1ec, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r14}, {0x4}}]}, 0x9d8}}, 0x40000) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005300)={{{@in6=@remote, @in=@multicast2, 0x4e22, 0x0, 0x4e22, 0xfff, 0xa, 0x20, 0x20, 0x2f, r6, 0xee00}, {0x100, 0x7f, 0x10000, 0x3, 0x800, 0x9, 0x3, 0x7}, {0x4, 0x81, 0x4, 0x8}, 0x7, 0x6e6bb7, 0x2, 0x0, 0x1, 0x3}, {{@in=@private=0x4, 0x4d4, 0x19}, 0xa, @in=@multicast1, 0x0, 0x1, 0x0, 0x5, 0x12, 0x200, 0x800}}, 0xe8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000055c0)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005580)={&(0x7f00000054c0)={0xc0, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 08:04:33 executing program 5: ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) ioctl$KDENABIO(r1, 0x4b36) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', &(0x7f0000000140)='\xac)!*+$.\x00', 0x8, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x808}, 0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000002c0)) open_by_handle_at(r1, &(0x7f0000000340)=@reiserfs_4={0x10, 0x4, {0x1, 0x4edfed4f, 0x66a, 0x5}}, 0xc00) fcntl$setpipe(r1, 0x407, 0xfffffffffffffffc) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/user\x00') fsetxattr$security_selinux(r3, &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:tun_tap_device_t:s0\x00', 0x26, 0x2) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000440)="597e9de7246efbaf07de7c4a60ba9aa485f1d187e171fd6bfda305fe4cb86633454650160e7a0a5e9539fd258485fbdcd56caa065246a54e03c59126ea31cdbe25e52480b8d39096071bd9c9b37cdb0550a0ac911b99c7ae1ff957f194261304fffbcea22dfeead48354e971bcdb65d66619ec00797bf1d49594f9f934de58aba25367b3f2d698361c7394fa5239496a5f721d894c461c5828b01f364da682ff1f466ff78cde760daab038f6962e6196b896769ea072e70c47e46a67bb299ccbf239d0b34b3300d390a1e92a620e8d", 0xcf}], 0x1, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x77359400}}, 0x7) r4 = openat$cgroup_ro(r0, &(0x7f0000000600)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000640)) r5 = syz_open_dev$mouse(&(0x7f00000006c0), 0x1, 0x450440) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x8000) 08:04:33 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000011}, 0x4000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x1, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x80) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe14, 0x76}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x1, 0x5, 0x0, {0x9, 0xff, 0x0, 0x2ae, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xe7, 0x80}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x1, 0x0, {0x10000, 0xff, 0x0, 0x9, 0x0, 0x1}, 0x6, 0x20, 0x4}}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x971}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xe000, {0x4, 0x3, 0xa7a8, 0x1}}}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x48010) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x24}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000890}, 0x810) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb4, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff3a}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x18001}, 0x2000c004) r3 = syz_mount_image$tmpfs(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x8000, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="159f583c5e732e69b2f446b3294515c2dd8df2a2e15ff3b100c8a18ead950b722ddd937cd375b3ac9bed375ef2bbcfac653f38b760b55a7fbe699c3e43e25884fa9e64d55b5dc3e4db71df37f16a7b8d5d552cedcd47131a9c9018d083cceb40ecbcc1ad24d818fe249a6374a32c55e150d79a8a27eafb0b64e93f99427d34d84feb142d402b8f93725882549e74bc4a1a8b58cafe3a7f29fd5616b8980555bd5d829a2c433e3917a3b084ac45402511", 0xb0, 0x6}], 0x40000, &(0x7f0000000cc0)={[{@huge_within_size}, {@huge_advise}, {@huge_never}, {@huge_within_size}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '*#]^/'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xee01}}, {@appraise_type}, {@dont_appraise}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@seclabel}]}) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000dc0)=0x1) pipe2(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r4) recvmmsg$unix(r1, &(0x7f0000008e40)=[{{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000e80)=""/121, 0x79}, {&(0x7f0000000f00)=""/173, 0xad}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/123, 0x7b}, {&(0x7f0000002040)=""/200, 0xc8}, {&(0x7f0000002140)=""/51, 0x33}], 0x6, &(0x7f0000002200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002240)=@abs, 0x6e, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/160, 0xa0}, {&(0x7f0000002380)=""/15, 0xf}, {&(0x7f00000023c0)=""/204, 0xcc}, {&(0x7f00000024c0)=""/87, 0x57}], 0x4, &(0x7f0000002580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000003800)=[{&(0x7f0000002680)=""/122, 0x7a}, {&(0x7f0000002700)=""/206, 0xce}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x3, &(0x7f0000003840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f00000038c0)=""/5, 0x5}, {&(0x7f0000003900)=""/28, 0x1c}, {&(0x7f0000003940)=""/135, 0x87}, {&(0x7f0000003a00)=""/144, 0x90}, {&(0x7f0000003ac0)=""/39, 0x27}], 0x5, &(0x7f0000003b80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000003c00), 0x6e, &(0x7f0000005d40)=[{&(0x7f0000003c80)=""/94, 0x5e}, {&(0x7f0000003d00)=""/48, 0x30}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4, &(0x7f0000005d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005dc0)=@abs, 0x6e, &(0x7f0000007080)=[{&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000006e40)=""/32, 0x20}, {&(0x7f0000006e80)=""/27, 0x1b}, {&(0x7f0000006ec0)=""/2, 0x2}, {&(0x7f0000006f00)=""/90, 0x5a}, {&(0x7f0000006f80)=""/107, 0x6b}, {&(0x7f0000007000)=""/121, 0x79}], 0x7, &(0x7f0000007100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000007200)=@abs, 0x6e, &(0x7f00000073c0)=[{&(0x7f0000007280)=""/9, 0x9}, {&(0x7f00000072c0)=""/208, 0xd0}], 0x2, &(0x7f0000007400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000007480)=@abs, 0x6e, &(0x7f0000008a00)=[{&(0x7f0000007500)=""/174, 0xae}, {&(0x7f00000075c0)=""/180, 0xb4}, {&(0x7f0000007680)=""/51, 0x33}, {&(0x7f00000076c0)=""/50, 0x32}, {&(0x7f0000007700)=""/4096, 0x1000}, {&(0x7f0000008700)=""/193, 0xc1}, {&(0x7f0000008800)=""/104, 0x68}, {&(0x7f0000008880)=""/203, 0xcb}, {&(0x7f0000008980)=""/95, 0x5f}], 0x9, &(0x7f0000008ac0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000008c00)=@abs, 0x6e, &(0x7f0000008dc0)=[{&(0x7f0000008c80)=""/52, 0x34}, {&(0x7f0000008cc0)=""/51, 0x33}, {&(0x7f0000008d00)=""/179, 0xb3}], 0x3, &(0x7f0000008e00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}}], 0x9, 0x20, 0x0) kcmp(r5, 0x0, 0x2, r1, 0xffffffffffffffff) 08:04:33 executing program 7: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1800, &(0x7f00000001c0)={[{@memory_recursiveprot}, {@memory_recursiveprot}], [{@uid_lt={'uid<', r0}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@obj_user}, {@smackfsdef={'smackfsdef', 0x3d, '#**-.-\xd4'}}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, ':/(#*'}}, {@audit}]}) umount2(&(0x7f0000000280)='.\x00', 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300), 0x0, 0x20000000}, 0x4000080) statfs(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)=""/227) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x9, @none, 0x9}, 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)) mount$9p_fd(0x0, &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780), 0x10000, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}, {@noextend}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@cache_fscache}, {@version_u}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@permit_directio}, {@permit_directio}, {@fsname={'fsname', 0x3d, 'seclabel'}}, {@appraise_type}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff7}}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x28200032}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x80}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1da288b337fd"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "397c29c622e2b226d806"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000880}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000bc0), 0x28240, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000c00)=0x80000000, 0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c40), 0x248601, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0/file0/file0\x00'}) syz_io_uring_setup(0x5474, &(0x7f0000000cc0)={0x0, 0x6fbf, 0x10, 0x1, 0x8e, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000d40), &(0x7f0000000d80)) [ 82.645410] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.647226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.649576] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.651172] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.654501] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.655910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.657360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.658184] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.659865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.665504] Bluetooth: hci1: HCI_REQ-0x0c1a [ 82.667225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.675562] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.680415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.685136] Bluetooth: hci0: HCI_REQ-0x0c1a [ 82.718838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.720505] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.726313] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.727344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.729453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.730562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.772413] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.774470] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.775656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.777070] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.778098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.781226] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.782657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.786247] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.787519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.787917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.792614] Bluetooth: hci7: HCI_REQ-0x0c1a [ 82.796015] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.798260] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.800007] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.805301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.806410] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.807292] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.808630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.810647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.817276] Bluetooth: hci6: HCI_REQ-0x0c1a [ 82.821923] Bluetooth: hci3: HCI_REQ-0x0c1a [ 82.823619] Bluetooth: hci2: HCI_REQ-0x0c1a [ 82.888234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.895253] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.909268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.915559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.920251] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.945874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.041668] Bluetooth: hci5: HCI_REQ-0x0c1a [ 84.723598] Bluetooth: hci0: command 0x0409 tx timeout [ 84.724419] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 84.728008] Bluetooth: hci1: command 0x0409 tx timeout [ 84.851139] Bluetooth: hci2: command 0x0409 tx timeout [ 84.851174] Bluetooth: hci3: command 0x0409 tx timeout [ 84.851610] Bluetooth: hci7: command 0x0409 tx timeout [ 84.852452] Bluetooth: hci6: command 0x0409 tx timeout [ 85.107116] Bluetooth: hci5: command 0x0409 tx timeout [ 86.772173] Bluetooth: hci1: command 0x041b tx timeout [ 86.772893] Bluetooth: hci0: command 0x041b tx timeout [ 86.900157] Bluetooth: hci7: command 0x041b tx timeout [ 86.900898] Bluetooth: hci6: command 0x041b tx timeout [ 86.901732] Bluetooth: hci3: command 0x041b tx timeout [ 86.902380] Bluetooth: hci2: command 0x041b tx timeout [ 87.156080] Bluetooth: hci5: command 0x041b tx timeout [ 88.192627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.194260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.194936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.196368] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.199280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.202742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.223084] Bluetooth: hci4: HCI_REQ-0x0c1a [ 88.820134] Bluetooth: hci0: command 0x040f tx timeout [ 88.820603] Bluetooth: hci1: command 0x040f tx timeout [ 88.947192] Bluetooth: hci2: command 0x040f tx timeout [ 88.947630] Bluetooth: hci3: command 0x040f tx timeout [ 88.948064] Bluetooth: hci6: command 0x040f tx timeout [ 88.948443] Bluetooth: hci7: command 0x040f tx timeout [ 89.204089] Bluetooth: hci5: command 0x040f tx timeout [ 90.227088] Bluetooth: hci4: command 0x0409 tx timeout [ 90.867169] Bluetooth: hci1: command 0x0419 tx timeout [ 90.867655] Bluetooth: hci0: command 0x0419 tx timeout [ 90.995067] Bluetooth: hci6: command 0x0419 tx timeout [ 90.995193] Bluetooth: hci7: command 0x0419 tx timeout [ 90.995958] Bluetooth: hci3: command 0x0419 tx timeout [ 90.996402] Bluetooth: hci2: command 0x0419 tx timeout [ 91.251145] Bluetooth: hci5: command 0x0419 tx timeout [ 92.275145] Bluetooth: hci4: command 0x041b tx timeout [ 94.323135] Bluetooth: hci4: command 0x040f tx timeout [ 96.371070] Bluetooth: hci4: command 0x0419 tx timeout [ 135.533534] loop6: detected capacity change from 0 to 64 [ 135.601770] loop6: detected capacity change from 0 to 64 08:05:43 executing program 2: syz_io_uring_setup(0x50a2, &(0x7f0000000880)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000940)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) vmsplice(r0, &(0x7f0000000440)=[{0x0}], 0x1, 0x1) io_uring_enter(r0, 0x12d6, 0xc6eb, 0x0, &(0x7f0000000040), 0x8) 08:05:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="cc00008034030000d201000022db0000e4010000ff030000000000000000000009b3d638320dc7088d09dae2e68d4e7436c68c50b0491aa700"/70], 0x46) pwritev(r0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) 08:05:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x2) r1 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r1, @ANYBLOB='n/file0\x00']) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x15, 0x700, 0x70bd29, 0x25dfdbfc, {0x11, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4c014}, 0x4000000) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000080)="01", 0x41030) 08:05:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0xc000040000}, 0x0, 0xd1e8, 0x1, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)={0x0, 0x5, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1d, 0x1722, [0x8001]}}, @hao={0xc9, 0x10, @remote}, @pad1]}, 0x38) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003280)={0x0, 0x0, "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", "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"}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x7, 0x8, 0x6, 0x0, 0x6, 0x1800, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x20, 0x5}, 0x2, 0x1000, 0x8, 0x8, 0x3, 0x6, 0x9, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0xa) 08:05:43 executing program 4: r0 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000380)="dcf83f59a5179d20e8b30d337aaa3f7f0572c7890f56f69320136005c274637b2ec3af4ac226c028618deb", 0x2b}], 0x1, 0xbefe, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x2000, 0x8, 0x1, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4f, 0x0, 0xa4, 0xb7, 0x0, 0x100000000, 0x23000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000040)}, 0x14902, 0x0, 0x10001, 0x7, 0xa0, 0xfffffffe, 0x0, 0x0, 0x284, 0x0, 0x1000}, 0x0, 0xb, r1, 0x9) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 08:05:43 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000140)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "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", "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"}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x3, "bc386eff17b8c9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000055040)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {0x0, r1}], 0x3, "bc386eff17b8c9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055040)={0x6, [], 0x3, "bc386eff17b8c9"}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) process_vm_readv(r12, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/252, 0xfc}, {&(0x7f0000000140)}, {&(0x7f0000000700)=""/121, 0x79}, {&(0x7f0000000840)=""/171, 0xab}, {0x0}, {&(0x7f0000000900)=""/209, 0xd1}], 0x6, &(0x7f0000000400), 0x0, 0x0) clone3(&(0x7f0000000480)={0x100008100, &(0x7f0000000040), &(0x7f0000000100), 0x0, {0x3}, &(0x7f00000003c0)=""/147, 0x93, 0x0, &(0x7f0000000300)=[0x0, 0x0, r12], 0x3}, 0x58) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xff, 0x0, 0x2, 0x38, 0x0, 0xfff, 0x401, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x4002, 0x4, 0x6, 0x6, 0x270, 0xc93, 0x2, 0x0, 0x9, 0x0, 0x3}, r12, 0xd, r0, 0x1) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="03408198f80d2b11acc1cc8c426b8230"]) 08:05:43 executing program 5: ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) ioctl$KDENABIO(r1, 0x4b36) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', &(0x7f0000000140)='\xac)!*+$.\x00', 0x8, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x808}, 0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000002c0)) open_by_handle_at(r1, &(0x7f0000000340)=@reiserfs_4={0x10, 0x4, {0x1, 0x4edfed4f, 0x66a, 0x5}}, 0xc00) fcntl$setpipe(r1, 0x407, 0xfffffffffffffffc) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/user\x00') fsetxattr$security_selinux(r3, &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:tun_tap_device_t:s0\x00', 0x26, 0x2) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000440)="597e9de7246efbaf07de7c4a60ba9aa485f1d187e171fd6bfda305fe4cb86633454650160e7a0a5e9539fd258485fbdcd56caa065246a54e03c59126ea31cdbe25e52480b8d39096071bd9c9b37cdb0550a0ac911b99c7ae1ff957f194261304fffbcea22dfeead48354e971bcdb65d66619ec00797bf1d49594f9f934de58aba25367b3f2d698361c7394fa5239496a5f721d894c461c5828b01f364da682ff1f466ff78cde760daab038f6962e6196b896769ea072e70c47e46a67bb299ccbf239d0b34b3300d390a1e92a620e8d", 0xcf}], 0x1, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x77359400}}, 0x7) r4 = openat$cgroup_ro(r0, &(0x7f0000000600)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000640)) r5 = syz_open_dev$mouse(&(0x7f00000006c0), 0x1, 0x450440) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x8000) 08:05:43 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) copy_file_range(r0, &(0x7f0000000080)=0x5, r1, &(0x7f0000000140)=0x6, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./file1\x00', 0x0) r2 = open(&(0x7f0000000400)='./file1\x00', 0x117c80, 0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)="7f91851cd24ee6be35f0306c6f62921dc99d31a04711adf5deec59f563345e7e23e15601fdd469e0b8d321082263040c58e3c2a6dc2ae9e14e3087d81d400dc7a6f34df17e8ebde5bb57c45464c4769ea7193eb4079a2af2a9e2a989af82a9f9a5c0a92cc6919ab9a22441fc8d61b157d3da7f1b0288b84400f3eaf3e04cccc0cb2dc2b595a7e898f7275f8971b683704384361c90b7f927ca32a89a10a54021c711f969adf8d9c0", 0xa8, 0x7fffffff}], 0x1000010, &(0x7f0000000640)={[{@user_xattr}, {@oldalloc}, {@data_ordered}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@user_xattr}, {@init_itable}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@subj_user={'subj_user', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x33, 0x38, 0x36, 0x32, 0x30, 0x66, 0x4], 0x2d, [0x63, 0x32, 0x39, 0x61], 0x2d, [0x65, 0xa, 0x36, 0x66], 0x2d, [0x63, 0x30, 0x35, 0x39], 0x2d, [0x65, 0x37, 0x62, 0x0, 0x30, 0x64, 0x33]}}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef}, {@euid_eq={'euid', 0x3d, r3}}]}) r4 = open_tree(r2, &(0x7f0000000480)='./file1\x00', 0x8100) mount_setattr(r4, &(0x7f00000000c0)='./file1\x00', 0x1000, &(0x7f0000000180)={0x8, 0x80, 0x1e0000}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x1, @none}, 0xe) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000740)=ANY=[@ANYBLOB="faffffffffffffff030000000000000001000000000400000200000000000000060000000000000001000000000000001d00008b0073827c28f7fc5e696144f1c29ba23f0000000000000000000000000000000000000000041000000000000000000000000000000200000000000000010000000000000005000000000000000000000000000000000000000000000000200000000000000000000000000000fec13ddaf0fb67953098f968cf72d1e71c0639973d49bb02a63e898a151546b6aa"]) [ 151.405110] loop1: detected capacity change from 0 to 264192 [ 151.408975] EXT4-fs: Ignoring removed oldalloc option [ 151.409552] ext4: Bad value for 'resuid' [ 151.420379] loop1: detected capacity change from 0 to 264192 [ 151.422323] EXT4-fs: Ignoring removed oldalloc option [ 151.422874] ext4: Bad value for 'resuid' [ 151.431583] audit: type=1400 audit(1663574743.170:7): avc: denied { open } for pid=3985 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 151.433589] audit: type=1400 audit(1663574743.170:8): avc: denied { kernel } for pid=3985 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 151.444225] ------------[ cut here ]------------ [ 151.444245] [ 151.444247] ====================================================== [ 151.444251] WARNING: possible circular locking dependency detected [ 151.444255] 6.0.0-rc5-next-20220916 #1 Not tainted [ 151.444262] ------------------------------------------------------ [ 151.444265] syz-executor.7/3991 is trying to acquire lock: [ 151.444272] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 151.444310] [ 151.444310] but task is already holding lock: [ 151.444312] ffff88800e070820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 151.444340] [ 151.444340] which lock already depends on the new lock. [ 151.444340] [ 151.444343] [ 151.444343] the existing dependency chain (in reverse order) is: [ 151.444347] [ 151.444347] -> #3 (&ctx->lock){....}-{2:2}: [ 151.444361] _raw_spin_lock+0x2a/0x40 [ 151.444379] __perf_event_task_sched_out+0x53b/0x18d0 [ 151.444391] __schedule+0xedd/0x2470 [ 151.444402] schedule+0xda/0x1b0 [ 151.444412] exit_to_user_mode_prepare+0x114/0x1a0 [ 151.444433] syscall_exit_to_user_mode+0x19/0x40 [ 151.444452] do_syscall_64+0x48/0x90 [ 151.444466] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.444484] [ 151.444484] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 151.444498] _raw_spin_lock_nested+0x30/0x40 [ 151.444514] raw_spin_rq_lock_nested+0x1e/0x30 [ 151.444527] task_fork_fair+0x63/0x4d0 [ 151.444545] sched_cgroup_fork+0x3d0/0x540 [ 151.444559] copy_process+0x4183/0x6e20 [ 151.444569] kernel_clone+0xe7/0x890 [ 151.444579] user_mode_thread+0xad/0xf0 [ 151.444589] rest_init+0x24/0x250 [ 151.444606] arch_call_rest_init+0xf/0x14 [ 151.444618] start_kernel+0x4c1/0x4e6 [ 151.444628] secondary_startup_64_no_verify+0xe0/0xeb [ 151.444643] [ 151.444643] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 151.444657] _raw_spin_lock_irqsave+0x39/0x60 [ 151.444672] try_to_wake_up+0xab/0x1920 [ 151.444685] up+0x75/0xb0 [ 151.444697] __up_console_sem+0x6e/0x80 [ 151.444713] console_unlock+0x46a/0x590 [ 151.444729] vprintk_emit+0x1bd/0x560 [ 151.444746] vprintk+0x84/0xa0 [ 151.444763] _printk+0xba/0xf1 [ 151.444781] kauditd_hold_skb.cold+0x3f/0x4e [ 151.444796] kauditd_send_queue+0x233/0x290 [ 151.444811] kauditd_thread+0x5da/0x9a0 [ 151.444825] kthread+0x2ed/0x3a0 [ 151.444841] ret_from_fork+0x22/0x30 [ 151.444853] [ 151.444853] -> #0 ((console_sem).lock){....}-{2:2}: [ 151.444866] __lock_acquire+0x2a02/0x5e70 [ 151.444883] lock_acquire+0x1a2/0x530 [ 151.444899] _raw_spin_lock_irqsave+0x39/0x60 [ 151.444915] down_trylock+0xe/0x70 [ 151.444927] __down_trylock_console_sem+0x3b/0xd0 [ 151.444943] vprintk_emit+0x16b/0x560 [ 151.444960] vprintk+0x84/0xa0 [ 151.444976] _printk+0xba/0xf1 [ 151.444993] report_bug.cold+0x72/0xab [ 151.445006] handle_bug+0x3c/0x70 [ 151.445020] exc_invalid_op+0x14/0x50 [ 151.445033] asm_exc_invalid_op+0x16/0x20 [ 151.445050] group_sched_out.part.0+0x2c7/0x460 [ 151.445061] ctx_sched_out+0x8f1/0xc10 [ 151.445070] __perf_event_task_sched_out+0x6d0/0x18d0 [ 151.445082] __schedule+0xedd/0x2470 [ 151.445092] schedule+0xda/0x1b0 [ 151.445102] exit_to_user_mode_prepare+0x114/0x1a0 [ 151.445121] syscall_exit_to_user_mode+0x19/0x40 [ 151.445139] do_syscall_64+0x48/0x90 [ 151.445153] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.445170] [ 151.445170] other info that might help us debug this: [ 151.445170] [ 151.445173] Chain exists of: [ 151.445173] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 151.445173] [ 151.445188] Possible unsafe locking scenario: [ 151.445188] [ 151.445190] CPU0 CPU1 [ 151.445192] ---- ---- [ 151.445194] lock(&ctx->lock); [ 151.445200] lock(&rq->__lock); [ 151.445207] lock(&ctx->lock); [ 151.445213] lock((console_sem).lock); [ 151.445218] [ 151.445218] *** DEADLOCK *** [ 151.445218] [ 151.445220] 2 locks held by syz-executor.7/3991: [ 151.445227] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 151.445253] #1: ffff88800e070820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 151.445280] [ 151.445280] stack backtrace: [ 151.445283] CPU: 1 PID: 3991 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220916 #1 [ 151.445296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 151.445304] Call Trace: [ 151.445307] [ 151.445312] dump_stack_lvl+0x8b/0xb3 [ 151.445327] check_noncircular+0x263/0x2e0 [ 151.445343] ? format_decode+0x26c/0xb50 [ 151.445360] ? print_circular_bug+0x450/0x450 [ 151.445377] ? enable_ptr_key_workfn+0x20/0x20 [ 151.445391] ? __lockdep_reset_lock+0x180/0x180 [ 151.445409] ? format_decode+0x26c/0xb50 [ 151.445425] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 151.445443] __lock_acquire+0x2a02/0x5e70 [ 151.445465] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 151.445487] lock_acquire+0x1a2/0x530 [ 151.445504] ? down_trylock+0xe/0x70 [ 151.445519] ? rcu_read_unlock+0x40/0x40 [ 151.445538] ? find_held_lock+0x2c/0x110 [ 151.445555] ? vprintk+0x84/0xa0 [ 151.445573] _raw_spin_lock_irqsave+0x39/0x60 [ 151.445590] ? down_trylock+0xe/0x70 [ 151.445603] down_trylock+0xe/0x70 [ 151.445617] ? vprintk+0x84/0xa0 [ 151.445634] __down_trylock_console_sem+0x3b/0xd0 [ 151.445652] vprintk_emit+0x16b/0x560 [ 151.445671] vprintk+0x84/0xa0 [ 151.445689] _printk+0xba/0xf1 [ 151.445707] ? record_print_text.cold+0x16/0x16 [ 151.445729] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 151.445742] ? lock_downgrade+0x6d0/0x6d0 [ 151.445760] ? report_bug.cold+0x66/0xab [ 151.445775] ? group_sched_out.part.0+0x2c7/0x460 [ 151.445786] report_bug.cold+0x72/0xab [ 151.445802] handle_bug+0x3c/0x70 [ 151.445816] exc_invalid_op+0x14/0x50 [ 151.445831] asm_exc_invalid_op+0x16/0x20 [ 151.445850] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 151.445863] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 151.445875] RSP: 0018:ffff88801dd87c48 EFLAGS: 00010006 [ 151.445884] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 151.445891] RDX: ffff88801b7eb580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 151.445899] RBP: ffff888041df8000 R08: 0000000000000005 R09: 0000000000000001 [ 151.445906] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e070800 [ 151.445914] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 151.445925] ? group_sched_out.part.0+0x2c7/0x460 [ 151.445938] ? group_sched_out.part.0+0x2c7/0x460 [ 151.445950] ctx_sched_out+0x8f1/0xc10 [ 151.445963] __perf_event_task_sched_out+0x6d0/0x18d0 [ 151.445978] ? lock_is_held_type+0xd7/0x130 [ 151.445998] ? __perf_cgroup_move+0x160/0x160 [ 151.446009] ? set_next_entity+0x304/0x550 [ 151.446028] ? update_curr+0x267/0x740 [ 151.446046] ? lock_is_held_type+0xd7/0x130 [ 151.446066] __schedule+0xedd/0x2470 [ 151.446079] ? io_schedule_timeout+0x150/0x150 [ 151.446092] ? __x64_sys_futex_time32+0x480/0x480 [ 151.446106] schedule+0xda/0x1b0 [ 151.446118] exit_to_user_mode_prepare+0x114/0x1a0 [ 151.446139] syscall_exit_to_user_mode+0x19/0x40 [ 151.446158] do_syscall_64+0x48/0x90 [ 151.446172] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.446190] RIP: 0033:0x7f4004c7fb19 [ 151.446199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 151.446210] RSP: 002b:00007f40021f5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.446221] RAX: 0000000000000001 RBX: 00007f4004d92f68 RCX: 00007f4004c7fb19 [ 151.446228] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4004d92f6c [ 151.446235] RBP: 00007f4004d92f60 R08: 000000000000000e R09: 0000000000000000 [ 151.446243] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4004d92f6c [ 151.446250] R13: 00007ffd61fadd2f R14: 00007f40021f5300 R15: 0000000000022000 [ 151.446263] [ 151.503328] WARNING: CPU: 1 PID: 3991 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 151.504005] Modules linked in: [ 151.504246] CPU: 1 PID: 3991 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220916 #1 [ 151.504828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 151.505651] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 151.506062] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 151.507377] RSP: 0018:ffff88801dd87c48 EFLAGS: 00010006 [ 151.507765] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 151.508288] RDX: ffff88801b7eb580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 151.508804] RBP: ffff888041df8000 R08: 0000000000000005 R09: 0000000000000001 [ 151.509323] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e070800 [ 151.509830] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 151.510362] FS: 00007f40021f5700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 151.510959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.511386] CR2: 00007fd69422f018 CR3: 000000003204c000 CR4: 0000000000350ee0 [ 151.511904] Call Trace: [ 151.512103] [ 151.512274] ctx_sched_out+0x8f1/0xc10 [ 151.512563] __perf_event_task_sched_out+0x6d0/0x18d0 [ 151.512944] ? lock_is_held_type+0xd7/0x130 [ 151.513278] ? __perf_cgroup_move+0x160/0x160 [ 151.513612] ? set_next_entity+0x304/0x550 [ 151.513941] ? update_curr+0x267/0x740 [ 151.514248] ? lock_is_held_type+0xd7/0x130 [ 151.514573] __schedule+0xedd/0x2470 [ 151.514873] ? io_schedule_timeout+0x150/0x150 [ 151.515226] ? __x64_sys_futex_time32+0x480/0x480 [ 151.515579] schedule+0xda/0x1b0 [ 151.515831] exit_to_user_mode_prepare+0x114/0x1a0 [ 151.516203] syscall_exit_to_user_mode+0x19/0x40 [ 151.516561] do_syscall_64+0x48/0x90 [ 151.516837] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.517230] RIP: 0033:0x7f4004c7fb19 [ 151.517505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 151.518834] RSP: 002b:00007f40021f5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.519388] RAX: 0000000000000001 RBX: 00007f4004d92f68 RCX: 00007f4004c7fb19 [ 151.519906] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4004d92f6c [ 151.520421] RBP: 00007f4004d92f60 R08: 000000000000000e R09: 0000000000000000 [ 151.520938] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4004d92f6c [ 151.521464] R13: 00007ffd61fadd2f R14: 00007f40021f5300 R15: 0000000000022000 [ 151.521995] [ 151.522172] irq event stamp: 218 [ 151.522413] hardirqs last enabled at (217): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 151.523113] hardirqs last disabled at (218): [] __schedule+0x1225/0x2470 [ 151.523705] softirqs last enabled at (0): [] copy_process+0x1e15/0x6e20 [ 151.524311] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 151.524768] ---[ end trace 0000000000000000 ]--- 08:05:43 executing program 5: ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) ioctl$KDENABIO(r1, 0x4b36) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', &(0x7f0000000140)='\xac)!*+$.\x00', 0x8, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x808}, 0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000002c0)) open_by_handle_at(r1, &(0x7f0000000340)=@reiserfs_4={0x10, 0x4, {0x1, 0x4edfed4f, 0x66a, 0x5}}, 0xc00) fcntl$setpipe(r1, 0x407, 0xfffffffffffffffc) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/user\x00') fsetxattr$security_selinux(r3, &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:tun_tap_device_t:s0\x00', 0x26, 0x2) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000440)="597e9de7246efbaf07de7c4a60ba9aa485f1d187e171fd6bfda305fe4cb86633454650160e7a0a5e9539fd258485fbdcd56caa065246a54e03c59126ea31cdbe25e52480b8d39096071bd9c9b37cdb0550a0ac911b99c7ae1ff957f194261304fffbcea22dfeead48354e971bcdb65d66619ec00797bf1d49594f9f934de58aba25367b3f2d698361c7394fa5239496a5f721d894c461c5828b01f364da682ff1f466ff78cde760daab038f6962e6196b896769ea072e70c47e46a67bb299ccbf239d0b34b3300d390a1e92a620e8d", 0xcf}], 0x1, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x77359400}}, 0x7) r4 = openat$cgroup_ro(r0, &(0x7f0000000600)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000640)) r5 = syz_open_dev$mouse(&(0x7f00000006c0), 0x1, 0x450440) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x8000) [ 151.622037] hrtimer: interrupt took 15379 ns [ 151.778054] audit: type=1400 audit(1663574743.516:9): avc: denied { write } for pid=3986 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 VM DIAGNOSIS: 08:05:43 Registers: info registers vcpu 0 RAX=ffff88806ce34bf8 RBX=0000000000034ba0 RCX=0000000000000180 RDX=0000000000000003 RSI=0000000000000000 RDI=ffffffff8515b8a0 RBP=ffffffff87058700 RSP=ffff88801de8fbe0 R8 =ffff88806ce34ba0 R9 =ffff88806ce34be8 R10=fffffbfff0b605e2 R11=0000000000000001 R12=ffff8880206feb00 R13=ffff88807ffdc000 R14=0000000000000006 R15=0000000000000000 RIP=ffffffff84244155 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555940400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fea0142b718 CR3=0000000041924000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0100ff0000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b3251 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88801dd87698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001 R12=0000000000000034 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b3240 RIP=ffffffff822b32a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f40021f5700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd69422f018 CR3=000000003204c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f4004d667c0 00007f4004d667c8 YMM02=0000000000000000 0000000000000000 00007f4004d667e0 00007f4004d667c0 YMM03=0000000000000000 0000000000000000 00007f4004d667c8 00007f4004d667c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000