Warning: Permanently added '[localhost]:59648' (ECDSA) to the list of known hosts. 2022/09/20 04:40:34 fuzzer started 2022/09/20 04:40:35 dialing manager at localhost:42121 syzkaller login: [ 46.139564] cgroup: Unknown subsys name 'net' [ 46.258222] cgroup: Unknown subsys name 'rlimit' 2022/09/20 04:40:49 syscalls: 2215 2022/09/20 04:40:49 code coverage: enabled 2022/09/20 04:40:49 comparison tracing: enabled 2022/09/20 04:40:49 extra coverage: enabled 2022/09/20 04:40:49 setuid sandbox: enabled 2022/09/20 04:40:49 namespace sandbox: enabled 2022/09/20 04:40:49 Android sandbox: enabled 2022/09/20 04:40:49 fault injection: enabled 2022/09/20 04:40:49 leak checking: enabled 2022/09/20 04:40:49 net packet injection: enabled 2022/09/20 04:40:49 net device setup: enabled 2022/09/20 04:40:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/20 04:40:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/20 04:40:49 USB emulation: enabled 2022/09/20 04:40:49 hci packet injection: enabled 2022/09/20 04:40:49 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220919) 2022/09/20 04:40:49 802.15.4 emulation: enabled 2022/09/20 04:40:49 fetching corpus: 50, signal 31843/33602 (executing program) 2022/09/20 04:40:49 fetching corpus: 100, signal 40418/43776 (executing program) 2022/09/20 04:40:49 fetching corpus: 150, signal 47729/52574 (executing program) 2022/09/20 04:40:49 fetching corpus: 200, signal 55198/61455 (executing program) 2022/09/20 04:40:50 fetching corpus: 250, signal 62641/70145 (executing program) 2022/09/20 04:40:50 fetching corpus: 300, signal 66785/75570 (executing program) 2022/09/20 04:40:50 fetching corpus: 350, signal 72561/82496 (executing program) 2022/09/20 04:40:50 fetching corpus: 400, signal 79964/90893 (executing program) 2022/09/20 04:40:50 fetching corpus: 450, signal 82752/94843 (executing program) 2022/09/20 04:40:50 fetching corpus: 500, signal 87478/100558 (executing program) 2022/09/20 04:40:50 fetching corpus: 550, signal 91606/105681 (executing program) 2022/09/20 04:40:51 fetching corpus: 600, signal 95017/110059 (executing program) 2022/09/20 04:40:51 fetching corpus: 650, signal 97557/113586 (executing program) 2022/09/20 04:40:51 fetching corpus: 700, signal 100974/117898 (executing program) 2022/09/20 04:40:51 fetching corpus: 750, signal 104538/122222 (executing program) 2022/09/20 04:40:51 fetching corpus: 800, signal 109505/127757 (executing program) 2022/09/20 04:40:51 fetching corpus: 850, signal 114040/132815 (executing program) 2022/09/20 04:40:51 fetching corpus: 900, signal 116308/135854 (executing program) 2022/09/20 04:40:51 fetching corpus: 950, signal 118721/138984 (executing program) 2022/09/20 04:40:52 fetching corpus: 1000, signal 119915/141041 (executing program) 2022/09/20 04:40:52 fetching corpus: 1050, signal 122777/144501 (executing program) 2022/09/20 04:40:52 fetching corpus: 1100, signal 124654/147140 (executing program) 2022/09/20 04:40:52 fetching corpus: 1150, signal 126291/149467 (executing program) 2022/09/20 04:40:52 fetching corpus: 1200, signal 128160/151997 (executing program) 2022/09/20 04:40:52 fetching corpus: 1250, signal 130696/155029 (executing program) 2022/09/20 04:40:52 fetching corpus: 1300, signal 134073/158675 (executing program) 2022/09/20 04:40:52 fetching corpus: 1350, signal 136200/161353 (executing program) 2022/09/20 04:40:53 fetching corpus: 1400, signal 137409/163247 (executing program) 2022/09/20 04:40:53 fetching corpus: 1450, signal 138635/165051 (executing program) 2022/09/20 04:40:53 fetching corpus: 1500, signal 140382/167282 (executing program) 2022/09/20 04:40:53 fetching corpus: 1550, signal 142465/169750 (executing program) 2022/09/20 04:40:53 fetching corpus: 1600, signal 143539/171393 (executing program) 2022/09/20 04:40:53 fetching corpus: 1650, signal 145373/173621 (executing program) 2022/09/20 04:40:53 fetching corpus: 1700, signal 146617/175331 (executing program) 2022/09/20 04:40:53 fetching corpus: 1750, signal 147814/177051 (executing program) 2022/09/20 04:40:53 fetching corpus: 1800, signal 149311/178961 (executing program) 2022/09/20 04:40:53 fetching corpus: 1850, signal 150739/180802 (executing program) 2022/09/20 04:40:54 fetching corpus: 1900, signal 151632/182242 (executing program) 2022/09/20 04:40:54 fetching corpus: 1950, signal 153774/184531 (executing program) 2022/09/20 04:40:54 fetching corpus: 2000, signal 154427/185776 (executing program) 2022/09/20 04:40:54 fetching corpus: 2050, signal 155392/187249 (executing program) 2022/09/20 04:40:54 fetching corpus: 2100, signal 156622/188851 (executing program) 2022/09/20 04:40:54 fetching corpus: 2150, signal 157618/190304 (executing program) 2022/09/20 04:40:54 fetching corpus: 2200, signal 158795/191856 (executing program) 2022/09/20 04:40:54 fetching corpus: 2250, signal 160007/193409 (executing program) 2022/09/20 04:40:54 fetching corpus: 2300, signal 160644/194522 (executing program) 2022/09/20 04:40:55 fetching corpus: 2350, signal 161668/195922 (executing program) 2022/09/20 04:40:55 fetching corpus: 2400, signal 162742/197350 (executing program) 2022/09/20 04:40:55 fetching corpus: 2450, signal 163702/198650 (executing program) 2022/09/20 04:40:55 fetching corpus: 2500, signal 164911/200123 (executing program) 2022/09/20 04:40:55 fetching corpus: 2550, signal 165766/201362 (executing program) 2022/09/20 04:40:55 fetching corpus: 2600, signal 166428/202469 (executing program) 2022/09/20 04:40:55 fetching corpus: 2650, signal 167660/203871 (executing program) 2022/09/20 04:40:55 fetching corpus: 2700, signal 169064/205391 (executing program) 2022/09/20 04:40:56 fetching corpus: 2750, signal 170154/206738 (executing program) 2022/09/20 04:40:56 fetching corpus: 2800, signal 171870/208406 (executing program) 2022/09/20 04:40:56 fetching corpus: 2850, signal 172890/209636 (executing program) 2022/09/20 04:40:56 fetching corpus: 2900, signal 175314/211602 (executing program) 2022/09/20 04:40:56 fetching corpus: 2950, signal 176711/213146 (executing program) 2022/09/20 04:40:56 fetching corpus: 3000, signal 177808/214360 (executing program) 2022/09/20 04:40:57 fetching corpus: 3050, signal 179443/215815 (executing program) 2022/09/20 04:40:57 fetching corpus: 3100, signal 180567/216988 (executing program) 2022/09/20 04:40:57 fetching corpus: 3150, signal 181317/217957 (executing program) 2022/09/20 04:40:57 fetching corpus: 3200, signal 182322/219016 (executing program) 2022/09/20 04:40:57 fetching corpus: 3250, signal 183303/220069 (executing program) 2022/09/20 04:40:57 fetching corpus: 3300, signal 183915/220909 (executing program) 2022/09/20 04:40:57 fetching corpus: 3350, signal 184621/221782 (executing program) 2022/09/20 04:40:57 fetching corpus: 3400, signal 186398/223122 (executing program) 2022/09/20 04:40:58 fetching corpus: 3450, signal 187287/224080 (executing program) 2022/09/20 04:40:58 fetching corpus: 3500, signal 188120/224947 (executing program) 2022/09/20 04:40:58 fetching corpus: 3550, signal 189127/225921 (executing program) 2022/09/20 04:40:58 fetching corpus: 3600, signal 189845/226769 (executing program) 2022/09/20 04:40:58 fetching corpus: 3650, signal 190460/227512 (executing program) 2022/09/20 04:40:58 fetching corpus: 3700, signal 192141/228811 (executing program) 2022/09/20 04:40:58 fetching corpus: 3750, signal 192576/229492 (executing program) 2022/09/20 04:40:58 fetching corpus: 3800, signal 193861/230534 (executing program) 2022/09/20 04:40:59 fetching corpus: 3850, signal 194518/231277 (executing program) 2022/09/20 04:40:59 fetching corpus: 3900, signal 195286/232051 (executing program) 2022/09/20 04:40:59 fetching corpus: 3950, signal 196111/232833 (executing program) 2022/09/20 04:40:59 fetching corpus: 4000, signal 196855/233613 (executing program) 2022/09/20 04:40:59 fetching corpus: 4050, signal 197898/234466 (executing program) 2022/09/20 04:40:59 fetching corpus: 4100, signal 198495/235165 (executing program) 2022/09/20 04:40:59 fetching corpus: 4150, signal 199747/236067 (executing program) 2022/09/20 04:40:59 fetching corpus: 4200, signal 200307/236695 (executing program) 2022/09/20 04:41:00 fetching corpus: 4250, signal 200826/237325 (executing program) 2022/09/20 04:41:00 fetching corpus: 4300, signal 201693/238012 (executing program) 2022/09/20 04:41:00 fetching corpus: 4350, signal 202242/238644 (executing program) 2022/09/20 04:41:00 fetching corpus: 4400, signal 203020/239293 (executing program) 2022/09/20 04:41:00 fetching corpus: 4450, signal 204893/240244 (executing program) 2022/09/20 04:41:00 fetching corpus: 4500, signal 205484/240835 (executing program) 2022/09/20 04:41:00 fetching corpus: 4550, signal 206118/241389 (executing program) 2022/09/20 04:41:00 fetching corpus: 4600, signal 206616/241911 (executing program) 2022/09/20 04:41:01 fetching corpus: 4650, signal 207172/242431 (executing program) 2022/09/20 04:41:01 fetching corpus: 4700, signal 207782/242966 (executing program) 2022/09/20 04:41:01 fetching corpus: 4750, signal 208589/243593 (executing program) 2022/09/20 04:41:01 fetching corpus: 4800, signal 209877/244267 (executing program) 2022/09/20 04:41:01 fetching corpus: 4850, signal 210726/244805 (executing program) 2022/09/20 04:41:01 fetching corpus: 4900, signal 211724/245323 (executing program) 2022/09/20 04:41:01 fetching corpus: 4950, signal 212355/245783 (executing program) 2022/09/20 04:41:01 fetching corpus: 5000, signal 212986/246245 (executing program) 2022/09/20 04:41:02 fetching corpus: 5050, signal 213442/246660 (executing program) 2022/09/20 04:41:02 fetching corpus: 5100, signal 214686/247227 (executing program) 2022/09/20 04:41:02 fetching corpus: 5150, signal 215177/247641 (executing program) 2022/09/20 04:41:02 fetching corpus: 5200, signal 215785/248114 (executing program) 2022/09/20 04:41:02 fetching corpus: 5250, signal 216306/248525 (executing program) 2022/09/20 04:41:02 fetching corpus: 5300, signal 217523/249047 (executing program) 2022/09/20 04:41:02 fetching corpus: 5350, signal 218670/249531 (executing program) 2022/09/20 04:41:03 fetching corpus: 5400, signal 220012/250008 (executing program) 2022/09/20 04:41:03 fetching corpus: 5450, signal 220565/250369 (executing program) 2022/09/20 04:41:03 fetching corpus: 5500, signal 222067/250824 (executing program) 2022/09/20 04:41:03 fetching corpus: 5550, signal 222849/251172 (executing program) 2022/09/20 04:41:03 fetching corpus: 5600, signal 223252/251474 (executing program) 2022/09/20 04:41:03 fetching corpus: 5650, signal 223863/251780 (executing program) 2022/09/20 04:41:03 fetching corpus: 5700, signal 224284/252094 (executing program) 2022/09/20 04:41:03 fetching corpus: 5750, signal 224903/252381 (executing program) 2022/09/20 04:41:04 fetching corpus: 5800, signal 225336/252672 (executing program) 2022/09/20 04:41:04 fetching corpus: 5850, signal 225881/252948 (executing program) 2022/09/20 04:41:04 fetching corpus: 5900, signal 226317/253206 (executing program) 2022/09/20 04:41:04 fetching corpus: 5950, signal 226889/253478 (executing program) 2022/09/20 04:41:04 fetching corpus: 6000, signal 227579/253737 (executing program) 2022/09/20 04:41:04 fetching corpus: 6050, signal 228187/253998 (executing program) 2022/09/20 04:41:04 fetching corpus: 6100, signal 228728/254199 (executing program) 2022/09/20 04:41:04 fetching corpus: 6150, signal 229259/254417 (executing program) 2022/09/20 04:41:05 fetching corpus: 6200, signal 229729/254624 (executing program) 2022/09/20 04:41:05 fetching corpus: 6250, signal 230046/254830 (executing program) 2022/09/20 04:41:05 fetching corpus: 6300, signal 231236/254888 (executing program) 2022/09/20 04:41:05 fetching corpus: 6350, signal 231969/254888 (executing program) 2022/09/20 04:41:05 fetching corpus: 6400, signal 232321/254891 (executing program) 2022/09/20 04:41:05 fetching corpus: 6450, signal 233158/254912 (executing program) 2022/09/20 04:41:05 fetching corpus: 6500, signal 233638/254917 (executing program) 2022/09/20 04:41:05 fetching corpus: 6550, signal 234316/254918 (executing program) 2022/09/20 04:41:05 fetching corpus: 6600, signal 234910/254999 (executing program) 2022/09/20 04:41:06 fetching corpus: 6650, signal 235570/255003 (executing program) 2022/09/20 04:41:06 fetching corpus: 6700, signal 236479/255008 (executing program) 2022/09/20 04:41:06 fetching corpus: 6750, signal 236863/255010 (executing program) 2022/09/20 04:41:06 fetching corpus: 6800, signal 237263/255012 (executing program) 2022/09/20 04:41:06 fetching corpus: 6825, signal 237526/255012 (executing program) 2022/09/20 04:41:06 fetching corpus: 6825, signal 237526/255012 (executing program) 2022/09/20 04:41:08 starting 8 fuzzer processes 04:41:08 executing program 7: getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008810) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x58}}, 0x20040000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x80a, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd, 0x5, "e3c1a497f20143632d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fffffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1ff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "49000d1327a9b92f288ea15f7eb1e4dc"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40046}, 0x20000802) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc044000}, 0x400c885) openat(r4, &(0x7f0000000a80)='./file0\x00', 0x400, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r7, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x76}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040020}, 0x4090) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x104, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7b2, 0x26}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8917}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xbb, 0x33, @mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1f}, @device_b, @device_a, @random="c343c02c1f48", {0x6}}, @ver_80211n={0x0, 0x2, 0x0, 0x3}}, 0x94, 0x2, @device_b, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x2600, 0x1, 0x7, 0x0, {0xffffffff, 0x5, 0x0, 0x1f8, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x300, 0x8, 0x6}}, [{0xdd, 0x6b, "1c50645ac10eefd67a00485dec3db93e898ed69bdad38087cc0a32243cb918ab4d0c248124d31be17fa8a6294858f4ee6b2022ed1ecc10f30c74a9b32634b96d9a838c32bbe48ea3979dd42e14ed8fb79845adc69611a71b8db4ea6b7529c3f3fc327fece7f47af912fdf4"}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000e00)={'wpan0\x00'}) 04:41:08 executing program 0: membarrier(0x20, 0x0) membarrier(0x0, 0x0) membarrier(0x4, 0x0) membarrier(0x1, 0x0) membarrier(0x2, 0x0) membarrier(0x2, 0x0) membarrier(0x8, 0x0) membarrier(0x1, 0x0) membarrier(0x2, 0x0) membarrier(0x4, 0x0) membarrier(0x10, 0x0) membarrier(0x8, 0x0) membarrier(0x2, 0x0) membarrier(0x30, 0x0) membarrier(0x8, 0x0) membarrier(0x10, 0x0) membarrier(0x4, 0x0) membarrier(0x0, 0x0) membarrier(0x8, 0x0) membarrier(0x1, 0x0) 04:41:08 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='f\x00', 0x0, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)={{0x10b, 0xd2, 0x4, 0x374, 0xe0, 0x9d, 0x369, 0x4}, "83ef7de3abcf9f0dfc02f1d36d2d6ff9a84b1c5d10fd2aee1dc599a5b38927a2ac27963b1ba88b96ad2b9a3ee8cd5ded06"}, 0x51) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x80, 0x84000) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x6, r0, r1) r2 = memfd_secret(0x0) write(r2, &(0x7f0000000140)="300a8aeb7a3434bf0729f0091f3958b719069d8c3bc528f29717054ea33bf25abfba9f69f5d51bf134d43ca89abe72c5146e74a0dc223f80135d19a94e9128b1d3af7158e01b0e5055972242388009aa3a9c7cabc8f749e3bb8c74f6226d5af24050aaf0cced8fe8eb6ee59660454ecf3ed6683b3709cb7a5fd523f386fe938298", 0x81) io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="266749bdb93ba77f685b14fc423a311aac013e22878dc447edd7b8a121b2341bb70021b9abfad402bc1ea0f636bd93063de88b208891e6816645f9a753b892c111430df29d92f39cfe1bc286bf3a4e13577fe017c2d4d85eaa04", 0x5a, 0xfffffffffffff801, 0x0, 0x0, r2}]) r4 = openat$cgroup_ro(r2, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000380)=0x200) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0), 0x44a000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000400)) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40400, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000480)) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f00000004c0)=""/3) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000500)=""/173) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x10142, 0x0) sendfile(r7, r2, &(0x7f0000000600)=0x83d, 0xd8) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x4, 0x80, 0x8, 0xac, 0x0, 0x7, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000640), 0x2}, 0x40490, 0x16c8, 0x3ff, 0x9, 0x2, 0x29, 0x5, 0x0, 0xff, 0x0, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 04:41:08 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x9, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x3, 0x3}, {0x7, 0x4}, {0x0, 0x1}, {0x7f, 0x7}, {0x1, 0x6}, {0xf7, 0x4}, {0x34, 0x1}, {0x80, 0x2}], "44f35d2c4c3dee3e"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c011}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008070}, 0x90) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r3, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}]}, 0x68}, 0x1, 0x0, 0x0, 0x20060000}, 0x4800) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r1, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x1c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x39}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1842) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffd}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x26}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10008800}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48c8) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x108, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0xdc, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc771}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x877}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x600}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x584}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x44}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2a}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x108}}, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x28}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x0, 0xc00, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 79.409848] audit: type=1400 audit(1663648868.464:6): avc: denied { execmem } for pid=285 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:41:08 executing program 6: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000200)}], 0x4, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x100) r6 = inotify_init1(0x800) utimes(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{0x0, 0xea60}, {0x0, 0x2710}}) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0) r8 = dup2(r2, r1) socket$inet6_udp(0xa, 0x2, 0x0) inotify_add_watch(r6, &(0x7f0000000400)='./file0\x00', 0x80000008) r9 = fsmount(r0, 0x1, 0x1) sendmsg$AUDIT_MAKE_EQUIV(r9, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) pidfd_getfd(r10, r0, 0x0) r11 = openat2(r8, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x20000, 0x0, 0x10}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f0000000600)={0x20002016}) recvmmsg$unix(r5, &(0x7f0000000640), 0x0, 0x102, &(0x7f0000000680)) move_mount(r4, &(0x7f00000006c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x60) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r12, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) r13 = openat$cgroup_ro(r3, &(0x7f0000000880)='memory.numa_stat\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000900)={'team_slave_1\x00', &(0x7f00000008c0)=@ethtool_stats={0x1d, 0x2, [0x362, 0x7]}}) readv(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f0000000bc0)=""/43, 0x2b}, {&(0x7f0000000c00)=""/199, 0xc7}], 0x5) 04:41:08 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x80, 0xfffffffe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x8000, 0x700, 0xffff, 0xb7}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xbc733217f11d3155}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe8, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x28}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @rand_addr, @broadcast}, &(0x7f0000000540)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000580)={'hsr0\x00'}) r5 = openat2(r1, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x4000, 0x100, 0x2}, 0x18) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x54}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20000004) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000007c0)={'batadv_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000800)={'veth1_virt_wifi\x00', {0x2, 0x0, @initdev}}) mknodat$loop(r1, &(0x7f0000000840)='./file0\x00', 0xc000, 0x1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000980)={{0x1, 0x1, 0x18, r5, {0x8001}}, './file0\x00'}) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f00000009c0)={@remote, r3}, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r7) r8 = memfd_secret(0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r8) 04:41:08 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9100) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="524fe3fddefede9be018235e88d2c0e3ffb432bac13dff61eff65c879d3625456dfe75f07d984f8716750cedfea3379655ec946eb11c64fa7671ead419605d08229fa0874b1ffedb8f74a934cf49a0a2102fcf266fde7a136e17cbc3bc31248659fc8df5356a0f9c60f2769fa8b087772279fa420e7d810ce5d59947cf788885f026647dda66348a87ea49dbab3e68871931c1150fcfebd0e236360b1a887d9c6a0ed844adbf7c088a9d2a131834cd5ff0c955a078af27a5a9d0b6eb16db26cb77de58af0850ded49857bbcf2abdb835a291ef64294345fce01d3991b6bce25d18f03dc326b4a2c55a6f9eb62efb7e24ab8a47d993106f35", 0xf8}], 0x1, 0x3ff, 0x9) sendfile(r1, 0xffffffffffffffff, 0x0, 0x101) syz_io_uring_setup(0x40c, &(0x7f00000001c0)={0x0, 0x8ca8, 0x20, 0x1, 0x1d5, 0x0, r1}, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x1, 0x42) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xd479}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x654838b7}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x54, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xfb}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x3}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x3}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x2}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x6}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x1f}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x3}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xfa}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x5}]}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008041) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000480)={{r2}, 0x0, 0x16, @unused=[0x20, 0x4, 0x20, 0x7ff], @subvolid=0x3}) clock_gettime(0x0, &(0x7f0000005440)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000005240)=[{{&(0x7f0000001480)=@abs, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000001500)=""/92, 0x5c}, {&(0x7f0000001580)=""/6, 0x6}, {&(0x7f00000015c0)=""/233, 0xe9}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002880)=""/155, 0x9b}, {&(0x7f0000002940)=""/167, 0xa7}, {&(0x7f0000002a00)=""/154, 0x9a}, {&(0x7f0000002ac0)=""/136, 0x88}, {&(0x7f0000002b80)=""/189, 0xbd}], 0x5, &(0x7f0000002cc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000002e00)=@abs, 0x6e, &(0x7f0000003f40)=[{&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/130, 0x82}], 0x2, &(0x7f0000003f80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000004100)=""/232, 0xe8}, {&(0x7f0000004200)=""/158, 0x9e}], 0x2, &(0x7f0000004300)}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004640)=[{&(0x7f00000043c0)=""/232, 0xe8}, {&(0x7f00000044c0)=""/255, 0xff}, {&(0x7f00000045c0)=""/31, 0x1f}, {&(0x7f0000004600)=""/41, 0x29}], 0x4, &(0x7f0000004680)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f00000046c0)=@abs, 0x6e, &(0x7f0000004980)=[{&(0x7f0000004740)=""/184, 0xb8}, {&(0x7f0000004800)=""/150, 0x96}, {&(0x7f00000048c0)=""/184, 0xb8}], 0x3, &(0x7f00000049c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x118}}, {{&(0x7f0000004b00)=@abs, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004b80)=""/75, 0x4b}, {&(0x7f0000004c00)=""/91, 0x5b}, {&(0x7f0000004c80)=""/65, 0x41}, {&(0x7f0000004d00)=""/82, 0x52}], 0x4, &(0x7f0000004dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000004ec0), 0x6e, &(0x7f0000005200)=[{&(0x7f0000004f40)=""/63, 0x3f}, {&(0x7f0000004f80)=""/199, 0xc7}, {&(0x7f0000005080)=""/187, 0xbb}, {&(0x7f0000005140)=""/132, 0x84}], 0x4}}], 0x8, 0x1, &(0x7f0000005480)={r4, r5+10000000}) setsockopt$inet_tcp_int(r8, 0x6, 0x18, &(0x7f00000054c0)=0xb641, 0x4) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005500)='/proc/vmstat\x00', 0x0, 0x0) readv(r12, &(0x7f00000058c0)=[{&(0x7f0000005540)=""/107, 0x6b}, {&(0x7f00000055c0)=""/86, 0x56}, {&(0x7f0000005640)=""/75, 0x4b}, {&(0x7f00000056c0)=""/148, 0x94}, {&(0x7f0000005780)=""/162, 0xa2}, {&(0x7f0000005840)=""/102, 0x66}], 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000005940)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000005980)={{0x1, 0x1, 0x18, r13, {0x20}}, './file0\x00'}) r14 = syz_mount_image$vfat(&(0x7f00000059c0), &(0x7f0000005a00)='./file0/file0\x00', 0x8000, 0x1, &(0x7f0000005b40)=[{&(0x7f0000005a40)="c17b6ba459850164d06520e096264401059dbc687c72d44eee60cfee2a40b9b85672b776d5483b0f6b046c0e4a6055b4b6b06632ab1a8247b8e505b7e3b97503fed445ded4945a3311ae0417c1881283641e491633b0c10ccafbbd0ca11c3b5072483b9a3bb63dfb24b5f90e9f188c09b92163041e8ad2917dd23174c28517a481fef5dc55c4ff9144c064a16a97ed1631aeb5b93c0ce4942138c5001567ddf43b5de979b2f1d1917e42af8f735d6f774540fa07a83888146d54f27c54022e808f3d14b1964d65e80246a78bb1b2d68c226d597e73df51a5823e8ac24ba6f2e9cb7a53691d42687767f0de5935ab3669a1d4908d76a989bf7c", 0xf9, 0x93}], 0x10001, &(0x7f0000005b80)={[{@rodir}, {@fat=@nocase}, {@nonumtail}, {@utf8no}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@rodir}], [{@smackfsfloor={'smackfsfloor', 0x3d, '$$:(/#!\xe8^{&'}}, {@fsmagic={'fsmagic', 0x3d, 0x7fff}}, {@uid_gt={'uid>', r11}}, {@fsname={'fsname', 0x3d, '\x84('}}, {@euid_gt={'euid>', r11}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/hwrng\x00'}}]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r10, 0x5000943f, &(0x7f0000005c80)={{r14}, 0x0, 0x2, @unused=[0x80000001, 0x7, 0x6000000000, 0x25], @name="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"}) getpeername(0xffffffffffffffff, &(0x7f0000006c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000006d00)=0x80) pwritev(r15, &(0x7f0000007080)=[{&(0x7f0000006d40)="42f132a705bca3bdc53f1b36a99dcf16ca5e1c08a9c0accda1b2cfa4bf8581d7ac984fb688ce83", 0x27}, {&(0x7f0000006d80)="19235bba72db992b03277ef50b9d0da171a10c155551438758b45417767274bfc73c11133d38553fd1e7e7d836f47f1ba0ea9c35595361fdfe9d22d6ccbae36fb0c5ba0ef1c5a072518a1e96dcc24f960d530b611097a6b2fca5e606c1199052dfbd62f73c1428be3f54f50087dd60732123102ce55b93e62ae2681f56d6388065627e897be3242e4caadccdfd680a1c87fd35ad1c4e3d1c9bc31f70726a484a38eab67635b3db199d016fe52be88518a6d3940d5b3ace10ff021315671a0fa86ff8ff5037b6871e44b0a6", 0xcb}, {&(0x7f0000006e80)="90843b2a7e3dfdd1838179efa56530f0e26e46dd8b8e", 0x16}, {&(0x7f0000006ec0)="50e1fc92eb8b9c145fe36cfe538af8f9770cc7339b8829c3eaa5e9520ff6a6b2fabea2947c848bca3d1665679e9c63cf8d64675d7ff15e0e54890b10d69aeddfbc0f5031a1505efbcc3a1a1e1c0f1e87", 0x50}, {&(0x7f0000006f40)="59b3955f30ef327a75446ceb546623b2e5720a35de87c1db148b566c2ff191095011c247fe9bc9e5e787", 0x2a}, {&(0x7f0000006f80)="f91496ea4a5bc801bf491001317c68d7e441376040a7a8202ab0802d5db914c2ad826f377c1b05331a896d5e25920d1312b7f71e0a19873b9a9c3dc624f9e108f18041b7f48b9364728d92c43d32822357133ca532c4e31b2298fdc06cfe1950", 0x60}, {&(0x7f0000007000)="b7549a52276042905c630e5de21601cb981177ec33d270a33983db3d00570f118f9eef480c18c088a4348e8db7f24a4373e8c548a33294f33b3d4f19e61553d983eaf1bd40ba8ba79cb83f26dd3d2f33ab44da59b8eab2013848292392131ba537c6419b59f2b71812d8fedcdf1263140dd45e169d16", 0x76}], 0x7, 0x0, 0x53ea500d) 04:41:08 executing program 5: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x240, 0x1, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x800}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xef2}]}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5f6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x400}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x19669d22}, @NFQA_EXP={0x178, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x2004815}, 0x99abab488116dc7e) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x84, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x8005}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x11c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x401}, @CTA_EXPECT_MASK={0xd8, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3b}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfd}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xb26}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASK={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x4010) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010004}, 0x40c0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/consoles\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x92}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xa0, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}]}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5d7af1a9}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x596b51d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x319d74d0}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44}, 0x800) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x80d0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x840) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x8c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x75}}}}, [@NL80211_ATTR_STA_WME={0x54, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xff}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x34}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x65}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x400}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x438}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040001}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7f}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000) [ 80.709993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.712287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.714045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.718595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.723663] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.727444] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.736663] Bluetooth: hci0: HCI_REQ-0x0c1a [ 80.761165] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.763990] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.766275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.770266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.773330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.775366] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.784062] Bluetooth: hci1: HCI_REQ-0x0c1a [ 80.820147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.823370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.825325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.828785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.830641] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.835204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.836773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.839049] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.840316] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.841779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.843346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.844449] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.849700] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.850996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.853043] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.856385] Bluetooth: hci3: HCI_REQ-0x0c1a [ 80.857052] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.857290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.859957] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.864148] Bluetooth: hci2: HCI_REQ-0x0c1a [ 80.866549] Bluetooth: hci4: HCI_REQ-0x0c1a [ 80.882418] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.885683] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.886967] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.890830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.892935] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 80.894427] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.899592] Bluetooth: hci5: HCI_REQ-0x0c1a [ 80.987706] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.988158] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.992857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.004884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.014140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.015523] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.024851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.027287] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.035007] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.044580] Bluetooth: hci6: HCI_REQ-0x0c1a [ 81.077775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.083309] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.098405] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.105133] Bluetooth: hci7: HCI_REQ-0x0c1a [ 82.791291] Bluetooth: hci0: command 0x0409 tx timeout [ 82.853507] Bluetooth: hci1: command 0x0409 tx timeout [ 82.917523] Bluetooth: hci4: command 0x0409 tx timeout [ 82.917941] Bluetooth: hci5: command 0x0409 tx timeout [ 82.918514] Bluetooth: hci2: command 0x0409 tx timeout [ 82.981569] Bluetooth: hci3: command 0x0409 tx timeout [ 83.110223] Bluetooth: hci6: command 0x0409 tx timeout [ 83.173507] Bluetooth: hci7: command 0x0409 tx timeout [ 84.837652] Bluetooth: hci0: command 0x041b tx timeout [ 84.901751] Bluetooth: hci1: command 0x041b tx timeout [ 84.965567] Bluetooth: hci2: command 0x041b tx timeout [ 84.966387] Bluetooth: hci5: command 0x041b tx timeout [ 84.968138] Bluetooth: hci4: command 0x041b tx timeout [ 85.029789] Bluetooth: hci3: command 0x041b tx timeout [ 85.157561] Bluetooth: hci6: command 0x041b tx timeout [ 85.221600] Bluetooth: hci7: command 0x041b tx timeout [ 86.886634] Bluetooth: hci0: command 0x040f tx timeout [ 86.950509] Bluetooth: hci1: command 0x040f tx timeout [ 87.014611] Bluetooth: hci4: command 0x040f tx timeout [ 87.015114] Bluetooth: hci5: command 0x040f tx timeout [ 87.015583] Bluetooth: hci2: command 0x040f tx timeout [ 87.078499] Bluetooth: hci3: command 0x040f tx timeout [ 87.206579] Bluetooth: hci6: command 0x040f tx timeout [ 87.269535] Bluetooth: hci7: command 0x040f tx timeout [ 88.933571] Bluetooth: hci0: command 0x0419 tx timeout [ 88.997549] Bluetooth: hci1: command 0x0419 tx timeout [ 89.061571] Bluetooth: hci2: command 0x0419 tx timeout [ 89.062008] Bluetooth: hci5: command 0x0419 tx timeout [ 89.062396] Bluetooth: hci4: command 0x0419 tx timeout [ 89.125506] Bluetooth: hci3: command 0x0419 tx timeout [ 89.253550] Bluetooth: hci6: command 0x0419 tx timeout [ 89.318502] Bluetooth: hci7: command 0x0419 tx timeout [ 138.443137] loop4: detected capacity change from 0 to 64 [ 138.495696] loop4: detected capacity change from 0 to 64 04:42:07 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9100) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="524fe3fddefede9be018235e88d2c0e3ffb432bac13dff61eff65c879d3625456dfe75f07d984f8716750cedfea3379655ec946eb11c64fa7671ead419605d08229fa0874b1ffedb8f74a934cf49a0a2102fcf266fde7a136e17cbc3bc31248659fc8df5356a0f9c60f2769fa8b087772279fa420e7d810ce5d59947cf788885f026647dda66348a87ea49dbab3e68871931c1150fcfebd0e236360b1a887d9c6a0ed844adbf7c088a9d2a131834cd5ff0c955a078af27a5a9d0b6eb16db26cb77de58af0850ded49857bbcf2abdb835a291ef64294345fce01d3991b6bce25d18f03dc326b4a2c55a6f9eb62efb7e24ab8a47d993106f35", 0xf8}], 0x1, 0x3ff, 0x9) sendfile(r1, 0xffffffffffffffff, 0x0, 0x101) syz_io_uring_setup(0x40c, &(0x7f00000001c0)={0x0, 0x8ca8, 0x20, 0x1, 0x1d5, 0x0, r1}, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x1, 0x42) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xd479}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x654838b7}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x54, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xfb}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x3}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x3}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x2}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x6}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x1f}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x3}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xfa}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x5}]}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008041) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000480)={{r2}, 0x0, 0x16, @unused=[0x20, 0x4, 0x20, 0x7ff], @subvolid=0x3}) clock_gettime(0x0, &(0x7f0000005440)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000005240)=[{{&(0x7f0000001480)=@abs, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000001500)=""/92, 0x5c}, {&(0x7f0000001580)=""/6, 0x6}, {&(0x7f00000015c0)=""/233, 0xe9}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002880)=""/155, 0x9b}, {&(0x7f0000002940)=""/167, 0xa7}, {&(0x7f0000002a00)=""/154, 0x9a}, {&(0x7f0000002ac0)=""/136, 0x88}, {&(0x7f0000002b80)=""/189, 0xbd}], 0x5, &(0x7f0000002cc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000002e00)=@abs, 0x6e, &(0x7f0000003f40)=[{&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/130, 0x82}], 0x2, &(0x7f0000003f80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000004100)=""/232, 0xe8}, {&(0x7f0000004200)=""/158, 0x9e}], 0x2, &(0x7f0000004300)}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004640)=[{&(0x7f00000043c0)=""/232, 0xe8}, {&(0x7f00000044c0)=""/255, 0xff}, {&(0x7f00000045c0)=""/31, 0x1f}, {&(0x7f0000004600)=""/41, 0x29}], 0x4, &(0x7f0000004680)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f00000046c0)=@abs, 0x6e, &(0x7f0000004980)=[{&(0x7f0000004740)=""/184, 0xb8}, {&(0x7f0000004800)=""/150, 0x96}, {&(0x7f00000048c0)=""/184, 0xb8}], 0x3, &(0x7f00000049c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x118}}, {{&(0x7f0000004b00)=@abs, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004b80)=""/75, 0x4b}, {&(0x7f0000004c00)=""/91, 0x5b}, {&(0x7f0000004c80)=""/65, 0x41}, {&(0x7f0000004d00)=""/82, 0x52}], 0x4, &(0x7f0000004dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000004ec0), 0x6e, &(0x7f0000005200)=[{&(0x7f0000004f40)=""/63, 0x3f}, {&(0x7f0000004f80)=""/199, 0xc7}, {&(0x7f0000005080)=""/187, 0xbb}, {&(0x7f0000005140)=""/132, 0x84}], 0x4}}], 0x8, 0x1, &(0x7f0000005480)={r4, r5+10000000}) setsockopt$inet_tcp_int(r8, 0x6, 0x18, &(0x7f00000054c0)=0xb641, 0x4) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005500)='/proc/vmstat\x00', 0x0, 0x0) readv(r12, &(0x7f00000058c0)=[{&(0x7f0000005540)=""/107, 0x6b}, {&(0x7f00000055c0)=""/86, 0x56}, {&(0x7f0000005640)=""/75, 0x4b}, {&(0x7f00000056c0)=""/148, 0x94}, {&(0x7f0000005780)=""/162, 0xa2}, {&(0x7f0000005840)=""/102, 0x66}], 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000005940)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000005980)={{0x1, 0x1, 0x18, r13, {0x20}}, './file0\x00'}) r14 = syz_mount_image$vfat(&(0x7f00000059c0), &(0x7f0000005a00)='./file0/file0\x00', 0x8000, 0x1, &(0x7f0000005b40)=[{&(0x7f0000005a40)="c17b6ba459850164d06520e096264401059dbc687c72d44eee60cfee2a40b9b85672b776d5483b0f6b046c0e4a6055b4b6b06632ab1a8247b8e505b7e3b97503fed445ded4945a3311ae0417c1881283641e491633b0c10ccafbbd0ca11c3b5072483b9a3bb63dfb24b5f90e9f188c09b92163041e8ad2917dd23174c28517a481fef5dc55c4ff9144c064a16a97ed1631aeb5b93c0ce4942138c5001567ddf43b5de979b2f1d1917e42af8f735d6f774540fa07a83888146d54f27c54022e808f3d14b1964d65e80246a78bb1b2d68c226d597e73df51a5823e8ac24ba6f2e9cb7a53691d42687767f0de5935ab3669a1d4908d76a989bf7c", 0xf9, 0x93}], 0x10001, &(0x7f0000005b80)={[{@rodir}, {@fat=@nocase}, {@nonumtail}, {@utf8no}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@rodir}], [{@smackfsfloor={'smackfsfloor', 0x3d, '$$:(/#!\xe8^{&'}}, {@fsmagic={'fsmagic', 0x3d, 0x7fff}}, {@uid_gt={'uid>', r11}}, {@fsname={'fsname', 0x3d, '\x84('}}, {@euid_gt={'euid>', r11}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/hwrng\x00'}}]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r10, 0x5000943f, &(0x7f0000005c80)={{r14}, 0x0, 0x2, @unused=[0x80000001, 0x7, 0x6000000000, 0x25], @name="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"}) getpeername(0xffffffffffffffff, &(0x7f0000006c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000006d00)=0x80) pwritev(r15, &(0x7f0000007080)=[{&(0x7f0000006d40)="42f132a705bca3bdc53f1b36a99dcf16ca5e1c08a9c0accda1b2cfa4bf8581d7ac984fb688ce83", 0x27}, {&(0x7f0000006d80)="19235bba72db992b03277ef50b9d0da171a10c155551438758b45417767274bfc73c11133d38553fd1e7e7d836f47f1ba0ea9c35595361fdfe9d22d6ccbae36fb0c5ba0ef1c5a072518a1e96dcc24f960d530b611097a6b2fca5e606c1199052dfbd62f73c1428be3f54f50087dd60732123102ce55b93e62ae2681f56d6388065627e897be3242e4caadccdfd680a1c87fd35ad1c4e3d1c9bc31f70726a484a38eab67635b3db199d016fe52be88518a6d3940d5b3ace10ff021315671a0fa86ff8ff5037b6871e44b0a6", 0xcb}, {&(0x7f0000006e80)="90843b2a7e3dfdd1838179efa56530f0e26e46dd8b8e", 0x16}, {&(0x7f0000006ec0)="50e1fc92eb8b9c145fe36cfe538af8f9770cc7339b8829c3eaa5e9520ff6a6b2fabea2947c848bca3d1665679e9c63cf8d64675d7ff15e0e54890b10d69aeddfbc0f5031a1505efbcc3a1a1e1c0f1e87", 0x50}, {&(0x7f0000006f40)="59b3955f30ef327a75446ceb546623b2e5720a35de87c1db148b566c2ff191095011c247fe9bc9e5e787", 0x2a}, {&(0x7f0000006f80)="f91496ea4a5bc801bf491001317c68d7e441376040a7a8202ab0802d5db914c2ad826f377c1b05331a896d5e25920d1312b7f71e0a19873b9a9c3dc624f9e108f18041b7f48b9364728d92c43d32822357133ca532c4e31b2298fdc06cfe1950", 0x60}, {&(0x7f0000007000)="b7549a52276042905c630e5de21601cb981177ec33d270a33983db3d00570f118f9eef480c18c088a4348e8db7f24a4373e8c548a33294f33b3d4f19e61553d983eaf1bd40ba8ba79cb83f26dd3d2f33ab44da59b8eab2013848292392131ba537c6419b59f2b71812d8fedcdf1263140dd45e169d16", 0x76}], 0x7, 0x0, 0x53ea500d) 04:42:07 executing program 6: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file2\x00', 0x501140, 0x130) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "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", "950b8bbc34bf9b44a5f783e82416e13437591aaea9e99d56d9fa2b62c996fb937ef8e5bb361a4eb72e3b338b3d456d93c2993fc14a84c9df4fca9a60ad24fe51c5a3fc272feb82e0053d62793dcbb53a9aac338c90f5cdae9589decd38f50a09d93770fe9fffa2570bae21a6c16607cb009087b6f6850ff959c7cde98a4e32896d4e19a961e665ed3624ef5c69dc0964b4e762a597e962c8f0c77006ae2c2e61c9d589d8075d51ad024b5e6af6d9ad992d0bf7c9b663e91485d32a9e7ee3febf65c5d7f7d8cf1d6ee7a1d12df1d9a056d2c44371e7d7376e0baa911ce2fb91f811506149e1b2bcf3dc0e9c94a294388d4636547a098e57bad5c0bf1ee2d21aabc22fc193ed1e85886abdeb6944ead2082984e3b7724633f58c76185a0e7814cf6745bb5ca89b88abdf102a0bcf9fb0c1b2eed6553ee3a0eab3b9bcebf70187adf95f5a2564a6d081679f6988f7e0fffda8c75027eec9fd9177d245704a2f1348f6aa2141357964efb85de30e3be48ba72b34f46a53c393aacb648b728316adf6edc89a128dac296e8022e3457cda709d3f4ee82e744910890ba79420b32572d19d21d965bb5f7be6713d2aff1c6a47589d00d173a4f7f75c191247fb6eea511c85f1f2ca3389aeec86fa05b79a53eadd44f6928fd6492e18d1de7614e68ab21dfd71508786e535de92de39236ea42fbaa81ae85784b5c24c89f6bee084493fc227b3c9f620efa3b7c13b48c1bd1bc20f5972f2a94a68b6717e2f0524741ee7d55a39eee078436f0af9a982a0953bd1cd57849007d08bfbf1dfe814c8448539baa1c5b8ced883da94c7b946cb9e205c83941172aa1bc8e710fe6efec7ef16639408348485e6890ea289fabb6a872c634aa21059ca2bd3cf3deae4bfada536780a9f11ef2a84a17bc2e5ffefc8b7f1aa708f2d89e496578b78381a82916a7a2b36413b76171af62915c76d20d2ec695f0d7dd0ae6a5a890e1070500a62f4267321900efe7073474e030a3ab8086275b552ac0ca8e94f438307b354e39005cddc582c5da0f3753b37643cc13bdff1efef66055f16e871e8ad26a502e5e7509d05f98f32f3f0b5d563c498e860b5b931e36ccd1e7d7f5a0904288aecd9c6a5bbda28d43169cb7967d69d124f5cf6fd1574ba9a9eabd5b8b0b27bb48ac5659c2734e21eb8cd71ba8c7fd8ff7b7cb65d7d127ff0f53fc25d2f3eb05586d7299eb8cb1eb255a460c9a05151ceead842b1c21e8c19ebecf6cb1a7f9a19a254c9e39bfbcb905d6d0265b37fae4d15ef8e4c56f82bf976662e0d258c2e7ba2ebe6ca3e9ea3d0ea52ee8b67d8f318a2a27a716977d4fe916264e11788a1e80dde6a0100b156b89f11e4e3bf78c66d535e46477fcd9f568578523406f21a6796ac3c1e0f6ba31a471f359579b103299799606a766a1ca7148c153d85c5420bd1e1ee0564c08c88dec5d248eccf1f63cf01015197f6a3fa61a598e8ad327cd6dfe3cf9f0b4e685dc0e9b10908f68b2290a3741a90991e1f67c04015a780a87c89644280b032722ceb2531bbed8e4459edad3409cbe1ddfd071052277cd908cebe5c00009c3f3a33b9ec60b200e700eb9d48954461c82591a5ffeec87f12d081d30e4c61999879c607cc653a3b2478439b42ea05b469534f20653d8d61a55e9761dd331386109af0b2453eb2e8ba54e7c16e890727c133b442956db67278d661166a9290d4fe8008821649eeefba119ba3776597654a546611693db7b3fc63aa2d01047dbf8a6db146b0fcf3afc8d819575f642dc87ffbd0a42bb68c20f1ea1dac2804db95adab571d2ca60c679a8db02ba3cd5765713e5c3748205b56fd3f6f6e32f628c5b986b1f9d218df36b03db78ee74544555dfa7506a939f48c10a9df0620a841f7e9c67cbf5b367c4c0bbd69b76956326f1737d143d49619691433473fd5fed20fc5710ff0f7c6288a4071f02f741532e3080d59b039466ab62972ecc563ee511e8a9d56fa7179569f1d2420ddc90c62d654331771dd8515ecb6d9030901de113996870c1d921fca0d39a5da13183ab12506008f3074a26ef1990fdabfea0d42d346748959a35e0e07c447c03a591c54ae61186cf579e2636e89d3b3f06c5a019330dbb2d313cff036624a789abb4d5a76ea83e31774be2280de447a053e29a2cb6c4fe62292b61e6513098cc0269a6d526aab3dba820ebe9408839a8f96a5cd09bb29dd6e1b2bdfd31d6b93ceb47976f6650f0c294b061fd25118d364cb0654b0f87741953c3fb2a590394179678b1fab1390db08d599bc418f168f4aa56ebbf3fc9f1597151c83e989770349402695c8b2bfd2b488e0735a071650d4fe1420804c66ce4261424f60424c0390397e7eea3ca904173b8620d74799ae84204abc9548801f3ca29973a33110c6b13d0aaaf316948e1d6fb99ca3150864361418d7f05f39ba7b9026a356f185ad23542e6f0af8d71989486bde21d7451acf86bab6ed27271f395ab31e88e6cd6ff6da710e6ae680fc1711a1319694f9ac56cdcfd46a10db35295627a7dcd4c605e98e455164ff21927b904929973b7520f752b76e6cd3732e540371fd78a5a42611f42d0b185d213a47abd2dfdc37c79894d3323900631655bc263fb5e8aa6b6f32c9f8ced4acc81c6d4bc95fa48faee5697d4221cc576bae07afe10057cf40423318fcd32c3158d65eb770728028f8e5354069ec4f4f63b9a4cd68172397bfa5371a43697e7bc26d777c55ce5f0a225324397a7567b0b969604db7d32c95b05017db53bad3cc1ac3f3d3bc0287d7794f9baf0f1a7064258586e39743dc150637d84c47fce0feb9e9f3c1fbddcdc9de4a1011a54cf9a74fd28b029f0bfb45f723e4dbe9910a203e98fdbe6fa0d562ead671d5ecaba5f2f29d8e37dcae6b3b6e0cc4917ef4da6b9f0baacbc51840ebaf85f0f7d11897d8887a35d99f50eedefcb07913a665d0843f68a73767df874c5995936bf5c03bf40ff54e179c094127af6254e22da82484472eca7a48bf932c2470ad5c6bc43b2392ebae24692e73ae1c6e0c03eb958b78952531156d7509da69cfd9d8e5068e560fc7f28a974490ecbbc79aafb65f525e5b8d04aaed3b683c6b23703d6ff361f5bd57a9b62ffa5e994b9bbaaf582688f78bc13ef909f9634324fbf6859646b673e2b1d80f56a58bffdac390c245d8cc3036da0e6656f24af365da36ec6cc74847ccfb4a36115c1f19cc6e848f909089a2ac660d1223765295f37c442f987ed98b3f7b3b963213d2e6289b147c80dfc239800f0d48d37fc4739fa521dd686f5413261a9cd06f1c09c598d3d91e66db106ef212c3a1b8c02834f9cc3634ca938df7a478c25b55f0c654bc4f70057a60a7bbf02706f048329d3ad3052f23b698b8ffb97085f121249359320efff2add0c35db60e7cf74e0169e9cf13c0c3725768fea6e928a213e61bae007bc307e4fe63b0905772c469747b5884509acce8b7c368b417b44460d6e5d3ab9dec690c43a029122ba37216d48a0d7eb519fcd0257df3a693711ffa60c8a3855713f359c3780f4a40694982d7ce84e40f03faaf942730e9daa8777d7a8909999df47955ea430bb443789f047066426df0a7fe04f741420b0db3c5e54f0b03e60b5897e96c4bf34f324ef899b9ea4b36c44b2496f043e7be07f3a58bb094caab78f168d9486d0dfd1adc97ae3ce5e710a9e47e6b5f8360417d1462acb4062057dda820c5d4b4cc90a13732fc2b52b12b2d255cb01f529a597e5ee29eb36e0c479896ae189103580a633c4a09621043df2205d00b45a84cd8ebe81c483cdf66994827672942dba7674e2090829a33744394e7b9c81ff273a5df6e0eceaa9b2abad932c8740d3b0b977e91fc03f4020a4459fa582d48673215c14f0da08a82a67b8bb804915c9d1218d7a9de94033a32725f30f9f9e81987d63cca018d12c3894b7fbeb95901f382bdee8595b2e6b7f42d0ada636db6e000625dfaa79a6309b2dd279fff258cefcc044a06bdbe489230ffdd90efdda0df2da52742a59e24b8c50ec68790fc62207ac2cd6d4997d6a4faa5e2645e30228f39094750eef3ce56b1569438750ff50130c64e8f37d8ff49fa9d9c0d409e9f60f347cb386946ce117b4c40a9a53c7359d3a966c7326263270eb16876ff1e6da42a73a634ac661327a916b8416bac1bb49a5e9b8da0dc7170d833d07df1fab73a7f202aaa768049efefc4b399611a6fdbe29aaccfb6416be56f30e9fce9602d0cf57c1c70b321974e3518434ca828f1a51d4191b99e0e0a7451ba3b4f2b5cf95b44fc417abcc5b0b13bae366614f75c98aade49013475086a48d9e64ba7701d6aa7997132e56b97b962921a73e7a70de0f32c06d0117b24708867f7247024a28096607669001e87ec188812d0eab256b0296e0f70c47c6ca89dd511c1362523930a546a44ebc421e03e979a5bba49732d437d82e7555e5a10c4a1fd933c6c50380d3d7a147586e4033005f533f7ade992af2696c4d122311a473f97644095805a18da9d0b52e2f72dd386a3d14f478c7ba144503ee2e94bfb3853fb37adca2f7bf51872fd3a54e392c8b6dbf142c6ae83ca21575ca6a1d3fa1b1de90f4a816d093561f88f6e6aaf782d08c798147a64851759b8667a1531da2d571e1457edd13d7d0929ae02daed710e9ae1a2796e38a1c2921dd2fd57f825f4cf95f02e34e9cf3e894d57cfde113224210caec0b4ab2901262b6e36d96ea1febc8c73a12f0e40f6b47b13709cfecbec1420fcb5cdc2b5986d0a54fe0459ba5f77b90bc9d2cbdd86663910fed740f6f41d94cb1b3818a550f8da00f6d17b150e4872fec8712a7490a1782a82b9680ceeeb41fdb8c95c1d3d574437d3bd1915020d96e411978c1738d7683b62f5dbf6280dc72860a2b6fa1de548e6a22987f1d3b5eb010172d7c684e9943e32b140fc51cd8c7046a2cc604244a7aad63a9edd2f64c31c8fe127a2cb965ac0a374b24e475bc78f4cbdda40b39b282af1d192bd2a967fc6b7811f8ef8be8d65cd8d3ddbf1e69989c073a16c9c1896ca8a734bc6a4df17d39d30a8b8c1ec3d93534747e8e9a769f60a9e10cc69ea5903993bc481630e1df50eedc1a1a51d96de8fcd27a3ba4108349c92d52b81886d19217b10508527634c58af2806b2dae8c71aaeb6946896decd03266a75bccf676d86064188d0da683b3b38a3c03fc22bbf6c8d8bdea829bc5aa5d5521da096718aa6a629f174e510b1215b49f27db3c145555baa329d15de80976748b68648482cb8cf9e79cc3acefe4d8436c04e882934abc30ac5886d10a54b759f1b4407d1ea9d8cc1049e4f60c9dc96dbda9dbc581d31bb3dcfe32598bac97974d6c8625a2be3d48ef98edfbf0725cc18f21b50a67b0de8ff6544cd67ce0d43fcc1d248"}) r3 = fsmount(0xffffffffffffffff, 0x0, 0x6) pwrite64(r3, &(0x7f0000000300)="91603651d92b9546550f134e8055e71efbb3c1a630bdb300bfc5112cfd400b6482c3b364efbeae8c5f3a3f0ff03bfd1d7d8d1059d345617717f967b29d108bb565092f4b147527373376bc0e6bec09302e59791ec84c0765546134d92999fa8e3742ee96a9cc3af2e83c1497ee3e7c5ccd60017b72a63449de1c429755abe4e787aa01ed62eb017eb615b1c0b3d2d8c7d0d6f6192a46ae41689fa535871ce9fc93d2a2de77c5a8e7955e44cee7546a1bcf54dc7f65f166050d928a6061541f408058fed12739ee238bcbd820515dbcd309bc4fea6c92e27266", 0xd9, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x18}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8001) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendfile(r4, r2, 0x0, 0xfffffdef) [ 138.629150] loop4: detected capacity change from 0 to 64 [ 138.637385] loop6: detected capacity change from 0 to 40 [ 138.678308] audit: type=1400 audit(1663648927.754:7): avc: denied { open } for pid=3833 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 138.679871] audit: type=1400 audit(1663648927.754:8): avc: denied { kernel } for pid=3833 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 138.709036] ------------[ cut here ]------------ [ 138.709060] [ 138.709064] ====================================================== [ 138.709068] WARNING: possible circular locking dependency detected [ 138.709073] 6.0.0-rc6-next-20220919 #1 Not tainted [ 138.709079] ------------------------------------------------------ [ 138.709083] syz-executor.6/3834 is trying to acquire lock: [ 138.709090] ffffffff853fa838 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 138.709130] [ 138.709130] but task is already holding lock: [ 138.709132] ffff88800ee5cc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 138.709160] [ 138.709160] which lock already depends on the new lock. [ 138.709160] [ 138.709163] [ 138.709163] the existing dependency chain (in reverse order) is: [ 138.709167] [ 138.709167] -> #3 (&ctx->lock){....}-{2:2}: [ 138.709180] _raw_spin_lock+0x2a/0x40 [ 138.709197] __perf_event_task_sched_out+0x53b/0x18d0 [ 138.709210] __schedule+0xedd/0x2470 [ 138.709220] schedule+0xda/0x1b0 [ 138.709230] exit_to_user_mode_prepare+0x114/0x1a0 [ 138.709250] syscall_exit_to_user_mode+0x19/0x40 [ 138.709268] do_syscall_64+0x48/0x90 [ 138.709281] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.709298] [ 138.709298] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 138.709312] _raw_spin_lock_nested+0x30/0x40 [ 138.709326] raw_spin_rq_lock_nested+0x1e/0x30 [ 138.709339] task_fork_fair+0x63/0x4d0 [ 138.709356] sched_cgroup_fork+0x3d0/0x540 [ 138.709372] copy_process+0x4183/0x6e20 [ 138.709383] kernel_clone+0xe7/0x890 [ 138.709392] user_mode_thread+0xad/0xf0 [ 138.709402] rest_init+0x24/0x250 [ 138.709418] arch_call_rest_init+0xf/0x14 [ 138.709431] start_kernel+0x4c1/0x4e6 [ 138.709440] secondary_startup_64_no_verify+0xe0/0xeb [ 138.709454] [ 138.709454] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 138.709468] _raw_spin_lock_irqsave+0x39/0x60 [ 138.709482] try_to_wake_up+0xab/0x1920 [ 138.709495] up+0x75/0xb0 [ 138.709506] __up_console_sem+0x6e/0x80 [ 138.709522] console_unlock+0x46a/0x590 [ 138.709537] vprintk_emit+0x1bd/0x560 [ 138.709553] vprintk+0x84/0xa0 [ 138.709568] _printk+0xba/0xf1 [ 138.709586] kauditd_hold_skb.cold+0x3f/0x4e [ 138.709600] kauditd_send_queue+0x233/0x290 [ 138.709614] kauditd_thread+0x5da/0x9a0 [ 138.709628] kthread+0x2ed/0x3a0 [ 138.709642] ret_from_fork+0x22/0x30 [ 138.709654] [ 138.709654] -> #0 ((console_sem).lock){....}-{2:2}: [ 138.709668] __lock_acquire+0x2a02/0x5e70 [ 138.709684] lock_acquire+0x1a2/0x530 [ 138.709699] _raw_spin_lock_irqsave+0x39/0x60 [ 138.709714] down_trylock+0xe/0x70 [ 138.709725] __down_trylock_console_sem+0x3b/0xd0 [ 138.709741] vprintk_emit+0x16b/0x560 [ 138.709756] vprintk+0x84/0xa0 [ 138.709772] _printk+0xba/0xf1 [ 138.709788] report_bug.cold+0x72/0xab [ 138.709800] handle_bug+0x3c/0x70 [ 138.709812] exc_invalid_op+0x14/0x50 [ 138.709825] asm_exc_invalid_op+0x16/0x20 [ 138.709841] group_sched_out.part.0+0x2c7/0x460 [ 138.709852] ctx_sched_out+0x8f1/0xc10 [ 138.709861] __perf_event_task_sched_out+0x6d0/0x18d0 [ 138.709873] __schedule+0xedd/0x2470 [ 138.709883] schedule+0xda/0x1b0 [ 138.709892] exit_to_user_mode_prepare+0x114/0x1a0 [ 138.709910] syscall_exit_to_user_mode+0x19/0x40 [ 138.709927] do_syscall_64+0x48/0x90 [ 138.709940] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.709956] [ 138.709956] other info that might help us debug this: [ 138.709956] [ 138.709959] Chain exists of: [ 138.709959] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 138.709959] [ 138.709974] Possible unsafe locking scenario: [ 138.709974] [ 138.709976] CPU0 CPU1 [ 138.709979] ---- ---- [ 138.709981] lock(&ctx->lock); [ 138.709987] lock(&rq->__lock); [ 138.709993] lock(&ctx->lock); [ 138.709999] lock((console_sem).lock); [ 138.710005] [ 138.710005] *** DEADLOCK *** [ 138.710005] [ 138.710007] 2 locks held by syz-executor.6/3834: [ 138.710014] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 138.710039] #1: ffff88800ee5cc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 138.710066] [ 138.710066] stack backtrace: [ 138.710070] CPU: 1 PID: 3834 Comm: syz-executor.6 Not tainted 6.0.0-rc6-next-20220919 #1 [ 138.710082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 138.710090] Call Trace: [ 138.710093] [ 138.710098] dump_stack_lvl+0x8b/0xb3 [ 138.710113] check_noncircular+0x263/0x2e0 [ 138.710129] ? format_decode+0x26c/0xb50 [ 138.710144] ? print_circular_bug+0x450/0x450 [ 138.710161] ? enable_ptr_key_workfn+0x20/0x20 [ 138.710175] ? perf_swevent_event+0x6c/0x550 [ 138.710194] ? format_decode+0x26c/0xb50 [ 138.710209] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 138.710226] __lock_acquire+0x2a02/0x5e70 [ 138.710247] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.710269] lock_acquire+0x1a2/0x530 [ 138.710285] ? down_trylock+0xe/0x70 [ 138.710300] ? lock_release+0x750/0x750 [ 138.710320] ? vprintk+0x84/0xa0 [ 138.710337] _raw_spin_lock_irqsave+0x39/0x60 [ 138.710352] ? down_trylock+0xe/0x70 [ 138.710365] down_trylock+0xe/0x70 [ 138.710378] ? vprintk+0x84/0xa0 [ 138.710395] __down_trylock_console_sem+0x3b/0xd0 [ 138.710412] vprintk_emit+0x16b/0x560 [ 138.710430] vprintk+0x84/0xa0 [ 138.710447] _printk+0xba/0xf1 [ 138.710464] ? record_print_text.cold+0x16/0x16 [ 138.710486] ? report_bug.cold+0x66/0xab [ 138.710500] ? group_sched_out.part.0+0x2c7/0x460 [ 138.710511] report_bug.cold+0x72/0xab [ 138.710526] handle_bug+0x3c/0x70 [ 138.710540] exc_invalid_op+0x14/0x50 [ 138.710554] asm_exc_invalid_op+0x16/0x20 [ 138.710571] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 138.710584] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 138.710596] RSP: 0018:ffff88800993fc48 EFLAGS: 00010006 [ 138.710605] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 138.710613] RDX: ffff88801d7b8000 RSI: ffffffff81566077 RDI: 0000000000000005 [ 138.710621] RBP: ffff888041188000 R08: 0000000000000005 R09: 0000000000000001 [ 138.710628] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88800ee5cc00 [ 138.710636] R13: ffff88806cf3d140 R14: ffffffff8547c620 R15: 0000000000000002 [ 138.710647] ? group_sched_out.part.0+0x2c7/0x460 [ 138.710660] ? group_sched_out.part.0+0x2c7/0x460 [ 138.710673] ctx_sched_out+0x8f1/0xc10 [ 138.710685] __perf_event_task_sched_out+0x6d0/0x18d0 [ 138.710701] ? lock_is_held_type+0xd7/0x130 [ 138.710719] ? __perf_cgroup_move+0x160/0x160 [ 138.710730] ? set_next_entity+0x304/0x550 [ 138.710747] ? update_curr+0x267/0x740 [ 138.710765] ? lock_is_held_type+0xd7/0x130 [ 138.710784] __schedule+0xedd/0x2470 [ 138.710797] ? io_schedule_timeout+0x150/0x150 [ 138.710809] ? trace_rcu_dyntick+0x1a7/0x250 [ 138.710831] schedule+0xda/0x1b0 [ 138.710842] exit_to_user_mode_prepare+0x114/0x1a0 [ 138.710862] syscall_exit_to_user_mode+0x19/0x40 [ 138.710880] do_syscall_64+0x48/0x90 [ 138.710894] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.710911] RIP: 0033:0x7fcbcb91cb19 [ 138.710920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.710931] RSP: 002b:00007fcbc8e92218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.710942] RAX: 0000000000000001 RBX: 00007fcbcba2ff68 RCX: 00007fcbcb91cb19 [ 138.710950] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcbcba2ff6c [ 138.710957] RBP: 00007fcbcba2ff60 R08: 000000000000000e R09: 0000000000000000 [ 138.710964] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fcbcba2ff6c [ 138.710972] R13: 00007ffff47f8c9f R14: 00007fcbc8e92300 R15: 0000000000022000 [ 138.710984] [ 138.768008] WARNING: CPU: 1 PID: 3834 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 138.768682] Modules linked in: [ 138.768922] CPU: 1 PID: 3834 Comm: syz-executor.6 Not tainted 6.0.0-rc6-next-20220919 #1 [ 138.769495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 138.770298] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 138.770695] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 138.772002] RSP: 0018:ffff88800993fc48 EFLAGS: 00010006 [ 138.772386] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 138.772898] RDX: ffff88801d7b8000 RSI: ffffffff81566077 RDI: 0000000000000005 [ 138.773409] RBP: ffff888041188000 R08: 0000000000000005 R09: 0000000000000001 [ 138.773925] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88800ee5cc00 [ 138.774439] R13: ffff88806cf3d140 R14: ffffffff8547c620 R15: 0000000000000002 [ 138.774955] FS: 00007fcbc8e92700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 138.775545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.775969] CR2: 00007fc09e608020 CR3: 000000004089a000 CR4: 0000000000350ee0 [ 138.776483] Call Trace: [ 138.776674] [ 138.776843] ctx_sched_out+0x8f1/0xc10 [ 138.777131] __perf_event_task_sched_out+0x6d0/0x18d0 [ 138.777512] ? lock_is_held_type+0xd7/0x130 [ 138.777837] ? __perf_cgroup_move+0x160/0x160 [ 138.778168] ? set_next_entity+0x304/0x550 [ 138.778485] ? update_curr+0x267/0x740 [ 138.778778] ? lock_is_held_type+0xd7/0x130 [ 138.779104] __schedule+0xedd/0x2470 [ 138.779382] ? io_schedule_timeout+0x150/0x150 [ 138.779730] ? trace_rcu_dyntick+0x1a7/0x250 [ 138.780064] schedule+0xda/0x1b0 [ 138.780321] exit_to_user_mode_prepare+0x114/0x1a0 [ 138.780688] syscall_exit_to_user_mode+0x19/0x40 [ 138.781040] do_syscall_64+0x48/0x90 [ 138.781317] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.781712] RIP: 0033:0x7fcbcb91cb19 [ 138.781984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.783280] RSP: 002b:00007fcbc8e92218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.783842] RAX: 0000000000000001 RBX: 00007fcbcba2ff68 RCX: 00007fcbcb91cb19 [ 138.784357] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcbcba2ff6c [ 138.784875] RBP: 00007fcbcba2ff60 R08: 000000000000000e R09: 0000000000000000 [ 138.785390] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fcbcba2ff6c [ 138.785899] R13: 00007ffff47f8c9f R14: 00007fcbc8e92300 R15: 0000000000022000 [ 138.786417] [ 138.786591] irq event stamp: 5534 [ 138.786839] hardirqs last enabled at (5533): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 138.787535] hardirqs last disabled at (5534): [] __schedule+0x1225/0x2470 [ 138.788135] softirqs last enabled at (5264): [] __irq_exit_rcu+0x11b/0x180 [ 138.788759] softirqs last disabled at (5255): [] __irq_exit_rcu+0x11b/0x180 [ 138.789371] ---[ end trace 0000000000000000 ]--- 04:42:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:42:08 executing program 4: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x82a00, 0x0) ioctl$CDROMPLAYMSF(r0, 0x5303, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)={0x40, 0x0, 0x10}, 0x18) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@measure}]}}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x200}}, './cgroup/cgroup.procs\x00'}) chown(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, r2) 04:42:08 executing program 6: r0 = memfd_secret(0x0) r1 = syz_io_uring_setup(0x2fea, &(0x7f0000000080)={0x0, 0x20, 0x0, 0x0, 0x2e9, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r1, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x9) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) futex(&(0x7f00000002c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) 04:42:08 executing program 4: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x82a00, 0x0) ioctl$CDROMPLAYMSF(r0, 0x5303, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)={0x40, 0x0, 0x10}, 0x18) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@measure}]}}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x200}}, './cgroup/cgroup.procs\x00'}) chown(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, r2) 04:42:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000480)="9b3e", 0x2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200002, 0x1e1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000580)) 04:42:08 executing program 4: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x82a00, 0x0) ioctl$CDROMPLAYMSF(r0, 0x5303, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)={0x40, 0x0, 0x10}, 0x18) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@measure}]}}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x200}}, './cgroup/cgroup.procs\x00'}) chown(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, r2) [ 139.100258] audit: type=1400 audit(1663648928.176:9): avc: denied { write } for pid=3877 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 142.144667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.145999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.147419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.149378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.151008] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.152344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.155502] Bluetooth: hci1: HCI_REQ-0x0c1a [ 144.165517] Bluetooth: hci1: command 0x0409 tx timeout [ 144.422503] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 144.423599] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 144.424615] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 146.213538] Bluetooth: hci1: command 0x041b tx timeout [ 148.261530] Bluetooth: hci1: command 0x040f tx timeout VM DIAGNOSIS: 04:42:08 Registers: info registers vcpu 0 RAX=fffffbfff0b605ca RBX=fffffbfff0b605cb RCX=ffffffff812a3828 RDX=fffffbfff0b605cb RSI=0000000000000008 RDI=ffffffff85b02e50 RBP=fffffbfff0b605ca RSP=ffff88802049f6c8 R8 =0000000000000000 R9 =ffffffff85b02e57 R10=fffffbfff0b605ca R11=0000000000000001 R12=ffffffff854b8380 R13=ffff8880189c5e10 R14=ffff888007c75000 R15=0000000000000000 RIP=ffffffff81788c85 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f45ae9dd8e0 CR3=00000000103d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b2e71 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88800993f698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b2e60 RIP=ffffffff822b2ec9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcbc8e92700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc09e608020 CR3=000000004089a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000