Warning: Permanently added '[localhost]:49586' (ECDSA) to the list of known hosts. 2022/09/24 18:42:17 fuzzer started 2022/09/24 18:42:18 dialing manager at localhost:38881 syzkaller login: [ 47.607975] cgroup: Unknown subsys name 'net' [ 47.696979] cgroup: Unknown subsys name 'rlimit' 2022/09/24 18:42:35 syscalls: 2215 2022/09/24 18:42:35 code coverage: enabled 2022/09/24 18:42:35 comparison tracing: enabled 2022/09/24 18:42:35 extra coverage: enabled 2022/09/24 18:42:35 setuid sandbox: enabled 2022/09/24 18:42:35 namespace sandbox: enabled 2022/09/24 18:42:35 Android sandbox: enabled 2022/09/24 18:42:35 fault injection: enabled 2022/09/24 18:42:35 leak checking: enabled 2022/09/24 18:42:35 net packet injection: enabled 2022/09/24 18:42:35 net device setup: enabled 2022/09/24 18:42:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/24 18:42:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/24 18:42:35 USB emulation: enabled 2022/09/24 18:42:35 hci packet injection: enabled 2022/09/24 18:42:35 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/24 18:42:35 802.15.4 emulation: enabled 2022/09/24 18:42:35 fetching corpus: 50, signal 25856/27668 (executing program) 2022/09/24 18:42:35 fetching corpus: 100, signal 34444/37911 (executing program) 2022/09/24 18:42:35 fetching corpus: 150, signal 44006/48952 (executing program) 2022/09/24 18:42:35 fetching corpus: 200, signal 52750/59025 (executing program) 2022/09/24 18:42:35 fetching corpus: 250, signal 57073/64737 (executing program) 2022/09/24 18:42:35 fetching corpus: 300, signal 61176/70173 (executing program) 2022/09/24 18:42:36 fetching corpus: 350, signal 65169/75419 (executing program) 2022/09/24 18:42:36 fetching corpus: 400, signal 70567/81908 (executing program) 2022/09/24 18:42:36 fetching corpus: 450, signal 73853/86379 (executing program) 2022/09/24 18:42:36 fetching corpus: 500, signal 78207/91830 (executing program) 2022/09/24 18:42:36 fetching corpus: 550, signal 81706/96404 (executing program) 2022/09/24 18:42:36 fetching corpus: 600, signal 84566/100301 (executing program) 2022/09/24 18:42:36 fetching corpus: 650, signal 88862/105468 (executing program) 2022/09/24 18:42:36 fetching corpus: 700, signal 92875/110321 (executing program) 2022/09/24 18:42:37 fetching corpus: 750, signal 97138/115326 (executing program) 2022/09/24 18:42:37 fetching corpus: 800, signal 99593/118709 (executing program) 2022/09/24 18:42:37 fetching corpus: 850, signal 101035/121160 (executing program) 2022/09/24 18:42:37 fetching corpus: 900, signal 103424/124371 (executing program) 2022/09/24 18:42:37 fetching corpus: 950, signal 106599/128218 (executing program) 2022/09/24 18:42:37 fetching corpus: 1000, signal 108874/131245 (executing program) 2022/09/24 18:42:37 fetching corpus: 1050, signal 111439/134523 (executing program) 2022/09/24 18:42:38 fetching corpus: 1100, signal 113142/137011 (executing program) 2022/09/24 18:42:38 fetching corpus: 1150, signal 115127/139713 (executing program) 2022/09/24 18:42:38 fetching corpus: 1200, signal 117389/142623 (executing program) 2022/09/24 18:42:38 fetching corpus: 1250, signal 118487/144544 (executing program) 2022/09/24 18:42:38 fetching corpus: 1300, signal 121094/147643 (executing program) 2022/09/24 18:42:38 fetching corpus: 1350, signal 122149/149531 (executing program) 2022/09/24 18:42:38 fetching corpus: 1400, signal 124758/152552 (executing program) 2022/09/24 18:42:38 fetching corpus: 1450, signal 125647/154250 (executing program) 2022/09/24 18:42:38 fetching corpus: 1500, signal 127840/156874 (executing program) 2022/09/24 18:42:39 fetching corpus: 1550, signal 129048/158743 (executing program) 2022/09/24 18:42:39 fetching corpus: 1600, signal 129650/160151 (executing program) 2022/09/24 18:42:39 fetching corpus: 1650, signal 130692/161880 (executing program) 2022/09/24 18:42:39 fetching corpus: 1700, signal 133224/164669 (executing program) 2022/09/24 18:42:39 fetching corpus: 1750, signal 134730/166644 (executing program) 2022/09/24 18:42:39 fetching corpus: 1800, signal 136075/168449 (executing program) 2022/09/24 18:42:39 fetching corpus: 1850, signal 137751/170469 (executing program) 2022/09/24 18:42:39 fetching corpus: 1900, signal 139461/172541 (executing program) 2022/09/24 18:42:39 fetching corpus: 1950, signal 140495/174135 (executing program) 2022/09/24 18:42:40 fetching corpus: 2000, signal 141627/175744 (executing program) 2022/09/24 18:42:40 fetching corpus: 2050, signal 142928/177437 (executing program) 2022/09/24 18:42:40 fetching corpus: 2100, signal 144030/179000 (executing program) 2022/09/24 18:42:40 fetching corpus: 2150, signal 145228/180590 (executing program) 2022/09/24 18:42:40 fetching corpus: 2200, signal 146804/182410 (executing program) 2022/09/24 18:42:40 fetching corpus: 2250, signal 147601/183724 (executing program) 2022/09/24 18:42:40 fetching corpus: 2300, signal 148710/185277 (executing program) 2022/09/24 18:42:40 fetching corpus: 2350, signal 150804/187373 (executing program) 2022/09/24 18:42:40 fetching corpus: 2400, signal 151665/188699 (executing program) 2022/09/24 18:42:41 fetching corpus: 2450, signal 153545/190568 (executing program) 2022/09/24 18:42:41 fetching corpus: 2500, signal 155175/192415 (executing program) 2022/09/24 18:42:41 fetching corpus: 2550, signal 156773/194071 (executing program) 2022/09/24 18:42:41 fetching corpus: 2600, signal 157534/195263 (executing program) 2022/09/24 18:42:41 fetching corpus: 2650, signal 158406/196452 (executing program) 2022/09/24 18:42:41 fetching corpus: 2700, signal 159802/197959 (executing program) 2022/09/24 18:42:41 fetching corpus: 2750, signal 161229/199387 (executing program) 2022/09/24 18:42:41 fetching corpus: 2800, signal 161835/200420 (executing program) 2022/09/24 18:42:41 fetching corpus: 2850, signal 162304/201361 (executing program) 2022/09/24 18:42:42 fetching corpus: 2900, signal 163595/202714 (executing program) 2022/09/24 18:42:42 fetching corpus: 2950, signal 164830/204073 (executing program) 2022/09/24 18:42:42 fetching corpus: 3000, signal 165384/205024 (executing program) 2022/09/24 18:42:42 fetching corpus: 3050, signal 166608/206279 (executing program) 2022/09/24 18:42:42 fetching corpus: 3100, signal 168040/207646 (executing program) 2022/09/24 18:42:42 fetching corpus: 3150, signal 168672/208567 (executing program) 2022/09/24 18:42:42 fetching corpus: 3200, signal 169334/209453 (executing program) 2022/09/24 18:42:42 fetching corpus: 3250, signal 170322/210531 (executing program) 2022/09/24 18:42:43 fetching corpus: 3300, signal 171223/211570 (executing program) 2022/09/24 18:42:43 fetching corpus: 3350, signal 172417/212733 (executing program) 2022/09/24 18:42:43 fetching corpus: 3400, signal 173771/213915 (executing program) 2022/09/24 18:42:43 fetching corpus: 3450, signal 174182/214671 (executing program) 2022/09/24 18:42:43 fetching corpus: 3500, signal 174828/215601 (executing program) 2022/09/24 18:42:43 fetching corpus: 3550, signal 176074/216695 (executing program) 2022/09/24 18:42:43 fetching corpus: 3600, signal 176934/217631 (executing program) 2022/09/24 18:42:43 fetching corpus: 3650, signal 177875/218590 (executing program) 2022/09/24 18:42:43 fetching corpus: 3700, signal 178544/219401 (executing program) 2022/09/24 18:42:44 fetching corpus: 3750, signal 180333/220712 (executing program) 2022/09/24 18:42:44 fetching corpus: 3800, signal 181520/221685 (executing program) 2022/09/24 18:42:44 fetching corpus: 3850, signal 182039/222428 (executing program) 2022/09/24 18:42:44 fetching corpus: 3900, signal 182861/223315 (executing program) 2022/09/24 18:42:44 fetching corpus: 3950, signal 183445/224029 (executing program) 2022/09/24 18:42:44 fetching corpus: 4000, signal 184356/224833 (executing program) 2022/09/24 18:42:44 fetching corpus: 4050, signal 185112/225639 (executing program) 2022/09/24 18:42:45 fetching corpus: 4100, signal 186456/226589 (executing program) 2022/09/24 18:42:45 fetching corpus: 4150, signal 187042/227275 (executing program) 2022/09/24 18:42:45 fetching corpus: 4200, signal 187438/227892 (executing program) 2022/09/24 18:42:45 fetching corpus: 4250, signal 187801/228484 (executing program) 2022/09/24 18:42:45 fetching corpus: 4300, signal 188350/229136 (executing program) 2022/09/24 18:42:45 fetching corpus: 4350, signal 189231/229925 (executing program) 2022/09/24 18:42:45 fetching corpus: 4400, signal 189816/230553 (executing program) 2022/09/24 18:42:45 fetching corpus: 4450, signal 190838/231283 (executing program) 2022/09/24 18:42:45 fetching corpus: 4500, signal 191832/231973 (executing program) 2022/09/24 18:42:45 fetching corpus: 4550, signal 192448/232621 (executing program) 2022/09/24 18:42:46 fetching corpus: 4600, signal 192719/233092 (executing program) 2022/09/24 18:42:46 fetching corpus: 4650, signal 193142/233628 (executing program) 2022/09/24 18:42:46 fetching corpus: 4700, signal 193957/234232 (executing program) 2022/09/24 18:42:46 fetching corpus: 4750, signal 194518/234787 (executing program) 2022/09/24 18:42:46 fetching corpus: 4800, signal 195172/235432 (executing program) 2022/09/24 18:42:46 fetching corpus: 4850, signal 195943/236022 (executing program) 2022/09/24 18:42:46 fetching corpus: 4900, signal 196897/236699 (executing program) 2022/09/24 18:42:46 fetching corpus: 4950, signal 197506/237222 (executing program) 2022/09/24 18:42:47 fetching corpus: 5000, signal 197855/237729 (executing program) 2022/09/24 18:42:47 fetching corpus: 5050, signal 198474/238250 (executing program) 2022/09/24 18:42:47 fetching corpus: 5100, signal 198961/238760 (executing program) 2022/09/24 18:42:47 fetching corpus: 5150, signal 199524/239263 (executing program) 2022/09/24 18:42:47 fetching corpus: 5200, signal 199880/239725 (executing program) 2022/09/24 18:42:47 fetching corpus: 5250, signal 200568/240199 (executing program) 2022/09/24 18:42:47 fetching corpus: 5300, signal 202001/240806 (executing program) 2022/09/24 18:42:47 fetching corpus: 5350, signal 202428/241231 (executing program) 2022/09/24 18:42:47 fetching corpus: 5400, signal 203288/241714 (executing program) 2022/09/24 18:42:48 fetching corpus: 5450, signal 203591/242117 (executing program) 2022/09/24 18:42:48 fetching corpus: 5500, signal 204247/242547 (executing program) 2022/09/24 18:42:48 fetching corpus: 5550, signal 204642/242953 (executing program) 2022/09/24 18:42:48 fetching corpus: 5600, signal 205326/243334 (executing program) 2022/09/24 18:42:48 fetching corpus: 5650, signal 205729/243693 (executing program) 2022/09/24 18:42:48 fetching corpus: 5700, signal 206137/244046 (executing program) 2022/09/24 18:42:48 fetching corpus: 5750, signal 206953/244420 (executing program) 2022/09/24 18:42:48 fetching corpus: 5800, signal 207447/244728 (executing program) 2022/09/24 18:42:48 fetching corpus: 5850, signal 208074/245097 (executing program) 2022/09/24 18:42:49 fetching corpus: 5900, signal 208532/245379 (executing program) 2022/09/24 18:42:49 fetching corpus: 5950, signal 209297/245695 (executing program) 2022/09/24 18:42:49 fetching corpus: 6000, signal 209686/246007 (executing program) 2022/09/24 18:42:49 fetching corpus: 6050, signal 210245/246322 (executing program) 2022/09/24 18:42:49 fetching corpus: 6100, signal 210611/246419 (executing program) 2022/09/24 18:42:49 fetching corpus: 6150, signal 211099/246419 (executing program) 2022/09/24 18:42:49 fetching corpus: 6200, signal 212320/246421 (executing program) 2022/09/24 18:42:49 fetching corpus: 6250, signal 213127/246424 (executing program) 2022/09/24 18:42:50 fetching corpus: 6300, signal 213680/246427 (executing program) 2022/09/24 18:42:50 fetching corpus: 6350, signal 214260/246427 (executing program) 2022/09/24 18:42:50 fetching corpus: 6400, signal 214691/246428 (executing program) 2022/09/24 18:42:50 fetching corpus: 6429, signal 215004/246430 (executing program) 2022/09/24 18:42:50 fetching corpus: 6429, signal 215004/246430 (executing program) 2022/09/24 18:42:53 starting 8 fuzzer processes 18:42:53 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x63}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x59, 0xa4d]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x310}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x851113a9}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000054}, 0x4004010) fsetxattr(r0, &(0x7f00000001c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000200)='\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6tnl0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'erspan0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bc37b35eebf809183fe9f270944715a157cfb3a4916bfbcd"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x20010040}, 0x4004000) r3 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x484bc0, 0x18) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000a80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400880}, 0xc, &(0x7f0000000a40)={&(0x7f0000000440)={0x5e0, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe8, 0x35}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4bc1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x360}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1377}, @NL80211_ATTR_FRAME={0x11c, 0x33, @probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @broadcast, @broadcast, @random="f5c709b4368c", {0x5, 0x73e}}, @ver_80211n={0x0, 0x5, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x62, "867d952612a4c26c56ba2fe9d711d6c4e9a5c92b685d814605759d0a7a7192ea7b529c1a3ec32ed84d064056b7fbaa5ef77ccf750eaca64b7fd1349edae0f7feccb7cda02897cf5a51463bd99127454df998dfad9b33ef73705c429ace38e15427fa"}, {0xdd, 0x8e, "ab5a5f4bbd6ca25b07343cbf417b3bda0ec61ef2876856c18f866fbdd615ccbfc1b7d2e7dfd2ae4c933ba9e6ad82e0f61b29c4dc02268efeff4a4a96fe1a31a04f37b5ce67b931da18ee2938428d81652b584d919abe0bb980ca24694157edd021f4207feae7804607cdd58b6cc87f09c1bbc2e829019b2e1d625ce07151ac51a9facf8d3ae30369a83ea9e809a6"}]}}, @NL80211_ATTR_FRAME={0x446, 0x33, @probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x424f}, @device_a, @device_a, @initial, {0x8, 0x3f}}, 0x5, @random=0x3ff, 0xa00, @val={0x0, 0x1f, @random="41ff1ca914f8901610f7e3678ede86b9520a186e3d594276799e00808ea5e2"}, @void, @void, @val={0x4, 0x6, {0x1f, 0x81, 0x81, 0x5}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x1f, 0x8}}, [{0xdd, 0xcf, "e1109421e67e98102a50f5e93e3caca602f046d892822620234d9166ea1822311bb1a4bfbd0a0255a1dd638bf2e50a0811ad03090eed9d125c1edce20d69306b87807a7739768a00f4f7b5d0b6c5b9e859895e66f1f0cce3dacca18457f796132ea78577f625cb030f97c415cdbc2666cef9fddd265fb7dfea33e586143d799b3516a1cd185bcc1edd7ce318c733f422520fa400865b95d395255da80cee40cd499fdb96cf1476c4d6d89d8b43c2ece460129bf7894ab629baedc811d682d87c9f7baebffc34736583a1fbf008b753"}, {0xdd, 0xa9, "df42914f6331fbe591e73dc1c32e913df823b9a3a11d69e73f5681924af86ffd3e47be1097f74d083f4d8e2ba773dff0a97d5ef7d4d71e31f4d4cf3382e6084eb3ef281bbb5752a68cd0f8045a9e2d6a46076819f1e3f6391a5127a1ea0a10ee60f052f9b4e80324bd59a71ba9e70b383c010959383410764f7d31451fffd241b25590279fc34382781bfb0e124a83189517e7bb14352532b972a64c1815fe1528cc7fc4fb576fd716"}, {0xdd, 0x3b, "7e0e90cf942cfb88bc98513ce0362f0f0d07d5181a0b765605b42784ef13d796f1634993f3a81786c96cae11c71eb2a6c9ae215c20fa890cecf97b"}, {0xdd, 0xef, "e7474d6ac277ca7f2f12ea81af7b0d3ebc6da6fa625b2ca444c85ff9e54c8f83203d762bf07df6fbeca547f4470bdd744ecba04ae8e4471191f7fce393e3863fd60f372ca98f76b238fe25bb94f58140df04558517237b4b064927d9b8d0767d4e9068397093e358f4619ad1732b36a749a7c563f87643f1aab9cb0c832523dc40cecbac70c6852b3a50addd7bb57ff98dab9e57f5b95f5281b87d334e2e9928a0cc90000f666298d32838ca13386cb757a8b4153ac9f1279a0ddb3883b798a48bc97e34c6a2d4e5d781199d34d36308b4e29190bc93d9a319989b18b72e1eee9f607a9587509054810156f9acdd55"}, {0xdd, 0x94, "7f4beda7f9e498e46aa4384f951f1648baf756a7d317205510fb90400e87180dae1c63c055f0dee6f2d5b59401227b3608db10042845ff10e63d76c86556b61460c83a957e7c568179dd19a5b4ea638f99eae9c47b172508bbd2bb316eca02c3f4973e4486fffcef27e0a85c0757c3b880f400c6e2777f7aaeab7ab4c07e35a19fa5304fd674a8579295b7041274690cd657a0f1"}, {0xdd, 0xa2, "4bd735f4c37ba56e8ac63ba9af0d433bd247fbe6ba020d24341e7d479e36be4955909c654203685b22b3984fc3558bb38e808b70a00964bcb147e27f80d159418cf1d2719d08bf4575d38f22269327df8b6a1dc1f12d0a245dc99cc9f895e2fd51cdab8e06ab5034be5f4dd639a5207b21c5997b24f850b4ecda036382bfe0a0ad1a8fd7f2c23c6b2e5db80d7e7353db1bac80d3a60fe510961c3fecf8ec50799a7f"}]}}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b2e34f2d6a263fdf7394f70937e1bcaccd8f22274bc31af04cdaa09479613f0a"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x48000) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0x3f7, 0x0, 0x70bd29, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x40044) ioctl$FITHAW(r0, 0xc0045878) openat$vcs(0xffffffffffffff9c, &(0x7f0000000d40), 0x20800, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000d80), 0x0, 0x30c00) sendmsg$AUDIT_GET(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x10, 0x3e8, 0x800, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x890}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000f00), &(0x7f0000000f40)=0x8) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000fc0)='ns/ipc\x00') fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000f80)='@\x00', 0x0, r7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000)='net/ip_vs_stats\x00') 18:42:53 executing program 1: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'geneve0\x00', {0x20}, 0x4}) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffffff9, 0x121083) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9, 0xff, 0x95, 0xe7, 0x0, 0x7, 0xc0c15, 0x7, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3d30, 0xaad}, 0xa0, 0x6, 0x0, 0x7, 0x3, 0x6, 0x5, 0x0, 0xcb, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x101200, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0x40) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], 0x9) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000001c0)={0x17, 0x38, 0x2, 0xc, 0xa, 0x2, 0x1, 0x32, 0x1}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000200)={0x6, 'syzkaller1\x00', {0x6c}, 0xffc0}) r5 = syz_open_dev$vcsu(&(0x7f0000000240), 0x4, 0x680040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000280)={0x1, 0x0, {0x0, 0x0, 0x3, 0x3, 0x1}, 0x8000}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0xe81, 0x0) r7 = syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x1, 0x9, &(0x7f0000001840)=[{&(0x7f00000003c0)="95e19398676813f1df9ff7dfb7ac68c61cd93e72054c2d0f604523eff99338a2df", 0x21}, {&(0x7f0000000400)="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", 0x1000, 0x9}, {&(0x7f0000001400)="a19c08d0bf13cd7bb991", 0xa, 0x200}, {&(0x7f0000001440)="536cec3f26efbf13c9458aad6cd5dc01e4bde8c10f5118613b6437c7a570402c4a72433f22a48317f5cee3164da10bfde5f5a1a31069f624204a61892ac8ec17bbc0a7f65b5c7dfc8a3d99bba503b9aadb94d4c7c8b7e0a4bd3aac62af44be7b0b284cb8d3fab3aec0536b8a5549306124070e353259972e91e14a8239a70e77f903e9b304658d49b1a67fe516537a9ccd9141a9", 0x94, 0x8}, {&(0x7f0000001500)="7ec8eb4bd5386066b6e0197c9040a67ca7dcbee04fa9f466840cb11d66317132c5f8105ef65ee07f0205fbf3ef2df4dd08d8d816feb9e2e870ffe6b0d372860cf20d77f040244608d2968d7b8aff38466aa92e026d019f5e5689c3e656090b765bde275406bc43b3e62037376d7342cc87618e9a4bfa347897733b3b1bf4d4e0c615d35f7ead505c25c4cfa2c6d70043e9039e3ac949ce03", 0x98, 0x3}, {&(0x7f00000015c0)="d2d8695c33127694560be2e81917ffd7e30b6b67d26466113aaa2c07e03fdea9a6442987a368942fba338aa97049590de56cb62394927341a1379ed71c2624058feb8fdacb5526f2485de24777b3b5426662422a4d0129d13739512e8f31ebaf2cb5edcc0b2030136c1c75f954113391df309b9aa2f2352765e6583d6c17d426f5c35854bebdbb8efa3a103f250b392fdb23f45335065c2a1c42db629848542a5338d7a937a02f18c4c384635d5a233fc4580d04f3392d2d569c92c1eba3f7a5d2b1fcc772add7b147df93f535af1872d220fb96220f682b14ac06700ac8694d5236fac6e0462a528df74de27b8b1f6ba91c2e7ca81390a688b692783b", 0xfd, 0x5}, {&(0x7f00000016c0)="19d789278d928a75904f882df6dd7a056504d18a62d1c4740651a016f0de619ffc26d05350609aeb1aa9846956121a058988257df1c985a30bacad91d58addf650df05b781c4dc21ee12f5071cdd8c9bd8b14bc89558c6d96b97fe17cb912a2f4108c2d1c79296ce2a1a6e856bd1b9a677e7b505da34d3569e114bdff38e755a16ad1a81e038e00cec2d6b40b04b0c88b5e2c4cac42d94a86db6ed84b114ca02cb2e0a45de21a869ab49eed410698b5246053171c17931c0", 0xb8, 0x1}, {&(0x7f0000001780)="58d92c9a94e437b50e522b49734caf6fdc171ba13e355490b05b67214a38cb30598d81efe72d19a7fa5f37bc47552a0e11c4992913c28dddfdb5ed112b5db6941ebccc59", 0x44, 0x1}, {&(0x7f0000001800)="34dae51e1d5d251b76e77d175671cc9a5aff89d404ce0b214785708209fce17a936c9e526dfbebf65a49eac49bd6060e7d652f6ce67a8436d882a2", 0x3b, 0x1}], 0x2001, &(0x7f0000001940)={[{@session={'session', 0x3d, 0x2b}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, '/dev/vcsa#\x00'}}, {@hash}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '-/'}}, {@appraise_type}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) fsync(r8) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a40), 0x800, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r9, 0x5000940e, &(0x7f0000001a80)={{}, "23f854e6f33f1704f4ff417e304f389b97f91a8afd36977277189d8e377386d1522e85ec5a27e64b0f54ff7b3d74222626513f36a4032d9ad2a99c784693b5bc9596fc6e2d1f6560e9ab0c2a097c3f42b361107f2dd446b1f3b1edd746f03b58d82dd5846bbb8858eafab0340be02fb1f9e0068be2e68f0afdccbec6100d8c20e40c2d1f846a27dd744d5b3276f313c44bc7e6a398184d421549e84038a61661267a27825de88e8d14dc6038342ed522fd5e22e0d59142ef49c03b9b6c9c6c329fd305a45b8b9fc47fd8a87398ec4732918160c084d6f52364fb6a5c15e0b42092721a28e599e2e434890739bd08e8f14e89f5ba29a002e9f241718096a0fe0f27174fd8b8dafd8928a46b65ee80e0a3593ac4e511228020c6c6c7d415fe7a52091d64ec43a3ad7e277cf2d2618e11981c31221461b53d94669135385b4961509167018a432cb8105e9d6dca0cee016caa194710382fea946a2f8a2dd2732789318871790a7f1a4be364736709070fd8fe94eb62c8c395b5f37edee7ea19325afb6d2db5fbbffeabac3b011257c169f3412f45f84fdef7a8cd5c7b74d971524a81921d11b2a9dce66b290b751e365c047251d7de167ca55ae7ad557f7b42311057d84341fe32b65d65313d53f2dd68068d9f5cdaa92996c00c05492b7c94cec2c6fe1fb32d80c2eb7eaee52ff8ebe7c29df8a1870e5f1d18bdb72bbdd3e572cc9e4003cee341609b97fb24985b79b7a41feff8d51279884ccfca77e3a6ce714c133b5dfbde0fb6293ac241bb6e8c0c83161ee8f945a0b2b99597b457afa62e0ab74c7dccc66ba2c784224ab448597b71838c9341b01b0a95e66bc4143f184a2464feff3b505034df93abaeba7d0a0ebf824c126eafa2f1916481f2abda8fd8610683814689af0ea409f3f91b5b0d4059ac3aa4d2b82959d15548b448a60d7dfe8a3e9d7217b53ee154d98684f019b306ab91114ae5f85bd09859005266598e353247d642999ed58f5497e2615faaf32bf15d6326288e3cb32924f74d607efe4d13babee044d1070b0e6737bf1e8f591989aca1b8cc7bc3d83466ef1ed60f4c0d3cc57aff709ced32f51def5feca808702ac120d95f2630aa5cd2979035c7ac577724935360b13e0824783e0fd0ee0002cd74fce1d2d3331b24a41f579c22ac9ff63146cd922785e7429dd1725f98987c93ad07a66cc8559509f6a2e0544768a389d2654b1cada5333951d1b29420bca35f29e3115ed170fba55b80c3b9f75d18dce73956125d20190e56535439ec27f5932897e3fbc64474353f2b5565bd5dd2c0aec5e7ff7139b86ec213c137a7792717d14ed5a20249a810df0759f818a2e58f1d0b1cc900443f350cc1095a76318dc91ea99f062f53c80e337ecd7b9205ee981f135ee52639e8ef2b364f0fc972407c58b30ebe3c79d46789dc113171dadaaca6bd5362a8612f0140db0d543213bf5f14a4907b15f6d5e04b9d6ba21eb95f486e021f0b158496db9926896e9dcd3af6d3fe3d7df7724a0e6da3baa49eb0c600ed27296194bfb1c90ad4184283e5499797b8542db040429e6d5ba557d26437bc977bebe8cd64ed912d8ffd5a0cec879281a877c5a5f975feb1357881066cd0dfbc25c22014faabbee717ee4fc57b7436c5e07ef6c516b6b1c2ae03fb68f7df4210f45d4f9e8ec89780f374aee12ee05f54f075030906202332d752da81ccde26170d9e26d7e2dd54bf9a846406d82531a18cbbbfbb92a8c128b79c9932d838104b64334e15d35dbb074edadabbebb2293cf1cb873ef78e31a374dd5c8cc8fc7e19cbcac3fd1eceaeed0ecd2be478866bbdf1a24cbd79fa8802934267e367450735573d2e50a54b6cc2acfd169549abbcac942aad47c9aebad3e786086cebe1f4b5b4430e840280b2452dc24afdb83a73a2a5f4a4246cf317b828aa278f90220f119629f11be235608ecd474e5f438ff8dd70da121977c1c028bec4c5076363ac26d5082803ad1eed3cc0056782083944db9df795542f1e4fdd3eb310fb6571a57d9372a67bad585382350e9c93e58a8c49b76126a43398bf396148bb1784b7b3c4a00c22a93d4071f5e56c7296252b080a286b6f96d28738d482537bc21eb40c6af79e18dfd4a0ff147df189c1276b61a72f5ffa938a099ce75db497378dac60ee24f03dc1f665514464ac85d6b4dfcecdef6ecd0da52eaeb54706e6cec907a376dabaa291fdae07490bedb898703163b1d45e6d8219b37eeb90278f1b84e2cacf0a7951e730b8daf122f6507aad6739a7c372808859690a8f575e3325d764e130f5089d06536e34f3c67cdc3b4eef37b3a1123ee8f0c280fdf9706507bf8bfdfbfc7bf097b0535ae6b22c6293415a37ab6452009b4ebb8c91f765a3174909276c05ff8c5505f92824f68137f645fc085ed2c022e6be4cc6ae278de101cba2210835a02f8b91c5c64e37bc54a79f17395b3b65b11c1e3bf1a76d6772de6704e72dcc497f6a42906f50c3d219f636557aece9ee632e958563ae18785980a1697c56057efe885c2189905b0c95c618ec00506428fa44e21a9828973e2d51b4dbf7db6c1545afeafaee483aac0cbef3fba82f319976353abed7bee5a51f90d1807cc8e4237340dfd4bbcdc56ae27bcdae1ebc9b92b84875615c4ece7f8318772b80057287709e570857185c8243acab4322d2d342c51601dc70c7352d5f438055248ef1d063e3335d852dfa1005afb37c389126aac3b9456a26426cbb994d74360febef73d6021b0101ba5342625b52bcabcd60a923f8481db250ce1d10c718550d9f87c3dc051c1eda94f676ed2490c37f92e248b9a74c51ed8413fcc3b80b4c3e0e6464695f3b0b78b2acd4e97b18abdf8525629eaf88916ead04d3ce7e68dbd20d5f8f6a1087e90898bcb40c3e0a2eb333b82c2332211b5aebd81723197dcbb0a05c87d13884540f7e9509d5537dbde52046dcac173723cf709cb66e2a730065a0ce49794ad539d354b06e6647fc3228ac28deb6fe497cbb18815da170272e9d43add954aeaec7a6c0fb545538f845f970733f9416cd05be9f1f43510db34fb9fd8d76d3c3c508267cb4eec6cf75e406f9ed5e537c96b24815548a2c8a917d4c430b7791f472205c4939bc3646b4aeddd25e6ffb306c2690591987673ac033eda1d5fdb077667d1078cdaa585fb74f08afb2c6abcdc89d1cd4045c7dacb08dbe7c0dd2df69faa738a0b07590051243f7a26064ffb71bc79d6f1750ec32844018e484b1b7a4a8b1b6642e3bc9137b703aa5ce8176285c4e9730259db6d7e12c36e9d3e7b7b5f7e76a92a72dbfc231b727ec060ea3ef7375fb7de507e83c5764eab16ac546eea8a6739243b5ada480edec4e8f32780fd038e8ebcd09ef07b178892e2a2667131fd30d17241623b95d287e016ba71d36c847f03dff28a50a13ef206585b9ef7e10bb4df84b2b0145085c7feb9603ab0d819cc70c21d47f9750f1aceb1d619f3351527f0e803705fa38b039e8d5c3c00755ce6f2bc9bcd5ad7235b3505ace0d5238c33eeddc5c33137de206c0e49b14b254d64446a62ceed9b5dcdefa8015a9df2b4eca16e40a0b3028e81fe527d18c24d421e9a45b4ac3043b212fe71537661bb81d81f1b17aac3eef300d788ea8aa00c15b0184823f02e2688810c269aa87934737e28ea612c2469b60be18318d8e0407e56b7d8e6be5ca0e6fc58c506f6ddffbec28a751ce8301e836ea0f140875ce80165378661134158052fa4cdefa4200f8d9d0a4a0d948fa3565ab415a4d58882e7abfe62e4830a1850dc9db883cdfa18ad8c58546d47b22c7f80f664232d126a2e02be9aeb95675456efd4d35104e804754f1777b871b7bca799dd4c9d45fe9b00d6a016c22a82d28d5f3e6c12a716ecefc8f6a7f1ff5cdf26ca52790eee4da57f6625d302d6ae76237df9337b85ed9ba7a52f8356cfc63bdbcd5cb59d492409173641fa110959dae742b2a5cb8c5fe44306b2361919177b319f48d561167d34149769b7819b46c72dcd2e3763f20107dd2d3cf2eda9fba327138c28815775030630be7ea24be72d45addccea10f688ab3f851cf31f70f70d061226f04f2789a6985b3ff73e010741001b6ec0cbac1e7f367a82b33024af85baf8c8ce55239f4e8f09f64256b129266b4e7f281203506f990c6613ed0b6158adfacfe92c2b53178555aa8d2f11d387b2aa792c882079cc16726f9f5b5dd66332bd8c7fae1f1fb92f40be816a8fcdf354a8c8fb31e77fbdbd248f188fdb0555a7d75e8ede613ab5be398f92252a08bd13d12be17f6df595a5eead8932737343e2237697e2c5e076818674ccb4044d556aa7f32cf807e3921182e457a70bce4de85c01ee1cbf1bcdb45c34e0373e04ad67694e5c6463a096803652f7ac2d324e789cb67e8af174e7c2197afb1cb35596106cb9d731f4a29efb7af0f2f655e75af33f049d7735cbaa95e4e166b624ac193cee275e576adfa628890dbaa37df0384e79aa176acc6e7981bafcc1b6128d38967c627355e86ad7301daf08059d4c8ae5847f0db6160a35db179bd1f9b71ad11e394a3e570b27403f2da7791030f90a71c2be82a257a18f208ed980d370dd295e7e9c87c2ae17f88ad4e198c964c4329f95031654ba15fa7ca452d8483061131e825f9a6e80ec127b4380640e47f101cc79135db2a50fd5c18f9d67e0a8b8e1402f5886e6630d3467f901fbe82fcfc7f33f71c78ce1b7f0fd12ee06ffd433a440ce1e2b608b8e175d1edb53d5043170538ffa3c413fbb96f9de678062938f692e0cd36edd64abee3aba4ee6f87f71116cdcc58d69728616031a1b018793035c861e9bbd63757afc15b84572f82ed7c50dca4538c62aac291cc302276e0ff0cc0a32f0e9377b49404d50e9d7617044ff71580477eba519cee31808d4c77771a768b26f90043fc249bbf70aba41f1c521e3452a9a65e0b2c09b7f25e57a1871fa25e083892ec0d7d70aa24209a583f69822264cf1aa62fca70280173749f38b30801fbe1619a429af07e2b73fe3aa890f0ded6c8cc6c298726725d1af75e1cfa4ab46a69c7e2c712648302ef9c4b60beb9fcdae07a6061c3d74267a6c8bb523236fbb3aa3ae0b9f75148d2a7ee2042ada7b9e5dfc8c9a404c51ecb1017dddc144427e7079aa37d56185a76799f3d5d7728ca4a4b634bddb2d75ae8702eb46d4dcb95f09bd954d049799e772c20c55e0ebb9870cb87d7e432e584a987db1fcdb3e2f5b27aa9c66c12c5f6fbbaf54a05e6869c1b17bdaab630b59c74c058bb606556b2b30366c8e441448d30afe29aed264e66d4fe6c5cfea572e9d5ec0deee0a020f0ba481044586db4aa939c8636b50c073cff7ee559c3a58920764f81b33bb8c15849aa2da15392dc5b2891cd5967d70b4002c742c23da05c6a2b4b1f7fe7ba848572cc497ed02d89f0e9fe1e06fec416669c848f31fbc91b421b10269a2e0696a3b5471b5bdffa61255be43d04fe7c3b873d18f5dc4061b19676573af4418485ddb39cb7d79acbb90d150bf496fdf8ebe56dc231eba0d97f0230e4741acb717a1e52b8b1942f2432677aa7032ba0dc71b2b26969f4d3d02a988ee719740f921bad7b26c430b96a04c349d6e82e36d2ecd299869e958fdba0ac6ef1e43e40a8d753d2f8edf869a9ec6a7ae4585fdc8723231b99aa8f2a5472f64d592922c0b5882822ab35b3fcb0010740f57efb6b317cd54446aacb16ea39f4dd1a8d853375bf263b82e699fdd88a97bdfc56960322de519fb8548f3e31c46"}) r10 = socket$inet_icmp(0x2, 0x2, 0x1) preadv2(r10, &(0x7f0000002c00)=[{&(0x7f0000002a80)=""/180, 0xb4}, {&(0x7f0000002b40)=""/150, 0x96}], 0x2, 0xde, 0x96a5, 0x2) 18:42:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:fonts_cache_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x68}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x40}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4008004) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048886}, 0x4000010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r4) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x84) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x1100) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000800)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000840)=0xc) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r7, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240048d4}, 0x20040800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan1\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) 18:42:53 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x188, r0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x9c, 0x2a, [@fast_bss_trans={0x37, 0x82, {0xb9, 0x3, "7323ee0224b0e1698d3762c67124e35b", "220b6d499831e96cada7031d53f70b3669e2ab7b0bcde429f3bf90b0bbeb6f51", "09e5d6841e018c167fc0808e5c5eb83ce1e5cc464baaac1c039f982617b8b4cf", [{0x1, 0x5, "9b42aa543f"}, {0x1, 0x19, "7ff923347b57de0cfc1b2eb9cd4f4877f71b092e8825596159"}, {0x2, 0xc, "8fe4f9bea6fd24f0ea3e7b40"}]}}, @challenge={0x10, 0x1, 0x4f}, @perr={0x84, 0xf, {0xff, 0x1, [@not_ext={{}, @device_b, 0x5, "", 0x2}]}}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0x38, 0x7}}, @random={0x89, 0x8e, "c727deba03642eef17089ebd2877c90a92320effca2712cc71d62867b9cacc7766a41ded1f6f2912e36e591b2175ffc5b4fc21bdc7936bb112e58ea9c912537629dc2ab732e9462c4aa61bf765296a0df34784a355af4c0f0131dfcf216565204400ae8a22595b42ee9ab24fc7987f3187b9625e4bd7ebd8177c365da9e2c133dabb7b226b21a8e06e3c844ebf87"}, @mic={0x8c, 0x18, {0x6e4, "7a7866b335fb", @long="2c8bc6bce1bf1c823e57ebcce9d74d81"}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x53}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x188}}, 0x1) r1 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@x25, &(0x7f0000000340)=0x80, 0x40000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000400)={0x408, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4f, 0x5, "d62cdd7a5fef50bd77180b2e2b979b3d4911e08d295f508b3ddc54f104e85d2396a426e48ac399ed525ad47b3cf56df50df381551f2e95548fba95d2ab22a20522bf38d00a0a67783fb039"}, @ETHTOOL_A_BITSET_BITS={0x18c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x564}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%+@I\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\\/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '![-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!^,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[%#*\'][/\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdd2a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x924}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "1b586893"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffadcd}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "730b2bc1074dda5894891423cd21369d67eb9f866c9f6da3dd05e3dd011f0c0fd966efc1b7718a621e30abb919dfc0bb45a005b0f8f985f4c9103a7f4727ac1b0f0f64f3bcb6ae37e9e0e4afdc42c5bd0b7406cb75865ec0685c8616a0c76b9521638dfd26b351aa1bdaff01f4f34c3afda894d6a28c853ac9f7512074674b94279b84521cd3bc885a9e66bd1479e646c18e3e030f9a4ee88bbbafdd80fa728003e71c7d8845e764cf311f995b45baaf46bdab622bdd20e814b73b34fe5cbce2c9b5d9773794411747b72d6990a0bc180a5eebe606070ff7c2e5d902cb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$:\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8a}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "2d6130b99c2f516d42232e200e35380daa215c11cf12a925938fc1ab35e07d6d76d0481c8953637c14b33c01c2da5a80db496bda0e203bca8502ab46bee9f14a677586c399b45042258b84b097a555f3c34da10a4b5fa6fb10c6370f2017b1a85e5ac423ca5535c7a972d35a4dde6b3b73f712fa6a1a37c3cb86454c0de23a3ece67d14cfc424ebeea09d489264ad368c26206c0021150dbe7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r4, 0x620, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:urandom_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r6, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x777}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004011}, 0x400c0c4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r5, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r6, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x1c}}, 0x40000) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000e40)={&(0x7f0000000d00), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x4c}}, 0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000e80)) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ec0), 0x400143, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x70, r10, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7fffffff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x12707e95}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1ff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r3) [ 80.743518] audit: type=1400 audit(1664044973.452:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:42:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffffffff, 0x6ff}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000080)={0x0, 0x8, [0x1, 0x2, 0x80, 0x43e], &(0x7f0000000040)=[0x0]}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x4, 0x5, 0x1ff, 0xd059, 0x0, "32d5bd859dcfd9d35349ea08f2645c7dc666c3", 0x7fbc, 0x6}) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0xd4, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) r4 = openat$cgroup_subtree(r1, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f00000001c0)={{r0}, 0x0, 0x8, @unused=[0x7fff, 0x3, 0x7, 0x1], @devid}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000011c0)=""/91) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000001240)={0x6, 0x6b56, 0x5, 0xffffffff, 0x7, [{0x9, 0x535, 0x400, '\x00', 0x2080}, {0xcdc, 0xffffffff, 0x5, '\x00', 0x81}, {0x3, 0x2, 0x0, '\x00', 0x8}, {0x9, 0x4, 0xcb, '\x00', 0x1088}, {0x8a, 0x7, 0x4, '\x00', 0x184}, {0x2fb, 0x3, 0x7fffffff}, {0x3, 0x1, 0x8000, '\x00', 0x401}]}) r5 = eventfd2(0xfff, 0x800) r6 = fcntl$getown(r5, 0x9) write(r2, 0xfffffffffffffffc, 0x0) recvmsg$unix(r5, &(0x7f00000017c0)={&(0x7f0000001400)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001480)=""/63, 0x3f}, {&(0x7f00000014c0)=""/208, 0xd0}, {&(0x7f00000015c0)=""/117, 0x75}, {&(0x7f0000001640)=""/101, 0x65}], 0x4, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x2141) r8 = getpgid(r6) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000001800)=r8) ioctl$FICLONE(r3, 0x40049409, r5) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000001840)) ioctl$VT_DISALLOCATE(r3, 0x5608) 18:42:53 executing program 5: r0 = semget(0x2, 0x4, 0x20) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000000)=""/88) r1 = semget(0x2, 0x1, 0x488) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x7, 0x129]) r2 = semget$private(0x0, 0x0, 0x8) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget(0x2, 0x4, 0x405) semctl$GETPID(r3, 0x0, 0xb, &(0x7f00000000c0)=""/159) r4 = semget(0x0, 0x4, 0x400) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = semget(0x0, 0x0, 0x8) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000180)) semctl$SEM_INFO(r4, 0x4, 0x13, &(0x7f00000001c0)=""/231) semtimedop(r2, &(0x7f00000002c0)=[{0x3, 0x94, 0x1000}, {0x2, 0xfff9, 0x1400}], 0x2, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x4, 0x200, 0x800}, {0x0, 0x6, 0x800}, {0x1, 0x3ff, 0x1800}], 0x3, &(0x7f00000003c0)={r6, r7+10000000}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) semtimedop(r5, &(0x7f0000000400)=[{0x3, 0x3, 0x1800}], 0x1, &(0x7f0000000480)={r8, r9+10000000}) semtimedop(r0, &(0x7f00000004c0)=[{0x2, 0x0, 0x1000}, {0x3, 0x8000, 0x3800}, {0x1, 0x7ff, 0x800}, {0x1, 0x8001}, {0x1, 0x7, 0x1800}, {0x0, 0x100, 0x1000}, {0x2, 0x7, 0x1000}, {0x3, 0x7f, 0x2800}, {0x0, 0x8, 0x1000}], 0x9, &(0x7f0000000500)={0x0, 0x3938700}) semtimedop(0x0, &(0x7f0000000540)=[{0x3, 0x2, 0x1800}], 0x1, &(0x7f0000000580)) 18:42:53 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x58}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_USER(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x3ed, 0x200, 0x70bd25, 0x25dfdbfc, "a10786a025e18f2ca292db0cc1cdcdbec141682a6965a0b95331fb4c06b8ba8d6a11109e460f7e40cc9609b452dd927c53c09fc7288cfe559bb33b4936258b77c3b734c59e2a3aba961b9db5e63b08", [""]}, 0x60}, 0x1, 0x0, 0x0, 0x10008004}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x35}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008001) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), r4) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x20008811) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x8013}, 0x40010) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000800)={0x0, 0x2, 0x5, 0x6}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x88, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0xc880}, 0x4004040) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x11c00021}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x31}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x20008081) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x80000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8884}, 0x51) 18:42:53 executing program 7: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x9, 0x8}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x32, 0x4) r1 = mq_open(&(0x7f0000000080)='\x00', 0x40, 0x18a, &(0x7f00000000c0)={0x8, 0x1ddd874d, 0x4, 0x80}) r2 = accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x1c) sendfile(r1, r2, &(0x7f0000000180)=0x80, 0x3) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@routing={0x2e, 0xc, 0x0, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @mcast2]}, 0x68) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000240)="aed86bd48c8c4e40f0c3b84e752646dc590e7a03ed5e9697a96cd34a504005b6b35d712b101dda69fa7da858f947d54f2b16eb534e887a69fef1518eab109ca888016c038ffff7a0edd88d504d0115ab25d5e7ceef0ec4177c51cef616f94e635b4d8bd49e2c7567ca99597fd32e14c84a7daec465a33759067d62d7d64f3af95166cf8e7a7ee8ac6d99c04541a0cf4f9a3204b0d72ceb14f9131696314dfaee48374acd600f0dc92c2294fcd37075a50d27b39fbce0eb8bfcd87f9a5508d2888b2f43ef4455", 0xc6, 0x2, &(0x7f0000000380)={r3, r4+60000000}) futex(&(0x7f00000003c0)=0x1, 0x2, 0x2, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440), 0x2) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000480)=@fragment={0x2e, 0x0, 0x93, 0x0, 0x0, 0x5, 0x67}, 0x8) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x240180, 0x0) write$rfkill(r5, &(0x7f0000000500)={0x1, 0x3, 0x0, 0x0, 0x1}, 0x8) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000540)=0x4, 0x0) flistxattr(r5, &(0x7f0000000580)=""/163, 0xa3) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000640)={0xb6, {{0xa, 0x4e22, 0x5, @mcast1, 0x5}}}, 0x88) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x21c002, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000740)=@fragment={0x2c, 0x0, 0x80, 0x1, 0x0, 0x5, 0x64}, 0x8) sendfile(0xffffffffffffffff, r0, &(0x7f0000000780)=0x3, 0x4) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x40080, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000800)=@routing={0x67, 0x2, 0x3, 0x6, 0x0, [@mcast1]}, 0x18) [ 81.991149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.992856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.994917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.997579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.999590] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.001135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.005234] Bluetooth: hci0: HCI_REQ-0x0c1a [ 82.032532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.053198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.055094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.056566] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.065808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.067093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.067913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.073538] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.074485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.075203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.076484] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.078120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.078829] Bluetooth: hci1: HCI_REQ-0x0c1a [ 82.109733] Bluetooth: hci2: HCI_REQ-0x0c1a [ 82.133262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.135994] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.139251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.140794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.143043] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.144301] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.146620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.148053] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.151234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.156337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.159936] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.161142] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.162477] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.165463] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.166660] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.167982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.169002] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.170153] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.171841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.172888] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.177910] Bluetooth: hci3: HCI_REQ-0x0c1a [ 82.179124] Bluetooth: hci7: HCI_REQ-0x0c1a [ 82.182082] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.182817] Bluetooth: hci5: HCI_REQ-0x0c1a [ 82.220100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.222612] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.235924] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.240778] Bluetooth: hci6: HCI_REQ-0x0c1a [ 84.013136] Bluetooth: hci0: command 0x0409 tx timeout [ 84.140791] Bluetooth: hci2: command 0x0409 tx timeout [ 84.140806] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 84.141999] Bluetooth: hci1: command 0x0409 tx timeout [ 84.204808] Bluetooth: hci7: command 0x0409 tx timeout [ 84.205015] Bluetooth: hci3: command 0x0409 tx timeout [ 84.268129] Bluetooth: hci6: command 0x0409 tx timeout [ 84.269266] Bluetooth: hci5: command 0x0409 tx timeout [ 86.059776] Bluetooth: hci0: command 0x041b tx timeout [ 86.187783] Bluetooth: hci1: command 0x041b tx timeout [ 86.188725] Bluetooth: hci2: command 0x041b tx timeout [ 86.251812] Bluetooth: hci7: command 0x041b tx timeout [ 86.251824] Bluetooth: hci3: command 0x041b tx timeout [ 86.315792] Bluetooth: hci5: command 0x041b tx timeout [ 86.316749] Bluetooth: hci6: command 0x041b tx timeout [ 87.343282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.344403] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.345195] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.347272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.349114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.349903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.352653] Bluetooth: hci4: HCI_REQ-0x0c1a [ 88.107741] Bluetooth: hci0: command 0x040f tx timeout [ 88.235736] Bluetooth: hci1: command 0x040f tx timeout [ 88.235750] Bluetooth: hci2: command 0x040f tx timeout [ 88.299717] Bluetooth: hci3: command 0x040f tx timeout [ 88.300725] Bluetooth: hci7: command 0x040f tx timeout [ 88.363729] Bluetooth: hci5: command 0x040f tx timeout [ 88.365209] Bluetooth: hci6: command 0x040f tx timeout [ 89.388785] Bluetooth: hci4: command 0x0409 tx timeout [ 90.156736] Bluetooth: hci0: command 0x0419 tx timeout [ 90.283759] Bluetooth: hci1: command 0x0419 tx timeout [ 90.284974] Bluetooth: hci2: command 0x0419 tx timeout [ 90.348770] Bluetooth: hci7: command 0x0419 tx timeout [ 90.349151] Bluetooth: hci3: command 0x0419 tx timeout [ 90.411752] Bluetooth: hci6: command 0x0419 tx timeout [ 90.412162] Bluetooth: hci5: command 0x0419 tx timeout [ 91.435725] Bluetooth: hci4: command 0x041b tx timeout [ 93.483722] Bluetooth: hci4: command 0x040f tx timeout [ 95.532793] Bluetooth: hci4: command 0x0419 tx timeout 18:43:45 executing program 7: r0 = syz_io_uring_setup(0x51d6, &(0x7f0000000080)={0x0, 0x58a6, 0x0, 0x2, 0x3d7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x40010, r0, 0x10000000) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "55fd37a00bc6364a", "6652f53e727a0c0bfd7d235f442fe88792df0706e68bb5da2b5de5372eb18466", "8b6aca45", "c520804d8f0836cb"}, 0x38) r2 = fork() r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r0, 0x10000000) r4 = syz_io_uring_setup(0x5e73, &(0x7f0000000000)={0x0, 0x6b85, 0x8, 0x2, 0x1c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x7, 0x0, 0x7, 0x0, 0x0, {0x0, r6}}, 0x6) r7 = getuid() r8 = dup2(r4, r4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f00000002c0)) fcntl$dupfd(r8, 0x406, r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368657461010000002c6361f4fa657461673d2c657569643e50e167dadc8013cff68ff0e966579e701202129634ea29adf5157a95007f8a3eab5595c4e1caa34e2d09ca6aca325d622b64c2c184b6cc9ae2b17ce10578c0c236fa2440ce3c7ad2dfb3f1543c066cf4e2ab8e6bdc43e6620e0a8e75b346de22d7cb260f76f12f296e431a2c50eb91f718e66d653873767025d1b76405f2a89ada649a4ff5fc571c990d9abcb070ee1f42dd4651f8fb5f9391a157e70309beb583b0fa05c9f246d797c18e555d5e515d0c000000", @ANYRESDEC=r7, @ANYBLOB=',fsmagic=0x0000000000000cf2,subj_user=@{){-^,,uid=', @ANYRESDEC=r7, @ANYBLOB=',\x00']) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0xab514281c75c2eb6, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r6}}, 0x10000) socketpair(0x1f, 0x800, 0x9, &(0x7f0000000500)={0xffffffffffffffff}) syz_io_uring_setup(0x4920, &(0x7f0000000000)={0x0, 0x952b, 0x10, 0x1, 0x2e9, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) move_pages(r2, 0x5, &(0x7f00000021c0)=[&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000002200)=[0xb576, 0x7ba5, 0x7, 0x10001], &(0x7f0000002240)=[0x0, 0x0, 0x0], 0x0) getsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000540)=""/4096, &(0x7f0000000240)=0x1000) 18:43:46 executing program 7: r0 = syz_io_uring_setup(0xdae, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x7fffdf003000, 0x0, 0x4002012, r0, 0x10000000) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xffffffffffffbe9c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x7ffc}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000540)=""/23, 0x17}], 0x1, 0x3ff, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4046) move_pages(0xffffffffffffffff, 0x9, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000140)=[0x1000], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 18:43:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c00000065ffff"], 0x13) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:43:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x102) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) write$P9_RWSTAT(r1, &(0x7f0000000380)={0x7, 0x7f, 0x5}, 0x7) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x20000190, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x80000, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0xec62, 0x0, 0x0, 0x8}, 0x0, 0xff7ffffffffffffc, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x4202402, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,appraise,obj_user=^,dont_appraise,euid<', @ANYRESDEC=0xee01, @ANYBLOB="2c1ac587813e95c81fa7cd62cee12f3900ba62ca87fb1ecea357fb0d4d84b3fe581ff63e6c805409792d15cdce83ac2541206d5f3e"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x153) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) [ 133.936543] loop7: detected capacity change from 0 to 264192 18:43:46 executing program 4: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x0) r1 = memfd_create(&(0x7f0000002800)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1,\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\x06\x00\xff\x1a\x8e\xe2ae\x1e=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae\xc0\xa6d\x12\'y\x11Zcu\xe7\xc4{\\0Y[\xdf\x96\xbf\x97\xa7CS\xfe$\xeb\xac\x9a\xa9\x7f\x85G\xa2\xc8mt\x8fs-\xae\xc6\xd4\x8a|I\xe3\xfe\x04%\x1b\xd8F\xa9\x9f\x96?L\xb7MGE\xbf\x1b\xf8\t\f_\xa0j\x9e\xadM\xa4\xc8\xba\xdc\xabzO8\xeb#\xdc\x1e\v_\v\xc0\xbc\\r`\x8b\x11z\xbb\x89$\xe9t\x8c+6l\f\xd0\x0e\xd0K\x16C\xc8ty\x97\x8ev\x15\xe6\x8a\xc4p\xeb\xe5!\xcfS\x95\xe6\xfa\xb4+C\xc3\x01I\x1f\xea\xc27\xff\x9c\x13\xeed\xed8\xbfR\x01&\xe0@Y\xc9\xe6GL\xd5?\x03', 0x0) ftruncate(r1, 0x2000000) r2 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x7fffdf003000, 0x0, 0x4002012, r2, 0x10000000) r4 = syz_io_uring_setup(0x2d93, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000004c0)) syz_io_uring_setup(0x400001, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) pwrite64(r0, &(0x7f0000000300)="d3d201c5c360d0114c92e086b3c24d8f62da237dc9cdec304d85ec", 0x1b, 0x100000001) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1b2e6, 0x0, 0x0, 0x1}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x7fffdf003000, 0x0, 0x4002012, r4, 0x10000000) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.pending_reads\x00', 0x4a6000, 0x40) syz_io_uring_submit(r5, 0x0, &(0x7f0000000340)=@IORING_OP_NOP={0x0, 0x4}, 0xff) sendfile(r2, r7, 0x0, 0xffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x7, 0x0, 0x7}, 0x6) r8 = getuid() mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2800, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '$]'}}, {@cachetag}], [{@euid_gt={'euid>', r8}}, {@fsmagic={'fsmagic', 0x3d, 0xcf2}}, {@subj_user={'subj_user', 0x3d, '@{){-^,'}}, {@uid_eq={'uid', 0x3d, r8}}]}}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_WRITE={0x17, 0x4, 0x2007, @fd=r0, 0x9, &(0x7f00000003c0)="2edc33fffc6d49c9115b3a551c1404416eea2ef24a3db57cf6a06477d4812e443aac803cc26bb17dc561ea487957cc5d592b36ac8f8072037abb9f048b2a378afc1f56b51842164e03d850c25a0ce9f502e19e00aadb262b380424a1bb9409b487438259faa1e739abd978e92c6042bd31831553951b1d2d93ac942dee01576b5fb709ae14099fb2d4b632f2dffa05dda72858910b249042ca5fe18743e0f6c25fc285b16e87c53ec28fd5214f980da00cca5eb9aacf", 0xb6, 0x14}, 0xffffffc1) lseek(r0, 0x0, 0x4) [ 134.095233] audit: type=1400 audit(1664045026.804:7): avc: denied { open } for pid=3882 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.098235] audit: type=1400 audit(1664045026.804:8): avc: denied { kernel } for pid=3882 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 18:43:46 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000000c0)={0x8, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1, 0x1, [{{0x2, 0x4e22, @multicast2}}]}, 0x110) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x13c) r1 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x7fffdf003000, 0x0, 0x4002012, r1, 0x10000000) r3 = dup3(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2c28, &(0x7f0000000280)={0x0, 0x68e6, 0x1, 0x0, 0x1bb, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) fdatasync(r1) syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) r6 = syz_io_uring_setup(0x5e73, &(0x7f0000000000)={0x0, 0x6b85, 0x8, 0x2, 0x1c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x7, 0x0, 0x7, 0x0, 0x0, {0x0, r8}}, 0x6) r9 = getuid() mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2800, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '$]'}}, {@cachetag}], [{@euid_gt={'euid>', r9}}, {@fsmagic={'fsmagic', 0x3d, 0xcf2}}, {@subj_user={'subj_user', 0x3d, '@{){-^,'}}, {@uid_eq={'uid', 0x3d, r9}}]}}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(r4, r2, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x8, &(0x7f00000003c0), 0x1, 0x1, 0x0, {0x0, r8}}, 0x7) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000240)=0x2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x200000c0) [ 134.403648] loop1: detected capacity change from 0 to 8 18:43:47 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x8, 0x0, 0x81, 0x0, 0x8, 0x49000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x100000000, 0x7}, 0x144, 0x5, 0x20, 0x4, 0x0, 0xff, 0x3, 0x0, 0x7}, r0, 0x5, 0xffffffffffffffff, 0xd) ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) [ 134.481571] loop1: detected capacity change from 0 to 8 18:43:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18b442, 0xc) pipe(0x0) llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001) mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340)) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20) write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x7fffffff) [ 134.624148] loop3: detected capacity change from 0 to 256 [ 134.660293] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 134.720047] ------------[ cut here ]------------ [ 134.720082] [ 134.720087] ====================================================== [ 134.720093] WARNING: possible circular locking dependency detected [ 134.720099] 6.0.0-rc6-next-20220923 #1 Not tainted [ 134.720111] ------------------------------------------------------ [ 134.720117] syz-executor.3/3926 is trying to acquire lock: [ 134.720128] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 134.720193] [ 134.720193] but task is already holding lock: [ 134.720198] ffff88800eda6020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.720249] [ 134.720249] which lock already depends on the new lock. [ 134.720249] [ 134.720254] [ 134.720254] the existing dependency chain (in reverse order) is: [ 134.720260] [ 134.720260] -> #3 (&ctx->lock){....}-{2:2}: [ 134.720285] _raw_spin_lock+0x2a/0x40 [ 134.720319] __perf_event_task_sched_out+0x53b/0x18d0 [ 134.720342] __schedule+0xedd/0x2470 [ 134.720367] schedule+0xda/0x1b0 [ 134.720390] futex_wait_queue+0xf5/0x1e0 [ 134.720411] futex_wait+0x28e/0x690 [ 134.720430] do_futex+0x2ff/0x380 [ 134.720447] __x64_sys_futex+0x1c6/0x4d0 [ 134.720465] do_syscall_64+0x3b/0x90 [ 134.720495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.720518] [ 134.720518] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 134.720542] _raw_spin_lock_nested+0x30/0x40 [ 134.720599] raw_spin_rq_lock_nested+0x1e/0x30 [ 134.720623] task_fork_fair+0x63/0x4d0 [ 134.720653] sched_cgroup_fork+0x3d0/0x540 [ 134.720678] copy_process+0x4183/0x6e20 [ 134.720697] kernel_clone+0xe7/0x890 [ 134.720714] user_mode_thread+0xad/0xf0 [ 134.720733] rest_init+0x24/0x250 [ 134.720753] arch_call_rest_init+0xf/0x14 [ 134.720784] start_kernel+0x4c1/0x4e6 [ 134.720812] secondary_startup_64_no_verify+0xe0/0xeb [ 134.720837] [ 134.720837] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 134.720862] _raw_spin_lock_irqsave+0x39/0x60 [ 134.720895] try_to_wake_up+0xab/0x1930 [ 134.720919] up+0x75/0xb0 [ 134.720944] __up_console_sem+0x6e/0x80 [ 134.720972] console_unlock+0x46a/0x590 [ 134.721001] do_con_write+0xc05/0x1d50 [ 134.721022] con_write+0x21/0x40 [ 134.721040] n_tty_write+0x4d4/0xfe0 [ 134.721064] file_tty_write.constprop.0+0x49c/0x8f0 [ 134.721088] vfs_write+0x9c3/0xd90 [ 134.721120] ksys_write+0x127/0x250 [ 134.721151] do_syscall_64+0x3b/0x90 [ 134.721180] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.721203] [ 134.721203] -> #0 ((console_sem).lock){....}-{2:2}: [ 134.721228] __lock_acquire+0x2a02/0x5e70 [ 134.721258] lock_acquire+0x1a2/0x530 [ 134.721287] _raw_spin_lock_irqsave+0x39/0x60 [ 134.721320] down_trylock+0xe/0x70 [ 134.721347] __down_trylock_console_sem+0x3b/0xd0 [ 134.721376] vprintk_emit+0x16b/0x560 [ 134.721405] vprintk+0x84/0xa0 [ 134.721434] _printk+0xba/0xf1 [ 134.721453] report_bug.cold+0x72/0xab [ 134.721482] handle_bug+0x3c/0x70 [ 134.721512] exc_invalid_op+0x14/0x50 [ 134.721542] asm_exc_invalid_op+0x16/0x20 [ 134.721562] group_sched_out.part.0+0x2c7/0x460 [ 134.721582] ctx_sched_out+0x8f1/0xc10 [ 134.721601] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.721623] __schedule+0xedd/0x2470 [ 134.721647] schedule+0xda/0x1b0 [ 134.721671] futex_wait_queue+0xf5/0x1e0 [ 134.721690] futex_wait+0x28e/0x690 [ 134.721708] do_futex+0x2ff/0x380 [ 134.721725] __x64_sys_futex+0x1c6/0x4d0 [ 134.721743] do_syscall_64+0x3b/0x90 [ 134.721773] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.721795] [ 134.721795] other info that might help us debug this: [ 134.721795] [ 134.721800] Chain exists of: [ 134.721800] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 134.721800] [ 134.721827] Possible unsafe locking scenario: [ 134.721827] [ 134.721831] CPU0 CPU1 [ 134.721836] ---- ---- [ 134.721840] lock(&ctx->lock); [ 134.721850] lock(&rq->__lock); [ 134.721862] lock(&ctx->lock); [ 134.721873] lock((console_sem).lock); [ 134.721884] [ 134.721884] *** DEADLOCK *** [ 134.721884] [ 134.721887] 2 locks held by syz-executor.3/3926: [ 134.721900] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 134.721953] #1: ffff88800eda6020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.722003] [ 134.722003] stack backtrace: [ 134.722008] CPU: 1 PID: 3926 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220923 #1 [ 134.722031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.722045] Call Trace: [ 134.722051] [ 134.722057] dump_stack_lvl+0x8b/0xb3 [ 134.722090] check_noncircular+0x263/0x2e0 [ 134.722120] ? format_decode+0x26c/0xb50 [ 134.722149] ? print_circular_bug+0x450/0x450 [ 134.722180] ? enable_ptr_key_workfn+0x20/0x20 [ 134.722207] ? __lockdep_reset_lock+0x180/0x180 [ 134.722238] ? format_decode+0x26c/0xb50 [ 134.722269] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 134.722301] __lock_acquire+0x2a02/0x5e70 [ 134.722341] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 134.722381] lock_acquire+0x1a2/0x530 [ 134.722412] ? down_trylock+0xe/0x70 [ 134.722442] ? lock_release+0x750/0x750 [ 134.722476] ? find_held_lock+0x2c/0x110 [ 134.722506] ? vprintk+0x84/0xa0 [ 134.722538] _raw_spin_lock_irqsave+0x39/0x60 [ 134.722573] ? down_trylock+0xe/0x70 [ 134.722601] down_trylock+0xe/0x70 [ 134.722630] ? vprintk+0x84/0xa0 [ 134.722660] __down_trylock_console_sem+0x3b/0xd0 [ 134.722692] vprintk_emit+0x16b/0x560 [ 134.722726] vprintk+0x84/0xa0 [ 134.722757] _printk+0xba/0xf1 [ 134.722778] ? record_print_text.cold+0x16/0x16 [ 134.722803] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 134.722828] ? lock_downgrade+0x6d0/0x6d0 [ 134.722860] ? report_bug.cold+0x66/0xab [ 134.722892] ? group_sched_out.part.0+0x2c7/0x460 [ 134.722913] report_bug.cold+0x72/0xab [ 134.722947] handle_bug+0x3c/0x70 [ 134.722978] exc_invalid_op+0x14/0x50 [ 134.723011] asm_exc_invalid_op+0x16/0x20 [ 134.723033] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.723057] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.723078] RSP: 0018:ffff88804117f8f8 EFLAGS: 00010006 [ 134.723095] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.723108] RDX: ffff88800dc8d040 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 134.723123] RBP: ffff88801d800000 R08: 0000000000000005 R09: 0000000000000001 [ 134.723136] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800eda6000 [ 134.723150] R13: ffff88806cf3d140 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 134.723170] ? group_sched_out.part.0+0x2c7/0x460 [ 134.723194] ? group_sched_out.part.0+0x2c7/0x460 [ 134.723218] ctx_sched_out+0x8f1/0xc10 [ 134.723242] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.723271] ? lock_is_held_type+0xd7/0x130 [ 134.723295] ? __perf_cgroup_move+0x160/0x160 [ 134.723317] ? set_next_entity+0x304/0x550 [ 134.723353] ? lock_is_held_type+0xd7/0x130 [ 134.723378] __schedule+0xedd/0x2470 [ 134.723408] ? io_schedule_timeout+0x150/0x150 [ 134.723436] ? futex_wait_setup+0x166/0x230 [ 134.723462] schedule+0xda/0x1b0 [ 134.723489] futex_wait_queue+0xf5/0x1e0 [ 134.723511] futex_wait+0x28e/0x690 [ 134.723534] ? futex_wait_setup+0x230/0x230 [ 134.723558] ? wake_up_q+0x8b/0xf0 [ 134.723582] ? do_raw_spin_unlock+0x4f/0x220 [ 134.723617] ? futex_wake+0x158/0x490 [ 134.723644] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.723671] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.723701] do_futex+0x2ff/0x380 [ 134.723721] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 134.723745] ? lock_is_held_type+0xd7/0x130 [ 134.723767] ? irqentry_enter+0x26/0x60 [ 134.723793] __x64_sys_futex+0x1c6/0x4d0 [ 134.723816] ? __x64_sys_futex_time32+0x480/0x480 [ 134.723842] ? syscall_enter_from_user_mode+0x27/0x50 [ 134.723869] do_syscall_64+0x3b/0x90 [ 134.723901] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.723924] RIP: 0033:0x7f367a2fcb19 [ 134.723939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.723959] RSP: 002b:00007f3677872218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.723979] RAX: ffffffffffffffda RBX: 00007f367a40ff68 RCX: 00007f367a2fcb19 [ 134.723997] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f367a40ff68 [ 134.724015] RBP: 00007f367a40ff60 R08: 0000000000000000 R09: 0000000000000000 [ 134.724033] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f367a40ff6c [ 134.724050] R13: 00007ffdc79ccfdf R14: 00007f3677872300 R15: 0000000000022000 [ 134.724077] [ 134.837534] WARNING: CPU: 1 PID: 3926 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 134.838765] Modules linked in: [ 134.839204] CPU: 1 PID: 3926 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220923 #1 [ 134.840277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.841776] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.842507] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.844934] RSP: 0018:ffff88804117f8f8 EFLAGS: 00010006 [ 134.845659] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.846621] RDX: ffff88800dc8d040 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 134.847585] RBP: ffff88801d800000 R08: 0000000000000005 R09: 0000000000000001 [ 134.848550] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800eda6000 [ 134.849522] R13: ffff88806cf3d140 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 134.850499] FS: 00007f3677872700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 134.851594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.852379] CR2: 00007fff135e9020 CR3: 000000004035e000 CR4: 0000000000350ee0 [ 134.853364] Call Trace: [ 134.853721] [ 134.854035] ctx_sched_out+0x8f1/0xc10 [ 134.854573] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.855286] ? lock_is_held_type+0xd7/0x130 [ 134.855883] ? __perf_cgroup_move+0x160/0x160 [ 134.856510] ? set_next_entity+0x304/0x550 [ 134.857114] ? lock_is_held_type+0xd7/0x130 [ 134.857712] __schedule+0xedd/0x2470 [ 134.858240] ? io_schedule_timeout+0x150/0x150 [ 134.858863] ? futex_wait_setup+0x166/0x230 [ 134.859464] schedule+0xda/0x1b0 [ 134.859953] futex_wait_queue+0xf5/0x1e0 [ 134.860513] futex_wait+0x28e/0x690 [ 134.861035] ? futex_wait_setup+0x230/0x230 [ 134.861630] ? wake_up_q+0x8b/0xf0 [ 134.862124] ? do_raw_spin_unlock+0x4f/0x220 [ 134.862751] ? futex_wake+0x158/0x490 [ 134.863280] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.864023] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.864781] do_futex+0x2ff/0x380 [ 134.865271] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 134.866062] ? lock_is_held_type+0xd7/0x130 [ 134.866666] ? irqentry_enter+0x26/0x60 [ 134.867223] __x64_sys_futex+0x1c6/0x4d0 [ 134.867789] ? __x64_sys_futex_time32+0x480/0x480 [ 134.868454] ? syscall_enter_from_user_mode+0x27/0x50 [ 134.869167] do_syscall_64+0x3b/0x90 [ 134.869690] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.870398] RIP: 0033:0x7f367a2fcb19 [ 134.870911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.873417] RSP: 002b:00007f3677872218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.874435] RAX: ffffffffffffffda RBX: 00007f367a40ff68 RCX: 00007f367a2fcb19 [ 134.875399] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f367a40ff68 [ 134.876362] RBP: 00007f367a40ff60 R08: 0000000000000000 R09: 0000000000000000 [ 134.877337] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f367a40ff6c [ 134.878298] R13: 00007ffdc79ccfdf R14: 00007f3677872300 R15: 0000000000022000 [ 134.879259] [ 134.879586] irq event stamp: 4728 [ 134.880052] hardirqs last enabled at (4727): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.881395] hardirqs last disabled at (4728): [] __schedule+0x1225/0x2470 [ 134.882532] softirqs last enabled at (4180): [] __irq_exit_rcu+0x11b/0x180 [ 134.883690] softirqs last disabled at (4171): [] __irq_exit_rcu+0x11b/0x180 [ 134.884863] ---[ end trace 0000000000000000 ]--- [ 135.059072] syz-executor.3 (3926) used greatest stack depth: 24496 bytes left [ 135.062687] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) VM DIAGNOSIS: 18:43:47 Registers: info registers vcpu 0 RAX=ffff8880419b7b28 RBX=0000000000000001 RCX=ffff8880419b7ab8 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffff8880419b7778 RSP=ffff8880419b76a0 R8 =ffffffff85edcf82 R9 =ffffffff85edcf86 R10=ffffed1008336ef1 R11=000000000003603d R12=ffff8880419b7761 R13=ffff8880419b7780 R14=ffff8880419b7720 R15=ffffffff85edcf87 RIP=ffffffff8111abdc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feadf4451f0 CR3=000000000a188000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88804117f348 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3677872700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff135e9020 CR3=000000004035e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000