Warning: Permanently added '[localhost]:25851' (ECDSA) to the list of known hosts. 2022/09/29 15:48:46 fuzzer started 2022/09/29 15:48:46 dialing manager at localhost:45751 syzkaller login: [ 43.752911] cgroup: Unknown subsys name 'net' [ 43.868206] cgroup: Unknown subsys name 'rlimit' 2022/09/29 15:49:00 syscalls: 2215 2022/09/29 15:49:00 code coverage: enabled 2022/09/29 15:49:00 comparison tracing: enabled 2022/09/29 15:49:00 extra coverage: enabled 2022/09/29 15:49:00 setuid sandbox: enabled 2022/09/29 15:49:00 namespace sandbox: enabled 2022/09/29 15:49:00 Android sandbox: enabled 2022/09/29 15:49:00 fault injection: enabled 2022/09/29 15:49:00 leak checking: enabled 2022/09/29 15:49:00 net packet injection: enabled 2022/09/29 15:49:00 net device setup: enabled 2022/09/29 15:49:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/29 15:49:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/29 15:49:00 USB emulation: enabled 2022/09/29 15:49:00 hci packet injection: enabled 2022/09/29 15:49:00 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220928) 2022/09/29 15:49:00 802.15.4 emulation: enabled 2022/09/29 15:49:00 fetching corpus: 50, signal 23132/24898 (executing program) 2022/09/29 15:49:00 fetching corpus: 100, signal 33321/36671 (executing program) 2022/09/29 15:49:00 fetching corpus: 150, signal 41785/46561 (executing program) 2022/09/29 15:49:01 fetching corpus: 200, signal 45169/51436 (executing program) 2022/09/29 15:49:01 fetching corpus: 250, signal 54081/61539 (executing program) 2022/09/29 15:49:01 fetching corpus: 300, signal 56861/65645 (executing program) 2022/09/29 15:49:01 fetching corpus: 350, signal 62412/72285 (executing program) 2022/09/29 15:49:01 fetching corpus: 400, signal 66140/77147 (executing program) 2022/09/29 15:49:01 fetching corpus: 450, signal 68481/80728 (executing program) 2022/09/29 15:49:01 fetching corpus: 500, signal 74626/87639 (executing program) 2022/09/29 15:49:01 fetching corpus: 550, signal 77518/91584 (executing program) 2022/09/29 15:49:02 fetching corpus: 600, signal 80493/95513 (executing program) 2022/09/29 15:49:02 fetching corpus: 650, signal 84820/100592 (executing program) 2022/09/29 15:49:02 fetching corpus: 700, signal 87517/104153 (executing program) 2022/09/29 15:49:02 fetching corpus: 750, signal 88747/106391 (executing program) 2022/09/29 15:49:02 fetching corpus: 800, signal 91875/110220 (executing program) 2022/09/29 15:49:02 fetching corpus: 850, signal 94790/113810 (executing program) 2022/09/29 15:49:02 fetching corpus: 900, signal 96846/116719 (executing program) 2022/09/29 15:49:02 fetching corpus: 950, signal 98924/119505 (executing program) 2022/09/29 15:49:02 fetching corpus: 1000, signal 100459/121878 (executing program) 2022/09/29 15:49:03 fetching corpus: 1050, signal 101967/124216 (executing program) 2022/09/29 15:49:03 fetching corpus: 1100, signal 104658/127399 (executing program) 2022/09/29 15:49:03 fetching corpus: 1150, signal 106630/129984 (executing program) 2022/09/29 15:49:03 fetching corpus: 1200, signal 108627/132580 (executing program) 2022/09/29 15:49:03 fetching corpus: 1250, signal 110394/134890 (executing program) 2022/09/29 15:49:03 fetching corpus: 1300, signal 111863/136978 (executing program) 2022/09/29 15:49:03 fetching corpus: 1350, signal 113960/139565 (executing program) 2022/09/29 15:49:04 fetching corpus: 1400, signal 115937/141952 (executing program) 2022/09/29 15:49:04 fetching corpus: 1450, signal 117484/144011 (executing program) 2022/09/29 15:49:04 fetching corpus: 1500, signal 118619/145748 (executing program) 2022/09/29 15:49:04 fetching corpus: 1550, signal 120771/148180 (executing program) 2022/09/29 15:49:04 fetching corpus: 1600, signal 121884/149863 (executing program) 2022/09/29 15:49:04 fetching corpus: 1650, signal 122614/151260 (executing program) 2022/09/29 15:49:04 fetching corpus: 1700, signal 124205/153262 (executing program) 2022/09/29 15:49:04 fetching corpus: 1750, signal 125396/154938 (executing program) 2022/09/29 15:49:04 fetching corpus: 1800, signal 127522/157238 (executing program) 2022/09/29 15:49:04 fetching corpus: 1850, signal 129018/159091 (executing program) 2022/09/29 15:49:04 fetching corpus: 1900, signal 130549/160901 (executing program) 2022/09/29 15:49:05 fetching corpus: 1950, signal 131901/162533 (executing program) 2022/09/29 15:49:05 fetching corpus: 2000, signal 132814/163923 (executing program) 2022/09/29 15:49:05 fetching corpus: 2050, signal 133621/165173 (executing program) 2022/09/29 15:49:05 fetching corpus: 2100, signal 134793/166651 (executing program) 2022/09/29 15:49:05 fetching corpus: 2150, signal 136586/168457 (executing program) 2022/09/29 15:49:05 fetching corpus: 2200, signal 138193/170182 (executing program) 2022/09/29 15:49:05 fetching corpus: 2250, signal 139734/171779 (executing program) 2022/09/29 15:49:05 fetching corpus: 2300, signal 140887/173207 (executing program) 2022/09/29 15:49:06 fetching corpus: 2350, signal 142148/174606 (executing program) 2022/09/29 15:49:06 fetching corpus: 2400, signal 143605/176086 (executing program) 2022/09/29 15:49:06 fetching corpus: 2450, signal 145013/177550 (executing program) 2022/09/29 15:49:06 fetching corpus: 2500, signal 145905/178674 (executing program) 2022/09/29 15:49:06 fetching corpus: 2550, signal 146547/179651 (executing program) 2022/09/29 15:49:06 fetching corpus: 2600, signal 148122/181129 (executing program) 2022/09/29 15:49:06 fetching corpus: 2650, signal 149344/182404 (executing program) 2022/09/29 15:49:06 fetching corpus: 2700, signal 150934/183843 (executing program) 2022/09/29 15:49:07 fetching corpus: 2750, signal 151566/184748 (executing program) 2022/09/29 15:49:07 fetching corpus: 2800, signal 152357/185705 (executing program) 2022/09/29 15:49:07 fetching corpus: 2850, signal 153112/186683 (executing program) 2022/09/29 15:49:07 fetching corpus: 2900, signal 154481/187911 (executing program) 2022/09/29 15:49:07 fetching corpus: 2950, signal 155511/188967 (executing program) 2022/09/29 15:49:07 fetching corpus: 3000, signal 156652/190025 (executing program) 2022/09/29 15:49:07 fetching corpus: 3050, signal 157963/191123 (executing program) 2022/09/29 15:49:07 fetching corpus: 3100, signal 159106/192156 (executing program) 2022/09/29 15:49:07 fetching corpus: 3150, signal 159885/193035 (executing program) 2022/09/29 15:49:07 fetching corpus: 3200, signal 160490/193812 (executing program) 2022/09/29 15:49:08 fetching corpus: 3250, signal 161092/194661 (executing program) 2022/09/29 15:49:08 fetching corpus: 3300, signal 162346/195665 (executing program) 2022/09/29 15:49:08 fetching corpus: 3350, signal 163617/196688 (executing program) 2022/09/29 15:49:08 fetching corpus: 3400, signal 164403/197520 (executing program) 2022/09/29 15:49:08 fetching corpus: 3450, signal 166321/198720 (executing program) 2022/09/29 15:49:08 fetching corpus: 3500, signal 166838/199379 (executing program) 2022/09/29 15:49:08 fetching corpus: 3550, signal 167689/200255 (executing program) 2022/09/29 15:49:08 fetching corpus: 3600, signal 169089/201191 (executing program) 2022/09/29 15:49:08 fetching corpus: 3650, signal 170027/201968 (executing program) 2022/09/29 15:49:09 fetching corpus: 3700, signal 170912/202688 (executing program) 2022/09/29 15:49:09 fetching corpus: 3750, signal 171309/203266 (executing program) 2022/09/29 15:49:09 fetching corpus: 3800, signal 171946/203898 (executing program) 2022/09/29 15:49:09 fetching corpus: 3850, signal 172466/204434 (executing program) 2022/09/29 15:49:09 fetching corpus: 3900, signal 173673/205212 (executing program) 2022/09/29 15:49:09 fetching corpus: 3950, signal 174676/205935 (executing program) 2022/09/29 15:49:09 fetching corpus: 4000, signal 175378/206515 (executing program) 2022/09/29 15:49:09 fetching corpus: 4050, signal 175960/207091 (executing program) 2022/09/29 15:49:10 fetching corpus: 4100, signal 177413/207820 (executing program) 2022/09/29 15:49:10 fetching corpus: 4150, signal 177951/208322 (executing program) 2022/09/29 15:49:10 fetching corpus: 4200, signal 178483/208813 (executing program) 2022/09/29 15:49:10 fetching corpus: 4250, signal 179449/209405 (executing program) 2022/09/29 15:49:10 fetching corpus: 4300, signal 179936/209862 (executing program) 2022/09/29 15:49:10 fetching corpus: 4350, signal 181786/210601 (executing program) 2022/09/29 15:49:10 fetching corpus: 4400, signal 182368/211031 (executing program) 2022/09/29 15:49:10 fetching corpus: 4450, signal 183061/211490 (executing program) 2022/09/29 15:49:10 fetching corpus: 4500, signal 184498/212106 (executing program) 2022/09/29 15:49:11 fetching corpus: 4550, signal 184842/212440 (executing program) 2022/09/29 15:49:11 fetching corpus: 4600, signal 185499/212857 (executing program) 2022/09/29 15:49:11 fetching corpus: 4650, signal 186244/213256 (executing program) 2022/09/29 15:49:11 fetching corpus: 4700, signal 186625/213594 (executing program) 2022/09/29 15:49:11 fetching corpus: 4750, signal 187039/213941 (executing program) 2022/09/29 15:49:11 fetching corpus: 4800, signal 187508/214256 (executing program) 2022/09/29 15:49:11 fetching corpus: 4850, signal 188517/214587 (executing program) 2022/09/29 15:49:11 fetching corpus: 4900, signal 189053/214932 (executing program) 2022/09/29 15:49:11 fetching corpus: 4950, signal 189641/215229 (executing program) 2022/09/29 15:49:12 fetching corpus: 5000, signal 190267/215533 (executing program) 2022/09/29 15:49:12 fetching corpus: 5050, signal 191104/215860 (executing program) 2022/09/29 15:49:12 fetching corpus: 5100, signal 191697/216125 (executing program) 2022/09/29 15:49:12 fetching corpus: 5150, signal 192570/216416 (executing program) 2022/09/29 15:49:12 fetching corpus: 5200, signal 192809/216645 (executing program) 2022/09/29 15:49:12 fetching corpus: 5250, signal 193514/216892 (executing program) 2022/09/29 15:49:12 fetching corpus: 5300, signal 194088/217142 (executing program) 2022/09/29 15:49:12 fetching corpus: 5350, signal 194558/217376 (executing program) 2022/09/29 15:49:12 fetching corpus: 5400, signal 194935/217544 (executing program) 2022/09/29 15:49:13 fetching corpus: 5450, signal 195824/217561 (executing program) 2022/09/29 15:49:13 fetching corpus: 5500, signal 196796/217563 (executing program) 2022/09/29 15:49:13 fetching corpus: 5550, signal 197307/217570 (executing program) 2022/09/29 15:49:13 fetching corpus: 5600, signal 197757/217573 (executing program) 2022/09/29 15:49:13 fetching corpus: 5650, signal 198335/217625 (executing program) 2022/09/29 15:49:13 fetching corpus: 5700, signal 199381/217635 (executing program) 2022/09/29 15:49:13 fetching corpus: 5736, signal 199782/217635 (executing program) 2022/09/29 15:49:13 fetching corpus: 5736, signal 199782/217635 (executing program) 2022/09/29 15:49:16 starting 8 fuzzer processes 15:49:16 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000000)="07b745ac25c7ca0b8fcbd4c802c663d5c030648ce51ffb047f833b38e78ef5f7e23b93246d9639a5bac77eb3a6c06858fc7e6fc5caa2c397102ea55596f50ff64dece1534307ac1a18e5901ad7e0087567e4e61f0981c89e4a6ad5d0bbf3473c3e6512adad6b8c6733cc1bc1a7b3eaaeddf2e123aa4d0fed276520a24b4eee54705737dd6f4f304b23552451a01111a84a08939ac009317db485ad875102e21f4969d694624899710dc290182219041c3242fc96fa63a14d22c210694477fca836bf7f6a218339680450fb25c2518286c094816665f09e016119e80c421c2ca8", 0xe0, 0x800, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x26) clone3(&(0x7f0000000400)={0x8608a400, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xa}, &(0x7f0000000240)=""/99, 0x63, &(0x7f00000002c0)=""/234, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000480)) r3 = syz_open_dev$mouse(&(0x7f00000004c0), 0x7fffffff, 0xc1302) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/131, 0x83}, {&(0x7f00000015c0)=""/53, 0x35}], 0x3, &(0x7f0000001640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001780)=""/179, 0xb3}, {&(0x7f0000001840)=""/224, 0xe0}, {&(0x7f0000001940)=""/177, 0xb1}], 0x3, &(0x7f0000001a40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001a80)=""/56, 0x38}, {&(0x7f0000001ac0)=""/139, 0x8b}, {&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/236, 0xec}, {&(0x7f0000001d80)=""/113, 0x71}, {&(0x7f0000001e00)=""/208, 0xd0}, {&(0x7f0000001f00)=""/240, 0xf0}, {&(0x7f0000002000)=""/181, 0xb5}, {&(0x7f00000020c0)=""/200, 0xc8}], 0x9, &(0x7f0000002280)=[@cred={{0x1c}}], 0x20}}], 0x3, 0xa0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000002380)) dup(r4) syz_open_pts(r8, 0x101800) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x8}}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000002400)={0x2}) ftruncate(r9, 0xc1) mount$bind(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480)='./file1\x00', &(0x7f00000024c0), 0x200000, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000002500)) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000002540)=0x2, 0x4) 15:49:16 executing program 2: exit(0x2) exit(0x0) exit(0xffffffff7fffffff) exit(0x5) exit(0x0) exit(0xfffffffffffff738) exit(0x8) exit(0x6) exit(0x4) exit(0x1) exit(0x6) exit(0x8) exit(0x889) exit(0x6) exit(0xffff) exit(0x0) exit(0x1) exit(0x955) exit(0x8) exit(0x2) 15:49:16 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x840) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0xf, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, @in_args={0xb751b5efc8c315b5}}, './file0\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x260, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f9b, 0x43}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x0, {0xa77, 0x1, 0x2, 0x6}}}, @NL80211_ATTR_IE={0x1da, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x68}}, @preq={0x82, 0x51, @not_ext={{0x0, 0x1, 0x1}, 0x3, 0x20, 0x4, @device_b, 0x8, "", 0x1, 0xffff0000, 0x5, [{{}, @device_a, 0xfffffffe}, {{0x0, 0x0, 0x1}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}]}}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x7, 0x0, {0x6d6c, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x300, 0x80, 0x55}}, @random_vendor={0xdd, 0x98, "ad6f9fde276f41f793320164ec6e4d65d3437e892cf1b7130190f5956db9a9c66952380cfd1995ebc8525bb18abf59cf70623536bd75506b142764e642f0afbf52580b7734008250e3049a6aa04bb2ba5f91fbc3ed1d0a0f7faad10bb679f3a11f352d17a21517a86627280d70c016da9058ce83922c20c5ce534a620ed2a37409837c209c5bf203fe88843d230a679e29ef096e8645436b"}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @tim={0x5, 0xab, {0x2, 0x9c, 0x8, "ff59991a88ab58351bba673391ce321b71bb3e0bacc76f3593242da731ec1279ca40388575fba22867fa28cab605b1f4bc33e80a164c613a2ddc5da8c1f78918ba441f45896d89b564e6bebdb078dea217cb4db77f0a57bede23723f063c1d70b297dfc2c737030f2a053517144d2f75ac2158051a498e125e3eaab55b0ec133dd67c871db93bae7b70bb9e1c1f7892642d7785f156a17d6351583aafda176a6542d922230acf66a"}}]}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @NL80211_ATTR_FILS_KEK={0x23, 0xf2, "6d028ca5e82a17f5bf2da5770752864534212c8aaec0c7ee7dcdaea4c383bf"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x260}, 0x1, 0x0, 0x0, 0x8000}, 0x84) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xbdde, 0x29}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0xc028}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000800)) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0xd}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xfe}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1d}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x48850) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040891) r3 = dup2(r0, r1) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x42400400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10002002}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x8050) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xe0, r6, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x45}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'xfrm0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c7995101f7c970889043d411f4d13bd35388b6b5a80f5804"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4e2762a2332b58c2d1c43bbfdf2a0ce81086966988620f70"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1e970c8a57366333da51b00c25c5cabd7a398809aea824c4"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x21}, 0x10048080) 15:49:16 executing program 3: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000040)={0x490, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5f2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x84}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff435c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf5}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x540}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x43, 0x3, "548b212a25ebb834f8024abe82fb7eb75d42d1e99a49e3d9edbd0928b1e96da7eb070de81c2bb1113435a4e4407cf0762010fa916b5120609ead316b7e04d5"}]}, @TIPC_NLA_NODE={0x210, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "70be3efff006c2fc64252e74d86f54c92e5d143b85045e53ae3af090"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "6a84c3b05adf3d97800d85681166470499dd88de6750bc8bd5"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "837290c1fdaa22a40f8f2a57b9ac963b3e0a095658d302952077ca4d3a25100b0a08"}}, @TIPC_NLA_NODE_ID={0x70, 0x3, "355d2916193845bf24dccf5c7609fc4ba99eeca4edd0706f695c7d31f45f9ea2e1b987b75559b98a2476c413ebff3584c5865118583b3961f4206554dd4a0c7e1d2132e0986464971ce7fcd2f2d443e8a677feda6fae701643d2ca723185bccba9186196b86441ded89109f6"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "528b4f8c613cfb24cb1308d10c7ae172a59215836150fe"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "5d86c788d2bdc9da99dbdbfdbd8e700374cf84429beee2b00b"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9f3d486ba24a9af7848e736d33f28b607f6ea4ebcbd2f1b17a"}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x95, 0x3, "8b8ffa95d9a116c68cf0c3893e94b25c7271bda306774f46e9a19cba1d9c8646476ed2890da42db905fec2c8361a2c8d0a25958498b47b3af57b575c358acd5ef456aa5f5cc17d117dadec4ed7018e76510d5da35b94322e5d5f680f5fe84392658d110ded2617b3fcb424bb790eb84898ae5e0f322226956fe7334dc127239008310d35db516397d18ae5ee7d8d1f71c5"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c50e3e4309f0e553f1527dc78e55ee6ed7566a40402d39bf63bd5ed8b8c96c30b12c3f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xab5}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x800}, 0x800) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x20, 0xb14, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}}}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x44804) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x800) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800), 0xc2a01, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040004}, 0x24000000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x104, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x24}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x92ce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7a78}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x41) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x22, 0x2a, [@ibss={0x6, 0x2, 0xfff8}, @peer_mgmt={0x75, 0x4, {0x0, 0xca52, @void, @void, @void}}, @ssid={0x0, 0x12, @random="523a3b1838ac673897cf5f0f269ad7508922"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x410}, 0x48810) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r2) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c804}, 0x5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080), &(0x7f00000010c0)={'L-', 0x3f}, 0x16, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x80, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x13}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a92342e98bee765406247ce0c0d5acb3"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "1ac8254c08e66982f050860e6b31768d"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x10000}, @NL80211_ATTR_PMKID={0x14, 0x55, "cdd4d17f2300f0790ab833c41b198081"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0xe4cc5637fe7966b0}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x30, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x4008080) [ 73.757404] audit: type=1400 audit(1664466556.763:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:49:16 executing program 4: sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7b}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffff8e}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa7c}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004010}, 0x40080) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7, 0x3, 0x4, 0xfffffffa}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc805) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x79}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4100}, 0x804) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x144d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000900)={0x0, @nfc={0x27, 0x1, 0x1}, @can={0x1d, r4}, @l2tp={0x2, 0x0, @loopback, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x1997, 0x0, 0x8, 0x6, 0xffc4}) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c085}, 0x880) syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000b00)=@add_del={0x2, &(0x7f0000000ac0)='ipvlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xe0, r6, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xc2, 0xc5, "4195029f7c47df6be9e297fa41f88251b04382608398249df572edd5a5253cab89aa036aa364970e0d1d9b52c315ea941f573f046c3f0b96e9f8cb5387d3754c76db2f082170a5aca669dda3ce050937729388f0f2c7fa3e89dbe9f66e402e668783e14629fc3754b7eb9e548596730a269d8ab531d944fa344864619a2efc12e0468af29fc59f34f18a084b14e1862f04da76f29686e4750b8a8cf0cfd744f771ca70af485bfcf94a5d77681a2e09f19f3bfbe9bc45c65bc45a8cf298ee"}]}, 0xe0}}, 0x1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000011c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000000dc0)={0x3a4, r6, 0x0, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x31}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x1, 0x7ff, 0x7, 0x1, 0x4, 0x3ff]}, @NL80211_ATTR_FRAME={0x2f2, 0x33, @reassoc_req={@with_ht={{{}, {0x67}, @device_b, @device_b, @initial, {0x5, 0x2}}, @ver_80211n={0x0, 0x5392, 0x1, 0x0, 0x0, 0x2, 0x1}}, 0x2, 0xf0, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x10, 0x0, 0x0, 0x0, {0x7, 0x1d73, 0x0, 0x69, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0x7f, 0x20}}, [{0xdd, 0xb7, "5d645d85f2652a5c5654a651d08c3950ba8cb3153a9b25a4567c60d6acc2a9f1a2f2fa0e174eebe14ede0a6e420872bdd9476c65b5710fdab5c989d462774b6491d454939564f4f0f854daff660fefde457eb219ee89d532c56fc289d6ff57a908b86aaaccbab384c99a6eac61145d740864d4afe23bf1748e5bbc871241177b1c17560c21536d47ac2bdc0c603085ad58a339b5d90e1e1b61a82696e693beb09e298ac4efd35ac7515d727400cbd6780daf1ce3bf4b98"}, {0xdd, 0x8d, "6747f07521b009f5144b2bab7668bc2fd394662174a09a0a124d58eeccf7c9afc455aa4799b7a02e5da8b249d07cacb4e453b49b22d24cae0204fe3cfa7aff3e7032a4eb7c74d987d02d14fb4d4435af0f188e3ed1f1dbce14a5e1ee5e75b9cdbcc07fd97dd98bb5766f5a00f7eaffe36ff8c5307b1351e6bf0dd88b2ba5a6a73766d83fdecf58ca3cfb95b8a3"}, {0xdd, 0x96, "08651f3871ee5463c105833a29547ca29679349978475e5160cde3863192a5eba216b3f4f617e344fb71c0bd123508d950ac82fbbf1e04c6a2e843f814d0e6b54d863ec3f29ea434e5b566793bf9c5439145316009231d6f41db2e2a40c80feb2268fd438fc411b70f4b176c2faf6cc789a513333e38ae414a79694af75cda5beb250ebb4eb6a5927e431c7de5b570236ac76d8ad014"}, {0xdd, 0x4c, "8a5c6633d9cb9d806d803b8e843df8de256c90a2629b99e139ddb7cea3e60ffca8f170e7ee3d7929dd1ce161e99932eb8265f3dc93225bd50327a854fabdff29cb1d21cd6fe589e28f5010dc"}, {0xdd, 0x74, "8e7c46a265466db8690f09b837a023b7205cd3610061c9c36a9cb3493eefacef5854d3ce63c7e69f68023f9f49cf53b2e9b46aae9780a923f366056eea32d412669a68092b870f05c24ed95de59909de5313c0ab9f6114124893b5f4b99965712c585a52d2ca9a7089affd8a278472f8c87b195a"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x2, 0x7fff, 0x7]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5fe}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x17dd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x7, 0x6abe, 0x5, 0x6, 0x9c0c, 0x7ff, 0xfff8]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x8810}, 0x4044014) 15:49:16 executing program 5: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x1, 0xfff, 0x101, {{0x8, 0x4, 0x1, 0x3, 0x20, 0x68, 0x0, 0x2, 0x2f, 0x0, @empty, @local, {[@generic={0x45, 0xb, "c184e5bf7b260c2a33"}]}}}}}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x9, 0x4e24, 0x4c, 0xa, 0x20, 0xfdd0caca0a5c9d10, 0xc, 0x0, 0xffffffffffffffff}, {0x1, 0x1ff, 0x7fffffff, 0x4, 0x5, 0x1000, 0x20, 0x8}, {0x8, 0x40, 0x10000, 0x9}, 0x401, 0x6e6bc0, 0x2, 0x1, 0x3, 0x3}, {{@in=@loopback, 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0x2, 0x0, 0x5d, 0x7, 0x6, 0x9}}, 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x310, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1b}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x240080d0}, 0x24000001) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20004050) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0xe, 0x6, 0xbb96e266635383ec, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004085}, 0x4040) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', r1, 0x29, 0x2, 0x98, 0x4, 0x4, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8, 0x20, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'gretap0\x00', &(0x7f0000000a80)={'ip_vti0\x00', r4, 0x7, 0x8000, 0x6, 0x6f90, {{0xc, 0x4, 0x3, 0x9, 0x30, 0x67, 0x0, 0x81, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0x10, "6b139902d20a40df069ddf7b4fb6"}, @rr={0x7, 0xb, 0x1e, [@remote, @multicast1]}]}}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x200, 0x70bd28, 0x20, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) r6 = socket(0x1a, 0x800, 0x101) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000e40)={'gretap0\x00', &(0x7f0000000d80)={'syztnl2\x00', r4, 0x1, 0x700, 0x7fffffff, 0x5, {{0x20, 0x4, 0x0, 0x3a, 0x80, 0x64, 0x0, 0x3f, 0x4, 0x0, @local, @private=0xa010100, {[@ssrr={0x89, 0x27, 0x7b, [@rand_addr=0x64010100, @multicast2, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @cipso={0x86, 0x45, 0x2, [{0x0, 0x11, "62dbed6f1fe29106fe0c3f81a44de1"}, {0x2, 0x3, "e1"}, {0x1, 0x11, "8aa7ca53857ee996dab1763603ab1f"}, {0x1, 0xf, "1838c3baf1a053e9d6835c6525"}, {0x2, 0x9, "859866af36fff9"}, {0x1, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000f00)={'syztnl2\x00', &(0x7f0000000e80)={'ip6gre0\x00', r8, 0x2f, 0x1, 0x9, 0x9, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x10, 0x7800, 0x2, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r7, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001080)={'tunl0\x00', &(0x7f0000001000)={'syztnl0\x00', 0x0, 0x3d237127eab651c6, 0x7, 0xffffffff, 0x3, {{0x18, 0x4, 0x1, 0x26, 0x60, 0x65, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x4c, 0x9c, 0x1, 0x9, [{@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010100, 0x401}, {@empty, 0x19}, {@multicast2, 0xe4c}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x3ff8000}, {@remote, 0x2}, {@multicast2, 0x6}]}]}}}}}) 15:49:16 executing program 6: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'syz_tun\x00'}, 0x18) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000000c0)={0x2, 0x3, 0x5, &(0x7f0000000080)=""/5}) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0xfffffffffffffffd, &(0x7f0000000100)) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80040, 0x80) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@loopback, @multicast1, r1}, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x3ff, 0x101a00) sendfile(r2, r0, &(0x7f0000000340)=0x3, 0x8ae) r3 = memfd_secret(0x80000) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@dev, @in6=@local}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000480)=0xe8) r4 = open_tree(r3, &(0x7f00000004c0)='./file0\x00', 0x111000) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e24, @multicast1}, 0x10) lseek(r0, 0xc52, 0x3) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000540)={@rand_addr, @dev}, &(0x7f0000000580)=0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r5 = syz_open_dev$hiddev(&(0x7f0000000600), 0x10001, 0x3a5081) write(r5, &(0x7f0000000640)="b05652317e3b0856f867482d6a7387c5cd874a4c62f6ed5aa96b3c362d71e15f0adfc360b38ae4f2e819ec09b20ec6c4070741968e9dca682f032f84ff747c94c27c8c44f91e2c", 0x47) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 15:49:16 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) read(r0, &(0x7f0000000040)=""/72, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x27d, 0x4, 0x3f}) write$rfkill(r1, &(0x7f0000000100)={0xfff, 0x0, 0x1, 0x0, 0x1}, 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x9, 0x3f, 0x8, 0xfd, 0x0, 0x810b, 0x122c4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7d, 0x0, @perf_config_ext={0x8, 0x7}, 0xb080, 0x62, 0x80000001, 0x5, 0x8, 0x6, 0x6, 0x0, 0x2}, r2, 0x9, r1, 0x8) recvmmsg$unix(r1, &(0x7f0000000800)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/160, 0xa0}], 0x5, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x110}}], 0x1, 0x40010020, &(0x7f0000000840)={0x0, 0x989680}) r13 = perf_event_open(&(0x7f0000000880)={0x3, 0x80, 0x2a, 0x1, 0x1, 0x52, 0x0, 0xfffffffffffffff9, 0x2006, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x4, 0x3}, 0x40020, 0x101, 0x0, 0x8, 0x4f, 0x0, 0xc603, 0x0, 0x28e0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x80, 0xd3, 0x0, 0x8, 0x0, 0x9, 0x14410, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x1000}, 0x0, 0xffffffff, 0x8, 0x4, 0x10000, 0xbb, 0x8, 0x0, 0x62c7370c, 0x0, 0x1ff}, r10, 0xffffffffffffffff, r13, 0x9) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) perf_event_open(&(0x7f0000000940)={0x4, 0x80, 0x81, 0x1, 0xe9, 0x7f, 0x0, 0x7f, 0x40, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x23b49f4f, 0x4, @perf_bp={&(0x7f0000000900)}, 0x500, 0x80000000, 0x7, 0x4, 0x7fff, 0xc257ad5, 0x1, 0x0, 0x2fe, 0x0, 0x7f}, r8, 0x0, r7, 0x8) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f00000009c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockname$unix(r14, &(0x7f0000000a40), &(0x7f0000000ac0)=0x6e) getgroups(0x3, &(0x7f0000000dc0)=[r12, r3, 0xee00]) sendmsg$netlink(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b00)={0x254, 0x32, 0x400, 0x70bd27, 0x25dfdbff, "", [@nested={0x243, 0x8f, 0x0, 0x1, [@generic="174ef958c2c607b0b8c158a29a6be7320275661cc51f1240ef4ca7ec2a8f372fc4adc98b107e9f23de8250bb5306fc2f71cfc355c141e047c92747264e56c060e8da13e4906c8ad1e2ac7024320cd4f2d9dc1edfd2a29130f840abc83f964b117abf4b37ecbe3946ba6ec4002cb259b01c22eed56a0106d69a3e86aa6f353ebeecc51b1fcfbba9d5c0441aa31b5097fea31173669c50362a0ccbbe7ef58632f51f4c56bae7fedd0c75c18f8fb7fe402bcb5763ab27ebc53e8b94c608cf2f0d46290202d3c4e092a0e418af97130516f1186ff34895d48dfd5a741bea7d5ee88eb52259e816d4950c9caf53146910002633", @typed={0x4, 0x3c}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0x100}, @generic="36afacf5c886b9aeb6967679ea3e86e3f4a65398ea76d684ad5a29f5b8d2be8e74e153d254c8089fa46c00f3ac780decf9b55620ba16dad64f13b94aaa6f37d32757987760840f0856cf0bea3e2a427705cd53987025b7a7835115917a76e38ca0d4a61af5d7648f5e4e2fbaa6d99d6fc7408463faba51a7a9102e70beda0ae62238fb8fd7585386e3b14f0f7ea599adb580ab5f36aee059b6b1db4617c1cb6e8224512eb9bbf08ea74781948c1dcd63f7cee699a7dc6e93f445b5f1ea5088ee8bd78d3242f93a840d663a0fb210623e5e0e67320933cd8e43ef93e45df680ee0eff", @generic="25703eaa456989f4b279233c1629cc0638446253bca569c9f6959ee5d241fb981af5613aa67b548b3c4e7d135f099155cfe1e5160b63a5f1fa26260aa2faed1c4ceb5b52be939ff299757e64e08928424ab8ba15", @typed={0x8, 0x79, 0x0, 0x0, @pid=r2}]}]}, 0x254}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, r9, r15}}}], 0x20, 0x40040}, 0x84) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r1, {0xd1f}}, './file0\x00'}) perf_event_open(&(0x7f0000000e80)={0x0, 0x80, 0x5, 0x3f, 0xff, 0x6, 0x0, 0x1f, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffff7f, 0x1, @perf_config_ext={0x7, 0x4}, 0x40122, 0x5, 0x20, 0x2, 0x5, 0x7, 0x4, 0x0, 0x5, 0x0, 0x7}, r11, 0x6, r16, 0x9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000f40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EVIOCGVERSION(r17, 0x80044501, &(0x7f0000000f80)=""/204) [ 75.088666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.090674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.093484] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.096612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.105666] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.108430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.114836] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.152578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.154131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.155450] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.156581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.158106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.159130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.163946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.166359] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.170249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.174834] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.191079] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.197502] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.199428] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.207085] Bluetooth: hci1: HCI_REQ-0x0c1a [ 75.222290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.223984] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.225947] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.227754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.228860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.229914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.231277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.234941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.236079] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.241404] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.242267] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.242503] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.245536] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.246808] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.247084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.249281] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.250845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.253461] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.263190] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.290791] Bluetooth: hci6: HCI_REQ-0x0c1a [ 75.292628] Bluetooth: hci4: HCI_REQ-0x0c1a [ 75.345330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.348103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.361247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.367948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.370054] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.371538] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.377404] Bluetooth: hci3: HCI_REQ-0x0c1a [ 77.178192] Bluetooth: hci0: command 0x0409 tx timeout [ 77.241768] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 77.242797] Bluetooth: hci1: command 0x0409 tx timeout [ 77.242940] Bluetooth: hci2: command 0x0409 tx timeout [ 77.305760] Bluetooth: hci4: command 0x0409 tx timeout [ 77.305827] Bluetooth: hci7: command 0x0409 tx timeout [ 77.369770] Bluetooth: hci6: command 0x0409 tx timeout [ 77.434744] Bluetooth: hci3: command 0x0409 tx timeout [ 79.225754] Bluetooth: hci0: command 0x041b tx timeout [ 79.307825] Bluetooth: hci2: command 0x041b tx timeout [ 79.308310] Bluetooth: hci1: command 0x041b tx timeout [ 79.353724] Bluetooth: hci4: command 0x041b tx timeout [ 79.354746] Bluetooth: hci7: command 0x041b tx timeout [ 79.417792] Bluetooth: hci6: command 0x041b tx timeout [ 79.482783] Bluetooth: hci3: command 0x041b tx timeout [ 80.080728] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.087226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.089564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.099273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.103845] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 80.105394] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.109784] Bluetooth: hci5: HCI_REQ-0x0c1a [ 81.274166] Bluetooth: hci0: command 0x040f tx timeout [ 81.337818] Bluetooth: hci1: command 0x040f tx timeout [ 81.337830] Bluetooth: hci2: command 0x040f tx timeout [ 81.401741] Bluetooth: hci7: command 0x040f tx timeout [ 81.401757] Bluetooth: hci4: command 0x040f tx timeout [ 81.465730] Bluetooth: hci6: command 0x040f tx timeout [ 81.529757] Bluetooth: hci3: command 0x040f tx timeout [ 82.169784] Bluetooth: hci5: command 0x0409 tx timeout [ 83.321740] Bluetooth: hci0: command 0x0419 tx timeout [ 83.385754] Bluetooth: hci2: command 0x0419 tx timeout [ 83.386745] Bluetooth: hci1: command 0x0419 tx timeout [ 83.449735] Bluetooth: hci4: command 0x0419 tx timeout [ 83.450820] Bluetooth: hci7: command 0x0419 tx timeout [ 83.513727] Bluetooth: hci6: command 0x0419 tx timeout [ 83.577773] Bluetooth: hci3: command 0x0419 tx timeout [ 84.217761] Bluetooth: hci5: command 0x041b tx timeout [ 86.265903] Bluetooth: hci5: command 0x040f tx timeout [ 88.313740] Bluetooth: hci5: command 0x0419 tx timeout 15:50:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f0000000bc0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = gettid() kcmp(r3, 0x0, 0x0, r2, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r4, &(0x7f0000000300)='./file1\x00', 0x420000, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) utime(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)={0x3, 0x2473}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0x6, 0x6, 0xb6f, 0x9, 0x47c9}) socket$inet_udp(0x2, 0x2, 0x0) [ 128.441979] audit: type=1400 audit(1664466611.446:7): avc: denied { open } for pid=3725 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.444380] audit: type=1400 audit(1664466611.446:8): avc: denied { kernel } for pid=3725 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.451428] ------------[ cut here ]------------ [ 128.451448] [ 128.451451] ====================================================== [ 128.451455] WARNING: possible circular locking dependency detected [ 128.451459] 6.0.0-rc7-next-20220928 #1 Not tainted [ 128.451465] ------------------------------------------------------ [ 128.451469] syz-executor.5/3727 is trying to acquire lock: [ 128.451475] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 128.451521] [ 128.451521] but task is already holding lock: [ 128.451524] ffff88800e0e9020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.451555] [ 128.451555] which lock already depends on the new lock. [ 128.451555] [ 128.451558] [ 128.451558] the existing dependency chain (in reverse order) is: [ 128.451562] [ 128.451562] -> #3 (&ctx->lock){....}-{2:2}: [ 128.451576] _raw_spin_lock+0x2a/0x40 [ 128.451590] __perf_event_task_sched_out+0x53b/0x18d0 [ 128.451603] __schedule+0xedd/0x2470 [ 128.451621] schedule+0xda/0x1b0 [ 128.451638] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.451652] syscall_exit_to_user_mode+0x19/0x40 [ 128.451668] do_syscall_64+0x48/0x90 [ 128.451682] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.451698] [ 128.451698] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 128.451712] _raw_spin_lock_nested+0x30/0x40 [ 128.451725] raw_spin_rq_lock_nested+0x1e/0x30 [ 128.451739] task_fork_fair+0x63/0x4d0 [ 128.451758] sched_cgroup_fork+0x3d0/0x540 [ 128.451774] copy_process+0x4183/0x6e20 [ 128.451800] kernel_clone+0xe7/0x890 [ 128.451811] user_mode_thread+0xad/0xf0 [ 128.451821] rest_init+0x24/0x250 [ 128.451836] arch_call_rest_init+0xf/0x14 [ 128.451857] start_kernel+0x4c6/0x4eb [ 128.451875] secondary_startup_64_no_verify+0xe0/0xeb [ 128.451891] [ 128.451891] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 128.451905] _raw_spin_lock_irqsave+0x39/0x60 [ 128.451918] try_to_wake_up+0xab/0x1930 [ 128.451933] up+0x75/0xb0 [ 128.451950] __up_console_sem+0x6e/0x80 [ 128.451968] console_unlock+0x46a/0x590 [ 128.451986] vprintk_emit+0x1bd/0x560 [ 128.452004] vprintk+0x84/0xa0 [ 128.452022] _printk+0xba/0xf1 [ 128.452037] kauditd_hold_skb.cold+0x3f/0x4e [ 128.452058] kauditd_send_queue+0x233/0x290 [ 128.452075] kauditd_thread+0x5da/0x9a0 [ 128.452093] kthread+0x2ed/0x3a0 [ 128.452112] ret_from_fork+0x22/0x30 [ 128.452125] [ 128.452125] -> #0 ((console_sem).lock){....}-{2:2}: [ 128.452139] __lock_acquire+0x2a02/0x5e70 [ 128.452158] lock_acquire+0x1a2/0x530 [ 128.452176] _raw_spin_lock_irqsave+0x39/0x60 [ 128.452189] down_trylock+0xe/0x70 [ 128.452208] __down_trylock_console_sem+0x3b/0xd0 [ 128.452226] vprintk_emit+0x16b/0x560 [ 128.452244] vprintk+0x84/0xa0 [ 128.452261] _printk+0xba/0xf1 [ 128.452274] report_bug.cold+0x72/0xab [ 128.452284] handle_bug+0x3c/0x70 [ 128.452295] exc_invalid_op+0x14/0x50 [ 128.452306] asm_exc_invalid_op+0x16/0x20 [ 128.452320] group_sched_out.part.0+0x2c7/0x460 [ 128.452332] ctx_sched_out+0x8f1/0xc10 [ 128.452343] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.452356] __schedule+0xedd/0x2470 [ 128.452373] schedule+0xda/0x1b0 [ 128.452390] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.452401] syscall_exit_to_user_mode+0x19/0x40 [ 128.452416] do_syscall_64+0x48/0x90 [ 128.452427] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.452442] [ 128.452442] other info that might help us debug this: [ 128.452442] [ 128.452445] Chain exists of: [ 128.452445] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 128.452445] [ 128.452461] Possible unsafe locking scenario: [ 128.452461] [ 128.452463] CPU0 CPU1 [ 128.452466] ---- ---- [ 128.452468] lock(&ctx->lock); [ 128.452474] lock(&rq->__lock); [ 128.452481] lock(&ctx->lock); [ 128.452488] lock((console_sem).lock); [ 128.452494] [ 128.452494] *** DEADLOCK *** [ 128.452494] [ 128.452496] 2 locks held by syz-executor.5/3727: [ 128.452503] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 128.452536] #1: ffff88800e0e9020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.452566] [ 128.452566] stack backtrace: [ 128.452569] CPU: 0 PID: 3727 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220928 #1 [ 128.452583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.452591] Call Trace: [ 128.452595] [ 128.452599] dump_stack_lvl+0x8b/0xb3 [ 128.452612] check_noncircular+0x263/0x2e0 [ 128.452630] ? format_decode+0x26c/0xb50 [ 128.452650] ? print_circular_bug+0x450/0x450 [ 128.452669] ? enable_ptr_key_workfn+0x20/0x20 [ 128.452689] ? format_decode+0x26c/0xb50 [ 128.452713] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 128.452733] __lock_acquire+0x2a02/0x5e70 [ 128.452757] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.452782] lock_acquire+0x1a2/0x530 [ 128.452800] ? down_trylock+0xe/0x70 [ 128.452821] ? lock_release+0x750/0x750 [ 128.452844] ? vprintk+0x84/0xa0 [ 128.452864] _raw_spin_lock_irqsave+0x39/0x60 [ 128.452878] ? down_trylock+0xe/0x70 [ 128.452898] down_trylock+0xe/0x70 [ 128.452918] ? vprintk+0x84/0xa0 [ 128.452937] __down_trylock_console_sem+0x3b/0xd0 [ 128.452956] vprintk_emit+0x16b/0x560 [ 128.452977] vprintk+0x84/0xa0 [ 128.452996] _printk+0xba/0xf1 [ 128.453011] ? record_print_text.cold+0x16/0x16 [ 128.453029] ? report_bug.cold+0x66/0xab [ 128.453041] ? group_sched_out.part.0+0x2c7/0x460 [ 128.453054] report_bug.cold+0x72/0xab [ 128.453067] handle_bug+0x3c/0x70 [ 128.453078] exc_invalid_op+0x14/0x50 [ 128.453091] asm_exc_invalid_op+0x16/0x20 [ 128.453107] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.453121] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.453133] RSP: 0018:ffff888040b27c48 EFLAGS: 00010006 [ 128.453143] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.453151] RDX: ffff888018be8000 RSI: ffffffff815662f7 RDI: 0000000000000005 [ 128.453159] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 128.453167] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800e0e9000 [ 128.453175] R13: ffff88806ce3d140 R14: ffffffff8547d060 R15: 0000000000000002 [ 128.453187] ? group_sched_out.part.0+0x2c7/0x460 [ 128.453201] ? group_sched_out.part.0+0x2c7/0x460 [ 128.453215] ctx_sched_out+0x8f1/0xc10 [ 128.453229] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.453246] ? lock_is_held_type+0xd7/0x130 [ 128.453263] ? __perf_cgroup_move+0x160/0x160 [ 128.453276] ? set_next_entity+0x304/0x550 [ 128.453296] ? update_curr+0x267/0x740 [ 128.453317] ? lock_is_held_type+0xd7/0x130 [ 128.453334] __schedule+0xedd/0x2470 [ 128.453355] ? io_schedule_timeout+0x150/0x150 [ 128.453375] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.453398] schedule+0xda/0x1b0 [ 128.453417] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.453430] syscall_exit_to_user_mode+0x19/0x40 [ 128.453446] do_syscall_64+0x48/0x90 [ 128.453458] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.453474] RIP: 0033:0x7fd946843b19 [ 128.453483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.453494] RSP: 002b:00007fd943db9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.453505] RAX: 0000000000000001 RBX: 00007fd946956f68 RCX: 00007fd946843b19 [ 128.453513] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd946956f6c [ 128.453521] RBP: 00007fd946956f60 R08: 000000000000000e R09: 0000000000000000 [ 128.453529] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd946956f6c [ 128.453537] R13: 00007ffdd23c522f R14: 00007fd943db9300 R15: 0000000000022000 [ 128.453550] [ 128.509461] WARNING: CPU: 0 PID: 3727 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 128.510147] Modules linked in: [ 128.510393] CPU: 0 PID: 3727 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220928 #1 [ 128.510993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.511818] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.512227] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.513572] RSP: 0018:ffff888040b27c48 EFLAGS: 00010006 [ 128.513970] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.514506] RDX: ffff888018be8000 RSI: ffffffff815662f7 RDI: 0000000000000005 [ 128.515034] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 128.515569] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800e0e9000 [ 128.516102] R13: ffff88806ce3d140 R14: ffffffff8547d060 R15: 0000000000000002 [ 128.516636] FS: 00007fd943db9700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.517233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.517675] CR2: 00007fd946957018 CR3: 000000002e474000 CR4: 0000000000350ef0 [ 128.518209] Call Trace: [ 128.518416] [ 128.518591] ctx_sched_out+0x8f1/0xc10 [ 128.518889] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.519287] ? lock_is_held_type+0xd7/0x130 [ 128.519614] ? __perf_cgroup_move+0x160/0x160 [ 128.519971] ? set_next_entity+0x304/0x550 [ 128.520299] ? update_curr+0x267/0x740 [ 128.520607] ? lock_is_held_type+0xd7/0x130 [ 128.520938] __schedule+0xedd/0x2470 [ 128.521231] ? io_schedule_timeout+0x150/0x150 [ 128.521586] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.521960] schedule+0xda/0x1b0 [ 128.522231] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.522605] syscall_exit_to_user_mode+0x19/0x40 [ 128.522964] do_syscall_64+0x48/0x90 [ 128.523257] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.523646] RIP: 0033:0x7fd946843b19 [ 128.523938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.525278] RSP: 002b:00007fd943db9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.525843] RAX: 0000000000000001 RBX: 00007fd946956f68 RCX: 00007fd946843b19 [ 128.526370] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd946956f6c [ 128.526895] RBP: 00007fd946956f60 R08: 000000000000000e R09: 0000000000000000 [ 128.527422] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd946956f6c [ 128.527970] R13: 00007ffdd23c522f R14: 00007fd943db9300 R15: 0000000000022000 [ 128.528505] [ 128.528685] irq event stamp: 626 [ 128.528939] hardirqs last enabled at (625): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 128.529628] hardirqs last disabled at (626): [] __schedule+0x1225/0x2470 [ 128.530250] softirqs last enabled at (378): [] __irq_exit_rcu+0x11b/0x180 [ 128.530883] softirqs last disabled at (349): [] __irq_exit_rcu+0x11b/0x180 [ 128.531522] ---[ end trace 0000000000000000 ]--- 15:50:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r2, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x10}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x16, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) pwritev(r3, &(0x7f0000001680)=[{&(0x7f0000001200)="f541c61c510dcd467b390715966ed87832beab0fa3581dd76680bd5c992cb90df853812bf9b195243c9269688d74c7361e8555071076b2c6775d2864c932a70300f526db0044deb9b7d8330f38c737925314e1cd48303ce3a36a04b9903c2d50641b506cc6dcf538f80bc9ce34937dc80a7d96ea7938f3008733b29929142eb3ac030ed57a107dee7969fd7e1e747d94b8a7f920e8282136c0e4d26e524c085df19bcc9cc06b6a06539383a79ba14304e26167feb7e2a3f0ef5c3eb052552d2a4002baaecbb5e6416a7a7cb91d441dd4f6d1d1cc52b9dc7e287647b3226dcd8fd2ba974cf4f1878ebf2fc48c2f5b1cc712a07761cb54", 0xf6}, {&(0x7f0000001300)="6b4b00adf27405eb9cc9850e9c5ae6560d9f3d527eac8c29f57ebb19aeb70aa9d03f39bf8e67c67fe7a9af41eed959c5245274836fed9aaf0a155e05b867b2180acd21ef319c1b582c66e09aea46a793c461ba3a16f90d6014405b5f9903dba49d909498b2dc8f24e8f068de43f012cf9894d1799c00cd5658a737bf62b6dfae4b36995202b702696b5b15c33b7da5825ee92211a158849e3d34bacbfe9ba720547b2aad36ba9e0bce937e1189c168237c288e9de22d8a4af4b1d28ebd114b68b8b650d730e3ce587219", 0xca}, {&(0x7f0000001400)="d66b1d83f1d23f898e9fb4d32546e9dc323d7c891d682d1fcbf039ce3e70ac6cb566b77e39ed3d7f9c84555de99a32e8ec45943b93657ba1d6071cc97e5712ad89f6ad128da719ae1a896f77dac4a91813edb6f2c0b79794a3a2506fc74e1aa8c12aca93783f11d3d74e3860f010f9e28e086985e6d695eaa2d92a76c38161e9ecc3f6067662fef72578", 0x8a}, {&(0x7f00000014c0)="fa242fd3bb64d9acf7e8070def4e263092692ce07e14abb32703702a0e4dd0f893c1fc1a56938df42dfe32aaf820d784a1e95486f37218b3c30e1a38d688be726c8c7601f402abc3b255b9a5587ac41934feaab753805363b4f1e4c90db3ed9cdbae4d6d65d32836b8cacb3291a69b6178ae83f50a563186eae355f8ee4cee5d93cd428b5d9fd01d1be66e3d3aa2c2a9a05666caaba779083bddaab4839832ef2799cda3764a89ec8b3945dc8e1f21faaa069def3fd918e22f07bea5b96884c7353ab59e7953ebc2e0fd46d85b8b2a25a679905a7e6832abdefcb4699973223c1a08f627e9a111469aac", 0xea}, {&(0x7f00000015c0)="08d0ade40281714e382d121532b1b1b479a1d88fd50ea2b72e4107235572fc1114617bf8967f162ac90316ff75959437e4cde24a402037894e54e573b56a37aaf6f77f39829a55df7ae601789debcc59033536895950079efe3f39a3f4aa369003ee9e0d56d31d94b86366fdc94ec6056dba2078ce02855bf011e8fb66cd74edf5a3557b1f9e603dfe67f9af54cb9888ea4dd320da6563a4558ccad8ed9b586259a70421ce4ae70ebc88", 0xaa}], 0x5, 0xffffffff, 0x7) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000001180)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) [ 128.678831] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 128.708122] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 128.717087] syz-executor.6 (3741) used greatest stack depth: 22680 bytes left 15:50:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r2, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x10}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x16, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) pwritev(r3, &(0x7f0000001680)=[{&(0x7f0000001200)="f541c61c510dcd467b390715966ed87832beab0fa3581dd76680bd5c992cb90df853812bf9b195243c9269688d74c7361e8555071076b2c6775d2864c932a70300f526db0044deb9b7d8330f38c737925314e1cd48303ce3a36a04b9903c2d50641b506cc6dcf538f80bc9ce34937dc80a7d96ea7938f3008733b29929142eb3ac030ed57a107dee7969fd7e1e747d94b8a7f920e8282136c0e4d26e524c085df19bcc9cc06b6a06539383a79ba14304e26167feb7e2a3f0ef5c3eb052552d2a4002baaecbb5e6416a7a7cb91d441dd4f6d1d1cc52b9dc7e287647b3226dcd8fd2ba974cf4f1878ebf2fc48c2f5b1cc712a07761cb54", 0xf6}, {&(0x7f0000001300)="6b4b00adf27405eb9cc9850e9c5ae6560d9f3d527eac8c29f57ebb19aeb70aa9d03f39bf8e67c67fe7a9af41eed959c5245274836fed9aaf0a155e05b867b2180acd21ef319c1b582c66e09aea46a793c461ba3a16f90d6014405b5f9903dba49d909498b2dc8f24e8f068de43f012cf9894d1799c00cd5658a737bf62b6dfae4b36995202b702696b5b15c33b7da5825ee92211a158849e3d34bacbfe9ba720547b2aad36ba9e0bce937e1189c168237c288e9de22d8a4af4b1d28ebd114b68b8b650d730e3ce587219", 0xca}, {&(0x7f0000001400)="d66b1d83f1d23f898e9fb4d32546e9dc323d7c891d682d1fcbf039ce3e70ac6cb566b77e39ed3d7f9c84555de99a32e8ec45943b93657ba1d6071cc97e5712ad89f6ad128da719ae1a896f77dac4a91813edb6f2c0b79794a3a2506fc74e1aa8c12aca93783f11d3d74e3860f010f9e28e086985e6d695eaa2d92a76c38161e9ecc3f6067662fef72578", 0x8a}, {&(0x7f00000014c0)="fa242fd3bb64d9acf7e8070def4e263092692ce07e14abb32703702a0e4dd0f893c1fc1a56938df42dfe32aaf820d784a1e95486f37218b3c30e1a38d688be726c8c7601f402abc3b255b9a5587ac41934feaab753805363b4f1e4c90db3ed9cdbae4d6d65d32836b8cacb3291a69b6178ae83f50a563186eae355f8ee4cee5d93cd428b5d9fd01d1be66e3d3aa2c2a9a05666caaba779083bddaab4839832ef2799cda3764a89ec8b3945dc8e1f21faaa069def3fd918e22f07bea5b96884c7353ab59e7953ebc2e0fd46d85b8b2a25a679905a7e6832abdefcb4699973223c1a08f627e9a111469aac", 0xea}, {&(0x7f00000015c0)="08d0ade40281714e382d121532b1b1b479a1d88fd50ea2b72e4107235572fc1114617bf8967f162ac90316ff75959437e4cde24a402037894e54e573b56a37aaf6f77f39829a55df7ae601789debcc59033536895950079efe3f39a3f4aa369003ee9e0d56d31d94b86366fdc94ec6056dba2078ce02855bf011e8fb66cd74edf5a3557b1f9e603dfe67f9af54cb9888ea4dd320da6563a4558ccad8ed9b586259a70421ce4ae70ebc88", 0xaa}], 0x5, 0xffffffff, 0x7) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000001180)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) [ 128.776291] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 15:50:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r2, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x10}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x16, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) pwritev(r3, &(0x7f0000001680)=[{&(0x7f0000001200)="f541c61c510dcd467b390715966ed87832beab0fa3581dd76680bd5c992cb90df853812bf9b195243c9269688d74c7361e8555071076b2c6775d2864c932a70300f526db0044deb9b7d8330f38c737925314e1cd48303ce3a36a04b9903c2d50641b506cc6dcf538f80bc9ce34937dc80a7d96ea7938f3008733b29929142eb3ac030ed57a107dee7969fd7e1e747d94b8a7f920e8282136c0e4d26e524c085df19bcc9cc06b6a06539383a79ba14304e26167feb7e2a3f0ef5c3eb052552d2a4002baaecbb5e6416a7a7cb91d441dd4f6d1d1cc52b9dc7e287647b3226dcd8fd2ba974cf4f1878ebf2fc48c2f5b1cc712a07761cb54", 0xf6}, {&(0x7f0000001300)="6b4b00adf27405eb9cc9850e9c5ae6560d9f3d527eac8c29f57ebb19aeb70aa9d03f39bf8e67c67fe7a9af41eed959c5245274836fed9aaf0a155e05b867b2180acd21ef319c1b582c66e09aea46a793c461ba3a16f90d6014405b5f9903dba49d909498b2dc8f24e8f068de43f012cf9894d1799c00cd5658a737bf62b6dfae4b36995202b702696b5b15c33b7da5825ee92211a158849e3d34bacbfe9ba720547b2aad36ba9e0bce937e1189c168237c288e9de22d8a4af4b1d28ebd114b68b8b650d730e3ce587219", 0xca}, {&(0x7f0000001400)="d66b1d83f1d23f898e9fb4d32546e9dc323d7c891d682d1fcbf039ce3e70ac6cb566b77e39ed3d7f9c84555de99a32e8ec45943b93657ba1d6071cc97e5712ad89f6ad128da719ae1a896f77dac4a91813edb6f2c0b79794a3a2506fc74e1aa8c12aca93783f11d3d74e3860f010f9e28e086985e6d695eaa2d92a76c38161e9ecc3f6067662fef72578", 0x8a}, {&(0x7f00000014c0)="fa242fd3bb64d9acf7e8070def4e263092692ce07e14abb32703702a0e4dd0f893c1fc1a56938df42dfe32aaf820d784a1e95486f37218b3c30e1a38d688be726c8c7601f402abc3b255b9a5587ac41934feaab753805363b4f1e4c90db3ed9cdbae4d6d65d32836b8cacb3291a69b6178ae83f50a563186eae355f8ee4cee5d93cd428b5d9fd01d1be66e3d3aa2c2a9a05666caaba779083bddaab4839832ef2799cda3764a89ec8b3945dc8e1f21faaa069def3fd918e22f07bea5b96884c7353ab59e7953ebc2e0fd46d85b8b2a25a679905a7e6832abdefcb4699973223c1a08f627e9a111469aac", 0xea}, {&(0x7f00000015c0)="08d0ade40281714e382d121532b1b1b479a1d88fd50ea2b72e4107235572fc1114617bf8967f162ac90316ff75959437e4cde24a402037894e54e573b56a37aaf6f77f39829a55df7ae601789debcc59033536895950079efe3f39a3f4aa369003ee9e0d56d31d94b86366fdc94ec6056dba2078ce02855bf011e8fb66cd74edf5a3557b1f9e603dfe67f9af54cb9888ea4dd320da6563a4558ccad8ed9b586259a70421ce4ae70ebc88", 0xaa}], 0x5, 0xffffffff, 0x7) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000001180)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) [ 128.956393] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 15:50:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f0000000bc0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = gettid() kcmp(r3, 0x0, 0x0, r2, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r4, &(0x7f0000000300)='./file1\x00', 0x420000, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) utime(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)={0x3, 0x2473}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0x6, 0x6, 0xb6f, 0x9, 0x47c9}) socket$inet_udp(0x2, 0x2, 0x0) 15:50:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f0000000bc0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = gettid() kcmp(r3, 0x0, 0x0, r2, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r4, &(0x7f0000000300)='./file1\x00', 0x420000, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) utime(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)={0x3, 0x2473}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0x6, 0x6, 0xb6f, 0x9, 0x47c9}) socket$inet_udp(0x2, 0x2, 0x0) 15:50:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f0000000bc0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = gettid() kcmp(r3, 0x0, 0x0, r2, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r4, &(0x7f0000000300)='./file1\x00', 0x420000, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) utime(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)={0x3, 0x2473}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0x6, 0x6, 0xb6f, 0x9, 0x47c9}) socket$inet_udp(0x2, 0x2, 0x0) 15:50:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f0000000bc0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = gettid() kcmp(r3, 0x0, 0x0, r2, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r4, &(0x7f0000000300)='./file1\x00', 0x420000, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) utime(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)={0x3, 0x2473}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0x6, 0x6, 0xb6f, 0x9, 0x47c9}) socket$inet_udp(0x2, 0x2, 0x0) VM DIAGNOSIS: 15:50:11 Registers: info registers vcpu 0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba131 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff888040b27690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000035 R11=0000000000000001 R12=0000000000000035 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba120 RIP=ffffffff823ba189 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd943db9700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd946957018 CR3=000000002e474000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fd94692a7c0 00007fd94692a7c8 YMM02=0000000000000000 0000000000000000 00007fd94692a7e0 00007fd94692a7c0 YMM03=0000000000000000 0000000000000000 00007fd94692a7c8 00007fd94692a7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000010 RCX=0000000000000d68 RDX=0000000000000010 RSI=000056425a8fcf14 RDI=000056425c7756b0 RBP=0000000000000d68 RSP=00007fff22237940 R8 =0000000000000000 R9 =000000000000000a R10=0000000000000001 R11=0000000000000000 R12=00007fa9e60448a0 R13=00007fff22237ef0 R14=0000000000000010 R15=000056425a8fcf14 RIP=00007fa9e5f07b70 RFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa9e56ba900 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f46cfae56f4 CR3=000000000e796000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 de798eec7708fe35 00000000000fa3f0 YMM04=0000000000000000 0000000000000000 c37b4d4c701008ea 00000000000ae988 YMM05=0000000000000000 0000000000000000 7f07bd0cf8fefc50 0000000000135d28 YMM06=0000000000000000 0000000000000000 0bdaa103d43fdc26 0000000000135be0 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 3d5954494c494341 465f474f4c535953 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 2000000000000000 2000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000