Warning: Permanently added '[localhost]:59165' (ECDSA) to the list of known hosts. 2022/09/27 06:28:48 fuzzer started 2022/09/27 06:28:49 dialing manager at localhost:38881 syzkaller login: [ 44.180910] cgroup: Unknown subsys name 'net' [ 44.372143] cgroup: Unknown subsys name 'rlimit' 2022/09/27 06:29:04 syscalls: 2215 2022/09/27 06:29:04 code coverage: enabled 2022/09/27 06:29:04 comparison tracing: enabled 2022/09/27 06:29:04 extra coverage: enabled 2022/09/27 06:29:04 setuid sandbox: enabled 2022/09/27 06:29:04 namespace sandbox: enabled 2022/09/27 06:29:04 Android sandbox: enabled 2022/09/27 06:29:04 fault injection: enabled 2022/09/27 06:29:04 leak checking: enabled 2022/09/27 06:29:04 net packet injection: enabled 2022/09/27 06:29:04 net device setup: enabled 2022/09/27 06:29:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/27 06:29:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/27 06:29:04 USB emulation: enabled 2022/09/27 06:29:04 hci packet injection: enabled 2022/09/27 06:29:04 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/27 06:29:04 802.15.4 emulation: enabled 2022/09/27 06:29:04 fetching corpus: 50, signal 22981/24831 (executing program) 2022/09/27 06:29:04 fetching corpus: 100, signal 32878/36414 (executing program) 2022/09/27 06:29:04 fetching corpus: 150, signal 44298/49304 (executing program) 2022/09/27 06:29:04 fetching corpus: 200, signal 52429/58884 (executing program) 2022/09/27 06:29:04 fetching corpus: 250, signal 60308/68070 (executing program) 2022/09/27 06:29:04 fetching corpus: 300, signal 64359/73535 (executing program) 2022/09/27 06:29:04 fetching corpus: 350, signal 67374/77889 (executing program) 2022/09/27 06:29:04 fetching corpus: 400, signal 72758/84458 (executing program) 2022/09/27 06:29:05 fetching corpus: 450, signal 74619/87694 (executing program) 2022/09/27 06:29:05 fetching corpus: 500, signal 79092/93329 (executing program) 2022/09/27 06:29:05 fetching corpus: 550, signal 81384/96851 (executing program) 2022/09/27 06:29:05 fetching corpus: 600, signal 82867/99626 (executing program) 2022/09/27 06:29:05 fetching corpus: 650, signal 88136/105835 (executing program) 2022/09/27 06:29:05 fetching corpus: 700, signal 93103/111718 (executing program) 2022/09/27 06:29:05 fetching corpus: 750, signal 95089/114803 (executing program) 2022/09/27 06:29:05 fetching corpus: 800, signal 97151/117952 (executing program) 2022/09/27 06:29:06 fetching corpus: 850, signal 98554/120466 (executing program) 2022/09/27 06:29:06 fetching corpus: 900, signal 101522/124310 (executing program) 2022/09/27 06:29:06 fetching corpus: 950, signal 103655/127396 (executing program) 2022/09/27 06:29:06 fetching corpus: 1000, signal 107113/131582 (executing program) 2022/09/27 06:29:06 fetching corpus: 1050, signal 108873/134260 (executing program) 2022/09/27 06:29:06 fetching corpus: 1100, signal 110937/137214 (executing program) 2022/09/27 06:29:06 fetching corpus: 1150, signal 113907/140895 (executing program) 2022/09/27 06:29:06 fetching corpus: 1200, signal 115854/143705 (executing program) 2022/09/27 06:29:06 fetching corpus: 1250, signal 117995/146629 (executing program) 2022/09/27 06:29:07 fetching corpus: 1300, signal 119387/148908 (executing program) 2022/09/27 06:29:07 fetching corpus: 1350, signal 120429/150884 (executing program) 2022/09/27 06:29:07 fetching corpus: 1400, signal 121736/153033 (executing program) 2022/09/27 06:29:07 fetching corpus: 1450, signal 123481/155528 (executing program) 2022/09/27 06:29:07 fetching corpus: 1500, signal 125253/158042 (executing program) 2022/09/27 06:29:07 fetching corpus: 1550, signal 126987/160515 (executing program) 2022/09/27 06:29:07 fetching corpus: 1600, signal 128986/163141 (executing program) 2022/09/27 06:29:07 fetching corpus: 1650, signal 130068/165057 (executing program) 2022/09/27 06:29:07 fetching corpus: 1700, signal 131093/166889 (executing program) 2022/09/27 06:29:08 fetching corpus: 1750, signal 131856/168501 (executing program) 2022/09/27 06:29:08 fetching corpus: 1800, signal 132819/170244 (executing program) 2022/09/27 06:29:08 fetching corpus: 1850, signal 134681/172602 (executing program) 2022/09/27 06:29:08 fetching corpus: 1900, signal 135382/174100 (executing program) 2022/09/27 06:29:08 fetching corpus: 1950, signal 136667/176063 (executing program) 2022/09/27 06:29:08 fetching corpus: 2000, signal 138501/178443 (executing program) 2022/09/27 06:29:08 fetching corpus: 2050, signal 139351/180046 (executing program) 2022/09/27 06:29:08 fetching corpus: 2100, signal 140015/181504 (executing program) 2022/09/27 06:29:08 fetching corpus: 2150, signal 140938/183124 (executing program) 2022/09/27 06:29:08 fetching corpus: 2200, signal 141744/184661 (executing program) 2022/09/27 06:29:09 fetching corpus: 2250, signal 143227/186671 (executing program) 2022/09/27 06:29:09 fetching corpus: 2300, signal 144622/188604 (executing program) 2022/09/27 06:29:09 fetching corpus: 2350, signal 145160/189911 (executing program) 2022/09/27 06:29:09 fetching corpus: 2400, signal 146244/191535 (executing program) 2022/09/27 06:29:09 fetching corpus: 2450, signal 147452/193209 (executing program) 2022/09/27 06:29:09 fetching corpus: 2500, signal 148198/194602 (executing program) 2022/09/27 06:29:09 fetching corpus: 2550, signal 149680/196507 (executing program) 2022/09/27 06:29:09 fetching corpus: 2600, signal 150430/197921 (executing program) 2022/09/27 06:29:09 fetching corpus: 2650, signal 151511/199481 (executing program) 2022/09/27 06:29:10 fetching corpus: 2700, signal 152171/200766 (executing program) 2022/09/27 06:29:10 fetching corpus: 2750, signal 153711/202619 (executing program) 2022/09/27 06:29:10 fetching corpus: 2800, signal 155003/204292 (executing program) 2022/09/27 06:29:10 fetching corpus: 2850, signal 155981/205759 (executing program) 2022/09/27 06:29:10 fetching corpus: 2900, signal 156553/206986 (executing program) 2022/09/27 06:29:10 fetching corpus: 2950, signal 157691/208491 (executing program) 2022/09/27 06:29:10 fetching corpus: 3000, signal 158819/210056 (executing program) 2022/09/27 06:29:10 fetching corpus: 3050, signal 159523/211270 (executing program) 2022/09/27 06:29:10 fetching corpus: 3100, signal 160262/212491 (executing program) 2022/09/27 06:29:11 fetching corpus: 3150, signal 161306/213860 (executing program) 2022/09/27 06:29:11 fetching corpus: 3200, signal 162363/215239 (executing program) 2022/09/27 06:29:11 fetching corpus: 3250, signal 163519/216666 (executing program) 2022/09/27 06:29:11 fetching corpus: 3300, signal 164197/217818 (executing program) 2022/09/27 06:29:11 fetching corpus: 3350, signal 165178/219089 (executing program) 2022/09/27 06:29:11 fetching corpus: 3400, signal 165640/220133 (executing program) 2022/09/27 06:29:11 fetching corpus: 3450, signal 166372/221395 (executing program) 2022/09/27 06:29:11 fetching corpus: 3500, signal 166952/222465 (executing program) 2022/09/27 06:29:12 fetching corpus: 3550, signal 167565/223529 (executing program) 2022/09/27 06:29:12 fetching corpus: 3600, signal 168398/224669 (executing program) 2022/09/27 06:29:12 fetching corpus: 3650, signal 168811/225672 (executing program) 2022/09/27 06:29:12 fetching corpus: 3700, signal 169419/226749 (executing program) 2022/09/27 06:29:12 fetching corpus: 3750, signal 170113/227822 (executing program) 2022/09/27 06:29:12 fetching corpus: 3800, signal 170907/228909 (executing program) 2022/09/27 06:29:12 fetching corpus: 3850, signal 171789/230045 (executing program) 2022/09/27 06:29:12 fetching corpus: 3900, signal 173151/231361 (executing program) 2022/09/27 06:29:13 fetching corpus: 3950, signal 174370/232608 (executing program) 2022/09/27 06:29:13 fetching corpus: 4000, signal 174908/233565 (executing program) 2022/09/27 06:29:13 fetching corpus: 4050, signal 175996/234776 (executing program) 2022/09/27 06:29:13 fetching corpus: 4100, signal 176302/235664 (executing program) 2022/09/27 06:29:13 fetching corpus: 4150, signal 176834/236610 (executing program) 2022/09/27 06:29:13 fetching corpus: 4200, signal 177600/237607 (executing program) 2022/09/27 06:29:13 fetching corpus: 4250, signal 178537/238649 (executing program) 2022/09/27 06:29:13 fetching corpus: 4300, signal 179114/239589 (executing program) 2022/09/27 06:29:13 fetching corpus: 4350, signal 179328/240337 (executing program) 2022/09/27 06:29:13 fetching corpus: 4400, signal 179992/241273 (executing program) 2022/09/27 06:29:14 fetching corpus: 4450, signal 180828/242257 (executing program) 2022/09/27 06:29:14 fetching corpus: 4500, signal 181374/243129 (executing program) 2022/09/27 06:29:14 fetching corpus: 4550, signal 181988/244016 (executing program) 2022/09/27 06:29:14 fetching corpus: 4600, signal 182902/245123 (executing program) 2022/09/27 06:29:14 fetching corpus: 4650, signal 183544/245978 (executing program) 2022/09/27 06:29:14 fetching corpus: 4700, signal 184744/247024 (executing program) 2022/09/27 06:29:14 fetching corpus: 4750, signal 185657/248015 (executing program) 2022/09/27 06:29:14 fetching corpus: 4800, signal 186431/248910 (executing program) 2022/09/27 06:29:14 fetching corpus: 4850, signal 186896/249627 (executing program) 2022/09/27 06:29:15 fetching corpus: 4900, signal 187417/250408 (executing program) 2022/09/27 06:29:15 fetching corpus: 4950, signal 188080/251207 (executing program) 2022/09/27 06:29:15 fetching corpus: 5000, signal 188659/252011 (executing program) 2022/09/27 06:29:15 fetching corpus: 5050, signal 189219/252780 (executing program) 2022/09/27 06:29:15 fetching corpus: 5100, signal 189729/253570 (executing program) 2022/09/27 06:29:15 fetching corpus: 5150, signal 190660/254449 (executing program) 2022/09/27 06:29:15 fetching corpus: 5200, signal 191072/255175 (executing program) 2022/09/27 06:29:15 fetching corpus: 5250, signal 191715/255955 (executing program) 2022/09/27 06:29:15 fetching corpus: 5300, signal 192281/256699 (executing program) 2022/09/27 06:29:16 fetching corpus: 5350, signal 192765/257442 (executing program) 2022/09/27 06:29:16 fetching corpus: 5400, signal 193322/258171 (executing program) 2022/09/27 06:29:16 fetching corpus: 5450, signal 193912/258877 (executing program) 2022/09/27 06:29:16 fetching corpus: 5500, signal 194515/259604 (executing program) 2022/09/27 06:29:16 fetching corpus: 5550, signal 195538/260380 (executing program) 2022/09/27 06:29:16 fetching corpus: 5600, signal 195898/261050 (executing program) 2022/09/27 06:29:16 fetching corpus: 5650, signal 196470/261704 (executing program) 2022/09/27 06:29:16 fetching corpus: 5700, signal 197174/262438 (executing program) 2022/09/27 06:29:16 fetching corpus: 5750, signal 198115/263197 (executing program) 2022/09/27 06:29:17 fetching corpus: 5800, signal 198418/263772 (executing program) 2022/09/27 06:29:17 fetching corpus: 5850, signal 198934/264435 (executing program) 2022/09/27 06:29:17 fetching corpus: 5900, signal 199339/265075 (executing program) 2022/09/27 06:29:17 fetching corpus: 5950, signal 200162/265720 (executing program) 2022/09/27 06:29:17 fetching corpus: 6000, signal 200881/266371 (executing program) 2022/09/27 06:29:17 fetching corpus: 6050, signal 201276/266958 (executing program) 2022/09/27 06:29:17 fetching corpus: 6100, signal 202355/267579 (executing program) 2022/09/27 06:29:17 fetching corpus: 6150, signal 202935/268185 (executing program) 2022/09/27 06:29:17 fetching corpus: 6200, signal 203428/268763 (executing program) 2022/09/27 06:29:18 fetching corpus: 6250, signal 203986/269273 (executing program) 2022/09/27 06:29:18 fetching corpus: 6300, signal 205237/269885 (executing program) 2022/09/27 06:29:18 fetching corpus: 6350, signal 205754/270503 (executing program) 2022/09/27 06:29:18 fetching corpus: 6400, signal 206332/271044 (executing program) 2022/09/27 06:29:18 fetching corpus: 6450, signal 206716/271522 (executing program) 2022/09/27 06:29:18 fetching corpus: 6500, signal 207330/272082 (executing program) 2022/09/27 06:29:18 fetching corpus: 6550, signal 207571/272575 (executing program) 2022/09/27 06:29:18 fetching corpus: 6600, signal 208017/273078 (executing program) 2022/09/27 06:29:18 fetching corpus: 6650, signal 208473/273596 (executing program) 2022/09/27 06:29:19 fetching corpus: 6700, signal 208734/274097 (executing program) 2022/09/27 06:29:19 fetching corpus: 6750, signal 209346/274586 (executing program) 2022/09/27 06:29:19 fetching corpus: 6800, signal 210020/275036 (executing program) 2022/09/27 06:29:19 fetching corpus: 6850, signal 210419/275040 (executing program) 2022/09/27 06:29:19 fetching corpus: 6900, signal 210849/275040 (executing program) 2022/09/27 06:29:19 fetching corpus: 6950, signal 211312/275042 (executing program) 2022/09/27 06:29:19 fetching corpus: 7000, signal 212053/275045 (executing program) 2022/09/27 06:29:19 fetching corpus: 7050, signal 212261/275045 (executing program) 2022/09/27 06:29:19 fetching corpus: 7100, signal 212537/275060 (executing program) 2022/09/27 06:29:20 fetching corpus: 7150, signal 213382/275066 (executing program) 2022/09/27 06:29:20 fetching corpus: 7200, signal 213867/275066 (executing program) 2022/09/27 06:29:20 fetching corpus: 7250, signal 214687/275066 (executing program) 2022/09/27 06:29:20 fetching corpus: 7300, signal 215688/275066 (executing program) 2022/09/27 06:29:20 fetching corpus: 7350, signal 216048/275088 (executing program) 2022/09/27 06:29:20 fetching corpus: 7400, signal 216396/275088 (executing program) 2022/09/27 06:29:20 fetching corpus: 7450, signal 216805/275088 (executing program) 2022/09/27 06:29:20 fetching corpus: 7500, signal 217578/275094 (executing program) 2022/09/27 06:29:21 fetching corpus: 7546, signal 217862/275094 (executing program) 2022/09/27 06:29:21 fetching corpus: 7546, signal 217862/275094 (executing program) 2022/09/27 06:29:23 starting 8 fuzzer processes 06:29:23 executing program 0: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)={[0x3000000000000000]}, 0x8) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = open(&(0x7f0000001280)='./file0\x00', 0x7580c36aeec7072c, 0x8) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001300)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x0, 0x16, 0x5, 0x9, 0x0, 0x6f1e, 0x9107, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, @perf_bp={&(0x7f00000014c0), 0xb}, 0x4800, 0x1c, 0x1, 0x0, 0x5, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x40c15570}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r5 = openat2(0xffffffffffffffff, &(0x7f0000001700)='./file0\x00', &(0x7f0000001740)={0x600483, 0x0, 0x6}, 0x18) r6 = syz_mount_image$vfat(&(0x7f0000001840), &(0x7f0000001880)='./file0\x00', 0x4, 0x1, &(0x7f0000001980)=[{&(0x7f00000018c0)="2f963d94e612df5909417a8bbf522047afaca3e0112c2920e4979bfb622189bd53d09ca48f628ce129ba097aff316d8cdfe591b6f92cfff2e13066bcbf347f3f510ddf67f610cc8933e63ae70efe4c6f3f14cf7564a67a5e27307eb26fa22fb9942199f926325a842d8c975aa08eeb55176f373ccff3161dbe42d8fabdd1084a1a1f3fdbcc6d242883cac16f0780357547f70e2193268f8ea19ab0639c", 0x9d, 0x800}], 0x2000000, &(0x7f00000019c0)={[{@shortname_win95}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@nonumtail}, {@shortname_win95}, {@fat=@allow_utime}]}) io_submit(0x0, 0x9, &(0x7f0000001ac0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xff, 0xffffffffffffffff, &(0x7f00000000c0)="cca17c94c70ea0c71aa27fc9", 0xc, 0x2, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f0000000140)="0f74184753951d9b976023b774a855807b751e3fb06eb9539686ceee9a4157aa964c186dce438666bb3bf9dd0654ca620f07466388dedc94cec59f2c65b93ca1c784237d8c4ffa55e417f889743f19ea355edf32dd1ab9a20dffdd6dd31b7e355677818e7ac76aa747170b37c52c16479e221eee5d3eb39d0c7ed65c84f79814df837e2eb8f756a7dc2aabb905787e82474eb2cb4d3e5b42bc58d2aa45c9038208e7da69bc205c3778538d34811c0ab6bb465c80", 0xb4, 0x80000000, 0x0, 0x1, r1}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="72a07f572ae62d707241211506e61dae3c86a3e46007ad11a5acc1a69330adf7c50f8dc8443ca10a2e516d20023a9b32c6205df1b514f8ecbfd32156de2d3a1965d9ae6685480871401013e6062fa71384a9141dffd68a85dfd79ef1a68260fe4c6802191d02cf1b54974df9e3c71644ed166a55797dbccf0fe6e6f2e9cb96d6ace71e73b19af9949336c900f646db09848f91cd5cd8e8819ab683d6e0542ac7854329cfefa0857479507e3762050d92d66698b082dc15476e12824c7251fd318dadd14e4102ebb21d7654614c7f4e7793a3a2579aa3da913c3a85b49ff1b953e2ca5098cdf20a26125d2cd5d9f6722a3ff44f1f472f8a34fa051af35edc430397ef55f5cafb13b9f940afe72585efd08831a56afb5ce17fa2a5eee02c959df4f3f38dceb3faf7d7941cfac7e0c4acd69d133fd28bf7bf9b68b8d866172224e9663b1f1cc71ec2d8f88b749deaa53bdae17f7c2d2fffe1841e92bf8097bb8890f99489632f61ac7624a1ebf6eeae12c3e3b8d4b628921a176fe9b5e99144eacdb9956bebd1ef9cfb807d9f39896f998570ee3fc909feb36763d7bd2fbb3240b810d85af3dc641e4b09799318a4a6f3562d3f7fca9674c30301c94bd41c7afd9606168083e6e1bc472589cc245a722f6b04a82b06a5b884792de5e0fca9638a853dbfb9e9f5bcc2c9ef7bed23c01dc815d7da626478517139de0ab3d3b203a22b30b873d16795e2558239605db0b6afed4961f2d7feb1d57c761a9ce66079132351a53b5b2642b9618aed956579b245c0d1d5c08d97c72ccc77f675de215f92e7246820a0bea220d363f9b3066dadb6cd55bf41971edc4fe0bbcf11e1fc912aae7b61d7a7135d7053c53fa8c567b46ac4179d78e96bdc725123e5487f269ca5d8d2718018f3ca9c4968dc0ab7232c77b1ee16862100c9db5bcfa1d47e66c389fe5f1e54c512126ff37876bdc45e6345c46124f55ac967eafe22a76a399a05a440bf2f599dcd6690189a4fc22e9b32beeaac716cfa01a2b1cb2d0b7cb5eff149db53231bdda19f4d18b0f7e5d642846d0f15ce8c16c1dd3d5c807351ce77eae54e5801a95205fdc5ea895d4116d8bf967892c869f6ad7cdd51680485d3afade73c9b1bb034d9e964f3f3cb7ce865aef0a6c7f3fcd5ff00d4f69c10a234573305278a216e8e80a1ed3e2aa3cc4fd59389d2dc738867cf48d61bd97ded11e2b0b14dbcaab50b93319649216ab73667ec62b3df20cbd304f4dc12f9b420d45b04a85db8a46b2ce363b3076d1dad2844d37342eb11430b10b2660401414321da4716dded0e334d3fc2a2d4e7433fbf24a29d6b7edb4c84c4f3978e8637f65580e7f43f59eb8825bb76de0ea00e9e58e7adc887f893e6822fe77dff024f38547386007880185c3de99d9e3149cd4505258977b9ca92ec25db5407b0ef6d26a109833d7de770c1697be02947d6138bf6746b41138dd8cc40c7c900c7b4d5315d90d6569d8e134b50d769c402da3428e046de19ece4c72155ec5e6291d8d3c8254cf0342d6681ddf292c1cac371893462521f48dd01ed85e6dff1dbcc48de767e5277bfba8b4f45effdb29e595439db9dc7919efaafae82b3bd69ae0d64bd5117af7a0fb3581b7cf216bd5667ff8f199a87a0c57933793203f40f302afde3fbce88d7ba97ab0bb102ae3086c9fdb447b0ce90156b9d2ea6512a8fa35da3f8253b514e5119cc568260e135475dce2efc5d09eaac0bdcd1d4f4022ec701f4e88ec5f58d859af979acd94ccb30e6dc0c075c81ea37ef8f07395c06c5f86dd21d4cacc8ae88d6d81e57fe374a487f26ad3285054e489fa2ddca8bd165de4cef404d25fb18ab0042e67599a757e19b167604cc904fc1020efa0d4df38835f10e56e918d28fb96c0f00a4c3f539761388beaa0baab9ff49fbf3989fd0d01e4b36c357ab4d386da1dfab3f8be4a5dc64298af44f3de9ef5282f445f36cda03065dda0d8a4bafce39155fe25b9d215da2d8e0a5b7c5a021d7a755f17bf3eab4f277a2c470cd8dc8509aa107b2a4e24e5aceca32d06212a9960b3373814a854c5f47eac52a6080ddd116533a3983c1d8c4c85a2f8c28b3013139982a8655be474111ee025762b24765b048feb857b535351ea110d39868d070ac3c85bc8cb2d031281f2de1a497c724fdc255791fa899e0b112dd704e661906b125a31cf2ced8ceb71c02b26df98ea18a2a028501af747e5b8d9935d2c3a0a3932968a5802557e3ea4fcb775291c7411b6b38f7ea91ba7ebf535b0fa1494984fffb257f18fcea6581af5fb38ee736e7b9bd5c137ffa17f55ec2b9cc168e4bfb7aabec0654e46c903a5ae8852694867e65ce441d5d30dddd3a86bb5468649cb20037b5cfb900b33575a106f2a7f9cd88588548833dbdae267cab041690166aca3d2087e7a37fae97384448854822cc34e650237033e8dea09923888dbbff7a8d809807f8a332ce3d811971df0638665a4cb68a4044ab2547d02b8889f8272b7adee24bf2c787e03318196f98aa52007b7c5e3e33ec127ccee66fcffc71b9036553a3147f08c2063cd9d64e2ebe9f7fe65d348585513a2ba6fcb37a0c9c19046b735e1e04b4c9b06867e9538ec2575e991c3f02b571b10b33eff1ab4c618a81574855c83ebce3ff8d9c0cff24be291f22a357f95cca607c1013b3356402d686d8c584482e795e460735ace8b5e4c28e8ee1f045935e357f82073e2778d4e7979579731b38a69222eb34249e8de322d1abb2a4fbaa0930133bf420acb0aba742c97bf02418545c08e5e9d457524ffeb84a757cab6b8d7fe4d8212d94866e38744e292c438f4a36ef3b7ba6add33d893890ec63f4a41900d4a71d27d1367f280f0eaf3e317d2bf89e9de9949c5516c077c61ce695f0d516e2affd4bead2aa54e90bafefe089b83871c4b9ac99307c4f8b19b88edd9741e187ce97086276e1c0d0b97e88bbda43987b3d95ff0bdcbee47fb5b3711676bae9ffce0978bcebf792c80bd6a1fb8e6742e233531dd250e328ae7e199dcee7e755c3b19f797c4e8ad730d1474673ec2ba22e332d1565a25e90771003c80a4addeddda295cfe1ba78856522b74a95c5b8b5196ad2d2b5790a9c28b200b16a06c96011e23f903340d62da6d1a6d82413a7f39694eb53d33a98e18ffc86d804a4136b5167a7a3a06ee19af932f562820050f90f1f3309b2bb1af5b6d91d6e4aa0c0281429c136fb1537d93c39c7a132ada5cc364a48231979304db06793f8c26f3ad91e1b49eeab2c6c818ab4e7a4cd397083ad1bf345d033f47789d05bd25f147296d90ae74139552ff7dc0bb1bf8680ca0f1e09e809e869ae481a1d6f08c9ff8669e04c681d880303ea5f5d98ff64defe9b1d17e87910673ef70e456915d5e8a0e410c9a32319440ae68e02222e1dd6aaed929c87eda83bee0abe8e05cdcbc52657492be7a72101bc62fcea6f22ccbe148d55448be85da412d71f8262b9ff0777c4e9085c7e1e16048bf37107c8ef26e9c9edaeee3fb4f16af54f4928a034ee742404a94720b8d6101eba5481cf067d02597387138f5885307029da223af5e035d07c175d5a8286a2b18a2f4d39a6f033e213484e60c3df380985efdec34c3cdeb8082a6af4d4c52073162b58b81016cb43be08efa140fa2a24cb003093105ab8555ccf4888cc3f6b68c5b2fc9f61aa4b61d254b1941477df6887c86ea5649f819eb73b30ba406791bd56ca5ca186f4f82407c9e004739fc37bb07b432def39f4e04a1a63d34bbbbb2702bd344a9f8d2112a8c9753d5396939500469000c65eb831bc29a5ea6389fcbfc33c16c0a70f5ea294de2af284e0e53b18af5c869887a8135c5ebc48d35536dbe2f6235e48674959f83d262ece013fb20a0d0ed6b0d77cac7a8d286b8d3fc99ac697909c8d6091a25831bfadc21667882fbd1c8b19e36adffc0856f44ad10b9692e025b800ae964e3b4ee912d48c23cb648be1b73f705145c553d881a1990cdfda2cc702d6f430744df37e3e2f6ca7b06f9c045c5c24821daa65ab901021952356c162b3936054c8748fd8fa43e6342142e321474021d25f8b948bacaa4b511ca14f6aa153096cb7e9ff5f4a3370b54125eac31e10c1cd174051b78c31df214e2f981f116660bda2fc3e6033063f3344f75e8f945e1124fb1c900aaf92838d6fa1b1061681906dd63ba5338d5412d217dd3245dfc02d793eeefdfcb3f688ca4598b0afc0659723c52b44d7cdb0114c45204c0bf847e94c59239c603f72d9e8cdb52c3b2bad5ac40f48027ad0a67b498729cc645c61b3b7dbce3fd9e1af7e7963729fe0e9492e71bf2387f0b4995ca92a18f49a25c077737f5797cc0729d817173c6b53d1de28393ff3b3928d730b8f5c2803ccfcf14a18341d951337143f8b6105f06b0ad95e7ef5a4bdf504154192befe79fc5893c931d1dfd1ea5b81e698be518f1cc7377304e6a7d9f44e8be255d60b7f12b6dd31c274e253f4330f54e3cb6d7da2d434dc048c1f2ff2f7865b03ed4e602c2f6c1fb5197144c72c7272a8f8f7f4fdf13fa973f650ce241e2672eb15380f576ab6022f25126b5f73f5e5cf28e239d4ccd4b8528007cf016f53ba037bc0dcde9ef95a776edf8e1823896b394f025596aa8668fbf42398d9b4d6066ee814452d0289658c8139eeedde5aa23b0dc43f8d0b6bbf564cb9f8325dc195ba9212ce267971f142cd1ee0d0c309cf388c213c53e28c09d16bbd7dc69b09698b22244a4203a85bd4b4cc1b1e1fcc3da656f3b99f5a5d82ed7065dc42d64d7bc7bb1f227c85ee433e7afdfab23fd520d7249f2431fd0629186c20c9e4bee8a4b1fc4932475b3789b8c939805a96e898c13002d381e9aa0ea50f68609123a0b704536872d9fef8b7f9aff2cbbf02191c7f5aafb013bf90c1e829a94a3f0b13a694eadc193b3d121108fe8adb7acf6a788e8c64a2b1aa7322ba182471b692e3aa27f513a557e48da2d092d1bf5b324f74083213dfed45feb7fc73ac3fc21f63bcb030ad91e9f5bcaa6318842d476b376375109a1b5bae92f73bc7266c7b41f02cb918400a1f4d39e4fe4449b6ab28e58bda5342c28f8b1094b76e12f6ad80d5561559d82c359accd863f5081dbd3974f236404f6076ef5d6d6a1db646ecc59b16c5cf235815000e155dbbb03fbdf155c7de3a5a000bc5b45f036202eeaf4b9c7e4bf0193949f1757aa96f04edd00e9700bced689d03258471c8ac7dcc0dcea178f4ea33cfcf7233c342c3a57c97a6632b180a44d47cb35d76ac9d6de7cfd544acdb7ed3ab08a688c292c7fb93a6c0f1ab65e57af8e073b117f8b0d77f2a06b1bf4e9a0b77588fdc36979c6c19a5c6e7c6759572b5798cc0922eefc1c3b7e28e526256933f0f5a64b4d06eb8746c35910bb5a825ab83289e2fa0b3e6a94c6ede2379ad1ff28511b0c21c4e3386df7027c0559b5114d6f3068b6506144b25ffe2e9069a2f216089e6880296fc2a1936ec0ea617ae6fd7bc02c7cd868de1d1933fe3db4b857c63ff54eaeea30ba4244667d723890fb06481c0646117b3e29c7f860f59f10981797db7f62c2242d2b2b81bd40a6c2d6c1cd6fb46e666edca88da772222e038aaa0ac80592694c79becda0b47cee8a4d2292cf52134a89fe752e5212be6382cc0596bf79bf0aa982026a5f51cd07aa305a80fd0a12fb390e0528e65a3a7af18c15418fc6ae132303215129e73f0516d8d60039d8245fffdfd3c457dec1add074cb47143b94120bb81c6d0fe0eac1106a6ff9f1b4dde7ab9f77f7fdb25f691c161", 0x1000, 0x4, 0x0, 0x2, r2}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x1ff, r3, &(0x7f0000001340)="5f40e2fbafd6bf4a7cf29d3f54a99865946666e052b4d54d09f7b5f37566e12af6f790b1150f87e5157221ef63942efd9d66bea9abcd5f0b820a60629cb3980c89126e643f18ef53870f302de3996306e8ae5e3bee84ab04fdccae637141ae99fe19eb76ddda", 0x66, 0x7, 0x0, 0x1}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x5, 0x81, 0xffffffffffffffff, &(0x7f0000001400)="6bc323410ceab4ecf61d897a1033a061eee98e21900f4c1ce7d88ac4165efe3e01b68b925e23203c0094c7df45ea7b95a49f7096f65eb184ff11e7ef57ae088a560a7dda8d80bc", 0x47, 0x101, 0x0, 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x101, r4, &(0x7f0000001580)="ceb8da47018a2c7468d2d8872c75af247462d50dc4db20b4af18ded409f274b805857090ce9a9e1c5f36f9d41d60ca189aa57f9a1d9e0a66146cea4f77ee54a041a152454e39f0d206e7c119a2a507cf3bc7ac6936353018d10fb8c611479d5eb97251a05e65a9022608136f21437653", 0x70, 0x0, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f0000001640)="45951bec64c63a775799fc8aa7b0484973dc4160479ae9371bc4e302207074e31367c9e6ed0cb8ccca2ba8f4a357a2e28b402dcc99696314eb120cefc3aa9a83702e01f8dd638f9e2d5f9e97a35c447e16f44ddbb0047eb63ca240b44eb81f28c47da027fc067f812fa81a3687ff27f0887326c1e81e159037c02439091f35bbca8c8a57ca9ae2478ba85ce7844cbef453b95e7eb98d0273ea34a790ee5877a46b6d1702442c4fc072f9bcab5fb929c24cdcb2caa0685659", 0xb8, 0x82, 0x0, 0x3, r5}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f00000017c0)="ff80f1193eff6e6426331514ae02739305212c5f", 0x14, 0x4}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x2, r6, &(0x7f0000001a40)="c54d84e4ef17ecd59283218a41c2e7248afccfbc4a74c488914ed369df8a3c74330b", 0x22, 0x80, 0x0, 0x2}]) r7 = syz_io_uring_complete(0x0) accept(r7, 0x0, &(0x7f0000001b40)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x13, r7, 0x0) r9 = syz_io_uring_setup(0x91, &(0x7f0000001b80)={0x0, 0x4889, 0x7, 0x2, 0x35}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001c00), &(0x7f0000001c40)=0x0) syz_io_uring_submit(r8, r10, &(0x7f0000001d40)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r2, 0x0, &(0x7f0000001c80)="cf6352886beb92a6c79cc351bae21cd78320eec10d38e9322cb6b2827f07320c07c866e11a62396c018bf03015d1ec41b2425288ad7201b60e7cf3f93cc755fe41f6f2a499ca0b57fa2f1e5d6d0931edd7b7be9355156595035cc5ea2fb4a793123cb4f4c789ecb6692bd367556fa864cb6c2744b12bb29912cf95df63d8647537d17ea4cd1d3e98", 0x88, 0x20, 0x1}, 0x400) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000001d80)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000001dc0)=0x2c) syz_io_uring_setup(0x2b1, &(0x7f0000001e00)={0x0, 0xbcf1, 0x10, 0x1, 0xef}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001e80)=0x0, &(0x7f0000001ec0)) syz_io_uring_submit(r11, r10, &(0x7f0000001f00)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x4000}}, 0x7f) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x100010, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r9, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_io_uring_submit(r11, r12, &(0x7f0000001fc0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r13, 0x0, &(0x7f0000001f80)='./file0\x00', 0x13c, 0x9040}, 0x20) openat2(0xffffffffffffffff, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x840, 0x10, 0x10}, 0x18) 06:29:23 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x64, 0xbe, "1d192034e6fb59fc2ecf48319b433090e37808f5efd8f634993ee376ca33a20487d8f76f5fd45a8ab672483b5980a0dddf361cf690f1b8e8b3c86a99ca9f9af88a3c1ac90ac5b01179817dcc70ca1faf737edaf3473a06d1358b9733967b3c98"}]}, 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0x24004080) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0xfc, 0x15, 0xd8af, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x21}, 0x20, 0x1, 0x6, 0x9}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xa08}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x28c, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xf46}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x85}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xaf75}, {0x6, 0x16, 0xc03}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xdc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0xccb8}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x8}, {0x5}, {0x6}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xe3}}, {0x8, 0xb, 0x9}, {0x6}, {0x5}, {0x6, 0x11, 0x9000}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfefc}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x963}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x800}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x1}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008814) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x21008c}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r4, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x34, 0xe}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = openat$cgroup_ro(r1, &(0x7f0000000b80)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000001) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002580), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), r5) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x80, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0x72}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x14840}, 0x80c0) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000002740), 0x10000, 0x0) signalfd4(r8, &(0x7f0000002780), 0x8, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), r5) dup2(r8, 0xffffffffffffffff) 06:29:23 executing program 2: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x739}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x566}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r6) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r8, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008801) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r9) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, r4, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x17}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240240c0}, 0x20004810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0xa01, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}]}, 0x58}}, 0x400c4) 06:29:23 executing program 4: waitid(0x0, 0x0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000140), 0x1000000, &(0x7f0000000180)) wait4(0x0, &(0x7f0000000240), 0x2, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, &(0x7f0000000280)) waitid(0x2, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000340)) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000400)={{0x8, @loopback, 0x4e22, 0x3, 'lblc\x00', 0x28, 0x1ff, 0x4e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x1, 0x1, 0x0, 0x6}}, 0x44) getrusage(0xffffffffffffffff, &(0x7f0000000480)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) waitid(0x2, 0x0, &(0x7f0000000640), 0x8, 0x0) getrusage(0xffffffffffffffff, &(0x7f00000006c0)) waitid(0x1, 0x0, 0x0, 0x1, &(0x7f0000000780)) r0 = gettid() waitid(0x3, r0, &(0x7f0000000840), 0x20000002, 0x0) wait4(0x0, &(0x7f00000008c0), 0x1000008, &(0x7f0000000900)) r1 = dup(0xffffffffffffffff) syz_io_uring_setup(0x4525, &(0x7f00000009c0)={0x0, 0x6e20, 0xb86d6d2258e51725, 0x3, 0x374, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) r2 = open(&(0x7f0000000ac0)='./file0\x00', 0x10001, 0xb4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000b00)={{0xa, 0x4e21, 0x39, @remote, 0x3}, {0xa, 0x4e21, 0x2, @mcast1, 0x8}, 0x7ff, [0x1, 0x80000001, 0x2, 0x1ff, 0x7, 0x7fffffff, 0x3, 0x54cd]}, 0x5c) r3 = openat2(r1, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x40300, 0x59}, 0x18) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000c00)) 06:29:23 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x4}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x513}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc081) r2 = open(&(0x7f0000000200)='./file0\x00', 0x82, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000001400)={{'\x00', 0x2}, {0x800}, 0x5, 0x0, 0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)="860096", 0x3, 0x0, &(0x7f0000000300)={0x2, 0x1088, {0x0, 0xc, 0x7b, "39363e55cf62a07cabfcfd25aaf14c4fdef5344a10be61186e933ae4a77b0b45c72d751f02cd9f08406aeb8a391da41cf71fb8b4fae224037bbc4b7d01fb57624557e1dea9c6cd13e1e85ad52e3b9e42c5ab095ab7b5be52a010ad17f635b9cdd8614e11fe8bcd68820d479d708c21f69ff365ce81a748b186161c", 0x1000, "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"}, 0x66, "4c84edb61ed2bd42338727a89ff0f4fa7dac71102d8f7ce9694a574cf7f586cc52bb0dd3d54101cf5a5628681eb43afe37491f17ac5c50b22d3bff8a4487f5709c7c24da63ac49b63f782be2b485624ec9e6fd2c42a666f85d3fc06a35d6d3e77afc70b4087f"}, 0x10fa}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000001900)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000018c0)={&(0x7f00000014c0)={0x3dc, r0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x39}}}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_IE={0x112, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @random={0x0, 0x6a, "87816801cb1dcacce35bf34f1be9b3ac701e351b844dbc5ed9e62941c73a0fca962f75048665072f7a3fe729f8b992c7253d574a1311b731edf853eb261d8212b78a1a2311f68ca22d9b82cd1227cd5158a51fa3f4c24bdbf404749cd9536c98c615c06f36b884c94fa1"}, @mesh_chsw={0x76, 0x6, {0xfb, 0x19, 0x6, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0x6, 0x80, @device_b, 0x785, 0x5, 0xdfd3}}, @dsss={0x3, 0x1, 0xe}, @erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x691, "b3f3092a5dae", @short="4fd641e1bc70d9d7"}}, @random_vendor={0xdd, 0x55, "7c5b5a98a95d8328fc065d3d6130115bd05642783d7aea717bbd4af402c69935ffd38688b526fce82150608f62f83e0b6fc23f9d3713b188dcbf62d3518a58988199c463c6a18257e508075ace4c33f80c97600abc"}]}, @NL80211_ATTR_IE={0x284, 0x2a, [@mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x195, {0x1, 0x9, "7fdd0f97c9853d87c415c23681f1b9b9", "6a7ef3ccdbf81833416171b09ef23f1614852fc1c78b0a0edba05230dd108927", "bc8784a7dff41571a8114fc9100ef58c61b4f543a3268cb2430648fd49b7446b", [{0x3, 0x27, "aaecab3655ba4c62183da79d9a1ec0fc45bef56a22f79c68f512ff4b21eca698d933d88cbe5945"}, {0x4, 0x27, "454e54806a2c3ae97ac7d9d39ebe644c0515ba0d9f245f3a858b88aea99d01fea1bbc3e8673b33"}, {0x4, 0x25, "dfe7d829a1a0a169ae3443bcf80c0521e9c8c883366819d5faf14eecffef16fe12e8f44ae1"}, {0x4, 0x1b, "8d998ada2c1d346faab60fe2e09809b4c946f9c6b16f8adcad0aa5"}, {0x3, 0x20, "ba716bc4082d168e534cbe9d1568d4d653329f3cfa2e33b78e1ecf89841b81de"}, {0x4, 0x28, "a782aa1df8b320552df1e2c4dcf1f305cca3950aa3b4372c779f183e0f66b41d195570a1caca5cdf"}, {0x3, 0x16, "fd1e898589c2531277d8adde561fe7109ef1abc0cf65"}, {0x4, 0x25, "75adad7ecb5fe8d8425478394068302d2879b9e0ae99e36239a88c4ae9efd9261e7013c3d5"}, {0x1, 0x20, "55a8b591c48f4864f35686f725311b689b6f423c13ba79e690deac0323cc409f"}]}}, @measure_req={0x26, 0x3, {0x6, 0x81, 0xff}}, @gcr_ga={0xbd, 0x6, @broadcast}, @gcr_ga={0xbd, 0x6, @device_b}, @ssid={0x0, 0x6, @default_ap_ssid}, @ssid={0x0, 0x1e, @random="eb1db2d7327b72d0dac76ab337db82f244306b416fb97edf73a4dbd1d3d4"}, @measure_req={0x26, 0x86, {0xf8, 0x1, 0x20, "d24e9e4494382783299592afcc7cf1e4710bdc018ae6a963468aee0da6f64b64d94b20895d3b588501d4c6b061dcdd4a2273193a7ebc69fe642d0146e8a6d7d2caf55c35484fabedb5d5edfc50aa7223fc2214330fb44a89de1d86b44d3086fdf79ac58d46ea8cece69766a2fb7419a7fb3ebdbc7458c09dce85f79fc5f2ab367525c2"}}, @ht={0x2d, 0x1a, {0x80, 0x3, 0x0, 0x0, {0x6a9d8712, 0x0, 0x0, 0x15f, 0x0, 0x1, 0x1, 0x2}, 0x300, 0x3, 0x5b}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x5a6f7a310684e9a0}, 0x4800) r3 = epoll_create(0x400) dup2(r3, r2) perf_event_open(&(0x7f0000001980)={0x0, 0x80, 0x1, 0x6, 0x81, 0x7, 0x0, 0x0, 0x280, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f0000001940), 0x1d}, 0x804, 0x75e5, 0xe1f, 0x7, 0x7fff, 0x7, 0x5, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002b00)={&(0x7f0000001a80)={0x1074, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xf5}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffff}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xee}]}, 0x1074}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002b80), 0x20000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1400c8c1}, 0x4008004) perf_event_open(&(0x7f0000002d00)={0x5, 0x80, 0x1, 0x5, 0x2, 0x40, 0x0, 0x1d, 0xa04, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000002cc0), 0x3}, 0x404, 0x80000000, 0xd5, 0x4, 0xa2, 0x1, 0x4, 0x0, 0xd37, 0x0, 0xff}, 0x0, 0xf, r5, 0x8) r6 = openat(r5, &(0x7f0000002d80)='./file0\x00', 0x121001, 0x63f755b675d296b7) fsetxattr$security_capability(r6, &(0x7f0000002dc0), &(0x7f0000002e00)=@v2={0x2000000, [{0x6, 0x2940}, {0x1, 0xffffffff}]}, 0x14, 0x1) r7 = openat(r6, &(0x7f0000002f00)='./file0\x00', 0x48000, 0x0) perf_event_open(&(0x7f0000002e80)={0x3, 0x80, 0x2f, 0x5b, 0x5, 0x3f, 0x0, 0xfff, 0x10810, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000002e40), 0x17}, 0x1000, 0x1a71, 0x101, 0x8, 0xb4, 0x400, 0x80, 0x0, 0x3f, 0x0, 0x5}, 0xffffffffffffffff, 0x10, r7, 0x8) sendfile(r3, r1, 0x0, 0x4) openat(r7, &(0x7f0000002f40)='./file0\x00', 0x10880, 0x108) [ 78.696583] audit: type=1400 audit(1664260163.869:6): avc: denied { execmem } for pid=290 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:29:23 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3cbe, 0x2, 0x3}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "717875311f"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "3b10f56009bea5902e2c18"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "e8db2739dc671c2f64db"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x4005) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x4c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xcc, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x8b, 0xf, [@dsss={0x3, 0x1, 0x8}, @measure_req={0x26, 0x82, {0xcd, 0x4, 0xd8, "bc450b8fc6f635da946630de4be5c55d2aa8de20da056cc26181b75759ed8789aa6baa6032615cfe41d2a1c2520cbf29650db880b548163ac9ac85cded0df5a085a120bc0c5b377b37236d7e264bf2e9c931f1cd0dc03afddb4632ef8d94bc566fdf00fba9bd93a03b4ef5a6cd4599449d3e6b271555abc6cb846a649f7a97"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x29, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, @supported_rates={0x1, 0x8, [{0x48}, {0x18}, {0xc, 0x1}, {0x18, 0x1}, {0x60}, {0x48}, {0x4, 0x1}, {0x12, 0x1}]}, @chsw_timing={0x68, 0x4, {0x7, 0x1ff}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xff}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x41}, 0x800) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000b00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000740)={0x378, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x32a, 0x33, @mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x80}, @broadcast, @device_b, @from_mac, {0x1}}, @ver_80211n={0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x3, @default, 0x10e0, @void, @void, @void, @void, @val={0x6, 0x2, 0x6}, @val={0x5, 0xaf, {0x2, 0xdc, 0xc0, "113a17983e854e295d439ff718799a2c20dfc9aad0650ee300a1217015a17fdc6878b0017521782cb8c60e327d0956c4bc7cc491f26db0e23bf15c1f3a7e811fd567111ce9b9c179c78c6559cd79373ca9a836ccb07732219c31a988e89b03a5cf14cff6878933af5ad09d55bb85e0d8f3a6fdbda04cf581b6710488987e5dda15e20bcce230954ac4e9d3fff7e9e168036fdeebeda48bca3e3798858a689f359d091d194d860e4a5fc72edb"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x7, 0x40, 0x8}}, @val={0x2d, 0x1a, {0x8000, 0x2, 0x2, 0x0, {0x40, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0x5120, 0x5}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x3f, 0x12, 0x7e}}, [{0xdd, 0x5f, "345e6f05d4f7f1435b4bd1cfd602bbaff25309ba40fee3327ea7d016d3259ad01bc686fd3139582dbded6040b31ac22aad9cf39a285ea3d56556445cd832c9b34650162d2f9c4b7885a42b11889a1b9db24839ea1ec0a5452aaae3e3d71d3c"}, {0xdd, 0x54, "260a76812329debf0564f5ea692f686e36fc6ae604d1e2135f7d899f9cb7bac4fc0ef91446876c44b46434afed1aa7c378be6e0123f12989d3646ca42c39eb0d5da573ff499719f13d13b536cba1733ff5a0193e"}, {0xdd, 0x81, "cfc2d1a26d49beee361578397526d95d5319ddc55e1ffe58c9423bd4d1a0f6cd33c2af0c762fa36efe0731af5d371657a71e4248c679729cd3dd95fcfea2eb5ffe72b1196d08bba4028f2c15b7e8491d9a7d1c41896106a5cf358a8d201fdb5e73d53d9329f38e8957b86f95e8744df83986e831454e31276494ec9e264a924555"}, {0xdd, 0x4c, "dd7705c9a5b56d34547e829f0f26a96bbc326ad5b766b7ac0c05c42887194c8ab553e2abe4c64240e27c210abc9d5193ba582ed9c284a48c95568a3bfaa9bf266eb1f694c13caf33a690ac08"}, {0xdd, 0x1c, "b0ab3bce6142ad97129fe45a5662cc3e98e309bdb7fd7efe9f47f5ca"}, {0xdd, 0x20, "205aee5a9d3e73a5db024d142ba3e5d36da9fffab5747237df828242c63324bc"}, {0xdd, 0x44, "ab815774c17e176f122ff677a1a0ec10bde72c333b96ebb8ca1f3a938d8e693d83621656d2408ee2778cbd19afcd903f501729214f9ce6d8ecfea1fdd7fc7e1913c97a01"}, {0xdd, 0x7, "19d52fcaac419a"}]}}, @NL80211_ATTR_MAC={0xa}]}, 0x378}, 0x1, 0x0, 0x0, 0x20000080}, 0x4c890) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0xd}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2fc9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1800}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x11) r7 = syz_open_dev$vcsu(&(0x7f0000000cc0), 0x5cf3, 0x690001) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000e00)=@get={0x1, &(0x7f0000000d00)=""/237}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000e40)=0x101) fchdir(r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) 06:29:23 executing program 6: ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x12640, 0x38) ftruncate(r0, 0x605) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x4900, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000300)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) fdatasync(r2) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x5210c0, 0x0) ioctl$CDROMSEEK(r3, 0x5316, &(0x7f0000000380)={0x1, 0x1, 0x1, 0x20, 0x1}) r4 = eventfd2(0x2, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000003c0)={0x0, 0x0, 0x0, [0xffffffffffffffff, 0xac, 0x7f, 0x3f, 0x4], [0xb60, 0xfffffffffffff800, 0x1f, 0x7, 0x3, 0x6, 0x81, 0x1, 0x8, 0x100000000, 0x6, 0x342, 0x9, 0x7, 0x0, 0x101, 0x1, 0x79f, 0x0, 0x1, 0x1, 0x4, 0x5, 0xfffffffffffffe00, 0x4, 0x877b, 0x6, 0x101, 0x7, 0xb89, 0x0, 0x41, 0x3f, 0x81, 0x0, 0xfff, 0x6, 0x5, 0x100000001, 0x1, 0xfffffffffffffffa, 0xd4, 0x4, 0x2, 0x1, 0x1ff, 0xc919, 0x4, 0x6, 0xffff, 0x4, 0x80000000, 0x0, 0xffffffff, 0x1f4, 0x1, 0xca0000000000, 0x5, 0xeea, 0xe93, 0x100000001, 0x8, 0x0, 0x401, 0x6, 0x9, 0x3, 0x10001, 0x40, 0x3, 0x5, 0x81, 0x4, 0x2, 0x6, 0xfffffffffffffff7, 0x1, 0x400, 0x1, 0x8, 0x2000000000, 0xffffffffffffff8c, 0x5, 0x7, 0xfffffffffffffff8, 0x100000000, 0x6, 0x1, 0x6, 0x1, 0x2, 0x3, 0x9, 0x3, 0x0, 0xfff, 0x8000, 0x800, 0x3, 0x4, 0xffffffffffffb578, 0xac, 0x1, 0x6, 0x9, 0x7, 0xfc9, 0x2, 0xfffffffffffffeff, 0xfffffffffffffff7, 0x1, 0x100000000, 0x100000000, 0x8001, 0x800, 0x200, 0x2, 0x10001, 0xfffffffffffffffc, 0x0, 0xe1]}) r5 = dup2(0xffffffffffffffff, r1) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$FITHAW(r6, 0xc0045878) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) 06:29:23 executing program 7: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x821) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0083}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc015}, 0x4008080) r5 = accept(0xffffffffffffffff, &(0x7f0000000500)=@hci, &(0x7f0000000580)=0x80) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r6, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40011}, 0x4004814) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000109}, 0x8004) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r5) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x154, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x200c4084) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x45}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bf}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x3, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8007}, 0x4000004) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000d40), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x64, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) [ 80.020344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.022378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.029255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.036577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.038813] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.040505] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.051067] Bluetooth: hci0: HCI_REQ-0x0c1a [ 80.101623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.104339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.105320] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.108002] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.112119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.112271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.116035] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.117578] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.120871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.130550] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.132137] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.133401] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.135029] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.136208] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.138196] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.140356] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.141450] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.142422] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.144051] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.145640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.147925] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 80.150215] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.151429] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.152583] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.153838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.157491] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 80.158730] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.161104] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 80.164264] Bluetooth: hci5: HCI_REQ-0x0c1a [ 80.164523] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 80.174235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.174350] Bluetooth: hci2: HCI_REQ-0x0c1a [ 80.175272] Bluetooth: hci6: HCI_REQ-0x0c1a [ 80.184621] Bluetooth: hci7: HCI_REQ-0x0c1a [ 80.184656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.186546] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.204020] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.205215] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.207472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.208701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.214630] Bluetooth: hci3: HCI_REQ-0x0c1a [ 80.217356] Bluetooth: hci4: HCI_REQ-0x0c1a [ 82.101069] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 82.101227] Bluetooth: hci0: command 0x0409 tx timeout [ 82.228955] Bluetooth: hci5: command 0x0409 tx timeout [ 82.228967] Bluetooth: hci3: command 0x0409 tx timeout [ 82.230118] Bluetooth: hci2: command 0x0409 tx timeout [ 82.230796] Bluetooth: hci7: command 0x0409 tx timeout [ 82.231655] Bluetooth: hci6: command 0x0409 tx timeout [ 82.293337] Bluetooth: hci4: command 0x0409 tx timeout [ 84.149283] Bluetooth: hci0: command 0x041b tx timeout [ 84.276821] Bluetooth: hci7: command 0x041b tx timeout [ 84.277298] Bluetooth: hci2: command 0x041b tx timeout [ 84.277710] Bluetooth: hci3: command 0x041b tx timeout [ 84.278159] Bluetooth: hci5: command 0x041b tx timeout [ 84.279222] Bluetooth: hci6: command 0x041b tx timeout [ 84.340780] Bluetooth: hci4: command 0x041b tx timeout [ 85.387221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.390758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.395054] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.403956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.407335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.408108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.412813] Bluetooth: hci1: HCI_REQ-0x0c1a [ 86.196830] Bluetooth: hci0: command 0x040f tx timeout [ 86.325820] Bluetooth: hci6: command 0x040f tx timeout [ 86.326267] Bluetooth: hci5: command 0x040f tx timeout [ 86.326674] Bluetooth: hci3: command 0x040f tx timeout [ 86.327493] Bluetooth: hci2: command 0x040f tx timeout [ 86.327919] Bluetooth: hci7: command 0x040f tx timeout [ 86.389833] Bluetooth: hci4: command 0x040f tx timeout [ 87.477925] Bluetooth: hci1: command 0x0409 tx timeout [ 88.245835] Bluetooth: hci0: command 0x0419 tx timeout [ 88.373844] Bluetooth: hci7: command 0x0419 tx timeout [ 88.374292] Bluetooth: hci2: command 0x0419 tx timeout [ 88.374681] Bluetooth: hci3: command 0x0419 tx timeout [ 88.375104] Bluetooth: hci5: command 0x0419 tx timeout [ 88.375493] Bluetooth: hci6: command 0x0419 tx timeout [ 88.437773] Bluetooth: hci4: command 0x0419 tx timeout [ 89.525107] Bluetooth: hci1: command 0x041b tx timeout [ 91.573799] Bluetooth: hci1: command 0x040f tx timeout [ 93.621813] Bluetooth: hci1: command 0x0419 tx timeout [ 130.087533] audit: type=1400 audit(1664260215.260:7): avc: denied { open } for pid=3813 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.150023] audit: type=1400 audit(1664260215.323:8): avc: denied { kernel } for pid=3813 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 06:30:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000037c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/161, 0xa1}, {&(0x7f00000000c0)=""/80, 0x50}], 0x4}, 0xd1}, {{&(0x7f0000001280)=@rc={0x1f, @none}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001300)=""/111, 0x6f}, {&(0x7f0000001380)=""/173, 0xad}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/209, 0xd1}, {&(0x7f0000002540)=""/76, 0x4c}, {&(0x7f00000025c0)=""/63, 0x3f}, {&(0x7f0000002600)=""/51, 0x33}, {&(0x7f0000002640)=""/121, 0x79}], 0x8, &(0x7f0000002740)=""/4096, 0x1000}, 0x5}], 0x2, 0x10020, &(0x7f0000003800)={r2, r3+60000000}) 06:30:15 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) close(r0) [ 130.640711] ------------[ cut here ]------------ [ 130.641257] WARNING: CPU: 0 PID: 3856 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 [ 130.641942] Modules linked in: [ 130.642169] CPU: 0 PID: 3856 Comm: modprobe Not tainted 6.0.0-rc6-next-20220923 #1 [ 130.642670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.643405] RIP: 0010:event_filter_match+0x422/0x660 [ 130.643785] Code: 00 00 00 e9 7c fc ff ff e8 1b 1e f1 ff 65 8b 2d e0 88 ad 7e 31 ff 89 ee e8 bb 1a f1 ff 85 ed 0f 84 ef 00 00 00 e8 fe 1d f1 ff <0f> 0b eb 9f e8 c5 80 23 00 e9 17 fc ff ff e8 eb 1d f1 ff 48 8d 7b [ 130.645769] RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046 [ 130.646165] RAX: 0000000080010001 RBX: ffff888041578000 RCX: 0000000000000000 [ 130.647081] RDX: ffff888017588000 RSI: ffffffff8154ecf2 RDI: 0000000000000005 [ 130.647608] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 130.648135] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff888041578220 [ 130.648672] R13: 0000000000000000 R14: ffff8880415780a8 R15: ffff888041578220 [ 130.649202] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 130.649798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.650192] CR2: 00007ffb04e22260 CR3: 0000000008e5c000 CR4: 0000000000350ef0 [ 130.650672] Call Trace: [ 130.650850] [ 130.651007] merge_sched_in+0x107/0x1110 [ 130.651293] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 130.651696] ? merge_sched_in+0x1110/0x1110 [ 130.651993] ? lock_is_held_type+0xd7/0x130 [ 130.652298] ctx_sched_in+0x2e6/0x770 [ 130.652562] ? lock_acquire+0x1b2/0x530 [ 130.652844] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 130.653273] ? lock_is_held_type+0xd7/0x130 [ 130.653576] perf_event_sched_in+0x75/0x80 [ 130.653865] ctx_resched+0x1ce/0x390 [ 130.654124] __perf_install_in_context+0x285/0x9c0 [ 130.654458] ? ctx_resched+0x390/0x390 [ 130.654725] remote_function+0x125/0x1b0 [ 130.655006] __flush_smp_call_function_queue+0x1df/0x5a0 [ 130.655371] ? perf_duration_warn+0x40/0x40 [ 130.655673] __sysvec_call_function_single+0x92/0x3a0 [ 130.656027] sysvec_call_function_single+0x89/0xc0 [ 130.656354] [ 130.656512] [ 130.656671] asm_sysvec_call_function_single+0x16/0x20 [ 130.657023] RIP: 0010:lock_release+0x3dd/0x750 [ 130.657344] Code: ff ff ff ff 65 0f c1 05 a1 5b d8 7e 83 f8 01 0f 85 b1 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c5 48 c7 45 00 00 00 00 00 c7 45 08 00 00 00 00 48 8b 84 24 [ 130.658526] RSP: 0018:ffff888041547888 EFLAGS: 00000206 [ 130.658929] RAX: dffffc0000000000 RBX: bbfc25d58a8576ee RCX: ffff8880415478d8 [ 130.659451] RDX: 1ffff11002eb112d RSI: 0000000000000000 RDI: 0000000000000000 [ 130.659972] RBP: 1ffff110082a8f13 R08: 0000000000000000 R09: 0000000000000000 [ 130.660499] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 130.661031] R13: 0000000000000003 R14: ffff888017588970 R15: ffff888017588000 [ 130.661590] ? lock_release+0x3b2/0x750 [ 130.661891] ? fs_reclaim_acquire+0xb2/0x160 [ 130.662238] ? lock_downgrade+0x6d0/0x6d0 [ 130.662562] ? vm_area_dup+0x7f/0x230 [ 130.662866] ? vm_area_dup+0x7f/0x230 [ 130.663158] kmem_cache_alloc+0x3b/0x3e0 [ 130.663482] vm_area_dup+0x7f/0x230 [ 130.663763] ? lock_downgrade+0x6d0/0x6d0 [ 130.664080] ? mas_destroy+0x560/0x560 [ 130.664394] ? uprobe_apply+0x150/0x150 [ 130.664715] ? up_write+0x1ac/0x520 [ 130.664994] ? mas_destroy+0x391/0x560 [ 130.665308] ? __vma_adjust+0x907/0x1aa0 [ 130.665625] ? vm_area_alloc+0x100/0x100 [ 130.665957] ? vma_expand+0xb50/0xb50 [ 130.666258] ? anon_vma_clone+0x3b8/0x560 [ 130.666582] __split_vma+0xa2/0x5d0 [ 130.666865] split_vma+0x9f/0xe0 [ 130.667137] mprotect_fixup+0x710/0x8c0 [ 130.667451] ? change_protection+0x34a0/0x34a0 [ 130.667818] do_mprotect_pkey+0x6fb/0xa70 [ 130.668141] ? mprotect_fixup+0x8c0/0x8c0 [ 130.668460] ? up_write+0x1ac/0x520 [ 130.668740] ? vm_mmap_pgoff+0xe8/0x270 [ 130.669055] ? syscall_enter_from_user_mode+0x1d/0x50 [ 130.669462] __x64_sys_mprotect+0x74/0xb0 [ 130.669780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 130.670163] do_syscall_64+0x3b/0x90 [ 130.670455] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.670838] RIP: 0033:0x7ffb04e6be27 [ 130.671119] Code: 44 00 00 b8 0b 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 8d 0d 31 03 01 00 f7 d8 89 01 48 83 c8 ff c3 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 11 03 01 00 f7 d8 89 01 48 83 [ 130.672442] RSP: 002b:00007ffecaf81458 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 130.672998] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ffb04e6be27 [ 130.673528] RDX: 0000000000000000 RSI: 0000000000238000 RDI: 00007ffb04bb4000 [ 130.674057] RBP: 00007ffecaf81760 R08: 0000000000000000 R09: 0000000000000000 [ 130.674581] R10: 0000000000000802 R11: 0000000000000206 R12: 00007ffb04e4a510 [ 130.675106] R13: 00007ffecaf81460 R14: 0000000000000000 R15: 00007ffecaf817f0 [ 130.675639] [ 130.675816] irq event stamp: 5980 [ 130.676074] hardirqs last enabled at (5979): [] kasan_quarantine_put+0x8b/0x1f0 [ 130.676726] hardirqs last disabled at (5980): [] sysvec_call_function_single+0xb/0xc0 [ 130.677426] softirqs last enabled at (5324): [] __irq_exit_rcu+0x11b/0x180 [ 130.678056] softirqs last disabled at (5319): [] __irq_exit_rcu+0x11b/0x180 [ 130.678688] ---[ end trace 0000000000000000 ]--- [ 130.679063] ------------[ cut here ]------------ [ 130.679410] WARNING: CPU: 0 PID: 3856 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 [ 130.680045] Modules linked in: [ 130.680286] CPU: 0 PID: 3856 Comm: modprobe Tainted: G W 6.0.0-rc6-next-20220923 #1 [ 130.680946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.681766] RIP: 0010:merge_sched_in+0xadb/0x1110 [ 130.682122] Code: ff ff e8 c8 1a ef ff 65 8b 05 8d 85 ab 7e 31 ff 89 c6 89 04 24 e8 65 17 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 a5 1a ef ff <0f> 0b e9 c4 fb ff ff e8 99 1a ef ff 4c 89 e8 48 05 18 01 00 00 e9 [ 130.683455] RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046 [ 130.683845] RAX: 0000000080010001 RBX: ffff88806ce3d140 RCX: 0000000000000000 [ 130.684370] RDX: ffff888017588000 RSI: ffffffff8156f04b RDI: 0000000000000005 [ 130.684889] RBP: ffff888041578000 R08: 0000000000000005 R09: 0000000000000001 [ 130.685417] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88806ce3d140 [ 130.685933] R13: ffff88806ce00000 R14: ffff8880415780a8 R15: ffff888041578220 [ 130.686460] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 130.687043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.687467] CR2: 00007ffb04e22260 CR3: 0000000008e5c000 CR4: 0000000000350ef0 [ 130.687989] Call Trace: [ 130.688187] [ 130.688362] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 130.688810] ? merge_sched_in+0x1110/0x1110 [ 130.689146] ? lock_is_held_type+0xd7/0x130 [ 130.689478] ctx_sched_in+0x2e6/0x770 [ 130.689762] ? lock_acquire+0x1b2/0x530 [ 130.690072] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 130.690519] ? lock_is_held_type+0xd7/0x130 [ 130.690853] perf_event_sched_in+0x75/0x80 [ 130.691172] ctx_resched+0x1ce/0x390 [ 130.691462] __perf_install_in_context+0x285/0x9c0 [ 130.691833] ? ctx_resched+0x390/0x390 [ 130.692126] remote_function+0x125/0x1b0 [ 130.692434] __flush_smp_call_function_queue+0x1df/0x5a0 [ 130.692836] ? perf_duration_warn+0x40/0x40 [ 130.693169] __sysvec_call_function_single+0x92/0x3a0 [ 130.693551] sysvec_call_function_single+0x89/0xc0 [ 130.693926] [ 130.694102] [ 130.694274] asm_sysvec_call_function_single+0x16/0x20 [ 130.694659] RIP: 0010:lock_release+0x3dd/0x750 [ 130.695006] Code: ff ff ff ff 65 0f c1 05 a1 5b d8 7e 83 f8 01 0f 85 b1 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c5 48 c7 45 00 00 00 00 00 c7 45 08 00 00 00 00 48 8b 84 24 [ 130.696329] RSP: 0018:ffff888041547888 EFLAGS: 00000206 [ 130.696726] RAX: dffffc0000000000 RBX: bbfc25d58a8576ee RCX: ffff8880415478d8 [ 130.697258] RDX: 1ffff11002eb112d RSI: 0000000000000000 RDI: 0000000000000000 [ 130.697778] RBP: 1ffff110082a8f13 R08: 0000000000000000 R09: 0000000000000000 [ 130.698298] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 130.698821] R13: 0000000000000003 R14: ffff888017588970 R15: ffff888017588000 [ 130.699365] ? lock_release+0x3b2/0x750 [ 130.699671] ? fs_reclaim_acquire+0xb2/0x160 [ 130.700007] ? lock_downgrade+0x6d0/0x6d0 [ 130.700326] ? vm_area_dup+0x7f/0x230 [ 130.700617] ? vm_area_dup+0x7f/0x230 [ 130.700913] kmem_cache_alloc+0x3b/0x3e0 [ 130.701227] vm_area_dup+0x7f/0x230 [ 130.701508] ? lock_downgrade+0x6d0/0x6d0 [ 130.701819] ? mas_destroy+0x560/0x560 [ 130.702124] ? uprobe_apply+0x150/0x150 [ 130.702435] ? up_write+0x1ac/0x520 [ 130.702709] ? mas_destroy+0x391/0x560 [ 130.703011] ? __vma_adjust+0x907/0x1aa0 [ 130.703319] ? vm_area_alloc+0x100/0x100 [ 130.703633] ? vma_expand+0xb50/0xb50 [ 130.703927] ? anon_vma_clone+0x3b8/0x560 [ 130.704242] __split_vma+0xa2/0x5d0 [ 130.704523] split_vma+0x9f/0xe0 [ 130.704787] mprotect_fixup+0x710/0x8c0 [ 130.705107] ? change_protection+0x34a0/0x34a0 [ 130.705463] do_mprotect_pkey+0x6fb/0xa70 [ 130.705783] ? mprotect_fixup+0x8c0/0x8c0 [ 130.706099] ? up_write+0x1ac/0x520 [ 130.706377] ? vm_mmap_pgoff+0xe8/0x270 [ 130.706689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 130.707076] __x64_sys_mprotect+0x74/0xb0 [ 130.707386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 130.707768] do_syscall_64+0x3b/0x90 [ 130.708055] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.708438] RIP: 0033:0x7ffb04e6be27 [ 130.708713] Code: 44 00 00 b8 0b 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 8d 0d 31 03 01 00 f7 d8 89 01 48 83 c8 ff c3 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 11 03 01 00 f7 d8 89 01 48 83 [ 130.710039] RSP: 002b:00007ffecaf81458 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 130.710597] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ffb04e6be27 [ 130.711117] RDX: 0000000000000000 RSI: 0000000000238000 RDI: 00007ffb04bb4000 [ 130.711638] RBP: 00007ffecaf81760 R08: 0000000000000000 R09: 0000000000000000 [ 130.712161] R10: 0000000000000802 R11: 0000000000000206 R12: 00007ffb04e4a510 [ 130.712684] R13: 00007ffecaf81460 R14: 0000000000000000 R15: 00007ffecaf817f0 [ 130.713234] [ 130.713414] irq event stamp: 5980 [ 130.713665] hardirqs last enabled at (5979): [] kasan_quarantine_put+0x8b/0x1f0 [ 130.714311] hardirqs last disabled at (5980): [] sysvec_call_function_single+0xb/0xc0 [ 130.714986] softirqs last enabled at (5324): [] __irq_exit_rcu+0x11b/0x180 [ 130.715619] softirqs last disabled at (5319): [] __irq_exit_rcu+0x11b/0x180 [ 130.716243] ---[ end trace 0000000000000000 ]--- 06:30:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x4, &(0x7f0000000380)=[{&(0x7f0000000100)="a188d921a87e0a39d83f4f4bfa3abb448b983621af598818e5c97a2cb858a0110974fe02fba7af619356eb6153f6db2415f26e17ee1aed40f6b9e28af8a717eddb76601c415d8f2427013328e2102b935542b1de8b209116911c00ac7a29dfb806429bab9da26b791ee0884bb6a6d3e7331b5ccdef6b4cebc49bd612", 0x7c, 0x6}, {&(0x7f0000000180)="ef34e3361ca2f2882b132f83b994ea64bd7df609b82e6a64252167d2def4f0da09d0fed6e13e4fed6de4127c45d761ab26d7f93eb6a280ebbd5c60053b02fe833edf6d72cd7029d07695c0c398112fa2aae170926f80588243cfe323ed8b52050036fc7776441b49bee0785b953639ff7f27478f85b73eb7e516e5fd884eb165f1ccf215a0a93d122f2df2f3b1b0002ebd630f734135bbcc21059f993f3fdb4fbec892a75708d0a5771a9e6a7d733289a4d1868fc8d57a33786e1fbddbc17d0eb84b0cde015046e3fadd75de41137259607640cdcb8b89844ea96b97b139c988e291cb0904f8164095be63", 0xeb, 0x5ba}, {&(0x7f0000000280)="1bd7a8b2", 0x4, 0x54c}, {&(0x7f00000002c0)="ebecb62e24ff59cd63b5bddb7ece62095df2ef8709d442468b2b5b0f0318bdc8a7d55eadff30f4d90ee87a042e078d48784563471ce53845ef6eda066d0eab8da9dba0ce6bd751c1557fa686221a5a9bb82342e9fe9d7e8556ca27f9af45022bc522f7a35a4150ccbcf0a1bbbf64bd86759b7994ad384b635b66b24770d3e67f5e48ec87", 0x84, 0x6}], 0x42039, &(0x7f0000000400)={[{@shortname_winnt}, {@rodir}, {@numtail}, {@utf8}], [{@measure}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) syz_io_uring_setup(0x3115, &(0x7f0000000000)={0x0, 0xbba2, 0x0, 0x2, 0x1000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) [ 130.998899] loop2: detected capacity change from 0 to 63 [ 131.019396] loop2: detected capacity change from 0 to 63 06:30:16 executing program 3: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f00000000c0), 0x80000001) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x40284504, &(0x7f0000000000)=""/156) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, 0x13, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1]) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101, 0x4) rmdir(&(0x7f0000000c80)='./file0\x00') 06:30:16 executing program 2: perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000003c0)="1b7a1666851945cd80a5a2ac0000000000000000b2122fbfdce63a77a865f0778bd425e749feed51f1439746599f0422a9d32dcef6b20d00ce737d913518a188cb9ad737a3f10ee2333baed5899c00ab0d1cce9ff265d634b3b2996ff3a5a91a9283b3b8cbfac984eccdb937f1d200bf96b5b75d5da9e818e348b4", 0x7b, 0x8}]) r2 = eventfd2(0x7, 0x0) sendfile(r1, r2, &(0x7f0000000340)=0x5, 0x400) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000440)="00000000000000028964af23496feb373619e4eecd7342f8ed5e751c471ff767992775e05b0739fba8d835e715da2b167cbbc5e2a698b81da770bb3e2c1df8c02cf12d84f422afebe56ddae06e0ded8f384ede38f25f59795ad490142b16b0cca9f8c19625eb92d28b0b2d228a36d35c7af80b6e7777e0b1a41ca33064927556fd90b75a15cb1411cc023eeab48bb72c3b0ce3f38d5bc97ca922aab1e17b", 0x9e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x82040, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000300)={0x7, 0x5}) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) [ 131.098317] tmpfs: Unknown parameter '00000000000000000003' [ 131.111127] tmpfs: Unknown parameter '00000000000000000003' [ 131.172068] ------------[ cut here ]------------ [ 131.172092] [ 131.172095] ====================================================== [ 131.172099] WARNING: possible circular locking dependency detected [ 131.172104] 6.0.0-rc6-next-20220923 #1 Tainted: G W [ 131.172111] ------------------------------------------------------ [ 131.172115] syz-executor.2/3902 is trying to acquire lock: [ 131.172121] ffffffff853faaf8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0xe/0x70 [ 131.172164] [ 131.172164] but task is already holding lock: [ 131.172167] ffff88800d058420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.172197] [ 131.172197] which lock already depends on the new lock. [ 131.172197] [ 131.172200] [ 131.172200] the existing dependency chain (in reverse order) is: [ 131.172203] [ 131.172203] -> #3 (&ctx->lock){....}-{2:2}: [ 131.172217] _raw_spin_lock+0x2a/0x40 [ 131.172236] __perf_event_task_sched_out+0x53b/0x18d0 [ 131.172249] __schedule+0xedd/0x2470 [ 131.172262] schedule+0xda/0x1b0 [ 131.172275] futex_wait_queue+0xf5/0x1e0 [ 131.172288] futex_wait+0x28e/0x690 [ 131.172298] do_futex+0x2ff/0x380 [ 131.172307] __x64_sys_futex+0x1c6/0x4d0 [ 131.172317] do_syscall_64+0x3b/0x90 [ 131.172334] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.172346] [ 131.172346] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 131.172359] _raw_spin_lock_nested+0x30/0x40 [ 131.172377] raw_spin_rq_lock_nested+0x1e/0x30 [ 131.172391] task_fork_fair+0x63/0x4d0 [ 131.172407] sched_cgroup_fork+0x3d0/0x540 [ 131.172421] copy_process+0x4183/0x6e20 [ 131.172432] kernel_clone+0xe7/0x890 [ 131.172441] user_mode_thread+0xad/0xf0 [ 131.172451] rest_init+0x24/0x250 [ 131.172463] arch_call_rest_init+0xf/0x14 [ 131.172480] start_kernel+0x4c1/0x4e6 [ 131.172495] secondary_startup_64_no_verify+0xe0/0xeb [ 131.172509] [ 131.172509] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 131.172523] _raw_spin_lock_irqsave+0x39/0x60 [ 131.172541] try_to_wake_up+0xab/0x1930 [ 131.172554] up+0x75/0xb0 [ 131.172567] __up_console_sem+0x6e/0x80 [ 131.172583] console_unlock+0x46a/0x590 [ 131.172599] do_con_write+0xc05/0x1d50 [ 131.172611] con_write+0x21/0x40 [ 131.172621] n_tty_write+0x4d4/0xfe0 [ 131.172635] file_tty_write.constprop.0+0x49c/0x8f0 [ 131.172648] vfs_write+0x9c3/0xd90 [ 131.172666] ksys_write+0x127/0x250 [ 131.172683] do_syscall_64+0x3b/0x90 [ 131.172699] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.172711] [ 131.172711] -> #0 ((console_sem).lock){-...}-{2:2}: [ 131.172724] __lock_acquire+0x2a02/0x5e70 [ 131.172741] lock_acquire+0x1a2/0x530 [ 131.172757] _raw_spin_lock_irqsave+0x39/0x60 [ 131.172774] down_trylock+0xe/0x70 [ 131.172789] __down_trylock_console_sem+0x3b/0xd0 [ 131.172804] vprintk_emit+0x16b/0x560 [ 131.172820] vprintk+0x84/0xa0 [ 131.172836] _printk+0xba/0xf1 [ 131.172847] report_bug.cold+0x72/0xab [ 131.172863] handle_bug+0x3c/0x70 [ 131.172879] exc_invalid_op+0x14/0x50 [ 131.172895] asm_exc_invalid_op+0x16/0x20 [ 131.172906] group_sched_out.part.0+0x2c7/0x460 [ 131.172917] ctx_sched_out+0x8f1/0xc10 [ 131.172927] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.172939] __schedule+0xedd/0x2470 [ 131.172952] schedule+0xda/0x1b0 [ 131.172964] futex_wait_queue+0xf5/0x1e0 [ 131.172975] futex_wait+0x28e/0x690 [ 131.172984] do_futex+0x2ff/0x380 [ 131.172993] __x64_sys_futex+0x1c6/0x4d0 [ 131.173003] do_syscall_64+0x3b/0x90 [ 131.173019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.173031] [ 131.173031] other info that might help us debug this: [ 131.173031] [ 131.173034] Chain exists of: [ 131.173034] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 131.173034] [ 131.173049] Possible unsafe locking scenario: [ 131.173049] [ 131.173052] CPU0 CPU1 [ 131.173054] ---- ---- [ 131.173056] lock(&ctx->lock); [ 131.173062] lock(&rq->__lock); [ 131.173077] lock(&ctx->lock); [ 131.173083] lock((console_sem).lock); [ 131.173089] [ 131.173089] *** DEADLOCK *** [ 131.173089] [ 131.173091] 2 locks held by syz-executor.2/3902: [ 131.173098] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 131.173127] #1: ffff88800d058420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.173154] [ 131.173154] stack backtrace: [ 131.173158] CPU: 1 PID: 3902 Comm: syz-executor.2 Tainted: G W 6.0.0-rc6-next-20220923 #1 [ 131.173171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.173179] Call Trace: [ 131.173183] [ 131.173187] dump_stack_lvl+0x8b/0xb3 [ 131.173205] check_noncircular+0x263/0x2e0 [ 131.173221] ? format_decode+0x26c/0xb50 [ 131.173238] ? print_circular_bug+0x450/0x450 [ 131.173254] ? enable_ptr_key_workfn+0x20/0x20 [ 131.173269] ? __lockdep_reset_lock+0x180/0x180 [ 131.173286] ? format_decode+0x26c/0xb50 [ 131.173302] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 131.173320] __lock_acquire+0x2a02/0x5e70 [ 131.173341] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.173363] lock_acquire+0x1a2/0x530 [ 131.173379] ? down_trylock+0xe/0x70 [ 131.173395] ? lock_release+0x750/0x750 [ 131.173413] ? find_held_lock+0x2c/0x110 [ 131.173429] ? vprintk+0x84/0xa0 [ 131.173447] _raw_spin_lock_irqsave+0x39/0x60 [ 131.173466] ? down_trylock+0xe/0x70 [ 131.173481] down_trylock+0xe/0x70 [ 131.173496] ? vprintk+0x84/0xa0 [ 131.173513] __down_trylock_console_sem+0x3b/0xd0 [ 131.173530] vprintk_emit+0x16b/0x560 [ 131.173548] vprintk+0x84/0xa0 [ 131.173565] _printk+0xba/0xf1 [ 131.173576] ? record_print_text.cold+0x16/0x16 [ 131.173589] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 131.173603] ? lock_downgrade+0x6d0/0x6d0 [ 131.173620] ? report_bug.cold+0x66/0xab [ 131.173637] ? group_sched_out.part.0+0x2c7/0x460 [ 131.173649] report_bug.cold+0x72/0xab [ 131.173667] handle_bug+0x3c/0x70 [ 131.173684] exc_invalid_op+0x14/0x50 [ 131.173701] asm_exc_invalid_op+0x16/0x20 [ 131.173713] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.173728] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.173739] RSP: 0018:ffff88801bf078f8 EFLAGS: 00010006 [ 131.173748] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.173756] RDX: ffff888041243580 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 131.173764] RBP: ffff888041578b90 R08: 0000000000000005 R09: 0000000000000001 [ 131.173771] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d058400 [ 131.173779] R13: ffff88806cf3d140 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 131.173790] ? group_sched_out.part.0+0x2c7/0x460 [ 131.173803] ? group_sched_out.part.0+0x2c7/0x460 [ 131.173816] ctx_sched_out+0x8f1/0xc10 [ 131.173828] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.173844] ? lock_is_held_type+0xd7/0x130 [ 131.173857] ? __perf_cgroup_move+0x160/0x160 [ 131.173869] ? set_next_entity+0x304/0x550 [ 131.173888] ? lock_is_held_type+0xd7/0x130 [ 131.173902] __schedule+0xedd/0x2470 [ 131.173918] ? io_schedule_timeout+0x150/0x150 [ 131.173933] ? futex_wait_setup+0x166/0x230 [ 131.173947] schedule+0xda/0x1b0 [ 131.173961] futex_wait_queue+0xf5/0x1e0 [ 131.173973] futex_wait+0x28e/0x690 [ 131.173985] ? futex_wait_setup+0x230/0x230 [ 131.173999] ? wake_up_q+0x8b/0xf0 [ 131.174011] ? do_raw_spin_unlock+0x4f/0x220 [ 131.174030] ? futex_wake+0x158/0x490 [ 131.174045] ? lock_downgrade+0x6d0/0x6d0 [ 131.174062] ? lock_is_held_type+0xd7/0x130 [ 131.174076] do_futex+0x2ff/0x380 [ 131.174087] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 131.174099] ? ktime_get+0x153/0x1f0 [ 131.174115] __x64_sys_futex+0x1c6/0x4d0 [ 131.174127] ? hrtimer_interrupt+0x5b0/0x770 [ 131.174141] ? __x64_sys_futex_time32+0x480/0x480 [ 131.174153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 131.174167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 131.174182] do_syscall_64+0x3b/0x90 [ 131.174199] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.174211] RIP: 0033:0x7fdb25f50b19 [ 131.174219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.174230] RSP: 002b:00007fdb234c6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.174241] RAX: ffffffffffffffda RBX: 00007fdb26063f68 RCX: 00007fdb25f50b19 [ 131.174249] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdb26063f68 [ 131.174256] RBP: 00007fdb26063f60 R08: 0000000000000000 R09: 0000000000000000 [ 131.174263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb26063f6c [ 131.174270] R13: 00007ffeed1fb57f R14: 00007fdb234c6300 R15: 0000000000022000 [ 131.174283] [ 131.236669] WARNING: CPU: 1 PID: 3902 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 131.237362] Modules linked in: [ 131.237604] CPU: 1 PID: 3902 Comm: syz-executor.2 Tainted: G W 6.0.0-rc6-next-20220923 #1 [ 131.238312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.239146] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.239549] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.240913] RSP: 0018:ffff88801bf078f8 EFLAGS: 00010006 [ 131.241320] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.241846] RDX: ffff888041243580 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 131.242372] RBP: ffff888041578b90 R08: 0000000000000005 R09: 0000000000000001 [ 131.242900] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d058400 [ 131.243426] R13: ffff88806cf3d140 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 131.243960] FS: 00007fdb234c6700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 131.244571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.245004] CR2: 00007f789746f2d0 CR3: 000000001a520000 CR4: 0000000000350ee0 [ 131.245546] Call Trace: [ 131.245744] [ 131.245919] ctx_sched_out+0x8f1/0xc10 [ 131.246219] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.246614] ? lock_is_held_type+0xd7/0x130 [ 131.246939] ? __perf_cgroup_move+0x160/0x160 [ 131.247285] ? set_next_entity+0x304/0x550 [ 131.247615] ? lock_is_held_type+0xd7/0x130 [ 131.247944] __schedule+0xedd/0x2470 [ 131.248231] ? io_schedule_timeout+0x150/0x150 [ 131.248576] ? futex_wait_setup+0x166/0x230 [ 131.248906] schedule+0xda/0x1b0 [ 131.249188] futex_wait_queue+0xf5/0x1e0 [ 131.249493] futex_wait+0x28e/0x690 [ 131.249771] ? futex_wait_setup+0x230/0x230 [ 131.250098] ? wake_up_q+0x8b/0xf0 [ 131.250366] ? do_raw_spin_unlock+0x4f/0x220 [ 131.250711] ? futex_wake+0x158/0x490 [ 131.251002] ? lock_downgrade+0x6d0/0x6d0 [ 131.251325] ? lock_is_held_type+0xd7/0x130 [ 131.251651] do_futex+0x2ff/0x380 [ 131.251917] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 131.252351] ? ktime_get+0x153/0x1f0 [ 131.252640] __x64_sys_futex+0x1c6/0x4d0 [ 131.252946] ? hrtimer_interrupt+0x5b0/0x770 [ 131.253285] ? __x64_sys_futex_time32+0x480/0x480 [ 131.253651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 131.254038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 131.254434] do_syscall_64+0x3b/0x90 [ 131.254723] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.255110] RIP: 0033:0x7fdb25f50b19 [ 131.255388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.256738] RSP: 002b:00007fdb234c6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.257325] RAX: ffffffffffffffda RBX: 00007fdb26063f68 RCX: 00007fdb25f50b19 [ 131.257859] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdb26063f68 [ 131.258390] RBP: 00007fdb26063f60 R08: 0000000000000000 R09: 0000000000000000 [ 131.258917] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb26063f6c [ 131.259447] R13: 00007ffeed1fb57f R14: 00007fdb234c6300 R15: 0000000000022000 [ 131.259978] [ 131.260156] irq event stamp: 208 [ 131.260409] hardirqs last enabled at (207): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 131.261138] hardirqs last disabled at (208): [] __schedule+0x1225/0x2470 [ 131.261748] softirqs last enabled at (0): [] copy_process+0x1e15/0x6e20 [ 131.262359] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 131.262823] ---[ end trace 0000000000000000 ]--- 06:30:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TCSETSW(r1, 0x540a, 0x0) 06:30:16 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fork() kcmp(0x0, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c746572000000000000010000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0a7a9b2dae5c75623ede504d28573b16293a1448f38c571eb4f3c32041e21841d73a92bb34dda35eab3ef3fc57c0d18ffa0e411c5dce60ce0f6d9a8b6fba328ddde05a9a8c715a2f45387de0f9fb50d00b5561f3c82d18e4391f0707cccca3ceeadf8661d3e57e540699dcea2501d1aabee400"], 0x68) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) r3 = openat(0xffffffffffffffff, 0x0, 0x341, 0x16) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000380)='./file1\x00', 0x18001, 0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) read(0xffffffffffffffff, &(0x7f0000000300)=""/5, 0x5) creat(&(0x7f0000000400)='./file1\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_aout(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/1226], 0x4ca) [ 131.305049] audit: type=1400 audit(1664260216.478:9): avc: denied { write } for pid=3910 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 06:30:16 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f0000001c00), 0x1800001, &(0x7f0000001cc0)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00') [ 131.511858] FAT-fs (loop3): bogus number of reserved sectors [ 131.512383] FAT-fs (loop3): Can't find a valid FAT filesystem [ 131.591805] FAT-fs (loop3): bogus number of reserved sectors [ 131.592276] FAT-fs (loop3): Can't find a valid FAT filesystem [ 131.996670] loop0: detected capacity change from 0 to 8 [ 131.998282] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 132.006544] audit: type=1400 audit(1664260217.179:10): avc: denied { map } for pid=3971 comm="syz-executor.0" path="pipe:[13968]" dev="pipefs" ino=13968 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 132.008166] loop0: detected capacity change from 0 to 8 [ 132.008470] audit: type=1400 audit(1664260217.179:11): avc: denied { execute } for pid=3971 comm="syz-executor.0" path="pipe:[13968]" dev="pipefs" ino=13968 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 132.009879] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value VM DIAGNOSIS: 06:30:16 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88806ce09598 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffb04e22260 CR3=0000000008e5c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000027144 RBX=1ffff110082a7f84 RCX=ffffc90002be7000 RDX=0000000000040000 RSI=ffffffff813bb2f3 RDI=0000000000000005 RBP=ffff88804153fcc8 RSP=ffff88804153fc00 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff813bb2f5 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f50dda13700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f50e05b1018 CR3=000000001d23c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000