Warning: Permanently added '[localhost]:24798' (ECDSA) to the list of known hosts. 2022/10/05 19:38:57 fuzzer started 2022/10/05 19:38:58 dialing manager at localhost:37193 syzkaller login: [ 44.139784] cgroup: Unknown subsys name 'net' [ 44.241274] cgroup: Unknown subsys name 'rlimit' 2022/10/05 19:39:11 syscalls: 2215 2022/10/05 19:39:11 code coverage: enabled 2022/10/05 19:39:11 comparison tracing: enabled 2022/10/05 19:39:11 extra coverage: enabled 2022/10/05 19:39:11 setuid sandbox: enabled 2022/10/05 19:39:11 namespace sandbox: enabled 2022/10/05 19:39:11 Android sandbox: enabled 2022/10/05 19:39:11 fault injection: enabled 2022/10/05 19:39:11 leak checking: enabled 2022/10/05 19:39:11 net packet injection: enabled 2022/10/05 19:39:11 net device setup: enabled 2022/10/05 19:39:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/05 19:39:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/05 19:39:11 USB emulation: enabled 2022/10/05 19:39:11 hci packet injection: enabled 2022/10/05 19:39:11 wifi device emulation: failed to parse kernel version (6.0.0-next-20221005) 2022/10/05 19:39:11 802.15.4 emulation: enabled 2022/10/05 19:39:11 fetching corpus: 50, signal 19744/21561 (executing program) 2022/10/05 19:39:11 fetching corpus: 100, signal 34800/38128 (executing program) 2022/10/05 19:39:11 fetching corpus: 150, signal 39436/44280 (executing program) 2022/10/05 19:39:11 fetching corpus: 200, signal 46146/52318 (executing program) 2022/10/05 19:39:11 fetching corpus: 250, signal 50359/57856 (executing program) 2022/10/05 19:39:11 fetching corpus: 300, signal 55370/64073 (executing program) 2022/10/05 19:39:11 fetching corpus: 350, signal 59143/69012 (executing program) 2022/10/05 19:39:12 fetching corpus: 400, signal 61253/72369 (executing program) 2022/10/05 19:39:12 fetching corpus: 450, signal 63428/75662 (executing program) 2022/10/05 19:39:12 fetching corpus: 500, signal 69611/82582 (executing program) 2022/10/05 19:39:12 fetching corpus: 550, signal 74654/88353 (executing program) 2022/10/05 19:39:12 fetching corpus: 600, signal 80773/94949 (executing program) 2022/10/05 19:39:12 fetching corpus: 650, signal 85272/100058 (executing program) 2022/10/05 19:39:12 fetching corpus: 700, signal 87768/103379 (executing program) 2022/10/05 19:39:12 fetching corpus: 750, signal 90138/106509 (executing program) 2022/10/05 19:39:12 fetching corpus: 800, signal 92965/109996 (executing program) 2022/10/05 19:39:13 fetching corpus: 850, signal 95507/113170 (executing program) 2022/10/05 19:39:13 fetching corpus: 900, signal 97608/115929 (executing program) 2022/10/05 19:39:13 fetching corpus: 950, signal 98756/117913 (executing program) 2022/10/05 19:39:13 fetching corpus: 1000, signal 100217/120088 (executing program) 2022/10/05 19:39:13 fetching corpus: 1050, signal 101810/122318 (executing program) 2022/10/05 19:39:13 fetching corpus: 1100, signal 103936/124910 (executing program) 2022/10/05 19:39:13 fetching corpus: 1150, signal 106622/127948 (executing program) 2022/10/05 19:39:13 fetching corpus: 1200, signal 108274/130137 (executing program) 2022/10/05 19:39:13 fetching corpus: 1250, signal 109381/131886 (executing program) 2022/10/05 19:39:14 fetching corpus: 1300, signal 111826/134580 (executing program) 2022/10/05 19:39:14 fetching corpus: 1350, signal 113387/136613 (executing program) 2022/10/05 19:39:14 fetching corpus: 1400, signal 115110/138751 (executing program) 2022/10/05 19:39:14 fetching corpus: 1450, signal 116374/140497 (executing program) 2022/10/05 19:39:14 fetching corpus: 1500, signal 117181/141896 (executing program) 2022/10/05 19:39:14 fetching corpus: 1550, signal 118627/143682 (executing program) 2022/10/05 19:39:14 fetching corpus: 1600, signal 119500/145049 (executing program) 2022/10/05 19:39:14 fetching corpus: 1650, signal 120632/146652 (executing program) 2022/10/05 19:39:14 fetching corpus: 1700, signal 121963/148331 (executing program) 2022/10/05 19:39:14 fetching corpus: 1750, signal 123104/149850 (executing program) 2022/10/05 19:39:15 fetching corpus: 1800, signal 124568/151539 (executing program) 2022/10/05 19:39:15 fetching corpus: 1850, signal 127803/154337 (executing program) 2022/10/05 19:39:15 fetching corpus: 1900, signal 128557/155541 (executing program) 2022/10/05 19:39:15 fetching corpus: 1950, signal 130731/157545 (executing program) 2022/10/05 19:39:15 fetching corpus: 2000, signal 132042/159057 (executing program) 2022/10/05 19:39:15 fetching corpus: 2050, signal 133072/160343 (executing program) 2022/10/05 19:39:15 fetching corpus: 2100, signal 134119/161564 (executing program) 2022/10/05 19:39:15 fetching corpus: 2150, signal 135603/163039 (executing program) 2022/10/05 19:39:15 fetching corpus: 2200, signal 136427/164160 (executing program) 2022/10/05 19:39:16 fetching corpus: 2250, signal 137640/165401 (executing program) 2022/10/05 19:39:16 fetching corpus: 2300, signal 138787/166658 (executing program) 2022/10/05 19:39:16 fetching corpus: 2350, signal 140877/168321 (executing program) 2022/10/05 19:39:16 fetching corpus: 2400, signal 142435/169730 (executing program) 2022/10/05 19:39:16 fetching corpus: 2450, signal 144029/171122 (executing program) 2022/10/05 19:39:16 fetching corpus: 2500, signal 144645/172020 (executing program) 2022/10/05 19:39:16 fetching corpus: 2550, signal 146734/173674 (executing program) 2022/10/05 19:39:16 fetching corpus: 2600, signal 147593/174608 (executing program) 2022/10/05 19:39:16 fetching corpus: 2650, signal 148022/175322 (executing program) 2022/10/05 19:39:17 fetching corpus: 2700, signal 149038/176312 (executing program) 2022/10/05 19:39:17 fetching corpus: 2750, signal 149939/177219 (executing program) 2022/10/05 19:39:17 fetching corpus: 2800, signal 151021/178278 (executing program) 2022/10/05 19:39:17 fetching corpus: 2850, signal 151652/179075 (executing program) 2022/10/05 19:39:17 fetching corpus: 2900, signal 152267/179856 (executing program) 2022/10/05 19:39:17 fetching corpus: 2950, signal 153105/180680 (executing program) 2022/10/05 19:39:17 fetching corpus: 3000, signal 154131/181571 (executing program) 2022/10/05 19:39:17 fetching corpus: 3050, signal 155049/182363 (executing program) 2022/10/05 19:39:17 fetching corpus: 3100, signal 155616/183106 (executing program) 2022/10/05 19:39:17 fetching corpus: 3150, signal 156425/183867 (executing program) 2022/10/05 19:39:18 fetching corpus: 3200, signal 157227/184588 (executing program) 2022/10/05 19:39:18 fetching corpus: 3250, signal 157656/185173 (executing program) 2022/10/05 19:39:18 fetching corpus: 3300, signal 158012/185744 (executing program) 2022/10/05 19:39:18 fetching corpus: 3350, signal 158996/186510 (executing program) 2022/10/05 19:39:18 fetching corpus: 3400, signal 159790/187189 (executing program) 2022/10/05 19:39:18 fetching corpus: 3450, signal 160851/187940 (executing program) 2022/10/05 19:39:18 fetching corpus: 3500, signal 162523/188837 (executing program) 2022/10/05 19:39:18 fetching corpus: 3550, signal 162959/189355 (executing program) 2022/10/05 19:39:18 fetching corpus: 3600, signal 163494/189842 (executing program) 2022/10/05 19:39:18 fetching corpus: 3650, signal 164277/190402 (executing program) 2022/10/05 19:39:19 fetching corpus: 3700, signal 164917/190911 (executing program) 2022/10/05 19:39:19 fetching corpus: 3750, signal 165953/191491 (executing program) 2022/10/05 19:39:19 fetching corpus: 3800, signal 166500/191965 (executing program) 2022/10/05 19:39:19 fetching corpus: 3850, signal 166983/192400 (executing program) 2022/10/05 19:39:19 fetching corpus: 3900, signal 167309/192807 (executing program) 2022/10/05 19:39:19 fetching corpus: 3950, signal 168473/193368 (executing program) 2022/10/05 19:39:19 fetching corpus: 4000, signal 169382/193870 (executing program) 2022/10/05 19:39:19 fetching corpus: 4050, signal 170676/194430 (executing program) 2022/10/05 19:39:19 fetching corpus: 4100, signal 171189/194815 (executing program) 2022/10/05 19:39:19 fetching corpus: 4150, signal 171657/195152 (executing program) 2022/10/05 19:39:20 fetching corpus: 4200, signal 172134/195508 (executing program) 2022/10/05 19:39:20 fetching corpus: 4250, signal 173037/195946 (executing program) 2022/10/05 19:39:20 fetching corpus: 4300, signal 173842/196318 (executing program) 2022/10/05 19:39:20 fetching corpus: 4350, signal 175058/196758 (executing program) 2022/10/05 19:39:20 fetching corpus: 4400, signal 175482/197084 (executing program) 2022/10/05 19:39:20 fetching corpus: 4450, signal 175990/197399 (executing program) 2022/10/05 19:39:20 fetching corpus: 4500, signal 177086/197746 (executing program) 2022/10/05 19:39:20 fetching corpus: 4550, signal 178373/198122 (executing program) 2022/10/05 19:39:20 fetching corpus: 4600, signal 178713/198369 (executing program) 2022/10/05 19:39:21 fetching corpus: 4650, signal 179580/198643 (executing program) 2022/10/05 19:39:21 fetching corpus: 4700, signal 180554/198882 (executing program) 2022/10/05 19:39:21 fetching corpus: 4750, signal 181051/199101 (executing program) 2022/10/05 19:39:21 fetching corpus: 4800, signal 181620/199312 (executing program) 2022/10/05 19:39:21 fetching corpus: 4850, signal 182151/199513 (executing program) 2022/10/05 19:39:21 fetching corpus: 4900, signal 182578/199729 (executing program) 2022/10/05 19:39:21 fetching corpus: 4950, signal 183176/199906 (executing program) 2022/10/05 19:39:21 fetching corpus: 5000, signal 183712/199952 (executing program) 2022/10/05 19:39:21 fetching corpus: 5050, signal 184383/199952 (executing program) 2022/10/05 19:39:22 fetching corpus: 5100, signal 185014/199968 (executing program) 2022/10/05 19:39:22 fetching corpus: 5150, signal 185540/199991 (executing program) 2022/10/05 19:39:22 fetching corpus: 5194, signal 186075/199996 (executing program) 2022/10/05 19:39:22 fetching corpus: 5194, signal 186075/199996 (executing program) 2022/10/05 19:39:25 starting 8 fuzzer processes 19:39:25 executing program 0: poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x30}], 0x1, 0x1) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@flushpolicy={0x70, 0x1d, 0x2, 0x70bd28, 0x25dfdbfe, "", [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x10}}}, @coaddr={0x14, 0xe, @in=@local}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd2b, 0x70bd2d, 0x70bd2d, 0x70bd28, 0xfffffff7, [0x10001, 0x2, 0x2]}}, @etimer_thresh={0x8, 0xc, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4011) r2 = dup3(r0, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000004380)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000480)=""/49, 0x31}, {&(0x7f00000004c0)=""/206, 0xce}, {&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000007c0)=""/160, 0xa0}], 0x9}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f00000009c0)=""/62, 0x3e}, {&(0x7f0000000a00)=""/146, 0x92}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/182, 0xb6}], 0x4}}, {{&(0x7f0000001bc0), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/164, 0xa4}], 0x1, &(0x7f0000001d40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001e00)=""/4096, 0x1000}], 0x1, &(0x7f0000002e40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000002f40), 0x6e, &(0x7f00000042c0)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/155, 0x9b}, {&(0x7f0000004080)=""/153, 0x99}, {&(0x7f0000004140)=""/197, 0xc5}, {&(0x7f0000004240)=""/102, 0x66}], 0x5, &(0x7f0000004340)}}], 0x5, 0x10000, &(0x7f00000044c0)={0x77359400}) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000004540)={'filter\x00', 0x7, 0x4, 0x410, 0x240, 0x240, 0x130, 0x328, 0x328, 0x328, 0x4, &(0x7f0000004500), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6a90000, 0x5, 0x0, 0x0, 0x0, "405b15a3ddaf17eed2bc6da4f232b72bc29fd07fd8598df687ec737aca19ce407af149c7f1225bfabd9e572c71454093664d39592b609d201aa267b1d1c4950f"}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 0x10, 0xa, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x101]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x7f, 0x70c, 0x2, 0x9, 0x6, 0x5, 'veth1\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x238}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@local, @private=0xa010100, @remote, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010100, 0xffffff, 0x0, 0x1, 0xe, {@mac=@broadcast, {[0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x9c0, 0x3, 0x7, 0xfffa, 0x7ff, 0x3, 'rose0\x00', 'tunl0\x00', {}, {}, 0x0, 0x207}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000049c0)=0x40, &(0x7f0000004a00)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000004a40)={0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000004ac0)={r10, r6, r9}, 0xc) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004b80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000004c40)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)={0x2c, r11, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24004004) setsockopt$inet_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000004c80)={0xfff}, 0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000004e00)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d00)={0xbc, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5efd78e94dd859d0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000004e40)=0x82b7, &(0x7f0000004e80)=0x4) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000004fc0)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x80001200}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f40)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}]}, 0x28}}, 0x8810) 19:39:25 executing program 1: bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000100)={'gretap0\x00', r0, 0x8000, 0x700, 0x9, 0xf6f0, {{0x3d, 0x4, 0x3, 0x7, 0xf4, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @remote, {[@timestamp_prespec={0x44, 0x4, 0x54, 0x3, 0x7}, @cipso={0x86, 0x60, 0x3, [{0x2, 0x2}, {0x1, 0x6, "b1c57b14"}, {0x0, 0x12, "88121a0243aa7f19ee619fc747f966bf"}, {0x0, 0xf, "f578f4de1e2a4dbebaa5ba7376"}, {0x5, 0x11, "49985244ee873000762e9e65228a00"}, {0x2, 0xa, "4991ec764a6af829"}, {0x5, 0x10, "f59ebc84c90512b9d75445ec09b2"}, {0x2, 0x6, "03abaf5c"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x18, [@remote, @local, @multicast1, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xd}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0x5f, [@multicast1, @multicast2, @remote, @broadcast, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x36}, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x87, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x4}, {@empty, 0x9}, {@broadcast, 0xfffffffe}]}]}}}}}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', r0, 0x29, 0x4, 0x6, 0x40e, 0x40, @remote, @loopback, 0x7ff7, 0x10, 0x15, 0x100}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1ec, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20000010}, 0x40d0) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x600402, 0x0, 0x2}, 0x18) recvmmsg(r2, &(0x7f0000004e80)=[{{&(0x7f0000000840)=@tipc=@id, 0x80, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/172, 0xac}], 0x2, &(0x7f0000000a40)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000001a40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001ac0)=""/68, 0x44}, {&(0x7f0000001b40)=""/122, 0x7a}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/42, 0x2a}, {&(0x7f0000002c00)=""/65, 0x41}, {&(0x7f0000002c80)=""/104, 0x68}, {&(0x7f0000002d00)=""/167, 0xa7}], 0x7, &(0x7f0000002e40)=""/255, 0xff}, 0x8ae}, {{&(0x7f0000002f40)=@caif=@rfm, 0x80, &(0x7f0000003140)=[{&(0x7f0000002fc0)=""/90, 0x5a}, {&(0x7f0000003040)=""/234, 0xea}], 0x2, &(0x7f0000003180)=""/131, 0x83}, 0x100}, {{&(0x7f0000003240)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004780)=[{&(0x7f00000032c0)=""/129, 0x81}, {&(0x7f0000003380)=""/4, 0x4}, {&(0x7f00000033c0)=""/53, 0x35}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/209, 0xd1}, {&(0x7f0000004500)=""/213, 0xd5}, {&(0x7f0000004600)=""/110, 0x6e}, {&(0x7f0000004680)=""/34, 0x22}, {&(0x7f00000046c0)=""/42, 0x2a}, {&(0x7f0000004700)=""/103, 0x67}], 0xa, &(0x7f0000004840)=""/71, 0x47}, 0xefbd}, {{&(0x7f00000048c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004940)=""/55, 0x37}, {&(0x7f0000004980)=""/62, 0x3e}, {&(0x7f00000049c0)=""/53, 0x35}], 0x3, &(0x7f0000004a40)=""/38, 0x26}, 0x8001}, {{&(0x7f0000004a80)=@x25={0x9, @remote}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004b00)=""/14, 0xe}], 0x1, &(0x7f0000004b80)=""/73, 0x49}, 0x200}, {{&(0x7f0000004c00)=@ax25={{0x3, @netrom}, [@netrom, @default, @netrom, @default, @null, @rose, @rose, @null]}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004c80)=""/203, 0xcb}], 0x1, &(0x7f0000004dc0)=""/154, 0x9a}, 0x9}], 0x7, 0x2000, &(0x7f0000005040)={0x0, 0x3938700}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000005080)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) r9 = openat$cgroup_devices(r7, &(0x7f00000050c0)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r9, 0x40089413, &(0x7f0000005100)=0xfffffffffffffff7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000005140)={r3, 0x1, 0x6}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000005200)={'syztnl1\x00', &(0x7f0000005180)={'syztnl1\x00', r4, 0x4, 0x7f, 0xff, 0x4, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x20, 0x700, 0x1000, 0x4000}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r12, &(0x7f0000005240)="2d93b3dcad716cf3f7f526271997148dd0111b204e4ead7f0bad52bbbd38f0298cf3770d87bb675a18ca2efa8d3c9cf5a72116a69522bad8cbf696cbcc5742d8831df2448303d2c2f091ae0bc07b6b73e591ac7595d0a2506836b5159b119d04619a86f8671fbed3c8b86a0eba9a3897200a01cd07d206469f0db9b99fd05447de443cf8b853614d1acc8f3c3900d118713652981c80d0d9be84acd402131edc960cee729feae6858d78c25ee874e09f759b59669c5154", 0xb7, 0xc6024b329de05387, &(0x7f0000005300)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000005380)={0x8, 0xdc32, 0x8, 0xd38}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000056c0)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005680)={&(0x7f00000055c0)={0x94, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x200480d0}, 0x20000080) 19:39:25 executing program 2: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0xe7b307938d947801) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000010c0)={{r1, 0x3, 0xfffffffffffffff9, 0x3f, 0x7fff, 0x3, 0xffffffffffffff80, 0x8000, 0x3ff, 0x5, 0x3, 0x1, 0x241c, 0xb836, 0x6f06b9c0}, 0x20, [0x0, 0x0, 0x0, 0x0]}) fsync(r0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001180)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) mknodat$loop(r2, &(0x7f00000011c0)='./file0\x00', 0x2000, 0x0) fstat(r2, &(0x7f0000001200)) perf_event_open(&(0x7f0000001280)={0x0, 0x80, 0x3, 0x5, 0x3, 0xc0, 0x0, 0x6, 0xa004, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x8000}, 0x1000, 0x0, 0x7, 0x5, 0x1, 0x5, 0x6, 0x0, 0xffff41aa, 0x0, 0x1ecb}, 0x0, 0x1, 0xffffffffffffffff, 0xf) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000001300)) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$sock(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)="cdf562056db20a7a2b957aca824440cbc8450896ac342952b9ad6743808f86d2cae143d1", 0x24}, {&(0x7f0000001380)="d91af0b9f37aa64f00a26b8fea39e63ae9b6ffe87d073f697e2cf7ebbda12275e4658f6d424979b806a28494540f904287b77b7bc05f976bf412dd29fc2650c70035d87c0b6f2df8f2217028333e81cf60f31d89267de35d46f0c47d71ce0db3ae7347cc557df77d7c210ecc7ed8a842a3cb211ff70a12d1bff73989a18e8c9070d949915fbe1b133ffce1124a51ac416f4d00bb369b57987a2996043baffced5ec7686b7f296536cd48fc49fda2d5deda4dc11051e1", 0xb6}], 0x2, &(0x7f0000001480)=[@txtime={{0x18, 0x1, 0x3d, 0x302295e0}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x30}, 0x8000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, r2, 0x8000000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001580)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000001500)={0x1, 0x80, 0x81, 0x3, 0xf8, 0x4, 0x0, 0x5, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0xfffffffffffffffa}, 0x40000, 0x9, 0x1000, 0x1, 0x0, 0x1, 0x4606, 0x0, 0x9b, 0x0, 0x7}, r4, 0xa, 0xffffffffffffffff, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x1010, r2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000015c0)=@IORING_OP_FADVISE={0x18, 0x7, 0x0, @fd_index=0x8, 0x6, 0x0, 0x5, 0x4, 0x0, {0x0, r6}}, 0x5) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x20010, r2, 0x8000000) syz_io_uring_complete(r7) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000001640)={0x7f, 0x0, 0x6, 0x0, 0x1, [{0x7, 0x8, 0x8, '\x00', 0x2}]}) 19:39:25 executing program 3: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000001c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000200)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000240)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000280)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000002c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000300)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000340)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000380)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000003c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000440)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000480)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000004c0)) [ 71.184601] audit: type=1400 audit(1664998765.357:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:39:25 executing program 4: sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}]}, 0x30}}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4c1090890cb6e0c9, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44880}, 0x84) r0 = fsmount(0xffffffffffffffff, 0x1, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'macvlan1\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4040814) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000440)={0x6, 0x141, 0x1, 0x400, 0x6, [{0x5, 0x4, 0x7fff, '\x00', 0x2e0f}, {0xfffffffffffff883, 0x7, 0x100000000, '\x00', 0x100}, {0xfff, 0x1, 0xc6}, {0x8, 0x1ff, 0x4, '\x00', 0x1000}, {0x1000, 0x94, 0x6, '\x00', 0x8}, {0x61, 0x1, 0x113}]}) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x18009220}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4081}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x6, 0x7fff, 0x1, @mcast1, @mcast2, 0x40, 0x8, 0xcec, 0xffff}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x23c, 0x12, 0x100, 0x70bd28, 0x25dfdbfd, {0x1, 0x5, 0x5e, 0x0, {0x4e24, 0x4e21, [0x4, 0x9, 0x6a, 0x9], [0x6, 0x3, 0x0, 0x81], r3, [0x0, 0x1f]}, 0xfffffffc, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "7d72db51fe87ae207b1682cf05db24bd7d8b213bfad34c0f51af67166990ba27a972196ee798f955fe8271790b42d5f859d84aaaee7c2ad4030fc4e58c466d28ebb065893e6ac3a7a7d2eeb459523499ebf8fc6143ebd68652c5952cc8e4bac6172fbd012be5860668518a4b23396a3b180a44ddd4fb6ccac7aac14d"}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "35459e848990260298e445aaf6f4ac5a92fdd8a7be39e4f1eba4df1a6483749d2d871ca20a0c74f0e72b7ad698e7ca1752ce6c14c12559059e14b6bada14229a03ba726c9fd22a4d8793ad16a5900f126c8ec77b2d877b85101439dd48fbf817a9276c81bde4a2c7b225829aecd9cde7448e0ab5d8caaac8cc1319587bacbe39ab1afee404b6ca65272ea06c185ab48e0b7c559202117007205ba30c0903e180f1bbbc799933d81f"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "de2a6e20db61c5b54e2d36396e4d4dd16c1207afa0083f7d55962c4bf6a49a1b40a82301c9b0536093bf18b77a2b716be779c4cf152e6cdb6bb41814750b2b64052843e3569d9107ec33daa5ea6228a7427d0dc648de318b0d1adc4005337b92ca2ce40faad5eba4da4908f310a6f96ed1eff67952291c303eb10d9abbc1cce3bec5118aaf4dc901c0a81c4e772a80b5d0b21417d680de17034bad3c4623e0efebc24b5550c60d37a03e23c5ba2ec2ce4fd8ade61a1de099532e229f"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x23c}}, 0x2000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000a80)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2180000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048011}, 0x20000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c003}, 0x4400) pwrite64(r1, &(0x7f0000000d80)="ad73851623aa2767a323bb192c3ab81c7c517bb4c1919a2758bc41439aee27e15aeda04a1571641a53630709376b7210b5c873363bb5e94a000b999b12eb9ee9dcdb03225eed20d6a699994fb48b8942d69772312b9ca2ca6fe8c371373c9516ddaa0f45", 0x64, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, 0x1c, 0x8, 0x70bd27, 0x25dfdbfb, {0x6}, [@typed={0x8, 0x3d, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="f0dea2b189a816cddbd7c644cd57c09e049da7028375727c30b1c0c67f307d422c330f691ff45e1f5b28afaa09", @typed={0x8, 0x66, 0x0, 0x0, @ipv4=@local}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040044}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001180)={&(0x7f0000000fc0)={0x1b0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7f}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}, @NL80211_ATTR_FRAME_MATCH={0x5a, 0x5b, "82caa8517bbad059ddb6e34602f4b476cfd191a52594d0a3a80b8afec7d21af22e02a1d9a3d058bffbf14631b623b122f9a5de4cb9f2bc2f391cb90a88bcf8a59d4528e0af121876a7a72f12ea40c7a68f90edee908d"}, @NL80211_ATTR_FRAME_MATCH={0xa8, 0x5b, "82da6dcd91c79d1013d89ffd320a353ec81e4b7a78682ac0078a100469c6a6289eaa1f3d59f6f97ba573784f4e86c2af59c0515f1aff68556f58034b6a79eea3f99784f06eaedea7906a34d93b1f7e428414cd447291b2e801bd4e61845ea741183afa226e3c9fc63aa8f16956a15815d697ae8ed35f4a1da1aa199a7d48a4ddda03ecdb3b65656e725d5a944c69e5b5d929b4b9e726c82828cb485606e1fb2e98fa9054"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x7b, 0x5b, "e03873ff1c23053c4b6a80357225899ce2dc5729bf32ef3b0634bdfb6f9107fe3d8d02e3cb150fde86420afbfde0cdc90e500cd681e16e17e0dd05dfb6525a3d4782e773dd9a12daaebb401790f383227c5cbc6c3bfc34e6c96f2580f6ec160e1c730e4e87352b470d30c4c7927106cda03b83432f48b7"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x44}, 0x4810) 19:39:25 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x180, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "77c97e6d2595a7d0e8fd81ccd58c281d95169539792fbd5989e46512e5cccb51"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x94, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a4a65a43d4432a1f3a5dd0823c0fe4067e9fc29c19f650f792e1c8f2da66dc9d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9617ea74008afed27bbee42d4ea3cbdf6705d0b8f562011cab1e6be5292546b6"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "611c15a3615578a3447f07bcbd5c1515d9389feb074564412a6e8d6ae2865430"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0dad9d2a96332833bdc657907aaa2315"}]}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xad}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "477e5af9cae64026e0c5f63e0a47a7ed4d0f05de6be725feee6590f0bcc898ae"}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b4043573c1efa064f847a1f08a288432b88616053ff28d8cbbc871a2a645b58d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0820fbdd213f91c77d14416390f64eb6"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004000}, 0x44000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x40024) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x208, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xce}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x89, 0x3, "c2875176934866ba2ad799837281da78aa012a6e0718035863f5d017268eef09199f589b9d1852f9a8f3bd85bb656bd7a2d5bf8b407b3d44e529fe533b7001b6cd753dfa386553ad95b86212b9188806f26c0e6b7dcec344152e3f4483320f0a43b2442a2a1dce16497ec6300ab2739a10a3c3e3f7315a4c8c05eb286fb7f523f26ac4e0e1"}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @loopback, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10000, @loopback, 0x9}}}}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x401, @remote, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x6}}}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r5, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xb6fd1aeb8b422f92}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xf9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x801) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, r8, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x80}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19:39:25 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x2a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x48}, 0x20008046) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x24c, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffabbc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff7f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67318125}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x13c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe79}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x450e}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5157}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98fa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff68}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe97}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, 0x103) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mknodat(r3, &(0x7f0000000540)='./file0\x00', 0x8000, 0x3) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, 0x13, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) recvmsg$unix(r1, &(0x7f0000001d00)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000740)=""/199, 0xc7}, {&(0x7f0000000840)=""/180, 0xb4}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000000a00)=""/165, 0xa5}, {&(0x7f0000000ac0)=""/55, 0x37}, {&(0x7f0000000b00)=""/70, 0x46}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/110, 0x6e}], 0x8, &(0x7f0000001c80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x40002021) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) copy_file_range(r5, &(0x7f0000001d40)=0x40, r7, &(0x7f0000001dc0)=0x81, 0x6, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x34, 0x0, 0x4, 0x70bd2d, 0x7, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r9 = fsmount(r5, 0x0, 0x80) mknodat(r9, &(0x7f0000001f00)='./file0\x00', 0x8000, 0x3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000002200)={&(0x7f0000001f40), 0xc, &(0x7f00000021c0)={&(0x7f0000001f80)={0x208, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5b}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x302}, {0x6, 0x11, 0xc4}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x7fffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3000}, {0x8, 0x15, 0x401}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd2f}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0xf6c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x1f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x71c7}, {0x6, 0x11, 0x8001}, {0x8, 0x15, 0x80000000}}]}, 0x208}, 0x1, 0x0, 0x0, 0x2004c040}, 0x40000) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x64, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8b58, 0x77}}}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x1a}, {0x9, 0x4}, {0x1}, {0x2, 0x2}, {0xff, 0x2}, {0x8, 0x4}, {0x8, 0x4}], "f2fa9ad03588e0d7"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x2}, {0x54, 0x2}, {0x3f, 0x5}], "a191eecbf909dbae"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2c, 0x2}, {0x5, 0x3}, {0x58, 0x6}, {0x98, 0x1}], "f80b3375a89a50fe"}}]}, 0x64}}, 0x4004850) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002380)={0x7, 'vxcan1\x00', {0xfffffff8}, 0xd1d}) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x6c, r0, 0x204, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0xc}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x14, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0x4a, 0x16, 0x100}}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x600000c0}, 0x40040) 19:39:25 executing program 7: sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x54}], @NL80211_ATTR_SSID={0x22, 0x34, @random="f533703946cc314bf4f8a5c22ade0363037fa4520f3ef664bad9110b1d28"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x2, 0x7, 0x0, {0x4, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x80}}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}], @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_FILS_KEK={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x0, 0x1, 0x0, {0x3, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x68, 0x1}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40811}, 0x40041) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x40) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x20, 0x7fff, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1f0, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x60, 0x48, 0x16, 0x30, 0x16, 0x60, 0x60, 0x17, 0x0, 0x50, 0xc, 0x4, 0x8, 0x48, 0x3, 0x30]}]}, @NL80211_BAND_2GHZ={0x10c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfa6, 0x3c2, 0x6cf, 0xd2e5, 0x80, 0x8000, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x7}, {0x4, 0x7}, {0x5, 0xa}, {0x3, 0x7}, {0x1, 0x6}, {0x1}, {0x0, 0x6}, {0x4, 0x3}, {0x2, 0x3}, {0x7}, {0x2, 0x3}, {0x7}, {0x7}, {0x0, 0x8}, {0x4, 0x8}, {0x3, 0x1}, {0x6, 0x9}, {0x4, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x6}, {0x7, 0x9}, {0x4, 0x1}, {0x3, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x7}, {0x1, 0x7}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0x7}, {0x5, 0x7}, {0x4, 0x1}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0x5}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x9}, {0x2, 0x9}, {0x2}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0xa}, {0x2, 0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x3, 0x3}, {0x3, 0x4}, {0x3, 0x3}, {0x1, 0x5}, {0x2, 0x5}, {0x1}, {0x6, 0x9}, {0x4, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0x8}, {0x3, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x3, 0x6}, {0x2, 0x2}, {0x7, 0xa}, {0x3, 0x6}, {0x3, 0x6}, {0x5}, {0x1, 0x9}, {0x3, 0x1}, {0x6, 0x5}, {0x7}, {0x3, 0x4}, {0x5, 0x4}, {0x1, 0x3}, {0x0, 0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x9}, {0x5, 0x7}, {0x4, 0x8}, {0x4, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x6, 0xa}, {0x1, 0x8}, {0x2}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x3}, {0x7, 0xa}, {0x2, 0x2}, {0x7}, {0x5, 0x5}, {0x5, 0x6}, {0x3, 0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x1, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0xa}, {0x1, 0x4}, {0x3, 0x8}, {0x7, 0x9}, {0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x6, 0x1d}, {0x6, 0x4}, {0x7, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x0, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x1, 0x3, 0x7f, 0x40, 0x880e, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x4}, {0x6, 0x2}, {0x7, 0xa}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x8}, {0x4}, {0x1, 0x2}, {0x5, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x17, 0x4, 0x9, 0x0, 0x9, 0x12, 0x0, 0x512fd30b4e9b2c5c, 0x60, 0x60, 0x36, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x240, 0x6, 0x400, 0x3, 0x9, 0x0, 0x7, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7d}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa0}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}]}]}]}, 0x1f0}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x16c, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0xfffff256, 0x8, 0x4, 0xffffff7f, 0x2, 0x7fffffff, 0xdd, 0x1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5f1}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x400}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf99}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x1f, 0x4, 0x80000000, 0x0, 0x180000, 0x17]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x42d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ee}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7ff, 0x6, 0x4, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0xdc, 0x14, 0x3f]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x48}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000085}, 0x8001) pipe2(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400080c}, 0x40014) r7 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xe4, r9, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}, @NL80211_ATTR_REG_RULES={0xa8, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xda3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xab2d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000fc0)) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24084) [ 72.470635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.474673] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.476409] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.480809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.483323] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.485289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.491333] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.525696] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.553901] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.567116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.597322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.606103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.608346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.610118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.611311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.621577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.623161] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.624208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.628372] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.629774] Bluetooth: hci1: HCI_REQ-0x0c1a [ 72.632861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.634729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.640820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.642170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.652065] Bluetooth: hci4: HCI_REQ-0x0c1a [ 72.754767] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.756194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.793784] Bluetooth: hci3: HCI_REQ-0x0c1a [ 72.883316] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.885848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.887515] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.898237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.898331] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.901794] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.909652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.910796] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.913036] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 72.914523] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.919673] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.922839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.959020] Bluetooth: hci6: HCI_REQ-0x0c1a [ 73.010167] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.559266] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 74.560222] Bluetooth: hci0: command 0x0409 tx timeout [ 74.621594] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 74.685654] Bluetooth: hci4: command 0x0409 tx timeout [ 74.686738] Bluetooth: hci1: command 0x0409 tx timeout [ 74.814624] Bluetooth: hci3: command 0x0409 tx timeout [ 75.005759] Bluetooth: hci6: command 0x0409 tx timeout [ 75.070557] Bluetooth: hci7: command 0x0409 tx timeout [ 76.605536] Bluetooth: hci0: command 0x041b tx timeout [ 76.733664] Bluetooth: hci4: command 0x041b tx timeout [ 76.734526] Bluetooth: hci1: command 0x041b tx timeout [ 76.861521] Bluetooth: hci3: command 0x041b tx timeout [ 77.053520] Bluetooth: hci6: command 0x041b tx timeout [ 77.117551] Bluetooth: hci7: command 0x041b tx timeout [ 77.714119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.723592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.724410] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.730577] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.731413] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.733312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.741543] Bluetooth: hci2: HCI_REQ-0x0c1a [ 77.907888] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.914091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.920863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.924108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.925133] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.926396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.931563] Bluetooth: hci5: HCI_REQ-0x0c1a [ 78.653521] Bluetooth: hci0: command 0x040f tx timeout [ 78.781572] Bluetooth: hci1: command 0x040f tx timeout [ 78.781619] Bluetooth: hci4: command 0x040f tx timeout [ 78.910681] Bluetooth: hci3: command 0x040f tx timeout [ 79.102581] Bluetooth: hci6: command 0x040f tx timeout [ 79.166546] Bluetooth: hci7: command 0x040f tx timeout [ 79.807722] Bluetooth: hci2: command 0x0409 tx timeout [ 79.998819] Bluetooth: hci5: command 0x0409 tx timeout [ 80.701587] Bluetooth: hci0: command 0x0419 tx timeout [ 80.829645] Bluetooth: hci1: command 0x0419 tx timeout [ 80.829843] Bluetooth: hci4: command 0x0419 tx timeout [ 80.957714] Bluetooth: hci3: command 0x0419 tx timeout [ 81.149537] Bluetooth: hci6: command 0x0419 tx timeout [ 81.213666] Bluetooth: hci7: command 0x0419 tx timeout [ 81.853505] Bluetooth: hci2: command 0x041b tx timeout [ 82.045791] Bluetooth: hci5: command 0x041b tx timeout [ 83.901608] Bluetooth: hci2: command 0x040f tx timeout [ 84.093644] Bluetooth: hci5: command 0x040f tx timeout [ 85.949693] Bluetooth: hci2: command 0x0419 tx timeout [ 86.141529] Bluetooth: hci5: command 0x0419 tx timeout 19:40:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.advise\x00', &(0x7f0000000080)='\x00\x00Jg[\x02\x99\xcd\xf0^\xc6F\xd2\xb1\x00', 0xfffffffffffffeb4, 0x2) syz_mount_image$nfs(&(0x7f0000002000), &(0x7f0000002040)='./file0\x00', 0x7f, 0x1, &(0x7f0000002140)=[{&(0x7f0000002080)="0335ab8576410fdf17845c38123638d7081981f6d0e528cdffca400854808f19fbfacf0c5277f5183f06d141ebb5289c2c2f9e9a2826e173427e111e062fb5229d50aff8790ffff458886ce1d250f435c1df66e004d172f13d8e1b425f10d4e81a780558150f83004c5fbe35583474d8092c116196f61d0786a96645030dd84c0cc549f66dfa1add4c051977f6bba3ca6dc13e39e5254757478a5d035cfa677cb9d6f838447e73ece28d2f84b32c0379d73edf04784db99fb89edbf75a", 0xbd, 0x8}], 0x3000000, &(0x7f0000000380)=ANY=[@ANYBLOB="00004a675b0299cdf05ec646d2b1002c00004a675b0299cdf05ec646d2b1002c405d5e2d2c7569643e", @ANYRESDEC=0xee01, @ANYBLOB=',obj_type=^[/,uid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d30783030303030362c0048f2cc7bb19ba949b26a862e6e8c46edcdd5ec1702096318273fa4312d7a5c3631b5a91315576ab156f527c62dcf4bb6da7a41dbbda7fec9162a8b7ed387a077f57f8f48df9a3c4154a7f5e434d75c4e5a538d4fdeccb569aa668a917da4bd52345940017f186ef3fbf800000000000000000020"]) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, 0x0, 0x0) recvfrom(r2, &(0x7f0000000200)=""/28, 0x1c, 0x40002100, &(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={0x0, 0xfb, 0x44, 0x4, 0x6, "e5fae6e80c229de26b6fdfee0feed24f", "ace87352c519fcecf30f67c43c29091cadf42889888bc1355cd6c7b5b15f6ec8e98d4c84a13029510b8a1bad545a39"}, 0x44, 0x0) setresuid(r1, r0, 0x0) mq_open(&(0x7f0000002200)='.::\xbe6\'-\x00', 0x40, 0x104, &(0x7f0000002240)={0x2, 0x6, 0xffff, 0x4}) 19:40:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.advise\x00', &(0x7f0000000080)='\x00\x00Jg[\x02\x99\xcd\xf0^\xc6F\xd2\xb1\x00', 0xfffffffffffffeb4, 0x2) syz_mount_image$nfs(&(0x7f0000002000), &(0x7f0000002040)='./file0\x00', 0x7f, 0x1, &(0x7f0000002140)=[{&(0x7f0000002080)="0335ab8576410fdf17845c38123638d7081981f6d0e528cdffca400854808f19fbfacf0c5277f5183f06d141ebb5289c2c2f9e9a2826e173427e111e062fb5229d50aff8790ffff458886ce1d250f435c1df66e004d172f13d8e1b425f10d4e81a780558150f83004c5fbe35583474d8092c116196f61d0786a96645030dd84c0cc549f66dfa1add4c051977f6bba3ca6dc13e39e5254757478a5d035cfa677cb9d6f838447e73ece28d2f84b32c0379d73edf04784db99fb89edbf75a", 0xbd, 0x8}], 0x3000000, &(0x7f0000000380)=ANY=[@ANYBLOB="00004a675b0299cdf05ec646d2b1002c00004a675b0299cdf05ec646d2b1002c405d5e2d2c7569643e", @ANYRESDEC=0xee01, @ANYBLOB=',obj_type=^[/,uid>', @ANYRESDEC=0xee00, @ANYBLOB="2c66736d616769633d30783030303030362c0048f2cc7bb19ba949b26a862e6e8c46edcdd5ec1702096318273fa4312d7a5c3631b5a91315576ab156f527c62dcf4bb6da7a41dbbda7fec9162a8b7ed387a077f57f8f48df9a3c4154a7f5e434d75c4e5a538d4fdeccb569aa668a917da4bd52345940017f186ef3fbf800000000000000000020"]) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, 0x0, 0x0) recvfrom(r2, &(0x7f0000000200)=""/28, 0x1c, 0x40002100, &(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={0x0, 0xfb, 0x44, 0x4, 0x6, "e5fae6e80c229de26b6fdfee0feed24f", "ace87352c519fcecf30f67c43c29091cadf42889888bc1355cd6c7b5b15f6ec8e98d4c84a13029510b8a1bad545a39"}, 0x44, 0x0) setresuid(r1, r0, 0x0) mq_open(&(0x7f0000002200)='.::\xbe6\'-\x00', 0x40, 0x104, &(0x7f0000002240)={0x2, 0x6, 0xffff, 0x4}) 19:40:20 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x2000c040) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) io_setup(0x800, &(0x7f0000000000)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000040)}]) sendmmsg$inet6(r1, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, &(0x7f0000000180)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x0, 0x1ffffffffffffeb6}}}, @flowinfo={{0x14}}], 0x30}}], 0x2, 0x0) 19:40:20 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xc1}]}}, @source_quench={0x8, 0x5c, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}}}, 0x0) syz_emit_ethernet(0x78, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0x80, 0x42, "edc1", "26a3d445ec88ff3906897e90cd6a8f306e044e041e64f236932adb044707fe4aaee1b47b4e52fdc91c771458dcec7bb599c7ed09a7a5acb043f1643cd9bdf1a4930e0defb8eef4ba1a80cd364861a6fe7c5fba766e700e426f92126a549681938ea8"}}}}}, &(0x7f0000000100)={0x1, 0x2, [0x41, 0xb58, 0x51c, 0xb75]}) 19:40:20 executing program 3: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000100)="ec", 0x1}, {&(0x7f00000001c0)="94", 0x1}, {&(0x7f0000000240)="ef", 0x1, 0x100000000}], 0x20400, &(0x7f0000000300)=ANY=[@ANYBLOB="00d88708ce1e8ce1775866e93aaac9add184a3faa672ed00000000be73b1fd2b0d3fcbbe6996fce1f1365beb6928d5e6c6108173ade077fc1681b688e18fc8b9e2093aadaba363796976926c731c39c0d79e0ea93e4b7991dd66bd70a22b1c41c544a82e4dff7328cbd724208b21b39d6aa9954293187251f422268043d3090bf3a336ba2eceb276d4883d2a00"/151]) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(r0, &(0x7f0000000780)={&(0x7f00000003c0), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000580)=""/18, 0x12}, {&(0x7f00000005c0)=""/52, 0x34}, {&(0x7f0000000600)=""/48, 0x30}], 0x4, &(0x7f0000000680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x40010061) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001ec0)=[{&(0x7f0000000900)="ca", 0x1}, {&(0x7f0000000280)="e71d7f90f8ec32fbe3ff41e09a5f65a7ce6e91ad8c5ab14ec624a3a21b801cbe2e19979241733164be041e6f93f23ce4a8a0479753d9938e8865834d86875d4ec74958612204e64dd2be2204cc5516f3895212e2f6ab882e7ec58b29af479dd1dc2b41338f17610c2df8a438f11c6aed82987d57f4472cd2052f", 0x7a}, {&(0x7f0000001c00)='\v', 0x1, 0xfffffffb}], 0x0, &(0x7f0000000200)={[{@uni_xlate}], [{@measure}, {@fowner_eq={'fowner', 0x3d, r1}}]}) [ 126.417281] loop3: detected capacity change from 0 to 264192 [ 126.431902] loop3: detected capacity change from 0 to 264192 [ 126.437543] FAT-fs (loop3): Unrecognized mount option "measure" or missing value [ 126.453425] loop3: detected capacity change from 0 to 264192 19:40:20 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) 19:40:20 executing program 5: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) eventfd(0x0) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)=')\x00') r4 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)=')\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000000180000ae87f1f93ae59b8134999d37a400", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x113004, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='cmdline\x00') r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r8 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x8, 0xff, 0x81, 0x1, 0x0, 0x3, 0x8001, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x104, 0x9, 0x0, 0x6, 0x4b, 0x2, 0xf720, 0x0, 0xcdb, 0x0, 0x5}, r6, 0x10, r7, 0x0) fcntl$dupfd(r0, 0x3329cbae916db66e, r5) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x10001) [ 126.707728] audit: type=1400 audit(1664998820.880:7): avc: denied { open } for pid=3747 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.712571] audit: type=1400 audit(1664998820.881:8): avc: denied { kernel } for pid=3747 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.729337] ------------[ cut here ]------------ [ 126.729813] WARNING: CPU: 0 PID: 3746 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 [ 126.730428] Modules linked in: [ 126.730653] CPU: 0 PID: 3746 Comm: modprobe Not tainted 6.0.0-next-20221005 #1 [ 126.731133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 126.731677] RIP: 0010:event_filter_match+0x422/0x660 [ 126.735546] Code: 00 00 00 e9 7c fc ff ff e8 7b 33 f1 ff 65 8b 2d 20 8d ad 7e 31 ff 89 ee e8 1b 30 f1 ff 85 ed 0f 84 ef 00 00 00 e8 5e 33 f1 ff <0f> 0b eb 9f e8 25 9f 23 00 e9 17 fc ff ff e8 4b 33 f1 ff 48 8d 7b [ 126.736791] RSP: 0000:ffff88806ce09c70 EFLAGS: 00010046 [ 126.737159] RAX: 0000000080010001 RBX: ffff888040240000 RCX: 0000000000000000 [ 126.737647] RDX: ffff888020b10000 RSI: ffffffff8154e8b2 RDI: 0000000000000005 [ 126.738138] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 126.738632] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff888040240220 [ 126.739131] R13: 0000000000000000 R14: ffff8880402400a8 R15: ffff888040240220 [ 126.739625] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.740181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.740596] CR2: 00007fad88df1610 CR3: 00000000212ae000 CR4: 0000000000350ef0 [ 126.741088] Call Trace: [ 126.741270] [ 126.741433] merge_sched_in+0x107/0x1110 [ 126.741732] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 126.742158] ? merge_sched_in+0x1110/0x1110 [ 126.742451] ? lock_is_held_type+0xd7/0x130 [ 126.742752] ctx_sched_in+0x2e6/0x770 [ 126.743017] ? lock_acquire+0x1b2/0x530 [ 126.743295] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 126.743707] ? lock_is_held_type+0xd7/0x130 [ 126.744003] perf_event_sched_in+0x75/0x80 [ 126.744298] ctx_resched+0x1ce/0x390 [ 126.744578] __perf_install_in_context+0x285/0x9c0 [ 126.744937] ? ctx_resched+0x390/0x390 [ 126.745317] remote_function+0x125/0x1b0 [ 126.745709] __flush_smp_call_function_queue+0x1df/0x5a0 [ 126.746209] ? perf_duration_warn+0x40/0x40 [ 126.746622] __sysvec_call_function_single+0x92/0x3a0 [ 126.747102] sysvec_call_function_single+0x89/0xc0 [ 126.747560] [ 126.747778] [ 126.747997] asm_sysvec_call_function_single+0x16/0x20 [ 126.748492] RIP: 0010:lock_acquire+0x1db/0x530 [ 126.748929] Code: 02 b8 ff ff ff ff 65 0f c1 05 71 42 d8 7e 83 f8 01 0f 85 c8 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 126.750572] RSP: 0000:ffff88803fccfd28 EFLAGS: 00000206 [ 126.751061] RAX: dffffc0000000000 RBX: 1ffff11007f99fa7 RCX: 00000000f7844fc4 [ 126.751716] RDX: 1ffff1100416212e RSI: 0000000000000000 RDI: 0000000000000000 [ 126.752370] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff86cd57ef [ 126.753015] R10: fffffbfff0d9aafd R11: 0000000000000001 R12: 0000000000000001 [ 126.753496] R13: 0000000000000001 R14: ffff88800ddc0f58 R15: 0000000000000000 [ 126.753990] ? lock_acquire+0x1b2/0x530 [ 126.754273] ? lock_release+0x750/0x750 [ 126.754571] ? up_write+0x1ac/0x520 [ 126.754831] down_read_trylock+0x1bf/0x3a0 [ 126.755128] ? do_user_addr_fault+0x337/0x1300 [ 126.755450] ? rwsem_spin_on_owner+0x260/0x260 [ 126.755774] ? do_user_addr_fault+0x786/0x1300 [ 126.756097] do_user_addr_fault+0x337/0x1300 [ 126.756416] ? irqentry_enter+0x4b/0x60 [ 126.756709] exc_page_fault+0x98/0x1a0 [ 126.756988] asm_exc_page_fault+0x22/0x30 [ 126.757273] RIP: 0033:0x7fad891380ef [ 126.757535] Code: 0f 7f 44 17 f0 f3 0f 7f 07 c3 48 83 fa 40 77 16 f3 0f 7f 07 f3 0f 7f 47 10 f3 0f 7f 44 17 f0 f3 0f 7f 44 17 e0 c3 48 8d 4f 40 0f 7f 07 48 83 e1 c0 f3 0f 7f 44 17 f0 f3 0f 7f 47 10 f3 0f 7f [ 126.758737] RSP: 002b:00007ffcbde5a968 EFLAGS: 00010202 [ 126.759102] RAX: 00007fad88df1610 RBX: 0000000000000004 RCX: 00007fad88df1650 [ 126.759591] RDX: 00000000000009f0 RSI: 0000000000000000 RDI: 00007fad88df1610 [ 126.760071] RBP: 00007ffcbde5ad00 R08: 00007fad88df1610 R09: 00000000001ba000 [ 126.760561] R10: 00007fad88df2000 R11: 0000000000000003 R12: 00007fad89112a20 [ 126.761041] R13: 00007ffcbde5a970 R14: 00007ffcbde5aa00 R15: 00007ffcbde5ad90 [ 126.761541] [ 126.761704] irq event stamp: 6996 [ 126.761937] hardirqs last enabled at (6995): [] do_user_addr_fault+0x786/0x1300 [ 126.762532] hardirqs last disabled at (6996): [] sysvec_call_function_single+0xb/0xc0 [ 126.763158] softirqs last enabled at (6798): [] __irq_exit_rcu+0x11b/0x180 [ 126.763739] softirqs last disabled at (6793): [] __irq_exit_rcu+0x11b/0x180 [ 126.764318] ---[ end trace 0000000000000000 ]--- [ 126.764697] ------------[ cut here ]------------ [ 126.765029] WARNING: CPU: 0 PID: 3746 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 [ 126.765631] Modules linked in: [ 126.765878] CPU: 0 PID: 3746 Comm: modprobe Tainted: G W 6.0.0-next-20221005 #1 [ 126.766459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 126.767001] RIP: 0010:merge_sched_in+0xadb/0x1110 [ 126.767338] Code: ff ff e8 08 0e ef ff 65 8b 05 ad 67 ab 7e 31 ff 89 c6 89 04 24 e8 a5 0a ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 e5 0d ef ff <0f> 0b e9 c4 fb ff ff e8 d9 0d ef ff 4c 89 e8 48 05 18 01 00 00 e9 [ 126.768516] RSP: 0000:ffff88806ce09cb0 EFLAGS: 00010046 [ 126.768876] RAX: 0000000080010001 RBX: ffff88806ce3d2c0 RCX: 0000000000000000 [ 126.769347] RDX: ffff888020b10000 RSI: ffffffff81570e2b RDI: 0000000000000005 [ 126.769814] RBP: ffff888040240000 R08: 0000000000000005 R09: 0000000000000001 [ 126.770288] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88806ce3d2c0 [ 126.770765] R13: ffff88806ce00000 R14: ffff8880402400a8 R15: ffff888040240220 [ 126.771234] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.771760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.772142] CR2: 00007fad88df1610 CR3: 00000000212ae000 CR4: 0000000000350ef0 [ 126.772622] Call Trace: [ 126.772802] [ 126.772976] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 126.773392] ? merge_sched_in+0x1110/0x1110 [ 126.773697] ? lock_is_held_type+0xd7/0x130 [ 126.774013] ctx_sched_in+0x2e6/0x770 [ 126.774283] ? lock_acquire+0x1b2/0x530 [ 126.774570] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 126.774984] ? lock_is_held_type+0xd7/0x130 [ 126.775298] perf_event_sched_in+0x75/0x80 [ 126.775600] ctx_resched+0x1ce/0x390 [ 126.775872] __perf_install_in_context+0x285/0x9c0 [ 126.776212] ? ctx_resched+0x390/0x390 [ 126.776512] remote_function+0x125/0x1b0 [ 126.776801] __flush_smp_call_function_queue+0x1df/0x5a0 [ 126.777165] ? perf_duration_warn+0x40/0x40 [ 126.777467] __sysvec_call_function_single+0x92/0x3a0 [ 126.777822] sysvec_call_function_single+0x89/0xc0 [ 126.778159] [ 126.778325] [ 126.778486] asm_sysvec_call_function_single+0x16/0x20 [ 126.778839] RIP: 0010:lock_acquire+0x1db/0x530 [ 126.779152] Code: 02 b8 ff ff ff ff 65 0f c1 05 71 42 d8 7e 83 f8 01 0f 85 c8 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 126.780316] RSP: 0000:ffff88803fccfd28 EFLAGS: 00000206 [ 126.780676] RAX: dffffc0000000000 RBX: 1ffff11007f99fa7 RCX: 00000000f7844fc4 [ 126.781142] RDX: 1ffff1100416212e RSI: 0000000000000000 RDI: 0000000000000000 [ 126.781605] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff86cd57ef [ 126.782068] R10: fffffbfff0d9aafd R11: 0000000000000001 R12: 0000000000000001 [ 126.782532] R13: 0000000000000001 R14: ffff88800ddc0f58 R15: 0000000000000000 [ 126.783032] ? lock_acquire+0x1b2/0x530 [ 126.783308] ? lock_release+0x750/0x750 [ 126.783600] ? up_write+0x1ac/0x520 [ 126.783863] down_read_trylock+0x1bf/0x3a0 [ 126.784190] ? do_user_addr_fault+0x337/0x1300 [ 126.784521] ? rwsem_spin_on_owner+0x260/0x260 [ 126.784843] ? do_user_addr_fault+0x786/0x1300 [ 126.785169] do_user_addr_fault+0x337/0x1300 [ 126.785474] ? irqentry_enter+0x4b/0x60 [ 126.785758] exc_page_fault+0x98/0x1a0 [ 126.786033] asm_exc_page_fault+0x22/0x30 [ 126.786348] RIP: 0033:0x7fad891380ef [ 126.786619] Code: 0f 7f 44 17 f0 f3 0f 7f 07 c3 48 83 fa 40 77 16 f3 0f 7f 07 f3 0f 7f 47 10 f3 0f 7f 44 17 f0 f3 0f 7f 44 17 e0 c3 48 8d 4f 40 0f 7f 07 48 83 e1 c0 f3 0f 7f 44 17 f0 f3 0f 7f 47 10 f3 0f 7f [ 126.787901] RSP: 002b:00007ffcbde5a968 EFLAGS: 00010202 [ 126.788283] RAX: 00007fad88df1610 RBX: 0000000000000004 RCX: 00007fad88df1650 [ 126.788801] RDX: 00000000000009f0 RSI: 0000000000000000 RDI: 00007fad88df1610 [ 126.789304] RBP: 00007ffcbde5ad00 R08: 00007fad88df1610 R09: 00000000001ba000 [ 126.789819] R10: 00007fad88df2000 R11: 0000000000000003 R12: 00007fad89112a20 [ 126.790311] R13: 00007ffcbde5a970 R14: 00007ffcbde5aa00 R15: 00007ffcbde5ad90 [ 126.790850] [ 126.791029] irq event stamp: 6996 [ 126.791280] hardirqs last enabled at (6995): [] do_user_addr_fault+0x786/0x1300 [ 126.791922] hardirqs last disabled at (6996): [] sysvec_call_function_single+0xb/0xc0 [ 126.792596] softirqs last enabled at (6798): [] __irq_exit_rcu+0x11b/0x180 [ 126.793210] softirqs last disabled at (6793): [] __irq_exit_rcu+0x11b/0x180 [ 126.793817] ---[ end trace 0000000000000000 ]--- [ 126.796333] audit: type=1400 audit(1664998820.969:9): avc: denied { write } for pid=3748 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.803003] ------------[ cut here ]------------ [ 126.803022] [ 126.803025] ====================================================== [ 126.803029] WARNING: possible circular locking dependency detected [ 126.803033] 6.0.0-next-20221005 #1 Tainted: G W [ 126.803040] ------------------------------------------------------ [ 126.803043] syz-executor.3/3750 is trying to acquire lock: [ 126.803049] ffffffff853faaf8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0xe/0x70 [ 126.803083] [ 126.803083] but task is already holding lock: [ 126.803085] ffff88800d8bc020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.803109] [ 126.803109] which lock already depends on the new lock. [ 126.803109] [ 126.803112] [ 126.803112] the existing dependency chain (in reverse order) is: [ 126.803115] [ 126.803115] -> #3 (&ctx->lock){....}-{2:2}: [ 126.803129] _raw_spin_lock+0x2a/0x40 [ 126.803140] __perf_event_task_sched_out+0x53b/0x18d0 [ 126.803151] __schedule+0xedd/0x2470 [ 126.803166] schedule+0xda/0x1b0 [ 126.803179] futex_wait_queue+0xf5/0x1e0 [ 126.803190] futex_wait+0x28e/0x690 [ 126.803200] do_futex+0x2ff/0x380 [ 126.803209] __x64_sys_futex+0x1c6/0x4d0 [ 126.803220] do_syscall_64+0x3b/0x90 [ 126.803229] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.803242] [ 126.803242] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 126.803255] _raw_spin_lock_nested+0x30/0x40 [ 126.803267] raw_spin_rq_lock_nested+0x1e/0x30 [ 126.803279] task_fork_fair+0x63/0x4d0 [ 126.803295] sched_cgroup_fork+0x3d0/0x540 [ 126.803309] copy_process+0x4183/0x6e20 [ 126.803319] kernel_clone+0xe7/0x890 [ 126.803329] user_mode_thread+0xad/0xf0 [ 126.803339] rest_init+0x24/0x250 [ 126.803351] arch_call_rest_init+0xf/0x14 [ 126.803370] start_kernel+0x4c6/0x4eb [ 126.803387] secondary_startup_64_no_verify+0xe0/0xeb [ 126.803401] [ 126.803401] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 126.803414] _raw_spin_lock_irqsave+0x39/0x60 [ 126.803426] try_to_wake_up+0xab/0x1930 [ 126.803439] up+0x75/0xb0 [ 126.803456] __up_console_sem+0x6e/0x80 [ 126.803471] console_unlock+0x46a/0x590 [ 126.803486] vprintk_emit+0x1bd/0x560 [ 126.803502] vprintk+0x84/0xa0 [ 126.803518] _printk+0xba/0xf1 [ 126.803530] kauditd_hold_skb.cold+0x3f/0x4e [ 126.803547] kauditd_send_queue+0x233/0x290 [ 126.803561] kauditd_thread+0x5f9/0x9c0 [ 126.803575] kthread+0x2ed/0x3a0 [ 126.803589] ret_from_fork+0x22/0x30 [ 126.803601] [ 126.803601] -> #0 ((console_sem).lock){-...}-{2:2}: [ 126.803615] __lock_acquire+0x2a02/0x5e70 [ 126.803630] lock_acquire+0x1a2/0x530 [ 126.803646] _raw_spin_lock_irqsave+0x39/0x60 [ 126.803657] down_trylock+0xe/0x70 [ 126.803673] __down_trylock_console_sem+0x3b/0xd0 [ 126.803689] vprintk_emit+0x16b/0x560 [ 126.803705] vprintk+0x84/0xa0 [ 126.803720] _printk+0xba/0xf1 [ 126.803731] report_bug.cold+0x72/0xab [ 126.803748] handle_bug+0x3c/0x70 [ 126.803757] exc_invalid_op+0x14/0x50 [ 126.803766] asm_exc_invalid_op+0x16/0x20 [ 126.803779] group_sched_out.part.0+0x2c7/0x460 [ 126.803796] ctx_sched_out+0x8f1/0xc10 [ 126.803812] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.803823] __schedule+0xedd/0x2470 [ 126.803838] schedule+0xda/0x1b0 [ 126.803851] futex_wait_queue+0xf5/0x1e0 [ 126.803862] futex_wait+0x28e/0x690 [ 126.803872] do_futex+0x2ff/0x380 [ 126.803881] __x64_sys_futex+0x1c6/0x4d0 [ 126.803891] do_syscall_64+0x3b/0x90 [ 126.803900] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.803914] [ 126.803914] other info that might help us debug this: [ 126.803914] [ 126.803916] Chain exists of: [ 126.803916] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 126.803916] [ 126.803930] Possible unsafe locking scenario: [ 126.803930] [ 126.803933] CPU0 CPU1 [ 126.803935] ---- ---- [ 126.803937] lock(&ctx->lock); [ 126.803942] lock(&rq->__lock); [ 126.803948] lock(&ctx->lock); [ 126.803954] lock((console_sem).lock); [ 126.803960] [ 126.803960] *** DEADLOCK *** [ 126.803960] [ 126.803962] 2 locks held by syz-executor.3/3750: [ 126.803968] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 126.803999] #1: ffff88800d8bc020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.804025] [ 126.804025] stack backtrace: [ 126.804027] CPU: 0 PID: 3750 Comm: syz-executor.3 Tainted: G W 6.0.0-next-20221005 #1 [ 126.804040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 126.804046] Call Trace: [ 126.804049] [ 126.804053] dump_stack_lvl+0x8b/0xb3 [ 126.804074] check_noncircular+0x263/0x2e0 [ 126.804091] ? format_decode+0x26c/0xb50 [ 126.804109] ? print_circular_bug+0x450/0x450 [ 126.804128] ? simple_strtoul+0x30/0x30 [ 126.804145] ? perf_trace_lock+0x308/0x560 [ 126.804161] ? format_decode+0x26c/0xb50 [ 126.804185] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 126.804207] __lock_acquire+0x2a02/0x5e70 [ 126.804241] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.804276] lock_acquire+0x1a2/0x530 [ 126.804293] ? down_trylock+0xe/0x70 [ 126.804315] ? lock_release+0x750/0x750 [ 126.804346] ? vprintk+0x84/0xa0 [ 126.804368] _raw_spin_lock_irqsave+0x39/0x60 [ 126.804380] ? down_trylock+0xe/0x70 [ 126.804398] down_trylock+0xe/0x70 [ 126.804416] ? vprintk+0x84/0xa0 [ 126.804434] __down_trylock_console_sem+0x3b/0xd0 [ 126.804458] vprintk_emit+0x16b/0x560 [ 126.804482] vprintk+0x84/0xa0 [ 126.804502] _printk+0xba/0xf1 [ 126.804515] ? record_print_text.cold+0x16/0x16 [ 126.804541] ? report_bug.cold+0x66/0xab [ 126.804563] ? group_sched_out.part.0+0x2c7/0x460 [ 126.804582] report_bug.cold+0x72/0xab [ 126.804607] handle_bug+0x3c/0x70 [ 126.804617] exc_invalid_op+0x14/0x50 [ 126.804630] asm_exc_invalid_op+0x16/0x20 [ 126.804643] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.804663] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.804674] RSP: 0018:ffff88804087f8f8 EFLAGS: 00010006 [ 126.804683] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.804690] RDX: ffff88803f270000 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 126.804698] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 126.804705] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88800d8bc000 [ 126.804713] R13: ffff88806ce3d2c0 R14: ffffffff8547d1a0 R15: 0000000000000002 [ 126.804732] ? group_sched_out.part.0+0x2c7/0x460 [ 126.804756] ? group_sched_out.part.0+0x2c7/0x460 [ 126.804780] ctx_sched_out+0x8f1/0xc10 [ 126.804806] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.804826] ? lock_is_held_type+0xd7/0x130 [ 126.804845] ? __perf_cgroup_move+0x160/0x160 [ 126.804855] ? set_next_entity+0x304/0x550 [ 126.804874] ? update_curr+0x267/0x740 [ 126.804898] ? lock_is_held_type+0xd7/0x130 [ 126.804917] __schedule+0xedd/0x2470 [ 126.804942] ? io_schedule_timeout+0x150/0x150 [ 126.804959] ? futex_wait_setup+0x166/0x230 [ 126.804981] schedule+0xda/0x1b0 [ 126.805000] futex_wait_queue+0xf5/0x1e0 [ 126.805015] futex_wait+0x28e/0x690 [ 126.805032] ? futex_wait_setup+0x230/0x230 [ 126.805047] ? lock_is_held_type+0xd7/0x130 [ 126.805062] ? find_held_lock+0x2c/0x110 [ 126.805078] ? futex_hash+0x12/0x200 [ 126.805100] ? futex_wake+0x158/0x490 [ 126.805111] ? fd_install+0x1c7/0x640 [ 126.805143] ? fd_install+0x1f9/0x640 [ 126.805162] do_futex+0x2ff/0x380 [ 126.805177] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 126.805202] __x64_sys_futex+0x1c6/0x4d0 [ 126.805220] ? __x64_sys_futex_time32+0x480/0x480 [ 126.805237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.805253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.805275] do_syscall_64+0x3b/0x90 [ 126.805287] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.805301] RIP: 0033:0x7f5cc1002b19 [ 126.805309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.805320] RSP: 002b:00007f5cbe578218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.805330] RAX: ffffffffffffffda RBX: 00007f5cc1115f68 RCX: 00007f5cc1002b19 [ 126.805338] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5cc1115f68 [ 126.805345] RBP: 00007f5cc1115f60 R08: 0000000000000000 R09: 0000000000000000 [ 126.805352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5cc1115f6c [ 126.805360] R13: 00007ffc298ba56f R14: 00007f5cbe578300 R15: 0000000000022000 [ 126.805386] [ 126.860812] WARNING: CPU: 0 PID: 3750 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 126.861418] Modules linked in: [ 126.861633] CPU: 0 PID: 3750 Comm: syz-executor.3 Tainted: G W 6.0.0-next-20221005 #1 [ 126.862215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 126.862735] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.863098] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.864237] RSP: 0018:ffff88804087f8f8 EFLAGS: 00010006 [ 126.864588] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.865042] RDX: ffff88803f270000 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 126.865506] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 126.865963] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88800d8bc000 [ 126.866424] R13: ffff88806ce3d2c0 R14: ffffffff8547d1a0 R15: 0000000000000002 [ 126.866881] FS: 00007f5cbe578700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.867394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.867772] CR2: 00007f5cbe557718 CR3: 000000003fe10000 CR4: 0000000000350ef0 [ 126.868230] Call Trace: [ 126.868404] [ 126.868577] ctx_sched_out+0x8f1/0xc10 [ 126.868852] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.869206] ? lock_is_held_type+0xd7/0x130 [ 126.869497] ? __perf_cgroup_move+0x160/0x160 [ 126.869796] ? set_next_entity+0x304/0x550 [ 126.870080] ? update_curr+0x267/0x740 [ 126.870365] ? lock_is_held_type+0xd7/0x130 [ 126.870669] __schedule+0xedd/0x2470 [ 126.870943] ? io_schedule_timeout+0x150/0x150 [ 126.871263] ? futex_wait_setup+0x166/0x230 [ 126.871571] schedule+0xda/0x1b0 [ 126.871818] futex_wait_queue+0xf5/0x1e0 [ 126.872103] futex_wait+0x28e/0x690 [ 126.872362] ? futex_wait_setup+0x230/0x230 [ 126.872663] ? lock_is_held_type+0xd7/0x130 [ 126.872963] ? find_held_lock+0x2c/0x110 [ 126.873246] ? futex_hash+0x12/0x200 [ 126.873517] ? futex_wake+0x158/0x490 [ 126.873781] ? fd_install+0x1c7/0x640 [ 126.874065] ? fd_install+0x1f9/0x640 [ 126.874338] do_futex+0x2ff/0x380 [ 126.874581] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 126.874984] __x64_sys_futex+0x1c6/0x4d0 [ 126.875278] ? __x64_sys_futex_time32+0x480/0x480 [ 126.875619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.875977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.876344] do_syscall_64+0x3b/0x90 [ 126.876615] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.876970] RIP: 0033:0x7f5cc1002b19 [ 126.877230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.878456] RSP: 002b:00007f5cbe578218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.878947] RAX: ffffffffffffffda RBX: 00007f5cc1115f68 RCX: 00007f5cc1002b19 [ 126.879416] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5cc1115f68 [ 126.879880] RBP: 00007f5cc1115f60 R08: 0000000000000000 R09: 0000000000000000 [ 126.880344] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5cc1115f6c [ 126.880812] R13: 00007ffc298ba56f R14: 00007f5cbe578300 R15: 0000000000022000 [ 126.881293] [ 126.881459] irq event stamp: 2278 [ 126.881689] hardirqs last enabled at (2277): [] syscall_enter_from_user_mode+0x1d/0x50 [ 126.882307] hardirqs last disabled at (2278): [] __schedule+0x1225/0x2470 [ 126.882851] softirqs last enabled at (2226): [] __irq_exit_rcu+0x11b/0x180 [ 126.883421] softirqs last disabled at (2163): [] __irq_exit_rcu+0x11b/0x180 [ 126.883978] ---[ end trace 0000000000000000 ]--- [ 127.200465] hrtimer: interrupt took 21209 ns 19:40:21 executing program 5: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) eventfd(0x0) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)=')\x00') r4 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)=')\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000000180000ae87f1f93ae59b8134999d37a400", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x113004, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='cmdline\x00') r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r8 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x8, 0xff, 0x81, 0x1, 0x0, 0x3, 0x8001, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x104, 0x9, 0x0, 0x6, 0x4b, 0x2, 0xf720, 0x0, 0xcdb, 0x0, 0x5}, r6, 0x10, r7, 0x0) fcntl$dupfd(r0, 0x3329cbae916db66e, r5) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x10001) VM DIAGNOSIS: 19:40:21 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bda91 RDI=ffffffff8765c9a0 RBP=ffffffff8765c960 RSP=ffff88806ce095e0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8765c960 R14=0000000000000010 R15=ffffffff823bda80 RIP=ffffffff823bdae9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fad88df1610 CR3=00000000212ae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000012000 RBX=1ffff1100810df84 RCX=ffffc900047ef000 RDX=0000000000040000 RSI=ffffffff813bc183 RDI=0000000000000005 RBP=ffff88804086fcc8 RSP=ffff88804086fbf8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff81461c5c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb1ea445700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4ca108e4a1 CR3=0000000036c7a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000001000000010000000000000000 XMM02=000000ff0000000000000000ff000000 XMM03=0000000000000000000000ff00000000 XMM04=0000ff00000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000