Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:48866' (ECDSA) to the list of known hosts. 2022/10/03 05:49:07 fuzzer started 2022/10/03 05:49:07 dialing manager at localhost:35095 syzkaller login: [ 36.319183] cgroup: Unknown subsys name 'net' [ 36.402756] cgroup: Unknown subsys name 'rlimit' 2022/10/03 05:49:22 syscalls: 2215 2022/10/03 05:49:22 code coverage: enabled 2022/10/03 05:49:22 comparison tracing: enabled 2022/10/03 05:49:22 extra coverage: enabled 2022/10/03 05:49:22 setuid sandbox: enabled 2022/10/03 05:49:22 namespace sandbox: enabled 2022/10/03 05:49:22 Android sandbox: enabled 2022/10/03 05:49:22 fault injection: enabled 2022/10/03 05:49:22 leak checking: enabled 2022/10/03 05:49:22 net packet injection: enabled 2022/10/03 05:49:22 net device setup: enabled 2022/10/03 05:49:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 05:49:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 05:49:22 USB emulation: enabled 2022/10/03 05:49:22 hci packet injection: enabled 2022/10/03 05:49:22 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 05:49:22 802.15.4 emulation: enabled 2022/10/03 05:49:22 fetching corpus: 50, signal 33903/35669 (executing program) 2022/10/03 05:49:22 fetching corpus: 100, signal 45445/48826 (executing program) 2022/10/03 05:49:22 fetching corpus: 150, signal 50796/55734 (executing program) 2022/10/03 05:49:22 fetching corpus: 200, signal 60220/66543 (executing program) 2022/10/03 05:49:23 fetching corpus: 250, signal 63284/71116 (executing program) 2022/10/03 05:49:23 fetching corpus: 300, signal 69357/78574 (executing program) 2022/10/03 05:49:23 fetching corpus: 350, signal 71511/82186 (executing program) 2022/10/03 05:49:23 fetching corpus: 400, signal 74964/86977 (executing program) 2022/10/03 05:49:23 fetching corpus: 450, signal 77630/90973 (executing program) 2022/10/03 05:49:23 fetching corpus: 500, signal 80384/95027 (executing program) 2022/10/03 05:49:23 fetching corpus: 550, signal 83211/99131 (executing program) 2022/10/03 05:49:23 fetching corpus: 600, signal 85401/102590 (executing program) 2022/10/03 05:49:23 fetching corpus: 650, signal 88365/106709 (executing program) 2022/10/03 05:49:24 fetching corpus: 700, signal 91144/110608 (executing program) 2022/10/03 05:49:24 fetching corpus: 750, signal 93463/114089 (executing program) 2022/10/03 05:49:24 fetching corpus: 800, signal 97875/119356 (executing program) 2022/10/03 05:49:24 fetching corpus: 850, signal 99766/122364 (executing program) 2022/10/03 05:49:24 fetching corpus: 900, signal 102655/126224 (executing program) 2022/10/03 05:49:24 fetching corpus: 950, signal 105432/129958 (executing program) 2022/10/03 05:49:24 fetching corpus: 1000, signal 107560/133098 (executing program) 2022/10/03 05:49:24 fetching corpus: 1050, signal 109576/136031 (executing program) 2022/10/03 05:49:25 fetching corpus: 1100, signal 111195/138678 (executing program) 2022/10/03 05:49:25 fetching corpus: 1150, signal 113158/141638 (executing program) 2022/10/03 05:49:25 fetching corpus: 1200, signal 117038/146165 (executing program) 2022/10/03 05:49:25 fetching corpus: 1250, signal 120072/149888 (executing program) 2022/10/03 05:49:25 fetching corpus: 1300, signal 121451/152206 (executing program) 2022/10/03 05:49:25 fetching corpus: 1350, signal 123286/154871 (executing program) 2022/10/03 05:49:25 fetching corpus: 1400, signal 124788/157267 (executing program) 2022/10/03 05:49:25 fetching corpus: 1450, signal 126700/160031 (executing program) 2022/10/03 05:49:26 fetching corpus: 1500, signal 128735/162770 (executing program) 2022/10/03 05:49:26 fetching corpus: 1550, signal 129928/164856 (executing program) 2022/10/03 05:49:26 fetching corpus: 1600, signal 131370/167136 (executing program) 2022/10/03 05:49:26 fetching corpus: 1650, signal 133623/170012 (executing program) 2022/10/03 05:49:26 fetching corpus: 1700, signal 134970/172132 (executing program) 2022/10/03 05:49:26 fetching corpus: 1750, signal 136651/174495 (executing program) 2022/10/03 05:49:26 fetching corpus: 1800, signal 138471/176910 (executing program) 2022/10/03 05:49:26 fetching corpus: 1850, signal 139837/179008 (executing program) 2022/10/03 05:49:26 fetching corpus: 1900, signal 140730/180757 (executing program) 2022/10/03 05:49:27 fetching corpus: 1950, signal 141938/182719 (executing program) 2022/10/03 05:49:27 fetching corpus: 2000, signal 143175/184649 (executing program) 2022/10/03 05:49:27 fetching corpus: 2050, signal 144533/186666 (executing program) 2022/10/03 05:49:27 fetching corpus: 2100, signal 145221/188170 (executing program) 2022/10/03 05:49:27 fetching corpus: 2150, signal 146641/190207 (executing program) 2022/10/03 05:49:27 fetching corpus: 2200, signal 147811/192055 (executing program) 2022/10/03 05:49:27 fetching corpus: 2250, signal 148739/193701 (executing program) 2022/10/03 05:49:27 fetching corpus: 2300, signal 151073/196349 (executing program) 2022/10/03 05:49:28 fetching corpus: 2350, signal 153290/198874 (executing program) 2022/10/03 05:49:28 fetching corpus: 2400, signal 154267/200496 (executing program) 2022/10/03 05:49:28 fetching corpus: 2450, signal 155230/202138 (executing program) 2022/10/03 05:49:28 fetching corpus: 2500, signal 156000/203633 (executing program) 2022/10/03 05:49:28 fetching corpus: 2550, signal 156628/205037 (executing program) 2022/10/03 05:49:28 fetching corpus: 2600, signal 157361/206405 (executing program) 2022/10/03 05:49:28 fetching corpus: 2650, signal 158534/208138 (executing program) 2022/10/03 05:49:28 fetching corpus: 2700, signal 159679/209752 (executing program) 2022/10/03 05:49:28 fetching corpus: 2750, signal 161101/211586 (executing program) 2022/10/03 05:49:28 fetching corpus: 2800, signal 161615/212828 (executing program) 2022/10/03 05:49:29 fetching corpus: 2850, signal 162299/214167 (executing program) 2022/10/03 05:49:29 fetching corpus: 2900, signal 162962/215463 (executing program) 2022/10/03 05:49:29 fetching corpus: 2950, signal 164242/217066 (executing program) 2022/10/03 05:49:29 fetching corpus: 3000, signal 165263/218635 (executing program) 2022/10/03 05:49:29 fetching corpus: 3050, signal 166228/220082 (executing program) 2022/10/03 05:49:29 fetching corpus: 3100, signal 166990/221404 (executing program) 2022/10/03 05:49:29 fetching corpus: 3150, signal 168123/222893 (executing program) 2022/10/03 05:49:29 fetching corpus: 3200, signal 168817/224165 (executing program) 2022/10/03 05:49:30 fetching corpus: 3250, signal 169543/225457 (executing program) 2022/10/03 05:49:30 fetching corpus: 3300, signal 170185/226650 (executing program) 2022/10/03 05:49:30 fetching corpus: 3350, signal 171194/228103 (executing program) 2022/10/03 05:49:30 fetching corpus: 3400, signal 172035/229403 (executing program) 2022/10/03 05:49:30 fetching corpus: 3450, signal 172437/230432 (executing program) 2022/10/03 05:49:30 fetching corpus: 3500, signal 172959/231564 (executing program) 2022/10/03 05:49:30 fetching corpus: 3550, signal 174190/233144 (executing program) 2022/10/03 05:49:30 fetching corpus: 3600, signal 174754/234267 (executing program) 2022/10/03 05:49:30 fetching corpus: 3650, signal 175315/235416 (executing program) 2022/10/03 05:49:30 fetching corpus: 3700, signal 175856/236515 (executing program) 2022/10/03 05:49:31 fetching corpus: 3750, signal 176809/237807 (executing program) 2022/10/03 05:49:31 fetching corpus: 3800, signal 178284/239333 (executing program) 2022/10/03 05:49:31 fetching corpus: 3850, signal 179860/240897 (executing program) 2022/10/03 05:49:31 fetching corpus: 3900, signal 180955/242194 (executing program) 2022/10/03 05:49:31 fetching corpus: 3950, signal 181360/243181 (executing program) 2022/10/03 05:49:31 fetching corpus: 4000, signal 181906/244279 (executing program) 2022/10/03 05:49:31 fetching corpus: 4050, signal 182387/245239 (executing program) 2022/10/03 05:49:31 fetching corpus: 4100, signal 183206/246394 (executing program) 2022/10/03 05:49:32 fetching corpus: 4150, signal 183875/247454 (executing program) 2022/10/03 05:49:32 fetching corpus: 4200, signal 184354/248434 (executing program) 2022/10/03 05:49:32 fetching corpus: 4250, signal 184824/249387 (executing program) 2022/10/03 05:49:32 fetching corpus: 4300, signal 185741/250555 (executing program) 2022/10/03 05:49:32 fetching corpus: 4350, signal 186193/251548 (executing program) 2022/10/03 05:49:32 fetching corpus: 4400, signal 186630/252484 (executing program) 2022/10/03 05:49:32 fetching corpus: 4450, signal 187139/253384 (executing program) 2022/10/03 05:49:32 fetching corpus: 4500, signal 187741/254346 (executing program) 2022/10/03 05:49:32 fetching corpus: 4550, signal 188907/255520 (executing program) 2022/10/03 05:49:32 fetching corpus: 4600, signal 189564/256494 (executing program) 2022/10/03 05:49:33 fetching corpus: 4650, signal 190464/257555 (executing program) 2022/10/03 05:49:33 fetching corpus: 4700, signal 191016/258450 (executing program) 2022/10/03 05:49:33 fetching corpus: 4750, signal 191602/259397 (executing program) 2022/10/03 05:49:33 fetching corpus: 4800, signal 192083/260348 (executing program) 2022/10/03 05:49:33 fetching corpus: 4850, signal 192465/261211 (executing program) 2022/10/03 05:49:33 fetching corpus: 4900, signal 192996/262133 (executing program) 2022/10/03 05:49:33 fetching corpus: 4950, signal 193878/263112 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/264108 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/264781 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/265457 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/266149 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/266841 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/267574 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/268272 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/268941 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/269625 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/270303 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/270971 (executing program) 2022/10/03 05:49:33 fetching corpus: 4997, signal 194783/271643 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/272318 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/273038 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/273727 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/274444 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/275159 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/275851 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/276540 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/277182 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/277863 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/278556 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/279256 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/279969 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/280668 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/281346 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/282052 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/282742 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/283427 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/284125 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/284825 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/285472 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/286171 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/286859 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/287571 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/288246 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/288922 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/289625 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/290304 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/291015 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/291734 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/292425 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/293124 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/293809 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/294502 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/295226 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/295877 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/296223 (executing program) 2022/10/03 05:49:34 fetching corpus: 4997, signal 194783/296223 (executing program) 2022/10/03 05:49:36 starting 8 fuzzer processes 05:49:36 executing program 0: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000040)={0x758, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x11a, 0x2a, [@perr={0x84, 0x75, {0x9, 0x7, [@ext={{}, @broadcast, 0x7, @broadcast, 0x5}, @ext={{}, @broadcast, 0xee, @device_a, 0x19}, @ext={{}, @device_b, 0x4, @broadcast, 0x2a}, @ext={{}, @device_a, 0x1ff, @device_b, 0x26}, @not_ext={{}, @broadcast, 0x4, "", 0x3d}, @not_ext={{}, @device_b, 0x0, "", 0x3}, @not_ext={{}, @broadcast, 0xa9e, "", 0x7}]}}, @supported_rates={0x1, 0x1, [{0x0, 0x1}]}, @tim={0x5, 0x9a, {0x8, 0x45, 0x1, "627a32137ef03d8cd57c94103fca611b4993475a523d77fec105dd379ac8a28d26daf7ed3396e68a55343cd15cd44aa2487e4abab27521c13078e6f484e89dfc0feb4fd48f0ba3f84da4877cd4c93d252146461d9cba54b912bba097fb343b73faf296e990e2eddf7ab8d08ce1fe018ab9cde5ec77181dc2302f9d31b9c0dd51456f0d98b0937351d74060b9be63d437ed482563ebaeb9"}}]}, @NL80211_ATTR_PROBE_RESP={0x171, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x4b2, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0x8, 0x2af}}, @ver_80211n={0x0, 0x3, 0x0, 0x3, 0x0, 0x1, 0x1}}, 0x90b8, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x5, 0x1f}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x2, 0x1, 0x12, 0x12}}, [{0xdd, 0xbd, "832c0558ffc7e352fda7294786379e85241b6738bfd8dc6992c81bcc702a7cf778db46a5584e858a77b54bf47955c9428d07e7bfcf6d2d22b8ca9816b87c7b1f12c255dc9ac7b8036aed18912565d831624df2c158e258644ec443044c4f5f75758957e1db38089f0fea1df0b483b98c5c607a9f64c8cfc6b4de3c1b81e5aed6c3a9eb009a8e278b6464d33c22eb04f426002d266f627b74a6baf15fc24d7502887e8fbb033076d908e275d11c0b6769ec50bff8fa67ad7a81401f6756"}, {0xdd, 0xf2, "ac0aec5cd0d74a498cde158a8583869f56df30fdd3cf093c586d7ae2bd0b3aa88d502cb9deb566d5d61fefb1f9389a671d1d6617f0e8a73f2f076446e1278247c50e9a35b941b22a8eeb269f5da93ba9503e326245bf5d287548d09a42a12789d4846e5d098b5055618e74e8b7468ca102764b1e81effa8b056ffb61061fa05f78ac5c82c39cc5a3c0e0260dc92afe1e6a9cdc3048d3a69dfb83d61e77ebaba2522bff32ed2e00cfa8dad4b3c1e0f303ced1bc427bb7f6c06971ba91022aa3f3d0682c43c26d0d2a25053d1932d6a20535cd3539eb3de503439c6f1eaca512f7813b61440499725ad553071c627ded3082df"}, {0xdd, 0x2e, "1167b2ef35f54892b3b4934a24fd8c00f4a728fba66d5bda197e206db1db069c63820708169d3f1f8738148179ef"}, {0xdd, 0xce, "756234c842bcce97df9fc0798fa428efb83fd7aaa0012c8f084d2be52fc85dee58cf04cd13e736a931fa0fd6712425952dc64bc2c534f736fcbf6178788279e5f6142dc80cdf00c2a5b47031cf11296a636cc7a730a73276e52bed2fba0015fa41fb4a9223e10e14fa2669aabd4806574a0bf9d8c2520e5e9c814a70f5dcf82b26a34424cb5d561671d0bdba63be0bc9979397c4a745de3dd76cde1477149001416d76b56633e7cc6d30fab728fcb1ef8fc5f5bd1bf695aef5b5c78ba9cf00a44050f05c2e948385d7754573fdb9"}, {0xdd, 0xdd, "c01f1857546bc2f262bad9c045e3c0b0779c0d25aacb4b4010f3c5c36254d0ba5b0638c2ef4089ef41ca59b17595c3efe76bdc53c02a247c5e15ae9f5f3e244e1b1c262705094499681d4f3592d59fc9c0224d7bbc0c94f9f49eeade29300a69d91023356912e155de04fc3342fb70dfb9a5614d4bb87dd6529e91764b5283214f82a8abc9eb3a6b32059debaec68f403a8cb65829e0cdde03495347aae9bc397003afd80409905cc03504df768ab982d8f720771ffc4a07edbf7dd23b9b56539bec14bf0efe7d9f45542b186d4a5b1ef8210cac5f8c6bdfd9e22933f9"}, {0xdd, 0xb7, "46dd71166d53872be5dc573aeb98779350a61bcbe52193cc6051a4bbf1a3a7413cd4c77aa5802f2729a044a5eae7272ba69bf4cc19345fc5c134761b3cfcd9801ae9569e28d56e3f1079200886cf62fbdf604451f5c5e38e250e00929db27ac63283dafbff663d1cfd9976f2a3f8b07f246f24438982f7751c4786faeda43d51b8f617950e6fc02844199c76df1dd73365807e7f10839102c390df03cfa57e78e8d042a06dd2f09257cc8e6d1f26c7e55617c5647a61ca"}, {0xdd, 0x21, "9441149d7ecf18e42cb785b9e81a09e8781ca498418b3e3e16970fad3b8a6c96a7"}]}}]}, 0x758}, 0x1, 0x0, 0x0, 0x20}, 0x24011) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f1ffe4e40403b1b37fbac36a433aab56"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3e3e47f6cf4f8a85f4429f3ac7a11dba"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b1b8cf9341f3cbb78eb16f7e843db261"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}}, 0x4000080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x21c, 0x0, 0xa00, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}, 0xda09}}}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbfd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe8e9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @local, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xe55d}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4ea7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4001}, 0x8c4) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'vlan0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x30042404}, 0x4000040) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x40001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f40), 0xa00, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000f80)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4b, 0x29}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "a09b123822620050ea9cf415ba454510"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "eaf1905a88"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c040) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) pipe(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x34, 0xc, 0x6, 0x503, 0x0, 0x0, {0xd, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x28004010) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001240)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) r7 = syz_mount_image$vfat(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x2, 0x4, &(0x7f0000001600)=[{&(0x7f0000001340)="cf940532ce3b9635518cf5de1251b79ca6fa57cbf0a782c35b8a2bd7ebc5f497408bbe9a307b60a733b29299a1e93b688d697e45168a22e245db94adaddc6421db4a67eb63ccf138dd282951205303a54debcd51099b14675f460023362890ad79f9712f7d4156a21c4a30282959fe2d93c292a9ae35f57b07847212af9095412bde15be26c2f3ea9d33e2e9d552d314ffe30c14848f61cc1c4ea2f58b4f9056eeeba35187a7fb6951c302983d3dd7044744df9f6c282c5df6d4c2419377d8d41338ad5bb99a7f0793c86288be3c18", 0xcf, 0x7fffffff}, {&(0x7f0000001440)="5ae226f10ae2fde1ba32160b6806f848ee840d8c0540eec04e6eaaf96174179b87a23059703b0c26e6a21d5d5e9da2de5f1867f8d39ca72f5df43fb129263b809adb0705dcf52fd945656c6e1e3cb0a83c13", 0x52, 0x4}, {&(0x7f00000014c0)="9f7edd87848a6e5f07b2f8eddc6315606c62cac23d8170ec64a4a8b9586c0a5824e0c915c595", 0x26, 0x100000001}, {&(0x7f0000001500)="41420087974fac04f6f410cb3abd12823ed48146d314b789e7a2dd3b962e114e0d69c45b0c2c6c4dc560b62f6ede868dddbc79d85a00a047bfb9fe9d955d9be05aafcf30192b0bbb093c57a67d672e245d8181bb5c0338c27566ad3d99b2bb611af2a9f5b71c4c4dde025a7c14420c897fbac78af323868deff4fad3eba66d94ea6acb4b10ec70f17e69816b2ec10da947fdbdb356fca9ceba9f0265d3a76a59ad800017870950dc147727444d1afa332c29b88a2dd80d2eb0dc80dd88898f9177a6232989db33f57f30a852ad8f6ee832696783a1010fa60131ecd788583aac2f59d883dc226ae5d5c0a3e6f5", 0xed, 0x5}], 0x1201842, &(0x7f0000001680)={[{@uni_xlateno}, {@uni_xlate}, {@shortname_mixed}, {@shortname_mixed}, {@uni_xlateno}], [{@uid_eq={'uid', 0x3d, r6}}, {@uid_lt={'uid<', r6}}, {@smackfsroot={'smackfsroot', 0x3d, '%'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, 'ib\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@uid_gt={'uid>', r6}}, {@smackfshat={'smackfshat', 0x3d, 'syz2\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x01\x01\x01\x01\x01\x01'}}]}) openat(r7, &(0x7f0000001780)='./file0\x00', 0x436242, 0x44) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000001980)={&(0x7f0000001800)={0x16c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1a}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfb4e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x85a3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x821}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3776}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7e3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd652}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x240418d0}, 0x0) 05:49:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfa76961119e85fcd}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x44}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040811}, 0x8008041) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd6c1a620c6448530}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000}, 0x40000d6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0xa01, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0x8, 0x73}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x40004) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044001}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x80}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b1af372e4de7"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c0}, 0x0) r3 = accept(r1, 0x0, &(0x7f0000000740)) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)=@can, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000840)=""/119, 0x77}, 0x10060) r4 = openat(r1, &(0x7f0000000900)='./file0\x00', 0x191000, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {0x7, 0x2}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2727}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000b80)=0xe8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1dc, r0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1f, 0x29}}}}, [@NL80211_ATTR_FRAME_MATCH={0xb, 0x5b, "0004c570b60042"}, @NL80211_ATTR_FRAME_MATCH={0x71, 0x5b, "48a85133e6990eebbedcefeeef21ed1982222f215e4e442b61f21fc54ffd8b5f78c847ebf0e0fcc7d59fa47369d5f4238e1143d41869d915d60b5df94e3d6f67404c01d115f0c43302567f5b2ed86a340d74419b342ad6640cbe5b5112fcefe0233fd855f6a1b3a6fb65d15f8f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x400}, @NL80211_ATTR_FRAME_MATCH={0x4f, 0x5b, "bf26b7a5530402f2c086bf1edd4949a38fe81fe3475f067261e893d83430b9e5ab513f09a52f17d16d87101c4c252228962eeb2637c707f0b96ea09f1ea82412c8e6f9be85740430e9e7a0"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0xd5, 0x5b, "1aa6c30a786f5c31399389d36a16b14825b0e4d6c810de3ddcfc26bc2978e18efe2e0fc17f2557586486497a7e1a6ac6b2b3fd9f04e8264ee1cbc6ccaa0830aef9fcc1df1bf8a1d554661ec6f7610708aa473a9240b3005f79556d6f1101b974bae30accfa17ec66a12c0c2f7d8f3caf528f4af54669c6000719f7792fa8a91c6e4159d5e7d739a03a420f62e112f71c96a1a6f5a6954f11b4f31bf827090ecdb4d62505b4672900fe4e29e4828a14d24471492a718090626f97cc825e34538b5ab443eab43c7462be9399b05b4aefcba9"}]}, 0x1dc}}, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x9c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x17337894420b1eb2}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x68, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tpm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0xc04}, 0x80) 05:49:36 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x7e5, 0x0, 0x5, 0xf7}}}, 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x2412}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x3, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0xff, 0x5}, {0x0, 0x5, 0x95}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x6, 0x2}, {0x81}}}}, 0xf) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc9}, "f238dfa39b9cb3a15a88b9c35f09b1e3c4975573b1a9f432bd04e7326d739f4dcbae9d549af063250fbc8413e6c40174a66441befd91c925995bd5ba19717fd30d990ae1543138eab8f24e63ef55cc47b75b251536938c9c7c35159f22bc2ad78522fc134967879b833471e35d024dcbf6f5a713af6e8cef59b1acbaa3257e153052934ef1d6b3426c28b1b563bc079cc76f6c25df9dd642e7e3d018b3a3f87d1e07822cf92f5f6bb25deecf21f319839f572e1b9a4ad7047398df83a3b6a7d2dd2b3fc2a52e046400"}, 0xcd) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1b, 0xa}, {0x3f, 0xfff8, 0x0, 0x1, 0x3}}}}, 0x17) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x55}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x7f, 0x8, "1e9077", 0x800}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x3, "77bdd0", 0x7}, {@any, 0x1f, 0x3, 0x3, "25b2fa", 0xd6}, {@any, 0xff, 0x8, 0x6, "b879c3"}, {@any, 0x80, 0x7, 0x6, "062192", 0x23}, {@any, 0x3, 0x2, 0x0, "c44aa2", 0x1}]}}}, 0x58) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0x8635d4deb46bf965, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x5}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5a}, "d631038de1340def563d1d479deaab641600f8bde6e993eaf7286aa96f987790a01a393a27f3e198bf5ae7ca2a1e108fa05df364b02759a2618606c071224fdccbab390202ed37d089e02fafce49b148af0a5b0c2d7caf7330f6"}, 0x5e) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x13, 0xa}, {0x8, 0xc049, 0xc2, 0xc5, 0x1}}}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x18}, "3234d4a6475cfea6e721c9e2561713ddbc8bbdacde8980b8"}, 0x1c) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0x0, 0x1, 0x4cb, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x8, 0xa}, {0x754, 0x72, 0x5, 0x8, 0x8b}}}}, 0x17) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x5c}, @l2cap_cid_signaling={{0x58}, [@l2cap_conf_rsp={{0x5, 0x0, 0x2a}, {0x200, 0x7f, 0x3, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x20, 0x4, 0x1ff}}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x1, 0x64c, 0x8000, 0x8001}}]}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0xfffe, 0x8001, 0x23}}, @l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x7, 0xb1d4, 0x0, 0xddce}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0xfffe, 0x7fff, 0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1c, 0x2}, {0x7}}]}}, 0x61) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x7f, 0xa}, {0x5, 0x4, 0x81, 0x3, 0x2}}}}, 0x17) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd7}, "224ccea524c8562ce3ab7fb7965b134076e9dc4b0aaef1a6d633ac9340e91852d2f01f7c55e7c942371e0f1c4fd44f6b3925603d9043fffafde5e11b4a727db6072b7917da21eacc29ebb803a1e1f1b0966765ef317a328650cdac35374e5ff605c0466536dca391ec272e36d1bbf2eee3bb9b23a9d05baeb734f7f58bb88a70108b813e81f2f56099a88e9b58a528fd60db5b76bbb161a29b88821610ca5e0354ab5c4ff6fa60082e1814e0bf0a6fe66f8ec5f860540ee05698bd4fceb0193c97c00b817b5fda694654f82b6fde3c74acb09ae1fac686"}, 0xdb) syz_emit_vhci(&(0x7f0000000700)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xe7, 0x2}, {0x5}}}}, 0xf) [ 64.976995] audit: type=1400 audit(1664776176.757:6): avc: denied { execmem } for pid=282 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:49:36 executing program 7: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x9d, 0x7, 0x8000000000000, 0x2, 0x3, 0x956, 0x352, 0x40, 0x33, 0x4, 0xffff, 0x38, 0x2, 0x4e, 0x6e, 0x400}, [{0x3, 0x10000, 0x80000000, 0xd3b, 0x2, 0x9, 0xffffffff, 0x1}, {0x7, 0x3, 0x0, 0x18bf, 0x2, 0x2, 0x80000001, 0x91}], 'Hg !+', ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b5) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000008c0)=@generic={0x0, 0x80a, 0x4}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f565d15}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x789668e4}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x8c}}, 0x8019) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x1) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040005}, 0x44) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000cc0), 0x20040, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r2, 0x201, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) connect(r1, &(0x7f0000000e40)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x7}, 0x80) r3 = accept4(r1, &(0x7f0000000ec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000f40)=0x80, 0x800) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000f80), 0x240000, 0x0) sendfile(r1, r5, &(0x7f0000000fc0)=0x9, 0x746) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x58, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) sendfile(r1, r3, &(0x7f0000001180)=0x1, 0x6) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), r6) fcntl$getownex(r4, 0x10, &(0x7f0000001240)={0x0, 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x3c, r8, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) 05:49:36 executing program 5: r0 = socket$inet6(0xa, 0x4, 0x4) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x2, @private1, 0x3ff}, {0xa, 0x4e24, 0x7ff, @loopback, 0x2}, 0x8001, [0x2, 0xcf2, 0x7f, 0x7ff, 0x81, 0x6, 0x153c, 0xb0]}, 0x5c) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000100)=""/186, 0xba}) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x101}, 0x1c) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000340)={&(0x7f0000000240)=""/206, 0xce, 0x7, 0x4}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000380)={0x3, 'ip6gre0\x00', {0x81}, 0x60c6}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000400)=0x99, 0x4) r2 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000440), 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000480)={'syz_tun\x00'}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000004c0)={0xa01, {{0xa, 0x0, 0x20, @remote, 0x3}}}, 0x88) socketpair(0xa, 0x4, 0x3f, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x881b19bdf28f031d}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bind$inet6(r3, &(0x7f0000000700)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0xfffffee8}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000000740), &(0x7f0000000780)) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000010c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001080)={&(0x7f0000000800)={0x84c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x4e3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @device_a, @from_mac, {0x5, 0x7}}, 0x0, @default, 0x4, @val={0x0, 0x16, @random="84b1ae3687a50c6d9db5bcad34401d1e793cdd91924f"}, @val={0x1, 0x5, [{0x24, 0x1}, {0x5}, {0x6}, {0x2}, {0x4, 0x1}]}, @void, @void, @void, @val={0x5, 0xfc, {0x80, 0xd2, 0x6, "0722ffd88ab0fcc4e849e21dfa907da410c61b0ba15b50d012ce34d8f883e6c44dbac59d41562622e16bca0b403288f543f17163015dc1f3f6a6aec9c9c2a177bfc899cddc47095c2dd49f532d5143cb0f4a292099bee96571c9e5a54f93ae32f084fe7281470705772d0b0610b3623dc200bf8f7ce11f9fb3e9b04594f6251d388da4a749cab8b18c08ee546e2fad9ee519afae4b60f1cc0a11711bdd3f51410b40a3d2dfebbc7482eb8fae2d793cecb55ec9837d6b929a17c000ad5a6c25219f86314684083a8a8956dd863df466174f53d1a9ef3af8f2bdcd7ae2379e51dc0e391c89183ee2d68795b2222d771502c63333cf42ffb76447"}}, @val={0x25, 0x3, {0x0, 0xac, 0xbd}}, @void, @val={0x3c, 0x4, {0x1, 0x3, 0x40, 0x4}}, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0xfffffffffffffffc, 0x4, 0x0, 0x1f, 0x0, 0x1, 0x1, 0x3}, 0x800, 0x7, 0x1}}, @void, @void, @void, [{0xdd, 0xe8, "79fc5694dcd8019de3034428bea7acc7e2efdec3b16531654c429386dc4d1101d2de5ee4ad3e304aca616fcea617caae46164252a58d5109cfa8019426cf6cbb683d095aa6f8bcbc8808a4c4f174124dff0e3620ab98384a4629e0c36bbcf69c3c5f8feb7ce8215bd97c7dec247ffcae0e59b995dae879fe21121be047e9a5fc662daec39484bd1c572f9b15cbbf736773ed6178f342d8e6dc7fa71ecb4f30b3cf591229fa699f26486705cc490aa664c105679e1e52ec8dd9158161c988bfb5d52d1ab1c37ec203ac1b3f1bb752619250d196a3372e05e2b0314cbc42ea31c168c4521eb5054f0a"}, {0xdd, 0x49, "1ffff69b1399252cab7021e0a7eed9031f44f979ac11dc7a296e297f561f99736cbe852b1453d022787548a30ddd168b3a6caf190fc840b0d2b95713fb2e0fe40b45a5e7dede1ae7bb"}, {0xdd, 0xe1, "83781ca43adef040ea470400a7c36f73f65962563485aacede3daf440fd1d403c3cc3c6ae286f234a1c9e12ed5d394497ede3d4efefbf9619de60717407885d676ca082a1cd23e2eaaf96e4a86a0eb5994dc60635dec878d78dc52ea234580136c4ad06c87ca2988f6e5de80fb90b343854148a5c9bd52817638d7949cb2504625643dce1d1b9ddc5054fbfe5a5cebcccec478675e7002a549ce1310f0385831e531243142e1eb8530d54f89fbea8cba413c5159763aa914d4d49700dcc04573991d3fe1c3bd4849233ac3f28d2ed762e811f3925d41ac575d9e94bf4a25460c1d"}, {0xdd, 0xb0, "e5d96183ed6ddf25ffd9b6bc718d4b92eb0b3ba6d96d8d08f44764e5c877b107b8a780b45c0ec5a1bfb99b762608f350d6987f60c214a05f5bf34196888201d32199fcbd48da934421e8d371e7c61064298a33b91791a8a5df3a04f995c172c32b4b0dfa347c44ecc57fa8d0a1d739d6d0339cec74c13cc0f013f1f5293dddf48a2c5843f5b5e6ac911b023c9c74ee945dfcdd7787051bff2b93c8fe89af210c1085b4efbdd5c7c31084d4ac1fa2e229"}, {0xdd, 0x7c, "4beaa90d91d842d6eaede0e059af4716fe0c777cd6a474f5748814cc39fd015553f81d36c77c3dc37397c0e46f25c56a5de32de6c0fa45606cbc00230b2ace63ad0a28a26210df1a653cfe92555ce601622d8bb84582c9e749b939425bd6373af4d4be04835c2ddf996da2d908d5d53cfd0e9dbfacbdf9976f7c9676"}, {0xdd, 0x2d, "42934e813b7111e09a4264000b1394cf122c729e8fc9ce857398b521f66e92a7c5111018fd0cba698be04ffd52"}]}}, @NL80211_ATTR_BEACON_HEAD={0x2b1, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1f}, @broadcast, @device_b, @from_mac, {0x2, 0x2}}, 0x100000001, @random, 0x8900, @void, @val={0x1, 0x3, [{0x5}, {0x24}, {0x28, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x0, 0x7c, 0xad}}, @void, @val={0x3c, 0x4, {0x1, 0x2, 0x84, 0x71}}, @val={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0xd78, 0x4, 0x0, 0x237, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf8000000, 0x4}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x5, 0x1, 0x61}}, @void, [{0xdd, 0x78, "14ea1cde51d6068b193d085c4e084810e90f132bd7b97208508a286b15041bce19b1b288e366fd21b0ff9d31981d3f84811ae4a823b9c5a8a343ce6a9e7acb44c20bf2bb1e6123d6adedde50e29e115154d6c9c5202e0af8d6ec7633e06704b65d7fd20846f6ab28b223c1dc3f13955c0f98ff3e94e699c8"}, {0xdd, 0xff, "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"}, {0xdd, 0xb3, "0259ee50a3cac3dafface70c48544c0d6a38f5234d3365a5d60edb629b1c8f0fde4d8c273243f4bd7b106046685a9a5d8e7389003ad9e36c534023fff0ef6ab3a5ff0bb56d328053a17935e7d6724ddba1d495972ccbbb9da4d92935628fd8d0ecb223b882e28313e4e0529c98e7e5fca3da34b90a29209c8ac0562428380407ceece485feb0eb47d7317a17a9a4e3498e2b9b33048dbb34daf9a1713c04e5882306f39a0c0614ac67a0c1941bba1b617d419a"}, {0xdd, 0x1e, "3168904ebbc50cf41d7d2efc7d5954d44ab86a43eac8ef30e87fdcba2692"}]}}, @NL80211_ATTR_BEACON_HEAD={0x97, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x4, 0x7}}, 0xffffffffffffffef, @default, 0x1, @val={0x0, 0x16, @random="7c9fa7502bdbb3f3c6d9affa00160851c6c8adbcc840"}, @void, @void, @val={0x4, 0x6, {0x73, 0x80, 0x7ff, 0x2}}, @void, @void, @val={0x25, 0x3, {0x1, 0x2c, 0x81}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x8, 0x6, 0x5}}, @void, @void, @void, @void, [{0xdd, 0x2b, "fa879e8aafe814a7641980a5d7f4884f85ce879489673437ca1f4006e765fa2e4d24f098b0571db6806502"}, {0xdd, 0x12, "791a5c3a5040328e5a582828dbee83396b11"}]}}]}, 0x84c}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000800) sendfile(r1, r1, 0x0, 0x9) r4 = syz_mount_image$msdos(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0xfff, 0x3, &(0x7f00000012c0)=[{&(0x7f0000001180)="504287f088d661a0ce3fa7787af883f0e406e8de19c9c24aedb28a", 0x1b, 0x3}, {&(0x7f00000011c0)="d16e6d600c9bb4e60b7a9acc2f9869dc413cb66d3f2be837c33ca6b148ea72a466b47531d73853b36d7787c613d476cc97481db9e26887cee03eef16", 0x3c, 0x6c854b32}, {&(0x7f0000001200)="e552717c8ff1f40c03d9590b233653e2cd7435574bd0e9bb610c31e5d0011612cb8a8bf90bb4fc40ee9a53d59c5b3322dbb4cf4508f3aadb3984611f7280ab4d0c49b84bafff92a3804ce02bf1ff2451bb813d530a255862659f7e222a2734c5303e469fff5956052dde4f5bde75afe5ea52f53b61bd86e1131887d6f6c2eba00436148d68ad177969a26302592a5c694a52294b7aa4e1f12a1f0c95", 0x9c, 0x1}], 0xa000, &(0x7f0000001340)={[{@nodots}, {@nodots}, {@dots}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}]}) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f00000013c0)) 05:49:36 executing program 6: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x52d4]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9ec8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8015}, 0x4040804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x1, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010044}, 0x46000) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3e3, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040011) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000940), r4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x138, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f968f92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b851ada}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbee6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4fc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea5e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5da125e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c46}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x781}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a790833}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75949605}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70ec4680}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c5a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ab1a93d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c89}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb473}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x533a3016}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a7062c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x350c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f92daed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32b6d4fc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20e7546e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x392a54a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x636ad628}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e5e677}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6450}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ef5edfe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b83ea05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6410}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2764}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9452}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71eb}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x138}, 0x1, 0x0, 0x0, 0x4048080}, 0xeb42746590daaf8a) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b40)={'gretap0\x00', r2, 0x8, 0x8, 0x100, 0x6, {{0x1e, 0x4, 0x2, 0x3, 0x78, 0x65, 0x0, 0x3, 0x29, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x23, 0x50, [@remote, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @private=0xa010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0xc5, 0x3, 0x4, [{@loopback, 0x1}]}, @timestamp={0x44, 0x1c, 0xed, 0x0, 0x2, [0xec, 0x2, 0x800, 0x7ff, 0x2, 0x1]}, @rr={0x7, 0x17, 0x90, [@loopback, @multicast2, @loopback, @empty, @empty]}]}}}}}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000c40)={'veth1_vlan\x00', {0x2, 0x0, @local}}) io_uring_enter(r1, 0xf85, 0xab8e, 0x2, &(0x7f0000000c80)={[0x3ff]}, 0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000cc0)={'ipvlan0\x00', {0x2, 0x0, @loopback}}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc4, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x18000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3291c645}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x36d4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}]}]}, 0xc4}}, 0x48805) 05:49:36 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) getpeername$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) mknodat$null(r0, &(0x7f0000000100)='./file0\x00', 0x800, 0x103) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x2000, 0x23) close(r1) read$hiddev(r1, &(0x7f0000000180)=""/153, 0x99) chmod(&(0x7f0000000240)='./file0\x00', 0xa4) setxattr$incfs_size(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=0xff, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) unlinkat(r2, &(0x7f0000000380)='./file0\x00', 0xac62fdf1b9a99e0c) r4 = syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x10001, 0x6, &(0x7f00000007c0)=[{&(0x7f0000000440)="ceff7263f15a2d0a62ddb7eeebcf8e3ea6f58a62b06e97c2a72e20d943dc4c36d36b0857f08a1983e893c471aea56f3a956dce58c0a88d2cfa81ca6d332df20a996a454406fa3bcdac5ab7a691dd8c00ee1f9a8cf7c11d4148ba1cfd3aa84475310444477996b7e168fa196b29c60e79c9341f9b68b166843bd485d16c50692c22ade0485748ecf4c8f16f40d1ba81176a31342fc9726f890a529f629f11bd19bff08cad748f1571f29fb57b8d9100b403035cc6d3a82cb3218fb6b273c742f0e6a8b290f78e61f42e493b8b5a4c9f91b2359a09b177b048341caaea01acdedb22e5a44b6c96a923d89b62ca3210dbe897d62b", 0xf3, 0x4}, {&(0x7f0000000540)="b9ea46d8411f8169783789884274ada2f37f35033b47e3c73cb79294c7d21f29ff4d2e0a45f5af2f602fb158ae1f43f71d6a092c085a0b6b782ddcc814ded46f9eb3f07eb54c816d010bb7cc0a777b2eaa4b605aaad907f349723b58b1d6ea3d034fbcd53269988802d969af448dc3cf61ff70a36487370c0735ef", 0x7b, 0xff}, {&(0x7f00000005c0)="e1ee12e1e3d46ebdb8c4484680c4cab67f39f1c7a160045e5cdf3b505225b37c972d771cf73dde94015f6f3e03ca8bd410f583d91e2af000b1cfb2f513b6a33a086c316ff9ac3260ed91a6537f642e71c313cd782ae906ffcbf00abdb1cf71707d8630483bdaf24d60278435c00015ae1eaad0e84f51f3dfc828572c31c5eabf46fc7998ddb507b5ef7e8400ac03372ceedbe2a33aae50f303f0a9caaa328aed82e29e78a252e5088fd79fb1c4bb9980", 0xb0}, {&(0x7f0000000680)="1f47dc16e352c11812e155f71d7241ee8661141e14612b96861cbc582cb8d8224fd9", 0x22, 0x2}, {&(0x7f00000006c0)="4d78d87a563bcc696214b3a22bef1f4a14d85e23eab3480072ecbce3a8a5dbbdd938f34064f7c0085d2b16312ab18e30eb775ce13aa47cfceab24613b4b4f2", 0x3f, 0x5}, {&(0x7f0000000700)="5b402c0939f2f6e3033f7c854c12a8effefcd54a1a8c3c3e72cf4a41f9c72098c1a8e219c9cc613c7db2b4d1a1510a625e98e429662c24ebb4989de5c1adc18132f3f394e179fe8289f288e7b76478044d62d76b7923986012d2c8dd9a5d96c4e10851bac80da8be56ea734900d65fb05d3369110d3bb21fcb7a1dd5839534323db1e73239e556057f297f3418388254ca9650c4f44a9cc667775cba8b4f82feafcc431f7878ae", 0xa7, 0x8001}], 0x800040, &(0x7f0000000880)={[{@shortname_lower}, {@shortname_win95}], [{@dont_hash}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000900)='timers\x00') r7 = syz_io_uring_complete(0x0) getgroups(0x4, &(0x7f0000000940)=[0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, r1, {0xee00, r8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendfile(r9, r3, &(0x7f0000000a00)=0x1, 0x80) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000a80)={0x2, &(0x7f0000000a40)=[{}, {}]}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) 05:49:36 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x9c) r2 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x101, 0x20240) close(r2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x524000, 0x0) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f0000000140)="da73ea190de2fb6071657b244c9859de0372fa209424e274326271bf88dc64438c414cbdc697cf68907d9bd2b560d34590561260ec8421dac05becbd50e0e6f2edbcf9e4f4d6b254afa4e6d15cb41101eb25ffcbd1b27dc16e1888e1cafbda32983c89caccfe0e4920744f7e23fbafe516868e43f8a426dad8a46c935033a93dad7fdb0917e2408ca57543e08a52547dd9b66dd79d6ee7d1bd53a71671b360639d8b1ae87dfb4d0961f2cd286ce6a6846f78566aeb18d89c3f9e01237ccddc0391eb31b186dea7ebdfa2df3c04c9f037c7c8d456ec4b7ba0a38a4734474cd039c5ba140cb414d00d6ec1713895cbdec798a73b", 0xf3}, {&(0x7f0000000240)="eba95b9049aa0ed22ca483bacfa8b63ba0ba23eabfb0b68c1bfe4ee768bf5a6b7969cbb38a24317a3912953e927fd20fa62d0badd773e3861740b5e4c1a12986b643aac73dfd590fd459e72ba82c5b2c346d91c289db0ee2b5509b51e1e885c3ab74bec94a0f6f2706c6095549fae96737307bae2b172fe8caa094416cc4d4c0b2abd21760e1ae6d4131aa9ae44372968bc2cb6f9ea3d8579917e1b6a3747ee44cc49c66452e889d4b8b3f55e158b6efdb07e209588c18f78db3d0a5c13bd63957797e8468b2e5268e0ffb8bd1cd2a5fe0fa78e91af982467ac7", 0xda}, {&(0x7f0000000340)="7ba26dd571a95cb94ae5e6cca2620898aa992b58db26af31e6e6c6b0843e5273d4e66b4e266e701def61888a71b964e3d99979ceb421bd2bf0883410ab7e2022039f2de401beb6ec5cc8b7faaf4ebea21baa077b34294fab893f305150fd24d335eb6a88e393c19500453193ca49b253ee6fd847629269bbca23a494fbd92feb5e9e59ebc84841670b1562d68fc3856befcb80231dda3aee97a8c906093904", 0x9f}, {&(0x7f0000000400)="ccdc6992ec6eb3f3932b56e2e0fe335ba42843296eea154282b2d287bcfad1", 0x1f}, {&(0x7f0000000440)}, {&(0x7f0000000480)="2cef84be4987d3da9b974b3038fb688238a1e39a9f36b13e21b30b33b14a1f6bea2287f32a25ef596f8e39e48377edcd038cae950ba49589cfca725039b99ee57d6b2d2c8328471173b65de2fa7ae6ed3d439c3963a559d0e0351980fd152ecec6a29a462a4e0f583af1cf3475af183c998ad6080cf9ea0fcecef271150d5223e1a7be6537a297afd1a8e24719c3a39df3f125b9efc27823158e6726a81ebf7084f2d61069170b1130884abb77f7a504fa2bcb23f92b7285", 0xb8}, {&(0x7f0000000540)="5b81a3f2dc13c99d4f4818b6a8d8a1993e130eb308f21d98316024762c45c55a44eaefd1645e1f12e2db9c48cc8347eec6f9e8176a6051390ad4e13ba38128b912e8d30b676b442516db9afe30e855fdfd02020ea7933ad2390ee5d8b5c3205af7a4f7c5b392a7c9e961a88cfa390a1a43632cf84a821a0a5293be675c1e434eeb90558f4dafb2faefc6b63e7acd4160fe1205283d8955c2c74364deea86f19baaa796e12b1bc5e1e7c5a2fb3b299624f588e01e875bde9927f9faf3d093112a27adf43480ee7eb064", 0xc9}, {&(0x7f0000000640)="bbddf82ed26b8ef76d1d64ed392c6d0c362a7416b7b8c3205de8d8d7f15c51ca10cdaeb9bf01cfcdf0576ab98794a7697ee617f398e1e668c3f35bb35595b28f555e7d74970fa3611dcd9cfeadfbc738d8ac78cf7e3fd2c5a064bad592e1afe31948efcdd579133e7cee9e506432d8c01b026eb276aa8ca9ac6aa682cdd51e938e92f10001", 0x85}], 0x8, 0x4) lsetxattr$security_selinux(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000800)='system_u:object_r:initrc_exec_t:s0\x00', 0x23, 0x2) ioctl$FITHAW(r3, 0xc0045878) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) utimes(&(0x7f0000000840)='./file0/file0\x00', &(0x7f00000008c0)={{r4, r5/1000+60000}}) perf_event_open(&(0x7f0000000940)={0x6, 0x80, 0x2, 0x1, 0x3f, 0x4, 0x0, 0x3, 0x8883, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x1, @perf_bp={&(0x7f0000000900)}, 0x0, 0x2, 0x400, 0x8, 0x3, 0x5, 0x1, 0x0, 0x5, 0x0, 0x20}, 0x0, 0xd, 0xffffffffffffffff, 0x2) r6 = gettid() r7 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x1, 0x2, 0x8, 0x5, 0x0, 0x957, 0x50, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, @perf_bp={&(0x7f00000009c0), 0xb}, 0x1000, 0x0, 0x7, 0x2, 0x7, 0x8b5, 0x3, 0x0, 0xa85, 0x0, 0xa3e}, r6, 0x10, r0, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000a80), 0x0, 0x2402) poll(&(0x7f0000000ac0)=[{r7, 0x4040}, {r8, 0x4000}, {r1, 0x2110}], 0x3, 0x7ff) connect$packet(r8, &(0x7f0000000b00)={0x11, 0x18, 0x0, 0x1, 0xc3, 0x6, @local}, 0x14) r9 = syz_open_dev$vcsu(&(0x7f0000000b40), 0x6, 0x10000) r10 = open$dir(&(0x7f0000000b80)='./file0/file0\x00', 0x40000, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r10, {0x7}}, './file0\x00'}) [ 66.268106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.269282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.269912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.274036] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.274155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.275171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.277794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.279374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.281006] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.282169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.283656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.287986] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.288163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.289688] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.294523] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.297655] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.306236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.309480] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.311326] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.311756] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.313957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.315457] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.318078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.323291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.324908] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.326548] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.330298] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.332377] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.338297] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.338644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.353320] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.354578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.355620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.363062] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.372362] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.374180] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.377962] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.380129] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.382911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.384366] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.385873] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.387783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.391882] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.396188] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.397516] Bluetooth: hci6: HCI_REQ-0x0c1a [ 66.399257] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.400502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.406766] Bluetooth: hci5: HCI_REQ-0x0c1a [ 66.407861] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.410007] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.420428] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.422519] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.430218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.435144] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.436712] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.441750] Bluetooth: hci7: HCI_REQ-0x0c1a [ 68.338928] Bluetooth: hci1: command 0x0409 tx timeout [ 68.403084] Bluetooth: hci3: command 0x0409 tx timeout [ 68.403320] Bluetooth: hci2: command 0x0409 tx timeout [ 68.403751] Bluetooth: hci0: command 0x0409 tx timeout [ 68.466743] Bluetooth: hci6: command 0x0409 tx timeout [ 68.467396] Bluetooth: hci4: command 0x0409 tx timeout [ 68.467955] Bluetooth: hci7: command 0x0409 tx timeout [ 68.468457] Bluetooth: hci5: command 0x0409 tx timeout [ 70.387671] Bluetooth: hci1: command 0x041b tx timeout [ 70.450702] Bluetooth: hci0: command 0x041b tx timeout [ 70.452046] Bluetooth: hci2: command 0x041b tx timeout [ 70.453030] Bluetooth: hci3: command 0x041b tx timeout [ 70.514734] Bluetooth: hci5: command 0x041b tx timeout [ 70.515588] Bluetooth: hci7: command 0x041b tx timeout [ 70.516468] Bluetooth: hci4: command 0x041b tx timeout [ 70.517319] Bluetooth: hci6: command 0x041b tx timeout [ 72.434686] Bluetooth: hci1: command 0x040f tx timeout [ 72.498874] Bluetooth: hci3: command 0x040f tx timeout [ 72.499733] Bluetooth: hci2: command 0x040f tx timeout [ 72.500808] Bluetooth: hci0: command 0x040f tx timeout [ 72.562783] Bluetooth: hci6: command 0x040f tx timeout [ 72.563559] Bluetooth: hci4: command 0x040f tx timeout [ 72.564815] Bluetooth: hci7: command 0x040f tx timeout [ 72.565525] Bluetooth: hci5: command 0x040f tx timeout [ 74.482743] Bluetooth: hci1: command 0x0419 tx timeout [ 74.546768] Bluetooth: hci0: command 0x0419 tx timeout [ 74.547552] Bluetooth: hci2: command 0x0419 tx timeout [ 74.548691] Bluetooth: hci3: command 0x0419 tx timeout [ 74.610815] Bluetooth: hci5: command 0x0419 tx timeout [ 74.612047] Bluetooth: hci7: command 0x0419 tx timeout [ 74.612837] Bluetooth: hci4: command 0x0419 tx timeout [ 74.613559] Bluetooth: hci6: command 0x0419 tx timeout [ 128.786658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.788519] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.790447] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.804979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.808462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.809970] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.812689] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.815737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.817052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.818963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.821747] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 128.822885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.824735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.825867] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 128.839669] Bluetooth: hci0: HCI_REQ-0x0c1a [ 128.847915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.850458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.855665] Bluetooth: hci2: HCI_REQ-0x0c1a [ 128.865167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.866452] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.870684] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.872329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.872403] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.873803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 128.875842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.880342] Bluetooth: hci1: HCI_REQ-0x0c1a [ 128.886792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.890503] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.892345] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.893646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.897410] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.899841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.901681] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 128.903222] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.909193] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 128.909224] Bluetooth: hci4: HCI_REQ-0x0c1a [ 128.919628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.925168] Bluetooth: hci5: HCI_REQ-0x0c1a [ 128.969865] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.976125] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 128.979911] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.981515] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.997692] Bluetooth: hci7: HCI_REQ-0x0c1a [ 129.025824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.029818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.036102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.044012] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.055896] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.081716] Bluetooth: hci3: HCI_REQ-0x0c1a [ 130.866752] Bluetooth: hci2: command 0x0409 tx timeout [ 130.868014] Bluetooth: hci0: command 0x0409 tx timeout [ 130.869135] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 130.930746] Bluetooth: hci4: command 0x0409 tx timeout [ 130.932003] Bluetooth: hci1: command 0x0409 tx timeout [ 130.933749] Bluetooth: hci5: command 0x0409 tx timeout [ 131.058874] Bluetooth: hci7: command 0x0409 tx timeout [ 131.122716] Bluetooth: hci3: command 0x0409 tx timeout [ 132.914711] Bluetooth: hci0: command 0x041b tx timeout [ 132.915518] Bluetooth: hci2: command 0x041b tx timeout [ 132.978888] Bluetooth: hci5: command 0x041b tx timeout [ 132.979722] Bluetooth: hci1: command 0x041b tx timeout [ 132.980473] Bluetooth: hci4: command 0x041b tx timeout [ 133.106696] Bluetooth: hci7: command 0x041b tx timeout [ 133.170678] Bluetooth: hci3: command 0x041b tx timeout [ 134.962700] Bluetooth: hci2: command 0x040f tx timeout [ 134.963128] Bluetooth: hci0: command 0x040f tx timeout [ 135.026681] Bluetooth: hci4: command 0x040f tx timeout [ 135.027089] Bluetooth: hci1: command 0x040f tx timeout [ 135.027498] Bluetooth: hci5: command 0x040f tx timeout [ 135.154638] Bluetooth: hci7: command 0x040f tx timeout [ 135.218653] Bluetooth: hci3: command 0x040f tx timeout [ 135.858647] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 137.010665] Bluetooth: hci0: command 0x0419 tx timeout [ 137.011096] Bluetooth: hci2: command 0x0419 tx timeout [ 137.074709] Bluetooth: hci5: command 0x0419 tx timeout [ 137.075102] Bluetooth: hci1: command 0x0419 tx timeout [ 137.075461] Bluetooth: hci4: command 0x0419 tx timeout [ 137.202690] Bluetooth: hci7: command 0x0419 tx timeout [ 137.266689] Bluetooth: hci3: command 0x0419 tx timeout [ 140.466676] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 145.202789] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 147.852855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.854264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.855315] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.857372] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.858326] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.859250] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.865957] Bluetooth: hci6: HCI_REQ-0x0c1a [ 149.875400] Bluetooth: hci6: command 0x0409 tx timeout [ 151.922675] Bluetooth: hci6: command 0x041b tx timeout [ 153.970693] Bluetooth: hci6: command 0x040f tx timeout [ 156.018648] Bluetooth: hci6: command 0x0419 tx timeout [ 179.634670] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 179.635251] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.635807] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.636373] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.637052] Call Trace: [ 179.637248] [ 179.637433] __schedule+0x893/0x2470 [ 179.637891] ? io_schedule_timeout+0x150/0x150 [ 179.638250] ? do_raw_spin_lock+0x121/0x260 [ 179.638933] ? rwlock_bug.part.0+0x90/0x90 [ 179.639277] schedule+0xda/0x1b0 [ 179.639796] rescuer_thread+0x851/0xdb0 [ 179.640106] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.640494] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.640905] ? lockdep_hardirqs_on+0x79/0x100 [ 179.641251] ? worker_thread+0x1260/0x1260 [ 179.641609] kthread+0x2ed/0x3a0 [ 179.641874] ? kthread_complete_and_exit+0x40/0x40 [ 179.642266] ret_from_fork+0x22/0x30 [ 179.642569] [ 179.642772] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 179.643259] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.643663] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.644227] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.644868] Call Trace: [ 179.645071] [ 179.645254] __schedule+0x893/0x2470 [ 179.645572] ? io_schedule_timeout+0x150/0x150 [ 179.645954] ? do_raw_spin_lock+0x121/0x260 [ 179.646294] ? rwlock_bug.part.0+0x90/0x90 [ 179.646656] schedule+0xda/0x1b0 [ 179.646926] rescuer_thread+0x851/0xdb0 [ 179.647237] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.647647] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.648041] ? lockdep_hardirqs_on+0x79/0x100 [ 179.648400] ? worker_thread+0x1260/0x1260 [ 179.648752] kthread+0x2ed/0x3a0 [ 179.649023] ? kthread_complete_and_exit+0x40/0x40 [ 179.649411] ret_from_fork+0x22/0x30 [ 179.649748] [ 179.649935] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 179.650439] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.650864] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.651441] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.652112] Call Trace: [ 179.652314] [ 179.652499] __schedule+0x893/0x2470 [ 179.652820] ? io_schedule_timeout+0x150/0x150 [ 179.653176] ? do_raw_spin_lock+0x121/0x260 [ 179.653532] ? rwlock_bug.part.0+0x90/0x90 [ 179.653893] schedule+0xda/0x1b0 [ 179.654165] rescuer_thread+0x851/0xdb0 [ 179.654479] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.654895] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.655289] ? lockdep_hardirqs_on+0x79/0x100 [ 179.655658] ? worker_thread+0x1260/0x1260 [ 179.655994] kthread+0x2ed/0x3a0 [ 179.656266] ? kthread_complete_and_exit+0x40/0x40 [ 179.656669] ret_from_fork+0x22/0x30 [ 179.656972] [ 179.657165] INFO: task netns:6 blocked for more than 143 seconds. [ 179.657656] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.658067] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.658671] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.659306] Call Trace: [ 179.659506] [ 179.659710] __schedule+0x893/0x2470 [ 179.660008] ? io_schedule_timeout+0x150/0x150 [ 179.660364] ? do_raw_spin_lock+0x121/0x260 [ 179.660716] ? rwlock_bug.part.0+0x90/0x90 [ 179.661058] schedule+0xda/0x1b0 [ 179.661335] rescuer_thread+0x851/0xdb0 [ 179.661688] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.662083] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.662472] ? lockdep_hardirqs_on+0x79/0x100 [ 179.662851] ? worker_thread+0x1260/0x1260 [ 179.663189] kthread+0x2ed/0x3a0 [ 179.663461] ? kthread_complete_and_exit+0x40/0x40 [ 179.663862] ret_from_fork+0x22/0x30 [ 179.664171] [ 179.664357] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.664877] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.665293] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.665910] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 179.666544] Workqueue: 0x0 (kblockd) [ 179.666880] Call Trace: [ 179.667080] [ 179.667262] __schedule+0x893/0x2470 [ 179.667563] ? io_schedule_timeout+0x150/0x150 [ 179.667958] schedule+0xda/0x1b0 [ 179.668232] worker_thread+0x15f/0x1260 [ 179.668567] ? process_one_work+0x16a0/0x16a0 [ 179.668936] kthread+0x2ed/0x3a0 [ 179.669208] ? kthread_complete_and_exit+0x40/0x40 [ 179.669621] ret_from_fork+0x22/0x30 [ 179.669924] [ 179.670114] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.670645] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.671057] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.671655] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.672294] Call Trace: [ 179.672494] [ 179.672694] __schedule+0x893/0x2470 [ 179.672996] ? io_schedule_timeout+0x150/0x150 [ 179.673380] ? do_raw_spin_lock+0x121/0x260 [ 179.673749] ? rwlock_bug.part.0+0x90/0x90 [ 179.674094] schedule+0xda/0x1b0 [ 179.674368] rescuer_thread+0x851/0xdb0 [ 179.674700] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.675085] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.675473] ? lockdep_hardirqs_on+0x79/0x100 [ 179.675919] ? worker_thread+0x1260/0x1260 [ 179.676309] kthread+0x2ed/0x3a0 [ 179.676638] ? kthread_complete_and_exit+0x40/0x40 [ 179.677083] ret_from_fork+0x22/0x30 [ 179.677437] [ 179.677667] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.678210] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.678636] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.679219] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.679879] Call Trace: [ 179.680077] [ 179.680267] __schedule+0x893/0x2470 [ 179.680565] ? io_schedule_timeout+0x150/0x150 [ 179.680942] ? mark_held_locks+0x9e/0xe0 [ 179.681275] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.681698] schedule+0xda/0x1b0 [ 179.681969] rcu_tasks_one_gp+0x3db/0xc10 [ 179.682309] rcu_tasks_kthread+0x80/0xa0 [ 179.682657] ? rcu_tasks_postscan+0x10/0x10 [ 179.682990] kthread+0x2ed/0x3a0 [ 179.683257] ? kthread_complete_and_exit+0x40/0x40 [ 179.683711] ret_from_fork+0x22/0x30 [ 179.684017] [ 179.684210] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.684734] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.685140] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.685761] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 179.686397] Workqueue: 0x0 (events_highpri) [ 179.686766] Call Trace: [ 179.686975] [ 179.687157] __schedule+0x893/0x2470 [ 179.687455] ? io_schedule_timeout+0x150/0x150 [ 179.687839] schedule+0xda/0x1b0 [ 179.688115] worker_thread+0x15f/0x1260 [ 179.688447] ? process_one_work+0x16a0/0x16a0 [ 179.688823] kthread+0x2ed/0x3a0 [ 179.689094] ? kthread_complete_and_exit+0x40/0x40 [ 179.689489] ret_from_fork+0x22/0x30 [ 179.689816] [ 179.690002] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.690510] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.690936] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.691508] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.692161] Call Trace: [ 179.692361] [ 179.692550] __schedule+0x893/0x2470 [ 179.692878] ? io_schedule_timeout+0x150/0x150 [ 179.693241] ? do_raw_spin_lock+0x121/0x260 [ 179.693617] ? rwlock_bug.part.0+0x90/0x90 [ 179.693951] schedule+0xda/0x1b0 [ 179.694218] rescuer_thread+0x851/0xdb0 [ 179.694534] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.694940] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.695337] ? lockdep_hardirqs_on+0x79/0x100 [ 179.695712] ? worker_thread+0x1260/0x1260 [ 179.696047] kthread+0x2ed/0x3a0 [ 179.696316] ? kthread_complete_and_exit+0x40/0x40 [ 179.696722] ret_from_fork+0x22/0x30 [ 179.697026] [ 179.697220] INFO: task kblockd:31 blocked for more than 143 seconds. [ 179.697729] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.698134] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.698735] task:kblockd state:I stack:30176 pid:31 ppid:2 flags:0x00004000 [ 179.699373] Call Trace: [ 179.699572] [ 179.699776] __schedule+0x893/0x2470 [ 179.700077] ? io_schedule_timeout+0x150/0x150 [ 179.700433] ? do_raw_spin_lock+0x121/0x260 [ 179.700784] ? rwlock_bug.part.0+0x90/0x90 [ 179.701118] schedule+0xda/0x1b0 [ 179.701386] rescuer_thread+0x851/0xdb0 [ 179.701731] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.702126] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.702519] ? lockdep_hardirqs_on+0x79/0x100 [ 179.702893] ? worker_thread+0x1260/0x1260 [ 179.703228] kthread+0x2ed/0x3a0 [ 179.703492] ? kthread_complete_and_exit+0x40/0x40 [ 179.703897] ret_from_fork+0x22/0x30 [ 179.704203] [ 179.704446] [ 179.704446] Showing all locks held in the system: [ 179.704922] 2 locks held by kworker/u4:0/9: [ 179.705240] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.706030] #1: ffff88800861fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.706842] 1 lock held by rcu_tasks_kthre/11: [ 179.707201] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.707940] 1 lock held by khungtaskd/25: [ 179.708241] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.708931] 2 locks held by kworker/u4:1/26: [ 179.709258] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.710056] #1: ffff888009037db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.710872] 2 locks held by kworker/u4:2/33: [ 179.711198] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.711990] #1: ffff8880092d7db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.712813] 1 lock held by kmemleak/55: [ 179.713110] 1 lock held by in:imklog/211: [ 179.713416] 2 locks held by kworker/u4:4/326: [ 179.713782] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.714549] #1: ffff88800ed1fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.715371] 2 locks held by kworker/u4:5/329: [ 179.715724] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.716490] #1: ffff88802070fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.717305] 2 locks held by kworker/u4:7/333: [ 179.717669] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.718439] #1: ffff88802078fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.719246] 2 locks held by kworker/u4:9/367: [ 179.719579] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.720368] #1: ffff88801d1b7db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.721188] 2 locks held by kworker/u4:10/532: [ 179.721532] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.722322] #1: ffff888019cc7db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.723159] 1 lock held by modprobe/7027: [ 179.723465] 1 lock held by modprobe/7028: [ 179.723799] 1 lock held by modprobe/7030: [ 179.724106] 1 lock held by modprobe/7031: [ 179.724411] [ 179.724545] ============================================= [ 179.724545] [ 181.704418] loop5: detected capacity change from 0 to 243019 [ 182.019056] loop5: detected capacity change from 0 to 243019 05:51:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0xc, 0x11, 0x0, @empty, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x6005}, @val={0x2, 0x3, 0x8001, 0x100, 0x9b7c, 0x2}, @eth={@random="699ed73204b8", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@val={0x9100, 0x6, 0x0, 0x3}, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0xf, 0x6, "4700dd", 0x438, 0x6, 0x1, @local, @private1, {[@routing={0xff, 0xa, 0x0, 0x0, 0x0, [@private0, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x15}]}, @routing={0x33, 0xe, 0x1, 0x59, 0x0, [@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2]}, @fragment={0x67, 0x0, 0x1b, 0x1, 0x0, 0x6, 0x65}, @hopopts={0x5e, 0x1c, '\x00', [@generic={0x6, 0xe1, "e4db5bb7e3a03f56218ca106d28efb108722b5a844f610f426fe87f2e90079527717526ae82f9953d1415690f40cba68357d2712969714be66b2e4c37f087884c5dc6cb5830455819a984f3f1ef2b64558593a679630a56d876727c4273efe1606baeb04d6851aa3e0b087acc139150af36177cf4ba618a78ab683190c3b48ec8ad4819debba3a04d949b65f34d8fec49d0381f8835a7d9b8244994f165bcfb33463995f1860fb75322d8b004bc8d7c00267e1cfffcb8210d609d7599b8d88b0335f1216c954c3e18717439534c355ddb4a71947e7e967a76f1b346aac9a806df8"}]}, @dstopts={0x2b, 0x19, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @generic={0x5, 0xb6, "6aae38bab6b3210a225c3eaac64d3cc209df53477bbb86c6cd86d6f0366e5e0085294b48963a01ef07f51bb4667586ae31ba6ef6b133c051b827d204035c05a3e79fda5aaa7e0de97c492ac03d4b903bd8301a0ac627c151d0f5f3cfc442f0303f8d6580fdbdaabe163feeb4f5022639a8afc3813225846aba3c846194110bbe1a2683f33ececdc926a076a90030d7662a11f8c4d18cef62164a3c0015a76ce1a56d6fc8e86d8c6133fe28be0aac6f93fe60c7674db5"}]}, @dstopts={0x2, 0xa, '\x00', [@ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @hao={0xc9, 0x10, @local}, @generic={0x0, 0x25, "f9266826ce717344abf7b9b519d7e63cad916fa34b1d42deb16a952ef4a80441541ae6c669"}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x46}]}, @hopopts={0x3c, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x1b, 0x1, 0x1, 0x0, 0x401, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xf, 0xf989, "c7465c063ffc4c0dddce26"}, @md5sig={0x13, 0x12, "25ce9d270085c30d1ed2a4ec243bf55f"}, @mptcp=@synack={0x1e, 0x10, 0x2, 0x2, 0x7, 0x8000, 0x8}, @exp_fastopen={0xfe, 0xd, 0xf989, "ffa81b01ae2b91b03d"}, @md5sig={0x13, 0x12, "d4a26c1db56552624e0f333e5c734cf4"}]}}, {"388a6867e2bb29aa19704896685b189a4e9282b03fbc20c45f260e41c6c6c8ca2fcd2b92139658259fc57e53701371795a78a53ef4fdbbcfc03c49969ec6e59f00094da4dd7b24d0dd6ee6b13ca76c5d2e7eb0d0036c790bbf3b712f722444a09d5c4dedd9c844bf5f11074f495fc9d09fc4cea8d5965317bdcc1974984bf395403db4f7649340a4cc73ea21e334cd51eab810b9d082adaa5335038a708caef62232f9a73812031a738a26dfb39b1811f7f6809c1f885f9d0169d456"}}}}}}}}, 0x484) [ 182.155522] audit: type=1400 audit(1664776293.935:7): avc: denied { open } for pid=7187 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 182.159179] audit: type=1400 audit(1664776293.935:8): avc: denied { kernel } for pid=7187 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 182.180532] ------------[ cut here ]------------ [ 182.180555] [ 182.180559] ====================================================== [ 182.180563] WARNING: possible circular locking dependency detected [ 182.180567] 6.0.0-rc7-next-20220930 #1 Not tainted [ 182.180574] ------------------------------------------------------ [ 182.180577] syz-executor.5/7188 is trying to acquire lock: [ 182.180586] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 182.180627] [ 182.180627] but task is already holding lock: [ 182.180630] ffff888018a28c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 182.180658] [ 182.180658] which lock already depends on the new lock. [ 182.180658] [ 182.180661] [ 182.180661] the existing dependency chain (in reverse order) is: [ 182.180665] [ 182.180665] -> #3 (&ctx->lock){....}-{2:2}: [ 182.180679] _raw_spin_lock+0x2a/0x40 [ 182.180690] __perf_event_task_sched_out+0x53b/0x18d0 [ 182.180701] __schedule+0xedd/0x2470 [ 182.180716] schedule+0xda/0x1b0 [ 182.180729] exit_to_user_mode_prepare+0x114/0x1a0 [ 182.180741] syscall_exit_to_user_mode+0x19/0x40 [ 182.180754] do_syscall_64+0x48/0x90 [ 182.180772] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 182.180785] [ 182.180785] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 182.180798] _raw_spin_lock_nested+0x30/0x40 [ 182.180808] raw_spin_rq_lock_nested+0x1e/0x30 [ 182.180822] task_fork_fair+0x63/0x4d0 [ 182.180839] sched_cgroup_fork+0x3d0/0x540 [ 182.180853] copy_process+0x4183/0x6e20 [ 182.180864] kernel_clone+0xe7/0x890 [ 182.180874] user_mode_thread+0xad/0xf0 [ 182.180884] rest_init+0x24/0x250 [ 182.180895] arch_call_rest_init+0xf/0x14 [ 182.180914] start_kernel+0x4c6/0x4eb [ 182.180929] secondary_startup_64_no_verify+0xe0/0xeb [ 182.180943] [ 182.180943] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 182.180956] _raw_spin_lock_irqsave+0x39/0x60 [ 182.180967] try_to_wake_up+0xab/0x1930 [ 182.180980] up+0x75/0xb0 [ 182.180994] __up_console_sem+0x6e/0x80 [ 182.181010] console_unlock+0x46a/0x590 [ 182.181026] vt_ioctl+0x2822/0x2ca0 [ 182.181038] tty_ioctl+0x785/0x16b0 [ 182.181049] __x64_sys_ioctl+0x19a/0x210 [ 182.181063] do_syscall_64+0x3b/0x90 [ 182.181079] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 182.181092] [ 182.181092] -> #0 ((console_sem).lock){....}-{2:2}: [ 182.181105] __lock_acquire+0x2a02/0x5e70 [ 182.181123] lock_acquire+0x1a2/0x530 [ 182.181139] _raw_spin_lock_irqsave+0x39/0x60 [ 182.181149] down_trylock+0xe/0x70 [ 182.181164] __down_trylock_console_sem+0x3b/0xd0 [ 182.181180] vprintk_emit+0x16b/0x560 [ 182.181196] vprintk+0x84/0xa0 [ 182.181211] _printk+0xba/0xf1 [ 182.181223] report_bug.cold+0x72/0xab [ 182.181239] handle_bug+0x3c/0x70 [ 182.181255] exc_invalid_op+0x14/0x50 [ 182.181271] asm_exc_invalid_op+0x16/0x20 [ 182.181284] group_sched_out.part.0+0x2c7/0x460 [ 182.181302] ctx_sched_out+0x8f1/0xc10 [ 182.181318] __perf_event_task_sched_out+0x6d0/0x18d0 [ 182.181329] __schedule+0xedd/0x2470 [ 182.181342] schedule+0xda/0x1b0 [ 182.181355] exit_to_user_mode_prepare+0x114/0x1a0 [ 182.181366] syscall_exit_to_user_mode+0x19/0x40 [ 182.181378] do_syscall_64+0x48/0x90 [ 182.181395] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 182.181407] [ 182.181407] other info that might help us debug this: [ 182.181407] [ 182.181410] Chain exists of: [ 182.181410] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 182.181410] [ 182.181425] Possible unsafe locking scenario: [ 182.181425] [ 182.181427] CPU0 CPU1 [ 182.181429] ---- ---- [ 182.181432] lock(&ctx->lock); [ 182.181437] lock(&rq->__lock); [ 182.181444] lock(&ctx->lock); [ 182.181450] lock((console_sem).lock); [ 182.181455] [ 182.181455] *** DEADLOCK *** [ 182.181455] [ 182.181457] 2 locks held by syz-executor.5/7188: [ 182.181464] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 182.181493] #1: ffff888018a28c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 182.181525] [ 182.181525] stack backtrace: [ 182.181528] CPU: 0 PID: 7188 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.181541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 182.181548] Call Trace: [ 182.181552] [ 182.181556] dump_stack_lvl+0x8b/0xb3 [ 182.181575] check_noncircular+0x263/0x2e0 [ 182.181591] ? format_decode+0x26c/0xb50 [ 182.181608] ? print_circular_bug+0x450/0x450 [ 182.181625] ? simple_strtoul+0x30/0x30 [ 182.181640] ? perf_trace_lock+0x308/0x560 [ 182.181655] ? format_decode+0x26c/0xb50 [ 182.181673] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 182.181691] __lock_acquire+0x2a02/0x5e70 [ 182.181714] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 182.181738] lock_acquire+0x1a2/0x530 [ 182.181754] ? down_trylock+0xe/0x70 [ 182.181772] ? lock_release+0x750/0x750 [ 182.181793] ? vprintk+0x84/0xa0 [ 182.181812] _raw_spin_lock_irqsave+0x39/0x60 [ 182.181823] ? down_trylock+0xe/0x70 [ 182.181839] down_trylock+0xe/0x70 [ 182.181855] ? vprintk+0x84/0xa0 [ 182.181871] __down_trylock_console_sem+0x3b/0xd0 [ 182.181889] vprintk_emit+0x16b/0x560 [ 182.181908] vprintk+0x84/0xa0 [ 182.181926] _printk+0xba/0xf1 [ 182.181937] ? record_print_text.cold+0x16/0x16 [ 182.181954] ? report_bug.cold+0x66/0xab [ 182.181972] ? group_sched_out.part.0+0x2c7/0x460 [ 182.181991] report_bug.cold+0x72/0xab [ 182.182010] handle_bug+0x3c/0x70 [ 182.182027] exc_invalid_op+0x14/0x50 [ 182.182045] asm_exc_invalid_op+0x16/0x20 [ 182.182058] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 182.182078] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 182.182090] RSP: 0018:ffff888037517c48 EFLAGS: 00010006 [ 182.182099] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 182.182106] RDX: ffff88800ba80000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 182.182114] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 182.182121] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff888018a28c00 [ 182.182129] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 182.182141] ? group_sched_out.part.0+0x2c7/0x460 [ 182.182161] ? group_sched_out.part.0+0x2c7/0x460 [ 182.182181] ctx_sched_out+0x8f1/0xc10 [ 182.182201] __perf_event_task_sched_out+0x6d0/0x18d0 [ 182.182216] ? lock_is_held_type+0xd7/0x130 [ 182.182231] ? __perf_cgroup_move+0x160/0x160 [ 182.182241] ? set_next_entity+0x304/0x550 [ 182.182259] ? update_curr+0x267/0x740 [ 182.182278] ? lock_is_held_type+0xd7/0x130 [ 182.182293] __schedule+0xedd/0x2470 [ 182.182310] ? io_schedule_timeout+0x150/0x150 [ 182.182327] ? __x64_sys_futex_time32+0x480/0x480 [ 182.182343] schedule+0xda/0x1b0 [ 182.182358] exit_to_user_mode_prepare+0x114/0x1a0 [ 182.182371] syscall_exit_to_user_mode+0x19/0x40 [ 182.182384] do_syscall_64+0x48/0x90 [ 182.182402] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 182.182415] RIP: 0033:0x7f98db7a7b19 [ 182.182423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 182.182434] RSP: 002b:00007f98d8d1d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.182445] RAX: 0000000000000001 RBX: 00007f98db8baf68 RCX: 00007f98db7a7b19 [ 182.182452] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f98db8baf6c [ 182.182459] RBP: 00007f98db8baf60 R08: 000000000000000e R09: 0000000000000000 [ 182.182466] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f98db8baf6c [ 182.182473] R13: 00007ffecc6d280f R14: 00007f98d8d1d300 R15: 0000000000022000 [ 182.182488] [ 182.235987] WARNING: CPU: 0 PID: 7188 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 182.236663] Modules linked in: [ 182.236911] CPU: 0 PID: 7188 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.237495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 182.238320] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 182.238728] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 182.240032] RSP: 0018:ffff888037517c48 EFLAGS: 00010006 [ 182.240417] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 182.240934] RDX: ffff88800ba80000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 182.241443] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 182.241958] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff888018a28c00 [ 182.242459] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 182.242968] FS: 00007f98d8d1d700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 182.243538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.243964] CR2: 00007fa6e6e818b0 CR3: 000000000ec62000 CR4: 0000000000350ef0 [ 182.244480] Call Trace: [ 182.244666] [ 182.244834] ctx_sched_out+0x8f1/0xc10 [ 182.245130] __perf_event_task_sched_out+0x6d0/0x18d0 [ 182.245505] ? lock_is_held_type+0xd7/0x130 [ 182.245865] ? __perf_cgroup_move+0x160/0x160 [ 182.246191] ? set_next_entity+0x304/0x550 [ 182.246512] ? update_curr+0x267/0x740 [ 182.246804] ? lock_is_held_type+0xd7/0x130 [ 182.247131] __schedule+0xedd/0x2470 [ 182.247415] ? io_schedule_timeout+0x150/0x150 [ 182.247760] ? __x64_sys_futex_time32+0x480/0x480 [ 182.248112] schedule+0xda/0x1b0 [ 182.248373] exit_to_user_mode_prepare+0x114/0x1a0 [ 182.248734] syscall_exit_to_user_mode+0x19/0x40 [ 182.249084] do_syscall_64+0x48/0x90 [ 182.249364] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 182.249752] RIP: 0033:0x7f98db7a7b19 [ 182.250022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 182.251299] RSP: 002b:00007f98d8d1d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.251841] RAX: 0000000000000001 RBX: 00007f98db8baf68 RCX: 00007f98db7a7b19 [ 182.252345] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f98db8baf6c [ 182.252857] RBP: 00007f98db8baf60 R08: 000000000000000e R09: 0000000000000000 [ 182.253361] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f98db8baf6c [ 182.253875] R13: 00007ffecc6d280f R14: 00007f98d8d1d300 R15: 0000000000022000 [ 182.254387] [ 182.254559] irq event stamp: 538 [ 182.254803] hardirqs last enabled at (537): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 182.255463] hardirqs last disabled at (538): [] __schedule+0x1225/0x2470 [ 182.256049] softirqs last enabled at (332): [] __irq_exit_rcu+0x11b/0x180 [ 182.256655] softirqs last disabled at (327): [] __irq_exit_rcu+0x11b/0x180 [ 182.257261] ---[ end trace 0000000000000000 ]--- 05:51:34 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) sendmmsg(r3, &(0x7f000000af40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="84", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000380)) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r7, 0x401, 0x0, 0x10, 0x2}, 0x10001) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/112, 0x70}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}, 0x2000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r9, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r9, 0x80047210, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000540)=[r9], 0x1) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 05:51:34 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) sendmmsg(r3, &(0x7f000000af40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="84", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000380)) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r7, 0x401, 0x0, 0x10, 0x2}, 0x10001) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/112, 0x70}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}, 0x2000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r9, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r9, 0x80047210, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000540)=[r9], 0x1) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 05:51:34 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) sendmmsg(r3, &(0x7f000000af40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="84", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000380)) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r7, 0x401, 0x0, 0x10, 0x2}, 0x10001) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/112, 0x70}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}, 0x2000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r9, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r9, 0x80047210, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000540)=[r9], 0x1) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 05:51:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1fffffe, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "be52c58e23fffc8e3137f5652f08ad0fbc860ffdef5764ecc2babdf4532bd3481826cf6eef3eda8fb88f66cf58d882bd67f6b5830b6a36cb74fe0fd62f8aea60"}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0x0) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r0}) 05:51:34 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) sendmmsg(r3, &(0x7f000000af40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="84", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000380)) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r7, 0x401, 0x0, 0x10, 0x2}, 0x10001) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/112, 0x70}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}, 0x2000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r9, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r9, 0x80047210, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000540)=[r9], 0x1) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 05:51:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/115, 0x73) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x10001, 0x6, &(0x7f0000001580)=[{&(0x7f0000000180)="cce62276d311ca4f0cb35559870bf4", 0xf, 0x4}, {&(0x7f00000001c0)="f05fa5ce30c73250a9517791d172dc7c5f542a974c7a790ac7e63d6f712405f145183a6075a5a93b185771ccf5aaae6448064b33c277e92d4b30f05ba8bc32fb7e87d98c6e7aa1fdf4a36913ab92aab5df54a140639193a5020d876fdbaf7cd97d257b7736d2cfd487200ae347ec4e631d09aecb6a4c849e696f859994c9b04074c1f9bcd21069da5ebb130590479088b26afb8a32fa0dfa8a", 0x99, 0x76d3bc78}, {&(0x7f0000000300)="c1558c241419bf88be2249b0112d87ad8ec1fa5cdb24a63c1c606505cc59dfea813e2f8d415d26d3272b9842326620a8c57eca588aedb6ca46803fdad612dc292a6ac442faf98ed7d6caef0b394172529520edcf506bc57ff4e110242097bc81f0efcbadd2f49ab6f6db5bb10ba20ebcf495384e391a62f37d3330c81864e10df5c56870bff4469d4ef56b9b29ded7931e5837699d9ab120b5a81129b2fc0205ee47cdf8d062512c3e815e37baf05193155108f735673300ad0839b075e4d8c22211ba79ca6e1a4b2a8911906f0270da742873eaabc3d687765bf43119a14c93", 0xe0}, {&(0x7f0000000400)="dbc60bbdbd27013086cbc3674b8ee8e5f06b208a8f9c19ec5276e4e687e7fcde6e30a6ced7cf1e0811ef217bc14f11bd6acd5918544097e516c54bd3b91c86967c19a02a06f419ee8d2b35618864116befc8bacd309c7ee2628d889199c02bafe72d00636cb1788a127c171b25d70efd5b300aa690b657c153807ee7175926fdb483c1f8fc94edf63a9a5ec6059c38b9bfe7dd617d9ff890fe9ac73dd3a098fb25ff1e7cdd2fe30c73b30fb55464", 0xae}, {&(0x7f00000004c0)="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", 0x1000, 0x8000}, {&(0x7f00000014c0)="bc468129e46bb132625efbd8a2888fe65570e4ff38ead94cc8aa4f8f4cadca11d3771cc6f920348232245bdd3ddf42a41d99f18f2003eef16b0a49f63567f4a763885da69efda6c37e78f54ca427b4bcd63249702cf142aa031d9b7e8e91d3d62ccb72157634f3ed50609e3ce56f939ce8110706f11b9aaf2322e5afbecc73c807942a612605dd2a27323cc145b5cea366aebb411b4fb637857796e822a47807f3221d0d", 0xa4, 0x80000001}], 0x2000, &(0x7f0000001640)={[{@utf8}, {@sbsector}, {@utf8}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}], [{@appraise_type}]}) syz_open_dev$mouse(&(0x7f00000016c0), 0x80, 0x103882) openat2$dir(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', &(0x7f0000001740)={0x580, 0xc0, 0x14}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) signalfd4(r1, &(0x7f0000000000)={[0x7ff]}, 0x8, 0x800) getdents64(r1, 0x0, 0x23) r2 = syz_open_dev$mouse(&(0x7f0000001780), 0x51, 0x4a040) renameat2(r2, &(0x7f00000017c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000001800)='./file0\x00', 0x4) [ 183.191954] loop6: detected capacity change from 0 to 264192 [ 183.210278] loop6: detected capacity change from 0 to 264192 05:51:35 executing program 6: mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='ramfs\x00', 0x11, 0x0) umount2(&(0x7f0000000180)='./file1\x00', 0xa) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)) lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)) chmod(&(0x7f0000000080)='./file1\x00', 0x44) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x804c0, 0x8) r0 = syz_mount_image$nfs4(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x846, 0x2, &(0x7f0000000580)=[{&(0x7f0000000640)="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", 0x1a5, 0x5}, {&(0x7f0000000500)="ec297715894de7667a3a24844cdadca7bb7bb0fd646140c95c34e87c5a16b51d0c0dcc7400ef22fae1457b1c728bf118dbda243794f0401369592570e2bb0a5eca78fdc050fc6c108672c21fd8debb", 0x4f, 0xff}], 0x100c040, &(0x7f0000000800)={[{'\x7fGRT\x9f\x01m\x05I\xba+\x9c50\x8f\x1f?\x98\xeb}?\xdaL\xffW\x00\xb8\xc74p\xcd\x14Q4\x92\x00\xf0\x7f\xdc\xe1\xcfRA\xceH\xf2\x8c\x88\x1c\x0e<\xf0\x8f}\xb4\x1d;\xaf\x00\xecq\x13\x02\xf1\xcf\x8e\xc1!{l\xa7>\xdd\xcbt\xe8s&}\x14H\xf8\x14K\xe6\x01\xdf\xf3\xfdX2?-\xc0n\x10\x04\xba\xd2\xa9e\xf76\xa9\xff&y\x89@[>\xd0H|S\xd1\xe9O,\xb5\b#-&\x9f\xe5\xa7\x8c&\xfcT\x13\xb8\r\fvi\x94\x9b\x02p\xcd\xb1\x89\xf6\x17\x93\x8b\xb0\xaf9\x88\xb8\xaa\x80?^P\x02'}, {',)+^/*}'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\\x01Q0\xf7.\\-^.^*#\xe3\xb6Ut=x\xf1\x8f\x9b\x85_\xd5\x0f\x96Z\xdb_G5\xda\xbb\xbc\xfc\xb1t5u\xff\xa6\xad|\xb9\xbb\xdcp\x88)\xdc2i\xed\x00\x00\x00\x00\x00\x00\x00\x00sW\x80\x88)\x81\x8a\x1f\xfc\'\xa0k\xb4\x9e\x91\xbb\xc3H\xc7/\x8e\xc7<\x9ez!\xc8\xd9\xf6M\xa19;N\x91\xcb!\x13\x9e<'}}]}) mknodat$loop(r0, &(0x7f0000000600)='./file1\x00', 0x1, 0x0) dup(r0) umount2(&(0x7f0000017540)='./file1\x00', 0x0) [ 183.279148] loop6: detected capacity change from 0 to 4 [ 183.283318] ======================================================= [ 183.283318] WARNING: The mand mount option has been deprecated and [ 183.283318] and is ignored by this kernel. Remove the mand [ 183.283318] option from the mount to silence this warning. [ 183.283318] ======================================================= [ 183.293178] nfs4: Unknown parameter 'GRTŸmIº+œ50?˜ë}?ÚLÿW' [ 183.305183] loop6: detected capacity change from 0 to 4 [ 183.310091] nfs4: Unknown parameter 'GRTŸmIº+œ50?˜ë}?ÚLÿW' [ 184.202953] Bluetooth: hci1: Malformed Event: 0x02 [ 184.204151] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 184.205924] Bluetooth: hci1: ACL packet for unknown connection handle 2405 [ 184.207741] Bluetooth: hci1: Malformed Event: 0x02 [ 184.210854] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 184.215268] Bluetooth: hci1: ACL packet for unknown connection handle 2405 [ 184.390873] loop0: detected capacity change from 0 to 264192 [ 184.491824] loop2: detected capacity change from 0 to 128 [ 184.493277] FAT-fs (loop2): Unrecognized mount option "dont_hash" or missing value [ 184.553988] loop2: detected capacity change from 0 to 128 [ 184.554821] FAT-fs (loop2): Unrecognized mount option "dont_hash" or missing value VM DIAGNOSIS: 05:51:31 Registers: info registers vcpu 0 RAX=000000000006c38d RBX=ffff88800f9d03e0 RCX=1ffffffff0b608d9 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88806ce38c40 RSP=ffff888018847d48 R8 =0000000000000001 R9 =0000000000000001 R10=fffffbfff0b60dda R11=0000000000000001 R12=ffff88806ce38d58 R13=00000000000000ca R14=ffff88806ce38d28 R15=ffff88806ce38ce0 RIP=ffffffff8132140e RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0635579900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0634a13350 CR3=000000000f9f4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 b198571852e96357 00000000000af320 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 3194947fecf977e7 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f137c2f0000 CR3=0000000036968000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffff00ffffffffff ffffffffffff00ff YMM02=0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000470035 YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000