Warning: Permanently added '[localhost]:38447' (ECDSA) to the list of known hosts. 2023/02/10 22:56:21 fuzzer started 2023/02/10 22:56:21 dialing manager at localhost:37753 syzkaller login: [ 35.282903] cgroup: Unknown subsys name 'net' [ 35.383570] cgroup: Unknown subsys name 'rlimit' 2023/02/10 22:56:35 syscalls: 2217 2023/02/10 22:56:35 code coverage: enabled 2023/02/10 22:56:35 comparison tracing: enabled 2023/02/10 22:56:35 extra coverage: enabled 2023/02/10 22:56:35 setuid sandbox: enabled 2023/02/10 22:56:35 namespace sandbox: enabled 2023/02/10 22:56:35 Android sandbox: enabled 2023/02/10 22:56:35 fault injection: enabled 2023/02/10 22:56:35 leak checking: enabled 2023/02/10 22:56:35 net packet injection: enabled 2023/02/10 22:56:35 net device setup: enabled 2023/02/10 22:56:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/10 22:56:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/10 22:56:35 USB emulation: enabled 2023/02/10 22:56:35 hci packet injection: enabled 2023/02/10 22:56:35 wifi device emulation: enabled 2023/02/10 22:56:35 802.15.4 emulation: enabled 2023/02/10 22:56:36 fetching corpus: 50, signal 31210/33030 (executing program) 2023/02/10 22:56:36 fetching corpus: 100, signal 45352/48848 (executing program) 2023/02/10 22:56:36 fetching corpus: 150, signal 55764/60782 (executing program) 2023/02/10 22:56:36 fetching corpus: 200, signal 64938/71376 (executing program) 2023/02/10 22:56:36 fetching corpus: 250, signal 69064/76960 (executing program) 2023/02/10 22:56:36 fetching corpus: 300, signal 74430/83676 (executing program) 2023/02/10 22:56:36 fetching corpus: 350, signal 78672/89303 (executing program) 2023/02/10 22:56:36 fetching corpus: 400, signal 85329/97162 (executing program) 2023/02/10 22:56:37 fetching corpus: 450, signal 90535/103601 (executing program) 2023/02/10 22:56:37 fetching corpus: 500, signal 97414/111478 (executing program) 2023/02/10 22:56:37 fetching corpus: 550, signal 100514/115745 (executing program) 2023/02/10 22:56:37 fetching corpus: 600, signal 103617/120031 (executing program) 2023/02/10 22:56:37 fetching corpus: 650, signal 108248/125715 (executing program) 2023/02/10 22:56:37 fetching corpus: 700, signal 112945/131324 (executing program) 2023/02/10 22:56:37 fetching corpus: 750, signal 116868/136217 (executing program) 2023/02/10 22:56:38 fetching corpus: 800, signal 119748/140142 (executing program) 2023/02/10 22:56:38 fetching corpus: 850, signal 122573/144000 (executing program) 2023/02/10 22:56:38 fetching corpus: 900, signal 124755/147229 (executing program) 2023/02/10 22:56:38 fetching corpus: 950, signal 128052/151406 (executing program) 2023/02/10 22:56:38 fetching corpus: 1000, signal 131150/155329 (executing program) 2023/02/10 22:56:38 fetching corpus: 1050, signal 135279/160057 (executing program) 2023/02/10 22:56:38 fetching corpus: 1100, signal 137956/163563 (executing program) 2023/02/10 22:56:38 fetching corpus: 1150, signal 140079/166563 (executing program) 2023/02/10 22:56:39 fetching corpus: 1200, signal 142425/169745 (executing program) 2023/02/10 22:56:39 fetching corpus: 1250, signal 144493/172664 (executing program) 2023/02/10 22:56:39 fetching corpus: 1300, signal 146109/175131 (executing program) 2023/02/10 22:56:39 fetching corpus: 1350, signal 148474/178217 (executing program) 2023/02/10 22:56:39 fetching corpus: 1400, signal 150647/181110 (executing program) 2023/02/10 22:56:39 fetching corpus: 1450, signal 152530/183686 (executing program) 2023/02/10 22:56:39 fetching corpus: 1500, signal 154521/186391 (executing program) 2023/02/10 22:56:39 fetching corpus: 1550, signal 156039/188705 (executing program) 2023/02/10 22:56:40 fetching corpus: 1600, signal 158156/191487 (executing program) 2023/02/10 22:56:40 fetching corpus: 1650, signal 160717/194590 (executing program) 2023/02/10 22:56:40 fetching corpus: 1700, signal 162073/196748 (executing program) 2023/02/10 22:56:40 fetching corpus: 1750, signal 163286/198711 (executing program) 2023/02/10 22:56:40 fetching corpus: 1800, signal 164702/200863 (executing program) 2023/02/10 22:56:40 fetching corpus: 1850, signal 166009/202892 (executing program) 2023/02/10 22:56:40 fetching corpus: 1900, signal 168722/205984 (executing program) 2023/02/10 22:56:40 fetching corpus: 1950, signal 169923/207878 (executing program) 2023/02/10 22:56:41 fetching corpus: 2000, signal 171987/210448 (executing program) 2023/02/10 22:56:41 fetching corpus: 2050, signal 173369/212439 (executing program) 2023/02/10 22:56:41 fetching corpus: 2100, signal 174946/214568 (executing program) 2023/02/10 22:56:41 fetching corpus: 2150, signal 176167/216442 (executing program) 2023/02/10 22:56:41 fetching corpus: 2200, signal 177224/218169 (executing program) 2023/02/10 22:56:41 fetching corpus: 2250, signal 178226/219834 (executing program) 2023/02/10 22:56:41 fetching corpus: 2300, signal 179149/221405 (executing program) 2023/02/10 22:56:42 fetching corpus: 2350, signal 180435/223257 (executing program) 2023/02/10 22:56:42 fetching corpus: 2400, signal 182043/225283 (executing program) 2023/02/10 22:56:42 fetching corpus: 2450, signal 182844/226749 (executing program) 2023/02/10 22:56:42 fetching corpus: 2500, signal 184087/228504 (executing program) 2023/02/10 22:56:42 fetching corpus: 2550, signal 185780/230592 (executing program) 2023/02/10 22:56:42 fetching corpus: 2600, signal 186877/232212 (executing program) 2023/02/10 22:56:42 fetching corpus: 2650, signal 187993/233827 (executing program) 2023/02/10 22:56:42 fetching corpus: 2700, signal 188682/235167 (executing program) 2023/02/10 22:56:43 fetching corpus: 2750, signal 191717/238060 (executing program) 2023/02/10 22:56:43 fetching corpus: 2800, signal 192629/239536 (executing program) 2023/02/10 22:56:43 fetching corpus: 2850, signal 193623/240989 (executing program) 2023/02/10 22:56:43 fetching corpus: 2900, signal 194923/242700 (executing program) 2023/02/10 22:56:43 fetching corpus: 2950, signal 196046/244242 (executing program) 2023/02/10 22:56:43 fetching corpus: 3000, signal 196935/245662 (executing program) 2023/02/10 22:56:43 fetching corpus: 3050, signal 198486/247505 (executing program) 2023/02/10 22:56:43 fetching corpus: 3100, signal 199216/248772 (executing program) 2023/02/10 22:56:44 fetching corpus: 3150, signal 200113/250129 (executing program) 2023/02/10 22:56:44 fetching corpus: 3200, signal 201126/251572 (executing program) 2023/02/10 22:56:44 fetching corpus: 3250, signal 201708/252747 (executing program) 2023/02/10 22:56:44 fetching corpus: 3300, signal 203039/254323 (executing program) 2023/02/10 22:56:44 fetching corpus: 3350, signal 203725/255521 (executing program) 2023/02/10 22:56:44 fetching corpus: 3400, signal 204592/256844 (executing program) 2023/02/10 22:56:44 fetching corpus: 3450, signal 205675/258279 (executing program) 2023/02/10 22:56:44 fetching corpus: 3500, signal 206289/259369 (executing program) 2023/02/10 22:56:45 fetching corpus: 3550, signal 206883/260456 (executing program) 2023/02/10 22:56:45 fetching corpus: 3600, signal 207724/261695 (executing program) 2023/02/10 22:56:45 fetching corpus: 3650, signal 208746/262992 (executing program) 2023/02/10 22:56:45 fetching corpus: 3700, signal 209586/264213 (executing program) 2023/02/10 22:56:45 fetching corpus: 3750, signal 210160/265263 (executing program) 2023/02/10 22:56:45 fetching corpus: 3800, signal 211166/266566 (executing program) 2023/02/10 22:56:45 fetching corpus: 3850, signal 211979/267775 (executing program) 2023/02/10 22:56:45 fetching corpus: 3900, signal 212621/268837 (executing program) 2023/02/10 22:56:45 fetching corpus: 3950, signal 213382/269955 (executing program) 2023/02/10 22:56:46 fetching corpus: 4000, signal 213958/270962 (executing program) 2023/02/10 22:56:46 fetching corpus: 4050, signal 214868/272182 (executing program) 2023/02/10 22:56:46 fetching corpus: 4100, signal 215574/273245 (executing program) 2023/02/10 22:56:46 fetching corpus: 4150, signal 216250/274261 (executing program) 2023/02/10 22:56:46 fetching corpus: 4200, signal 217491/275587 (executing program) 2023/02/10 22:56:46 fetching corpus: 4250, signal 218371/276686 (executing program) 2023/02/10 22:56:46 fetching corpus: 4300, signal 219127/277734 (executing program) 2023/02/10 22:56:46 fetching corpus: 4350, signal 219724/278719 (executing program) 2023/02/10 22:56:46 fetching corpus: 4400, signal 220504/279721 (executing program) 2023/02/10 22:56:47 fetching corpus: 4450, signal 221040/280661 (executing program) 2023/02/10 22:56:47 fetching corpus: 4500, signal 221728/281657 (executing program) 2023/02/10 22:56:47 fetching corpus: 4550, signal 222612/282756 (executing program) 2023/02/10 22:56:47 fetching corpus: 4600, signal 223284/283748 (executing program) 2023/02/10 22:56:47 fetching corpus: 4650, signal 224208/284758 (executing program) 2023/02/10 22:56:47 fetching corpus: 4700, signal 224924/285658 (executing program) 2023/02/10 22:56:47 fetching corpus: 4750, signal 225476/286574 (executing program) 2023/02/10 22:56:47 fetching corpus: 4800, signal 226113/287510 (executing program) 2023/02/10 22:56:48 fetching corpus: 4850, signal 226776/288413 (executing program) 2023/02/10 22:56:48 fetching corpus: 4900, signal 227690/289428 (executing program) 2023/02/10 22:56:48 fetching corpus: 4950, signal 228457/290347 (executing program) 2023/02/10 22:56:48 fetching corpus: 5000, signal 229139/291261 (executing program) 2023/02/10 22:56:48 fetching corpus: 5050, signal 229946/292170 (executing program) 2023/02/10 22:56:48 fetching corpus: 5100, signal 230598/292992 (executing program) 2023/02/10 22:56:48 fetching corpus: 5150, signal 231238/293844 (executing program) 2023/02/10 22:56:49 fetching corpus: 5200, signal 231771/294634 (executing program) 2023/02/10 22:56:49 fetching corpus: 5250, signal 232575/295538 (executing program) 2023/02/10 22:56:49 fetching corpus: 5300, signal 233259/296404 (executing program) 2023/02/10 22:56:49 fetching corpus: 5350, signal 233981/297232 (executing program) 2023/02/10 22:56:49 fetching corpus: 5400, signal 234409/297973 (executing program) 2023/02/10 22:56:49 fetching corpus: 5450, signal 235061/298794 (executing program) 2023/02/10 22:56:49 fetching corpus: 5500, signal 235666/299600 (executing program) 2023/02/10 22:56:49 fetching corpus: 5550, signal 236133/300310 (executing program) 2023/02/10 22:56:50 fetching corpus: 5600, signal 236634/301057 (executing program) 2023/02/10 22:56:50 fetching corpus: 5650, signal 237478/301884 (executing program) 2023/02/10 22:56:50 fetching corpus: 5700, signal 238487/302750 (executing program) 2023/02/10 22:56:50 fetching corpus: 5750, signal 238930/303441 (executing program) 2023/02/10 22:56:50 fetching corpus: 5800, signal 239720/304270 (executing program) 2023/02/10 22:56:50 fetching corpus: 5850, signal 240410/304981 (executing program) 2023/02/10 22:56:50 fetching corpus: 5900, signal 240858/305634 (executing program) 2023/02/10 22:56:50 fetching corpus: 5950, signal 241687/306450 (executing program) 2023/02/10 22:56:51 fetching corpus: 6000, signal 242194/307190 (executing program) 2023/02/10 22:56:51 fetching corpus: 6050, signal 242706/307861 (executing program) 2023/02/10 22:56:51 fetching corpus: 6100, signal 243249/308577 (executing program) 2023/02/10 22:56:51 fetching corpus: 6150, signal 243759/309254 (executing program) 2023/02/10 22:56:51 fetching corpus: 6200, signal 244427/309974 (executing program) 2023/02/10 22:56:51 fetching corpus: 6250, signal 244992/310646 (executing program) 2023/02/10 22:56:51 fetching corpus: 6300, signal 245588/311333 (executing program) 2023/02/10 22:56:51 fetching corpus: 6350, signal 246085/311987 (executing program) 2023/02/10 22:56:52 fetching corpus: 6400, signal 246540/312601 (executing program) 2023/02/10 22:56:52 fetching corpus: 6450, signal 247128/313229 (executing program) 2023/02/10 22:56:52 fetching corpus: 6500, signal 247626/313834 (executing program) 2023/02/10 22:56:52 fetching corpus: 6550, signal 248074/314434 (executing program) 2023/02/10 22:56:52 fetching corpus: 6600, signal 249008/315117 (executing program) 2023/02/10 22:56:52 fetching corpus: 6650, signal 249598/315746 (executing program) 2023/02/10 22:56:52 fetching corpus: 6700, signal 250090/316342 (executing program) 2023/02/10 22:56:52 fetching corpus: 6750, signal 250627/316946 (executing program) 2023/02/10 22:56:53 fetching corpus: 6800, signal 251538/317616 (executing program) 2023/02/10 22:56:53 fetching corpus: 6850, signal 252049/318203 (executing program) 2023/02/10 22:56:53 fetching corpus: 6900, signal 252442/318771 (executing program) 2023/02/10 22:56:53 fetching corpus: 6950, signal 252805/319301 (executing program) 2023/02/10 22:56:53 fetching corpus: 7000, signal 253177/319832 (executing program) 2023/02/10 22:56:53 fetching corpus: 7050, signal 253571/320398 (executing program) 2023/02/10 22:56:53 fetching corpus: 7100, signal 254125/320938 (executing program) 2023/02/10 22:56:54 fetching corpus: 7150, signal 254470/321469 (executing program) 2023/02/10 22:56:54 fetching corpus: 7200, signal 254966/322015 (executing program) 2023/02/10 22:56:54 fetching corpus: 7250, signal 255417/322540 (executing program) 2023/02/10 22:56:54 fetching corpus: 7300, signal 255909/323092 (executing program) 2023/02/10 22:56:54 fetching corpus: 7350, signal 256293/323605 (executing program) 2023/02/10 22:56:54 fetching corpus: 7400, signal 256715/324130 (executing program) 2023/02/10 22:56:54 fetching corpus: 7450, signal 257146/324613 (executing program) 2023/02/10 22:56:54 fetching corpus: 7500, signal 257732/325124 (executing program) 2023/02/10 22:56:54 fetching corpus: 7550, signal 258083/325641 (executing program) 2023/02/10 22:56:55 fetching corpus: 7600, signal 258631/326148 (executing program) 2023/02/10 22:56:55 fetching corpus: 7650, signal 258993/326643 (executing program) 2023/02/10 22:56:55 fetching corpus: 7700, signal 259531/327142 (executing program) 2023/02/10 22:56:55 fetching corpus: 7750, signal 259961/327586 (executing program) 2023/02/10 22:56:55 fetching corpus: 7800, signal 260439/328026 (executing program) 2023/02/10 22:56:55 fetching corpus: 7850, signal 260974/328477 (executing program) 2023/02/10 22:56:55 fetching corpus: 7900, signal 261399/328940 (executing program) 2023/02/10 22:56:56 fetching corpus: 7950, signal 261771/329442 (executing program) 2023/02/10 22:56:56 fetching corpus: 8000, signal 262131/329876 (executing program) 2023/02/10 22:56:56 fetching corpus: 8050, signal 262608/330280 (executing program) 2023/02/10 22:56:56 fetching corpus: 8100, signal 263054/330739 (executing program) 2023/02/10 22:56:56 fetching corpus: 8150, signal 263471/331150 (executing program) 2023/02/10 22:56:56 fetching corpus: 8200, signal 263863/331572 (executing program) 2023/02/10 22:56:56 fetching corpus: 8250, signal 264133/331975 (executing program) 2023/02/10 22:56:56 fetching corpus: 8300, signal 264511/332425 (executing program) 2023/02/10 22:56:57 fetching corpus: 8350, signal 264963/332532 (executing program) 2023/02/10 22:56:57 fetching corpus: 8400, signal 265349/332532 (executing program) 2023/02/10 22:56:57 fetching corpus: 8450, signal 265839/332532 (executing program) 2023/02/10 22:56:57 fetching corpus: 8500, signal 266283/332532 (executing program) 2023/02/10 22:56:57 fetching corpus: 8550, signal 266699/332534 (executing program) 2023/02/10 22:56:57 fetching corpus: 8600, signal 267116/332534 (executing program) 2023/02/10 22:56:57 fetching corpus: 8650, signal 267619/332534 (executing program) 2023/02/10 22:56:58 fetching corpus: 8700, signal 268008/332534 (executing program) 2023/02/10 22:56:58 fetching corpus: 8750, signal 268419/332534 (executing program) 2023/02/10 22:56:58 fetching corpus: 8800, signal 268874/332534 (executing program) 2023/02/10 22:56:58 fetching corpus: 8850, signal 269124/332534 (executing program) 2023/02/10 22:56:58 fetching corpus: 8900, signal 269379/332534 (executing program) 2023/02/10 22:56:58 fetching corpus: 8950, signal 269777/332534 (executing program) 2023/02/10 22:56:58 fetching corpus: 9000, signal 270250/332534 (executing program) 2023/02/10 22:56:58 fetching corpus: 9050, signal 270579/332534 (executing program) 2023/02/10 22:56:58 fetching corpus: 9100, signal 270851/332534 (executing program) 2023/02/10 22:56:59 fetching corpus: 9150, signal 271191/332534 (executing program) 2023/02/10 22:56:59 fetching corpus: 9200, signal 271517/332534 (executing program) 2023/02/10 22:56:59 fetching corpus: 9250, signal 271896/332540 (executing program) 2023/02/10 22:56:59 fetching corpus: 9300, signal 272342/332540 (executing program) 2023/02/10 22:56:59 fetching corpus: 9350, signal 272659/332540 (executing program) 2023/02/10 22:56:59 fetching corpus: 9400, signal 273133/332540 (executing program) 2023/02/10 22:56:59 fetching corpus: 9450, signal 273660/332540 (executing program) 2023/02/10 22:57:00 fetching corpus: 9500, signal 274179/332540 (executing program) 2023/02/10 22:57:00 fetching corpus: 9550, signal 274465/332540 (executing program) 2023/02/10 22:57:00 fetching corpus: 9600, signal 274744/332540 (executing program) 2023/02/10 22:57:00 fetching corpus: 9650, signal 274991/332540 (executing program) 2023/02/10 22:57:00 fetching corpus: 9700, signal 275355/332540 (executing program) 2023/02/10 22:57:00 fetching corpus: 9750, signal 275648/332540 (executing program) 2023/02/10 22:57:00 fetching corpus: 9800, signal 275917/332540 (executing program) 2023/02/10 22:57:00 fetching corpus: 9850, signal 276378/332540 (executing program) 2023/02/10 22:57:01 fetching corpus: 9900, signal 276632/332540 (executing program) 2023/02/10 22:57:01 fetching corpus: 9950, signal 277042/332540 (executing program) 2023/02/10 22:57:01 fetching corpus: 10000, signal 277337/332540 (executing program) 2023/02/10 22:57:01 fetching corpus: 10050, signal 277592/332540 (executing program) 2023/02/10 22:57:01 fetching corpus: 10100, signal 278032/332540 (executing program) 2023/02/10 22:57:01 fetching corpus: 10150, signal 278427/332540 (executing program) 2023/02/10 22:57:01 fetching corpus: 10200, signal 278777/332540 (executing program) 2023/02/10 22:57:01 fetching corpus: 10250, signal 279095/332540 (executing program) 2023/02/10 22:57:02 fetching corpus: 10300, signal 279351/332540 (executing program) 2023/02/10 22:57:02 fetching corpus: 10350, signal 279798/332540 (executing program) 2023/02/10 22:57:02 fetching corpus: 10400, signal 280079/332540 (executing program) 2023/02/10 22:57:02 fetching corpus: 10450, signal 280877/332540 (executing program) 2023/02/10 22:57:02 fetching corpus: 10500, signal 281341/332540 (executing program) 2023/02/10 22:57:02 fetching corpus: 10550, signal 281571/332540 (executing program) 2023/02/10 22:57:02 fetching corpus: 10600, signal 281905/332540 (executing program) 2023/02/10 22:57:03 fetching corpus: 10650, signal 282233/332540 (executing program) 2023/02/10 22:57:03 fetching corpus: 10700, signal 282517/332540 (executing program) 2023/02/10 22:57:03 fetching corpus: 10750, signal 282898/332540 (executing program) 2023/02/10 22:57:03 fetching corpus: 10800, signal 283229/332540 (executing program) 2023/02/10 22:57:03 fetching corpus: 10850, signal 283565/332540 (executing program) 2023/02/10 22:57:03 fetching corpus: 10900, signal 283818/332540 (executing program) 2023/02/10 22:57:03 fetching corpus: 10950, signal 284171/332540 (executing program) 2023/02/10 22:57:04 fetching corpus: 11000, signal 284527/332540 (executing program) 2023/02/10 22:57:04 fetching corpus: 11050, signal 284854/332540 (executing program) 2023/02/10 22:57:04 fetching corpus: 11100, signal 285195/332540 (executing program) 2023/02/10 22:57:04 fetching corpus: 11150, signal 285528/332540 (executing program) 2023/02/10 22:57:04 fetching corpus: 11200, signal 285780/332540 (executing program) 2023/02/10 22:57:04 fetching corpus: 11250, signal 286068/332540 (executing program) 2023/02/10 22:57:04 fetching corpus: 11300, signal 286478/332540 (executing program) 2023/02/10 22:57:04 fetching corpus: 11350, signal 286798/332540 (executing program) 2023/02/10 22:57:05 fetching corpus: 11400, signal 287095/332540 (executing program) 2023/02/10 22:57:05 fetching corpus: 11450, signal 287296/332540 (executing program) 2023/02/10 22:57:05 fetching corpus: 11500, signal 287657/332540 (executing program) 2023/02/10 22:57:05 fetching corpus: 11550, signal 287945/332540 (executing program) 2023/02/10 22:57:05 fetching corpus: 11600, signal 288343/332540 (executing program) 2023/02/10 22:57:05 fetching corpus: 11650, signal 288595/332540 (executing program) 2023/02/10 22:57:05 fetching corpus: 11700, signal 288901/332540 (executing program) 2023/02/10 22:57:05 fetching corpus: 11750, signal 289192/332540 (executing program) 2023/02/10 22:57:06 fetching corpus: 11800, signal 289463/332540 (executing program) 2023/02/10 22:57:06 fetching corpus: 11850, signal 289794/332540 (executing program) 2023/02/10 22:57:06 fetching corpus: 11900, signal 290074/332540 (executing program) 2023/02/10 22:57:06 fetching corpus: 11950, signal 290357/332541 (executing program) 2023/02/10 22:57:06 fetching corpus: 12000, signal 290697/332541 (executing program) 2023/02/10 22:57:06 fetching corpus: 12050, signal 291122/332541 (executing program) 2023/02/10 22:57:07 fetching corpus: 12100, signal 291445/332541 (executing program) 2023/02/10 22:57:07 fetching corpus: 12150, signal 291671/332541 (executing program) 2023/02/10 22:57:07 fetching corpus: 12200, signal 291930/332541 (executing program) 2023/02/10 22:57:07 fetching corpus: 12250, signal 292219/332541 (executing program) 2023/02/10 22:57:07 fetching corpus: 12300, signal 292494/332541 (executing program) 2023/02/10 22:57:07 fetching corpus: 12350, signal 292753/332541 (executing program) 2023/02/10 22:57:07 fetching corpus: 12400, signal 293130/332541 (executing program) 2023/02/10 22:57:07 fetching corpus: 12450, signal 293363/332541 (executing program) 2023/02/10 22:57:08 fetching corpus: 12500, signal 293761/332541 (executing program) 2023/02/10 22:57:08 fetching corpus: 12550, signal 294067/332541 (executing program) 2023/02/10 22:57:08 fetching corpus: 12600, signal 294469/332541 (executing program) 2023/02/10 22:57:08 fetching corpus: 12650, signal 294803/332541 (executing program) 2023/02/10 22:57:08 fetching corpus: 12700, signal 295086/332541 (executing program) 2023/02/10 22:57:08 fetching corpus: 12750, signal 295368/332541 (executing program) 2023/02/10 22:57:08 fetching corpus: 12800, signal 295662/332541 (executing program) 2023/02/10 22:57:08 fetching corpus: 12850, signal 296041/332541 (executing program) 2023/02/10 22:57:08 fetching corpus: 12900, signal 296249/332541 (executing program) 2023/02/10 22:57:09 fetching corpus: 12950, signal 296489/332541 (executing program) 2023/02/10 22:57:09 fetching corpus: 13000, signal 296757/332541 (executing program) 2023/02/10 22:57:09 fetching corpus: 13021, signal 296902/332541 (executing program) 2023/02/10 22:57:09 fetching corpus: 13021, signal 296902/332541 (executing program) 2023/02/10 22:57:12 starting 8 fuzzer processes 22:57:12 executing program 0: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x600) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) sync_file_range(r0, 0x1f, 0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) fallocate(r1, 0x5, 0x1, 0x3ff) close(r0) r2 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x301800, 0x189) sendfile(r0, r0, &(0x7f00000000c0), 0xe07c) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0x800, 0x40, 0x4, 0x1f, 0x3d}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140), 0x4) pwritev(r1, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1, 0x7fffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file1\x00'}) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000001200)={0x0, 0x2710}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000001240)=""/172, &(0x7f0000001300)=0xac) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000001340)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007, 0x110, r5, 0x942a1000) pwritev(r1, &(0x7f0000001580)=[{&(0x7f0000001380)="93f349c3d600d69b653dbb39f25114fb986cf043b767dd08fc3b8a4c13cab55d82876d427f579d935051c664c472ecf3277a55bcf439faa32c49bde96d11bfc486c11002d168941dfcfcbeeda3a2403e3fc6c5c34c48931e14ba15076de7fdb64070377e1f33a61aecf6f8b6428b3dfc20683eb6e3c81485d238b33849a8afbdeb36ac8853f4497d7d9a2efe5660fa1f2047e2397eb1b1438f3616ec3ce34445064ef51384b20ce72aa73d6449f3f26bb6fcdefe57d64f411039b637c3d719cc29ff", 0xc2}, {&(0x7f0000001480)="2f6e79aa1b6ade087521ee6772b17b8deb421d43ac40f420f51b8511e8386bc42c8412a712ddb7ea941258b4e38a537ef76eb14df43a7b218af7107925116ec4c3d9bd66d5984188b7db94f7931c34ece8cce1e95ac5ac781a29b231523970aad68721a5774f1b1e77a7626781dd65b6311751fa65bc1998dc5fe438ba7c2beee754d8966b001b23d06ceec4b22ea4f58244329b58ef12484f66659693f6d8e9d27309f6a0db1a5b74969af0185e24f3a798157ac91dbc14b6acb5049ed2ea41d92232b39f97779f1f52ef3990b827296185556e7f30ca3ec9aa88d7b2d99fbfd230b51e68ddfca9af223c8f7e49533412bdfcac6c3c", 0xf6}], 0x2, 0x80, 0x7fff) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000015c0)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0xf, 0x0, "788c23d2036cd159a82729f4f74314babf6051fe0884f755018538581d690831af20fd703fb78b47c4993975cc7c5763150a340e30649824e57e72b522c661f5f3221355c3e288760235382189345c41"}, 0xd8) ioctl$CDROMPAUSE(r5, 0x5301) 22:57:12 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc8, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x308}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x100000d4}, 0x40000) r0 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000340)=0x80, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x10001}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xac, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4050}, 0x20000400) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xbd, 0x55}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x10) fcntl$setflags(r2, 0x2, 0x1) shutdown(r2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x1, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24008800) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000980)={0x2e4, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe6f9, 0x27}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x6, 0x1, 0x18, 0x6, 0x6c, 0x4, 0x58, 0x1, 0x6, 0x2, 0x48, 0x36, 0x0, 0x2, 0x4, 0x4, 0x1b, 0xb, 0x9, 0x60, 0x2, 0x78]}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x5}, {0x3}, {0x4, 0x7}, {0x3, 0x5}, {0x4, 0x1}, {0x0, 0x3}, {0x5}, {0x4}, {0x4, 0x5}, {0x7, 0x9}, {0x1}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x4}, {0x3}, {0x0, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x4, 0x9}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x2}, {0x5, 0x4}, {0x0, 0x1}, {0x0, 0x8}, {0x3, 0x2}, {0x2}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x16, 0x1b, 0x0, 0x6, 0x9, 0x12]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x8}, {0x6, 0xa}, {0x1, 0x3}, {0x4, 0x7}, {0x6, 0x7}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x7}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {}, {0x3, 0x1}, {0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {}, {0x5, 0x5}, {0x6}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x2, 0x8}, {0x4, 0x9}, {0x3, 0xa}, {0x5, 0x3}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0xa}, {0x3, 0x2}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0xa}, {0x4, 0x8}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x8}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0xc, 0x16, 0x30, 0x13, 0x16, 0x2, 0x2, 0x2, 0x12, 0x6e, 0xb, 0x3, 0x77]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x2, 0xc279, 0x80, 0x3f, 0x3ff, 0xff22, 0x7]}}]}, @NL80211_BAND_5GHZ={0xfc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x6}, {0x6, 0x9}, {0x4, 0x7}, {0x6, 0xa}, {0x0, 0x9}, {0x5, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0x8}, {0x3}, {0x0, 0x5}, {}, {0x1}, {0x6, 0x8}, {0x5, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x9}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x6}, {0x4, 0x6}, {0x7, 0x8}, {0x6, 0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x2, 0x3}, {0x5, 0x1}, {0x6, 0x8}, {0x2, 0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x1, 0x8}, {0x1}, {0x1, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x8}, {0x0, 0x3}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x0, 0x5}, {0x4, 0x6}, {0x3, 0x4}, {0x3, 0x9}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x6}, {0x4, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0x1}, {}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0xa}, {0x6, 0x9}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x9}, {0x2}, {0x6, 0x8}, {0x5, 0x3}, {0x5, 0xa}, {0x4}, {0x5, 0x8}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0x4}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x7, 0x3}, {0x5, 0x8}, {0x6, 0x2}, {0x7, 0x4}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x12, 0x3, 0x24, 0x3, 0x6a, 0x24, 0x1b, 0xc, 0x30, 0x5a, 0x30, 0x16, 0x36, 0x48, 0x16, 0x5, 0x36, 0x4, 0x48, 0xc, 0x4, 0x24, 0xc, 0x12, 0x2, 0x30, 0x46d8d72dbff4ecaf, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x4}, {0x0, 0x8}, {0x2}, {0x7, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x1, 0x6}, {0x2}, {0x2, 0x5}, {0x6, 0x7}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0x6}, {0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x7, 0x5}, {0x6, 0x3}, {0x1, 0x9}, {}, {0x5, 0x9}, {0x4, 0x6}, {0x6, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x3ff, 0xffc0, 0x397, 0x1, 0x4ad9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x44, 0x4, 0x3b, 0x24, 0x36, 0x6, 0x18, 0x2, 0x847c93ce606acbfd, 0x5, 0x6c, 0x24, 0x2, 0x60, 0x24, 0x36, 0x5, 0x2, 0xb, 0x6c]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x24, 0x37a132d23b5783bd, 0x1]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x6, 0x1, 0x60, 0x48, 0x18]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x8}, {0x5, 0x9}, {0x4, 0x6}, {0x7, 0x2}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0x5}, {0x2, 0x1}, {0x6, 0x5}, {0x4, 0x9}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0xa}, {0x2, 0x6}, {}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x8}, {0x4}, {0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xff, 0x6, 0x7, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x48, 0x12, 0x6c, 0x3, 0x6, 0x1b, 0x6c, 0x6c, 0x24, 0xc, 0x6c, 0x2, 0x12, 0x6, 0x16, 0x4, 0x1, 0x36, 0x24, 0x16, 0xb, 0x16, 0x16, 0x60, 0x36, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_SSID={0x24, 0x34, @random="5e444d136b4ad0c033b882554c42bbfcdfd2fe9b26145a17c3f1f3a289f414ac"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x80}, 0x40480c1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r2) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x20000010) timerfd_settime(r2, 0x1, &(0x7f0000000e40)={{0x77359400}}, &(0x7f0000000e80)) timerfd_gettime(r2, &(0x7f0000000ec0)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), r0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xc0, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc5e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x400400c0) 22:57:12 executing program 2: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000000c0)=0x7ff, 0x4) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000100)=0x7f, 0x4) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r1, 0x80}) r2 = getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10, 0x800) kcmp(0x0, r2, 0x5, r3, r4) fallocate(r0, 0x28, 0x40, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_vlan\x00'}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x2, 0x4, 0xfdb, 0x0, 0x200, 0x3f, 0x7ff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000300)=0x9, 0x4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendto$packet(r3, &(0x7f0000000380)="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", 0x1000, 0x80, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001380)={r5, 0x2, 0xf1e}) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000013c0)) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000006340)={&(0x7f0000006280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006300)={&(0x7f00000062c0)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x594, 0x42}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1d}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 22:57:12 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000005440), 0x140, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000005480)='./file0\x00', &(0x7f00000054c0), 0x4, &(0x7f0000005500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xee01}}, {@seclabel}, {@appraise_type}]}}) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000055c0)=0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000056c0)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005680)={&(0x7f0000005640)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x17}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc1}, 0x4000000) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000057c0), 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000005940)=[&(0x7f0000005800)={0x0, 0x0, 0x0, 0x1, 0x81, r2, &(0x7f0000005700)="f581070d99e85833f31a83fa022f53b454e1f96121e9e0f3d154c1b01b2dd9e5e9558aa5e067aeb6245f667cdecf3beb388322ffab9975417dfd858745f93d68ba28782976addab1ecb5863d28eb9202b9e910f3d41039afd135d63927d041b9669550698ce4b76f286e0c49bf530394980a5a514b3ce8f79e80ee3563eb2d6eba6ead1e22018792f19f24e375de4b445cad1a2ce9c9803096b373524889698c2d94838d06", 0xa5, 0x0, 0x0, 0x4, r3}, &(0x7f0000005900)={0x0, 0x0, 0x0, 0x7, 0xfff8, r1, &(0x7f0000005840)="fff9c3caa2400f3ee2f821e439f65f53c78c15e46ffd6916d30f17fb9c1cb1652d47ee48b8b222d9416bddde6bbf21ef26b0acf3ca4a2c45b79cbe2667fffc71bd30315bf4a907fc0f4beba9e1e055ed0c35609715a2579a0637e4165f630b76bda477b49de55c964f41e16e89c541005ab340497c857cf669e2f5171ecff3cb9df00ecd9541fe1992", 0x89, 0x3, 0x0, 0x2, r0}]) r4 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005b80)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000005c80)=0xe8) recvmsg$unix(r3, &(0x7f0000006280)={&(0x7f0000005cc0)=@abs, 0x6e, &(0x7f0000006100)=[{&(0x7f0000005d40)=""/172, 0xac}, {&(0x7f0000005e00)=""/56, 0x38}, {&(0x7f0000005e40)=""/203, 0xcb}, {&(0x7f0000005f40)=""/153, 0x99}, {&(0x7f0000006000)=""/209, 0xd1}], 0x5, &(0x7f0000006180)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x42) r9 = getgid() sendmmsg$unix(r3, &(0x7f0000006380)=[{{&(0x7f0000005980)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000005b40)=[{&(0x7f0000005a00)="9bc5a11595cdb1a32588c0ef4fb37bad70bd4f0ad025cc8da88a25daef21a2668d3fec0c858b3d493f4ce031ddb8013c594561985a4f3f4f3173084943b308ea846e8d1fa66f9737e565f3dd9cb18e66d0c7d63b22d6f45432e8c9fc54976d614c708c6a981fb6a0c00fea5ea0616e996943f9debfe008cc0ad03f0a1418ee5dc453b1a066810eccd7661d73cd30ca46189d7c7cd9791104561cfdc742a844137b3b9a265c2d6b57e1b8c9c64bc1aa44c772eec7c755b53a56eed873fba0c6", 0xbf}, {&(0x7f0000005ac0)="9f7b4e255ab68098d32a727871f08eff7603e7e521eb10fde8f652fa8cff28dde83434f48ce671fe5812d9727a84d5db14bd0c7f97e10a0663d96ed53a4eb97be41922e8821a9c088229d033cab235489f5201", 0x53}], 0x2, &(0x7f00000062c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x1c, 0x1, 0x1, [r6, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r9}}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}], 0x90, 0x20000000}}], 0x1, 0x10) stat(&(0x7f00000063c0)='./file1\x00', &(0x7f0000006400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r8, &(0x7f0000006480)='./file0\x00', 0x0, 0x400, &(0x7f00000064c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r10, r11) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000065c0)={{0x1, 0x1, 0x18, r7, {0x5}}, './file1\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r12, 0x40042409, 0x1) ioctl$BLKTRACETEARDOWN(r12, 0x1276, 0x0) 22:57:12 executing program 4: ioctl$DVD_WRITE_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000000)=@physical={0x0, 0x2, [{0x7, 0xe, 0x9, 0x3, 0x7, 0x0, 0x1, 0x5, 0x3, 0x1, 0x7, 0x1452bef, 0x6}, {0x0, 0xd, 0x9, 0xe, 0x4, 0x1, 0x1, 0xd, 0x7, 0x1, 0x1ff, 0x0, 0x82}, {0x9, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x2, 0xc, 0x1, 0x0, 0x3, 0x2000000}, {0x6, 0x3, 0x8, 0x6, 0x5, 0x1, 0x3, 0x1, 0x1, 0x0, 0x15f, 0x6, 0x9}]}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000840)=0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000008c0)=0x7fffffff, &(0x7f0000000900)=0x4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000940)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000980)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index, 0xffffffff, 0x0, 0x0, 0x14, 0x3, {0x3}}, 0x65422cfb) r3 = openat(r0, &(0x7f00000009c0)='./file0\x00', 0x1, 0x2) connect$unix(r3, &(0x7f0000000a00)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r4, 0x0, 0x3) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000bc0)={0x3, 0x2, 0x83, &(0x7f0000000b00)=""/131}) r6 = socket$netlink(0x10, 0x3, 0x7) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x84, r7, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x100, 0x72}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x4080}, 0x81) truncate(&(0x7f0000000e00)='./file0\x00', 0x29) pread64(0xffffffffffffffff, &(0x7f0000000e80)=""/139, 0x8b, 0x4) 22:57:12 executing program 5: ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f0000000000), 0x7) fork() fork() r0 = fork() r1 = fcntl$getown(0xffffffffffffffff, 0x9) capset(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000080)={0x1, 0x6, 0x3, 0x3f, 0x9, 0x290}) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='net/route\x00') r3 = fork() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000180)) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x4481, 0x4, 0xb}, 0x18) fcntl$setpipe(r5, 0x407, 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) capset(&(0x7f0000000440)={0x20071026, r0}, &(0x7f0000000480)={0x6, 0x2, 0x40, 0x3ff, 0x5, 0x545e00}) r6 = getpgid(r0) r7 = syz_open_dev$loop(&(0x7f00000004c0), 0x5, 0xc01) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r9 = mq_open(&(0x7f0000000540)='./binderfs2/binder-control\x00', 0x80, 0x41, &(0x7f0000000580)={0x6, 0x8, 0x4, 0x6}) kcmp$KCMP_EPOLL_TFD(r6, 0xffffffffffffffff, 0x7, r7, &(0x7f00000005c0)={r8, r9, 0x7f}) [ 85.587691] audit: type=1400 audit(1676069832.350:6): avc: denied { execmem } for pid=260 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:57:12 executing program 7: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x453, 0x100, 0x70bd2a, 0x25dfdbfd, "f27fecf3263fa8d3373de5ab221d98ade472a0a444c8f8fecf630e6f97e49de96bc8289a104f8f3bb8c50ef2349c19b9ddc45a14473bf7b367c6dec6935ed3aa586e65f55297256db5aba9f01f4b4dbaa172374ad34c61bb3245e2c59c6f575c0c2629b5bb845b3fefd55c60c174e5", ["", "", "", "", "", "", "", "", ""]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x404) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x6, 0x3f, 0xaf, 0x6, 0xa, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x0, 0x2, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0xe9, 0x1, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8087, 0x8, 0x7fff, 0xfffffff8}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x21c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x33, 0x5, "6eafe0c4c0fa5b42a95435f66689615cd252223b8b8dc5c5da1e3b98751c0e6b968caa5e1f3d4d90434d390695a750"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4df6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xe2/*\x1c\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x75}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4}, 0x20004806) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r3, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040810) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x21, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='net/netfilter\x00') sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x619}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x64, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r6, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x4850) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='pagemap\x00') r9 = accept4(r5, &(0x7f0000000f40)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000fc0)=0x80, 0x1000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000001000)={0x3, 'caif0\x00', {0x1}, 0x17a}) 22:57:12 executing program 6: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x20}}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x90) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x322, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20008000) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcd, 0xe}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7252, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4850}, 0x81) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xc0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb8fc}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040010) [ 86.909605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.911390] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.913262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.914369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.915997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.917024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.921284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.922900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.924788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.926170] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.927152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.928808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.972795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.976075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.977451] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.980674] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.982705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.984042] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.985488] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.987489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.988666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.989840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.991976] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.993021] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.002775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.009446] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.010661] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.012428] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.013477] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.014930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.042324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.045004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.047352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.048450] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.050359] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.051479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.063158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.067080] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.068614] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.080406] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.084378] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.090442] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.164332] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.168909] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.170286] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.173765] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.178411] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.180043] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.982032] Bluetooth: hci1: command 0x0409 tx timeout [ 89.046179] Bluetooth: hci0: command 0x0409 tx timeout [ 89.046238] Bluetooth: hci2: command 0x0409 tx timeout [ 89.046882] Bluetooth: hci6: command 0x0409 tx timeout [ 89.109628] Bluetooth: hci5: command 0x0409 tx timeout [ 89.110605] Bluetooth: hci3: command 0x0409 tx timeout [ 89.174672] Bluetooth: hci4: command 0x0409 tx timeout [ 89.302685] Bluetooth: hci7: command 0x0409 tx timeout [ 91.031963] Bluetooth: hci1: command 0x041b tx timeout [ 91.093585] Bluetooth: hci6: command 0x041b tx timeout [ 91.094584] Bluetooth: hci2: command 0x041b tx timeout [ 91.094925] Bluetooth: hci0: command 0x041b tx timeout [ 91.157616] Bluetooth: hci3: command 0x041b tx timeout [ 91.157714] Bluetooth: hci5: command 0x041b tx timeout [ 91.221624] Bluetooth: hci4: command 0x041b tx timeout [ 91.349599] Bluetooth: hci7: command 0x041b tx timeout [ 93.077635] Bluetooth: hci1: command 0x040f tx timeout [ 93.141586] Bluetooth: hci0: command 0x040f tx timeout [ 93.141970] Bluetooth: hci2: command 0x040f tx timeout [ 93.142327] Bluetooth: hci6: command 0x040f tx timeout [ 93.205631] Bluetooth: hci3: command 0x040f tx timeout [ 93.206009] Bluetooth: hci5: command 0x040f tx timeout [ 93.270615] Bluetooth: hci4: command 0x040f tx timeout [ 93.397571] Bluetooth: hci7: command 0x040f tx timeout [ 95.125680] Bluetooth: hci1: command 0x0419 tx timeout [ 95.189743] Bluetooth: hci6: command 0x0419 tx timeout [ 95.190436] Bluetooth: hci2: command 0x0419 tx timeout [ 95.191142] Bluetooth: hci0: command 0x0419 tx timeout [ 95.253739] Bluetooth: hci5: command 0x0419 tx timeout [ 95.254434] Bluetooth: hci3: command 0x0419 tx timeout [ 95.317728] Bluetooth: hci4: command 0x0419 tx timeout [ 95.445621] Bluetooth: hci7: command 0x0419 tx timeout [ 129.760819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.761423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.763276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.906118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.906742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.908215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.291930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.292548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.293987] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.314744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.315312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.316655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.397988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.398615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.399955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.491420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.492022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.493399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.561460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.562416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.563753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.619094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.619693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.621523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.674323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.675119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.676264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.732848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.733442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.734905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 22:57:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x19f) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='T\t'], 0xb) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 130.850012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.850615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.852144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.865210] process 'syz-executor.4' launched './file1' with NULL argv: empty string added 22:57:57 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000180)=ANY=[], 0x28}], 0x1}, 0x20040000) [ 130.990049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.990658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.992424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 22:57:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="f0000000100001000028000000000000ac1414aa000000000000000000000000ac1470be00000000000000000000000000000000000000000a00a000000000000517fca3142f7de63ee7cb058813c90d7c8d533542c1188b52e767b23b7b7ddefaa59e208dbc8649cdc2230f66c338bafd223ee6cb961c379056605c3b4921823c9c0ca7de225acc09f5", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0200000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/168], 0xf0}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r2, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r4}, 0x80, 0x0}}], 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=@acquire={0x41c, 0x17, 0x8, 0x70bd2d, 0x25dfdbfe, {{@in=@empty, 0x4d6, 0x32}, @in=@loopback, {@in=@empty, @in=@loopback, 0x4e21, 0x0, 0x4e22, 0x9, 0x2, 0x80, 0x80, 0x0, r4, 0xee01}, {{@in=@remote, @in6=@remote, 0x4e24, 0x6, 0x4e24, 0x7, 0x2, 0x20, 0x80, 0x3b, 0x0, 0xee01}, {0x81, 0x9, 0x7, 0x6, 0x6, 0x5, 0x5, 0x8}, {0x5, 0x2, 0x8, 0x4}, 0x7fffffff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, 0x5, 0x3, 0x40, 0x70bd28}, [@migrate={0x180, 0x11, [{@in=@multicast2, @in=@rand_addr=0x64010100, @in6=@mcast2, @in=@private=0xa010101, 0x6c, 0x2, 0x0, 0x3507, 0xa, 0x2}, {@in6=@remote, @in=@private=0xa010100, @in=@broadcast, @in=@empty, 0x2b, 0x1, 0x0, 0x3505, 0xa, 0xa}, {@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, @in=@empty, 0x32, 0x3, 0x0, 0x3502, 0x2, 0x2}, {@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0xff, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@private=0xa010100, @in6=@remote, @in6=@private1, @in6=@loopback, 0x2b, 0x6, 0x0, 0x0, 0xa, 0x2}]}, @address_filter={0x28, 0x1a, {@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0xa, 0x83, 0x1f}}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x6}}, @algo_auth_trunc={0xec, 0x14, {{'sha256\x00'}, 0x500, 0xa0, "ab0b10b4ffff2e0a66edfb77c7d68e799d8e89149e7710c51ee8c418ab2038f543d5c847de84217dd655271dab32037f15841707813e1140ab33213f002b5f05c0e90dfa903f78a3670b8242245f8b33c06e33feb276fdbe72be7fa1f4c2455bd543aaf7e36c40dc57ec429b19bef23b108e3f9546caf18d7b8b1490f351f0a13f2ce5f8f73cb57825a209d233c75e04db00d99a2d9602fbb581a43281685f68"}}, @replay_thresh={0x8, 0xb, 0x8}, @XFRMA_IF_ID={0x8}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2, 0xa, 0x1a}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) [ 131.111738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.112391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.113856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:57:57 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xc0000601) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4000) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000140)={0x76, 0x80008, 0x20000, {r2}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4000) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x1, 0x5, 0x5, 0x4, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6f353101, 0x2, @perf_config_ext={0x18d7, 0x40}, 0x40000, 0x3, 0x3, 0x6, 0x2, 0x5, 0x0, 0x0, 0x8, 0x0, 0x1000}, 0xffffffffffffffff, 0xa, r3, 0x0) r4 = epoll_create(0x401) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000180)) [ 131.145032] audit: type=1400 audit(1676069877.912:7): avc: denied { open } for pid=3898 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.146737] audit: type=1400 audit(1676069877.912:8): avc: denied { kernel } for pid=3898 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.166395] audit: type=1400 audit(1676069877.933:9): avc: denied { watch_reads } for pid=3898 comm="syz-executor.4" path="/syzkaller-testdir640707498/syzkaller.iBPXGb/4/file0" dev="devpts" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:devpts_t:s0 tclass=dir permissive=1 [ 131.213661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.214299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.215929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 22:57:58 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xc0000601) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4000) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000140)={0x76, 0x80008, 0x20000, {r2}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4000) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x1, 0x5, 0x5, 0x4, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6f353101, 0x2, @perf_config_ext={0x18d7, 0x40}, 0x40000, 0x3, 0x3, 0x6, 0x2, 0x5, 0x0, 0x0, 0x8, 0x0, 0x1000}, 0xffffffffffffffff, 0xa, r3, 0x0) r4 = epoll_create(0x401) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000180)) [ 131.259481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.260347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.261620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:57:58 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xc0000601) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4000) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000140)={0x76, 0x80008, 0x20000, {r2}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4000) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x1, 0x5, 0x5, 0x4, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6f353101, 0x2, @perf_config_ext={0x18d7, 0x40}, 0x40000, 0x3, 0x3, 0x6, 0x2, 0x5, 0x0, 0x0, 0x8, 0x0, 0x1000}, 0xffffffffffffffff, 0xa, r3, 0x0) r4 = epoll_create(0x401) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000180)) [ 131.358015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.358737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.359975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:57:58 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xc0000601) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4000) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000140)={0x76, 0x80008, 0x20000, {r2}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4000) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x1, 0x5, 0x5, 0x4, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6f353101, 0x2, @perf_config_ext={0x18d7, 0x40}, 0x40000, 0x3, 0x3, 0x6, 0x2, 0x5, 0x0, 0x0, 0x8, 0x0, 0x1000}, 0xffffffffffffffff, 0xa, r3, 0x0) r4 = epoll_create(0x401) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000180)) 22:57:58 executing program 6: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x20}}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x90) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x322, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20008000) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcd, 0xe}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7252, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4850}, 0x81) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xc0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb8fc}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040010) [ 131.631669] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure 22:58:10 executing program 0: fstat(0xffffffffffffffff, &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 22:58:10 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lsetxattr$security_evm(&(0x7f0000000540)='./file2\x00', &(0x7f0000000580), &(0x7f00000005c0)=@ng={0x4, 0xe, "f4252610d9c27f"}, 0x9, 0x4) stat(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)) pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f0000000300)='./file0\x00') setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)='/dev/loop') pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c670541bfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x0, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:58:10 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0b47fc987ad2fe2}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x354, r2, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CSA_IES={0x58, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7fff, 0x80]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x1, 0x101, 0xffff, 0x5, 0x49fc, 0x0, 0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x101, 0xa0, 0x400, 0x1f, 0x0, 0x0, 0x0, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7fff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x3f, 0x9, 0xffff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xffff, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x7]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x67}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x26c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x111, 0x7f, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x41}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xa0, 0xb2, 0x6}}, @ht={0x2d, 0x1a, {0x40, 0x3, 0x3, 0x0, {0x44, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0xc58, 0x6}}, @mesh_chsw={0x76, 0x6, {0x2, 0x20, 0x1c, 0x4}}, @random={0x6, 0xb3, "0f7712fabeb379257c90dc83ccb39b37544a7b813aac35b66fd39c8f4fa49776beb4f778ce7f6fd8d754a3c3d582ca5bc2272372303b9105030fa190ceef6c6cc8385f548a437af97a0613d8727e4ce35c94e9251dfabedb95ce25bcd350b1c2bf5b629901227a71fd2e3de3fef16334779fd906f4187d8b2f17f5173a830d970c1f38299121185daf8bd0b152a8ba6caaa4e4a80ee2b321f7f610cbd079ed5a2ff0375b14896b9daa92050ddf08bce6039afc"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x40}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}, @NL80211_ATTR_PROBE_RESP={0x3d, 0x91, "3b5296e596da99a4c460d63f6c71c64506bd406a8a5407dad305856f41b55a3624353033a31f8096e62723df57e8713f1d3412d52f807f9733"}, @NL80211_ATTR_IE={0xf9, 0x2a, [@random={0x1f, 0xdc, "8e929fc20d97ea0a24dd1727626e42c38e1c46d5bf9bd47b8245247caaf48f866e78528a1586b6f7a828480e771ccd1414b395aee8de9af9058edf4592fac2288deedaf0fb5bc1991352ef41413dc4bf6f51ce669093847c789963540eec1087a46e58f01ed6455d0efdeefc608c152dbd2b5fff28738b7f5c711325f2147c6bf84ca497d5abc6d3426813e2d8b5c679ff829eaef8487415d173aac43cda7df75eaa7c5accc65f41461e48deb8c0009875bd01e9223ba5a1e9865aafad7c27ca1b4bf6f4fa6b03af9edb412701b4d489fdbf3d9e2609b558e1eb32d6"}, @link_id={0x65, 0x12, {@random="cdc4120edd18", @broadcast}}, @dsss={0x3, 0x1, 0xab}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0x4, 0x0, 0x0, 0x5, 0x4, 0x3ff, 0x31, 0x7, 0x4, 0xffff]}]}, @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x99f5, 0x2, 0x3]}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x4008800}, 0x4001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) 22:58:10 executing program 6: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x20}}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x90) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x322, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20008000) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcd, 0xe}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7252, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4850}, 0x81) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xc0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb8fc}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040010) 22:58:10 executing program 2: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x3, 0x31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4200, 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000140)) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)=0x1) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x122) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x2) 22:58:10 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() tgkill(r1, r1, 0x3b) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x81, 0x2f, 0x6, 0x0, 0xfff, 0x2000, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp, 0xc820, 0x5fcf30bd, 0x8000, 0x6, 0x81, 0x80, 0x3, 0x0, 0x2, 0x0, 0x5}, r1, 0xa, r0, 0xb) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000480)="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") sendmmsg$inet6(r3, &(0x7f00000021c0), 0x0, 0x0) 22:58:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_create(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x10) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x80240, 0x0) ftruncate(r0, 0x400) r1 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="0400017802148e170000000c0008000000", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=0xee01, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="10000000000000002000050000000000"], 0x64, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x246442, 0x0) timerfd_gettime(r1, &(0x7f00000000c0)) 22:58:10 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xc0000601) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4000) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000140)={0x76, 0x80008, 0x20000, {r2}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4000) [ 144.259548] hrtimer: interrupt took 19867 ns perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x1, 0x5, 0x5, 0x4, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6f353101, 0x2, @perf_config_ext={0x18d7, 0x40}, 0x40000, 0x3, 0x3, 0x6, 0x2, 0x5, 0x0, 0x0, 0x8, 0x0, 0x1000}, 0xffffffffffffffff, 0xa, r3, 0x0) r4 = epoll_create(0x401) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000180)) 22:58:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x30, r0, 0xc0822a29f05aae81, 0x0, 0x0, {{0x55}, {@val={0x8, 0x1, 0x5f}, @val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10d000, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x891) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x78, r4, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x340000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd255}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44800}, 0x48810) [ 144.377734] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4002 'syz-executor.4' [ 144.443190] loop4: detected capacity change from 0 to 40 [ 145.255274] audit: type=1400 audit(1676069892.022:10): avc: denied { write } for pid=3990 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 22:58:24 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x70}, {0x0, 0xff}, @ext={0xc4, &(0x7f0000000300)="12fa6164464ec5db8f4976678bfaf71c030537d6d7466d234f417613b64540da437972e7be27207fb218291831d216b0d7f5a245980eee9a0763fb79482783c922cf134595751029f392fda7ed6f1cfb9ce55a13ba24d03bfedd8e903237dc1939ecf0d4629d63c539326fc5f0db373c97ae3363ad6eaf710390a7352875f5523d24a1d58fff8ba7d70398c66e0681ac53e6b38986dde8e214deb87b30837757ab6a70140092238aaf5a5eb43713407e3d39be67eb2f2e755cb23d85458b7bfdc2926698"}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000400)={{0x6, 0x8}, 'port0\x00', 0x0, 0x50, 0x2, 0x9, 0x7fff, 0x0, 0x101}) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/104, 0x68, 0x10) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x401, 0xffffffffffffffff, &(0x7f0000000040)="e0561f9d3b60f5fef61c2c401dca74", 0xf, 0x0, 0x0, 0x2}]) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000080)="01", 0x292e9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) 22:58:24 executing program 0: fstat(0xffffffffffffffff, &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 22:58:24 executing program 1: r0 = perf_event_open(&(0x7f0000003400)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x69c, 0x1) clone3(&(0x7f00000003c0)={0x13236b300, &(0x7f00000000c0), 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:58:24 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect(r1, &(0x7f0000000180)=@qipcrtr={0x2a, 0x2}, 0x67) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r4, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0xf4fb, 0x6, 0x3}, 0x8) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0xe1, 0x5, 0x7, 0x9, 0x2, 0x3, 0x4e6, 0x368, 0x40, 0x1d8, 0xfc000000, 0x8, 0x38, 0x1, 0x1, 0x8, 0x100}, [{0x4, 0x200, 0x4b40, 0x9, 0x9, 0x101, 0x0, 0xfffffffffffffffc}, {0x4, 0x5, 0x5, 0x4, 0x0, 0xffff, 0x4, 0x6}], "b365d449c6d40a736fea3e0063193e4d4259e0239b96d38f5e095716b194e946ea9acd9fdbd4e4f0351541112a759c32644721855c0d1f9d5905a6e0ba0ca37f93292d68809dcceec873ab8f72dcb2f632b905956a6c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x706) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = signalfd(r5, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000100)={0xc0, 0x40, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 22:58:24 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lsetxattr$security_evm(&(0x7f0000000540)='./file2\x00', &(0x7f0000000580), &(0x7f00000005c0)=@ng={0x4, 0xe, "f4252610d9c27f"}, 0x9, 0x4) stat(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)) pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f0000000300)='./file0\x00') setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)='/dev/loop') pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c670541bfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x0, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:58:24 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(r2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x400) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x5, 0x9, 0x0, 0xaa, 0x0, 0x200, 0x8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x40, 0x7fffffff, 0x4, 0x7, 0x10000, 0x401, 0x4, 0x0, 0x8, 0x0, 0x2}, r4, 0x2, r5, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) ioctl$SNAPSHOT_FREE(r3, 0x3305) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) shmat(0x0, &(0x7f0000ff5000/0x2000)=nil, 0x2000) pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) 22:58:24 executing program 6: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x20}}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x90) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x322, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20008000) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcd, 0xe}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7252, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4850}, 0x81) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xc0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb8fc}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040010) 22:58:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x80240, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x80400) dup(0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 157.525341] random: crng reseeded on system resumption [ 157.555556] device lo entered promiscuous mode [ 157.565715] Restarting kernel threads ... done. [ 157.583476] loop3: detected capacity change from 0 to 40 22:58:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(0x0, r2, &(0x7f00000001c0)='./file0\x00') connect$802154_dgram(r0, &(0x7f0000000040), 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4000) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x3, 0x2, 0x80000000, {0xa, 0x4e21, 0x10000, @loopback, 0x987}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)="71ce46ce1f5bd4cebbc98a3ab85bb56ec184f7ebe906db6dad9fa59c19f918124066340d15bbfb77855a7cd0838121a4878138cdce5b2d96b76ceb2a9a34a9d6f4b7b462ec04cf9e2b5712ca4a5801ca4f80937ac7e8794b5760206bff60accbdb769599283d1bc7dc7447e7623b27d7ad3940e16b3b8dd4961b2abbe6b568dd2f480402973d63adecbe", 0x8a}, {&(0x7f0000000200)="9e3a926173e408209e6ba3dee23a2d382ea06e3d5d19c78020c49a18eda0da053eeaa939f72e0b7b299ae01d017479adba194516caab6414ab732a6f7db7cb", 0x3f}], 0x2, &(0x7f0000000600)=[{0x98, 0x115, 0x401, "e85ca7a5595008b5af61ec5c1f1e8d1959c0287c4f85bae2f93a77bbac96e4dd24656afa2cacdfcc370cb8ff14e59d6ac0fa674d9a6f91cb4de3d8a2debfc7b4e14f79172cb32d780b3608d3c8b0855353188480895ea040ededfc59ab53931656a24b24dfc355345db38f97d7ef134379a8ec70adcef2fc5231fabeba6077cd9dbbc9aa01d6ff34"}, {0xd0, 0x10c, 0x5, "b1e76ee259f141903db7ee5999c7ad68efb223a5488c68a3622d70c8282a178f2fcaa598ca28864b427fa1b2de952b67a5b59c5d7447c6df924bf051f17ecdac411486850f57f85c329c2dd61eb7e74bedc2c3e26e804ac2e11234aae439ee06c1e0fcd0f414562f6be0d69b57accf9dc60b7063de6ffd713a70b4bfe5182691bcd59f4d1c02345bc3d4128a276821727e9b92a772a006611b6987f1dc36cee2b33bb6dcdf5c1d4213fa826cab32d975e6525172ef661225be9fadeff25623"}, {0x28, 0x10b, 0x5, "f41f337dc9aecd36d0d997dcfec2b79a31"}, {0x90, 0x113, 0xfffffff8, "02cde3dee42f6ce745666c2676e27c14c01bae06c97a83ebb185f970376b86ceea1e855e1a19a871050cf3d8c328d5166706fc8cb53c49d56a4b2e89933aa4dd155ac4d1f9e4ddb353c54c3806be5d4d2d148b1be1abf9c4a8e0846970051cf0ef0faf58dda350715d7d2d590cf0fd1ba97f3578fa78a21d061a2272c56f"}, {0x30, 0x104, 0x7fffffff, "a46f9f0f44d5f7ac939218cd9513e2eb6dd8586de448e7909cdcdd4e96f912"}, {0x78, 0x125, 0x8db, "56e489fcf85281884370c8b63e6aff2376f6856c2b5a38e0e4a2bc4a7c510577dab3ca3af068c4b618cf27373112ac4dd68ad7498656947ad638397346c8308f8b37ad73f26abc96b60f85e3f2c9ccd7a83fcdb9c0e6734761a3f350e4894238cc01ff109d"}], 0x2c8}}, {{&(0x7f00000003c0)=@phonet={0x23, 0xc5, 0x6, 0xd1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="0d965268578fd83ac9ea5ca9e9f7202dfbb1bde6d4b059a05e0f49d64222c76264a92e6b4704516f71bc1b61", 0x2c}, {&(0x7f0000000480)="6b1d2f14c8ee4aee5c3abdec66531269cb6f09d5966ab8898bf24eb3c17fd27aec2e4f6e1438da6d5b43ee1234caab2b3e4a912374b6e12b0ec722e7cd2f4015c7bf9269", 0x44}], 0x2}}], 0x2, 0xc0) 22:58:24 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect(r1, &(0x7f0000000180)=@qipcrtr={0x2a, 0x2}, 0x67) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r4, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0xf4fb, 0x6, 0x3}, 0x8) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0xe1, 0x5, 0x7, 0x9, 0x2, 0x3, 0x4e6, 0x368, 0x40, 0x1d8, 0xfc000000, 0x8, 0x38, 0x1, 0x1, 0x8, 0x100}, [{0x4, 0x200, 0x4b40, 0x9, 0x9, 0x101, 0x0, 0xfffffffffffffffc}, {0x4, 0x5, 0x5, 0x4, 0x0, 0xffff, 0x4, 0x6}], "b365d449c6d40a736fea3e0063193e4d4259e0239b96d38f5e095716b194e946ea9acd9fdbd4e4f0351541112a759c32644721855c0d1f9d5905a6e0ba0ca37f93292d68809dcceec873ab8f72dcb2f632b905956a6c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x706) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = signalfd(r5, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000100)={0xc0, 0x40, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 22:58:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(0x0, r2, &(0x7f00000001c0)='./file0\x00') connect$802154_dgram(r0, &(0x7f0000000040), 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4000) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x3, 0x2, 0x80000000, {0xa, 0x4e21, 0x10000, @loopback, 0x987}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)="71ce46ce1f5bd4cebbc98a3ab85bb56ec184f7ebe906db6dad9fa59c19f918124066340d15bbfb77855a7cd0838121a4878138cdce5b2d96b76ceb2a9a34a9d6f4b7b462ec04cf9e2b5712ca4a5801ca4f80937ac7e8794b5760206bff60accbdb769599283d1bc7dc7447e7623b27d7ad3940e16b3b8dd4961b2abbe6b568dd2f480402973d63adecbe", 0x8a}, {&(0x7f0000000200)="9e3a926173e408209e6ba3dee23a2d382ea06e3d5d19c78020c49a18eda0da053eeaa939f72e0b7b299ae01d017479adba194516caab6414ab732a6f7db7cb", 0x3f}], 0x2, &(0x7f0000000600)=[{0x98, 0x115, 0x401, "e85ca7a5595008b5af61ec5c1f1e8d1959c0287c4f85bae2f93a77bbac96e4dd24656afa2cacdfcc370cb8ff14e59d6ac0fa674d9a6f91cb4de3d8a2debfc7b4e14f79172cb32d780b3608d3c8b0855353188480895ea040ededfc59ab53931656a24b24dfc355345db38f97d7ef134379a8ec70adcef2fc5231fabeba6077cd9dbbc9aa01d6ff34"}, {0xd0, 0x10c, 0x5, "b1e76ee259f141903db7ee5999c7ad68efb223a5488c68a3622d70c8282a178f2fcaa598ca28864b427fa1b2de952b67a5b59c5d7447c6df924bf051f17ecdac411486850f57f85c329c2dd61eb7e74bedc2c3e26e804ac2e11234aae439ee06c1e0fcd0f414562f6be0d69b57accf9dc60b7063de6ffd713a70b4bfe5182691bcd59f4d1c02345bc3d4128a276821727e9b92a772a006611b6987f1dc36cee2b33bb6dcdf5c1d4213fa826cab32d975e6525172ef661225be9fadeff25623"}, {0x28, 0x10b, 0x5, "f41f337dc9aecd36d0d997dcfec2b79a31"}, {0x90, 0x113, 0xfffffff8, "02cde3dee42f6ce745666c2676e27c14c01bae06c97a83ebb185f970376b86ceea1e855e1a19a871050cf3d8c328d5166706fc8cb53c49d56a4b2e89933aa4dd155ac4d1f9e4ddb353c54c3806be5d4d2d148b1be1abf9c4a8e0846970051cf0ef0faf58dda350715d7d2d590cf0fd1ba97f3578fa78a21d061a2272c56f"}, {0x30, 0x104, 0x7fffffff, "a46f9f0f44d5f7ac939218cd9513e2eb6dd8586de448e7909cdcdd4e96f912"}, {0x78, 0x125, 0x8db, "56e489fcf85281884370c8b63e6aff2376f6856c2b5a38e0e4a2bc4a7c510577dab3ca3af068c4b618cf27373112ac4dd68ad7498656947ad638397346c8308f8b37ad73f26abc96b60f85e3f2c9ccd7a83fcdb9c0e6734761a3f350e4894238cc01ff109d"}], 0x2c8}}, {{&(0x7f00000003c0)=@phonet={0x23, 0xc5, 0x6, 0xd1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="0d965268578fd83ac9ea5ca9e9f7202dfbb1bde6d4b059a05e0f49d64222c76264a92e6b4704516f71bc1b61", 0x2c}, {&(0x7f0000000480)="6b1d2f14c8ee4aee5c3abdec66531269cb6f09d5966ab8898bf24eb3c17fd27aec2e4f6e1438da6d5b43ee1234caab2b3e4a912374b6e12b0ec722e7cd2f4015c7bf9269", 0x44}], 0x2}}], 0x2, 0xc0) [ 157.850270] device lo left promiscuous mode [ 157.881101] device lo entered promiscuous mode [ 157.883824] random: crng reseeded on system resumption [ 157.896452] Restarting kernel threads ... done. 22:58:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2100, 0x0, 0x3, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200, 0x50) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001fc0)='/proc/meminfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r1) sendfile(r2, r3, 0x0, 0x10000027f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4000) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x10001) 22:58:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file2\x00'}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000140)=0x9, 0xfff) 22:58:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x80240, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x80400) dup(0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 22:58:35 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') lsetxattr$security_evm(&(0x7f0000000540)='./file2\x00', &(0x7f0000000580), &(0x7f00000005c0)=@ng={0x4, 0xe, "f4252610d9c27f"}, 0x9, 0x4) stat(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)) pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f0000000300)='./file0\x00') setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)='/dev/loop') pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c670541bfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x0, &(0x7f0000000940)='system.posix_acl_access\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:58:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(0x0, r2, &(0x7f00000001c0)='./file0\x00') connect$802154_dgram(r0, &(0x7f0000000040), 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4000) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x3, 0x2, 0x80000000, {0xa, 0x4e21, 0x10000, @loopback, 0x987}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)="71ce46ce1f5bd4cebbc98a3ab85bb56ec184f7ebe906db6dad9fa59c19f918124066340d15bbfb77855a7cd0838121a4878138cdce5b2d96b76ceb2a9a34a9d6f4b7b462ec04cf9e2b5712ca4a5801ca4f80937ac7e8794b5760206bff60accbdb769599283d1bc7dc7447e7623b27d7ad3940e16b3b8dd4961b2abbe6b568dd2f480402973d63adecbe", 0x8a}, {&(0x7f0000000200)="9e3a926173e408209e6ba3dee23a2d382ea06e3d5d19c78020c49a18eda0da053eeaa939f72e0b7b299ae01d017479adba194516caab6414ab732a6f7db7cb", 0x3f}], 0x2, &(0x7f0000000600)=[{0x98, 0x115, 0x401, "e85ca7a5595008b5af61ec5c1f1e8d1959c0287c4f85bae2f93a77bbac96e4dd24656afa2cacdfcc370cb8ff14e59d6ac0fa674d9a6f91cb4de3d8a2debfc7b4e14f79172cb32d780b3608d3c8b0855353188480895ea040ededfc59ab53931656a24b24dfc355345db38f97d7ef134379a8ec70adcef2fc5231fabeba6077cd9dbbc9aa01d6ff34"}, {0xd0, 0x10c, 0x5, "b1e76ee259f141903db7ee5999c7ad68efb223a5488c68a3622d70c8282a178f2fcaa598ca28864b427fa1b2de952b67a5b59c5d7447c6df924bf051f17ecdac411486850f57f85c329c2dd61eb7e74bedc2c3e26e804ac2e11234aae439ee06c1e0fcd0f414562f6be0d69b57accf9dc60b7063de6ffd713a70b4bfe5182691bcd59f4d1c02345bc3d4128a276821727e9b92a772a006611b6987f1dc36cee2b33bb6dcdf5c1d4213fa826cab32d975e6525172ef661225be9fadeff25623"}, {0x28, 0x10b, 0x5, "f41f337dc9aecd36d0d997dcfec2b79a31"}, {0x90, 0x113, 0xfffffff8, "02cde3dee42f6ce745666c2676e27c14c01bae06c97a83ebb185f970376b86ceea1e855e1a19a871050cf3d8c328d5166706fc8cb53c49d56a4b2e89933aa4dd155ac4d1f9e4ddb353c54c3806be5d4d2d148b1be1abf9c4a8e0846970051cf0ef0faf58dda350715d7d2d590cf0fd1ba97f3578fa78a21d061a2272c56f"}, {0x30, 0x104, 0x7fffffff, "a46f9f0f44d5f7ac939218cd9513e2eb6dd8586de448e7909cdcdd4e96f912"}, {0x78, 0x125, 0x8db, "56e489fcf85281884370c8b63e6aff2376f6856c2b5a38e0e4a2bc4a7c510577dab3ca3af068c4b618cf27373112ac4dd68ad7498656947ad638397346c8308f8b37ad73f26abc96b60f85e3f2c9ccd7a83fcdb9c0e6734761a3f350e4894238cc01ff109d"}], 0x2c8}}, {{&(0x7f00000003c0)=@phonet={0x23, 0xc5, 0x6, 0xd1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="0d965268578fd83ac9ea5ca9e9f7202dfbb1bde6d4b059a05e0f49d64222c76264a92e6b4704516f71bc1b61", 0x2c}, {&(0x7f0000000480)="6b1d2f14c8ee4aee5c3abdec66531269cb6f09d5966ab8898bf24eb3c17fd27aec2e4f6e1438da6d5b43ee1234caab2b3e4a912374b6e12b0ec722e7cd2f4015c7bf9269", 0x44}], 0x2}}], 0x2, 0xc0) 22:58:35 executing program 6: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x20}}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x90) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x322, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20008000) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcd, 0xe}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7252, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4850}, 0x81) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xc0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb8fc}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) 22:58:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(0x0, r2, &(0x7f00000001c0)='./file0\x00') connect$802154_dgram(r0, &(0x7f0000000040), 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4000) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x3, 0x2, 0x80000000, {0xa, 0x4e21, 0x10000, @loopback, 0x987}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)="71ce46ce1f5bd4cebbc98a3ab85bb56ec184f7ebe906db6dad9fa59c19f918124066340d15bbfb77855a7cd0838121a4878138cdce5b2d96b76ceb2a9a34a9d6f4b7b462ec04cf9e2b5712ca4a5801ca4f80937ac7e8794b5760206bff60accbdb769599283d1bc7dc7447e7623b27d7ad3940e16b3b8dd4961b2abbe6b568dd2f480402973d63adecbe", 0x8a}, {&(0x7f0000000200)="9e3a926173e408209e6ba3dee23a2d382ea06e3d5d19c78020c49a18eda0da053eeaa939f72e0b7b299ae01d017479adba194516caab6414ab732a6f7db7cb", 0x3f}], 0x2, &(0x7f0000000600)=[{0x98, 0x115, 0x401, "e85ca7a5595008b5af61ec5c1f1e8d1959c0287c4f85bae2f93a77bbac96e4dd24656afa2cacdfcc370cb8ff14e59d6ac0fa674d9a6f91cb4de3d8a2debfc7b4e14f79172cb32d780b3608d3c8b0855353188480895ea040ededfc59ab53931656a24b24dfc355345db38f97d7ef134379a8ec70adcef2fc5231fabeba6077cd9dbbc9aa01d6ff34"}, {0xd0, 0x10c, 0x5, "b1e76ee259f141903db7ee5999c7ad68efb223a5488c68a3622d70c8282a178f2fcaa598ca28864b427fa1b2de952b67a5b59c5d7447c6df924bf051f17ecdac411486850f57f85c329c2dd61eb7e74bedc2c3e26e804ac2e11234aae439ee06c1e0fcd0f414562f6be0d69b57accf9dc60b7063de6ffd713a70b4bfe5182691bcd59f4d1c02345bc3d4128a276821727e9b92a772a006611b6987f1dc36cee2b33bb6dcdf5c1d4213fa826cab32d975e6525172ef661225be9fadeff25623"}, {0x28, 0x10b, 0x5, "f41f337dc9aecd36d0d997dcfec2b79a31"}, {0x90, 0x113, 0xfffffff8, "02cde3dee42f6ce745666c2676e27c14c01bae06c97a83ebb185f970376b86ceea1e855e1a19a871050cf3d8c328d5166706fc8cb53c49d56a4b2e89933aa4dd155ac4d1f9e4ddb353c54c3806be5d4d2d148b1be1abf9c4a8e0846970051cf0ef0faf58dda350715d7d2d590cf0fd1ba97f3578fa78a21d061a2272c56f"}, {0x30, 0x104, 0x7fffffff, "a46f9f0f44d5f7ac939218cd9513e2eb6dd8586de448e7909cdcdd4e96f912"}, {0x78, 0x125, 0x8db, "56e489fcf85281884370c8b63e6aff2376f6856c2b5a38e0e4a2bc4a7c510577dab3ca3af068c4b618cf27373112ac4dd68ad7498656947ad638397346c8308f8b37ad73f26abc96b60f85e3f2c9ccd7a83fcdb9c0e6734761a3f350e4894238cc01ff109d"}], 0x2c8}}, {{&(0x7f00000003c0)=@phonet={0x23, 0xc5, 0x6, 0xd1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="0d965268578fd83ac9ea5ca9e9f7202dfbb1bde6d4b059a05e0f49d64222c76264a92e6b4704516f71bc1b61", 0x2c}, {&(0x7f0000000480)="6b1d2f14c8ee4aee5c3abdec66531269cb6f09d5966ab8898bf24eb3c17fd27aec2e4f6e1438da6d5b43ee1234caab2b3e4a912374b6e12b0ec722e7cd2f4015c7bf9269", 0x44}], 0x2}}], 0x2, 0xc0) 22:58:35 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect(r1, &(0x7f0000000180)=@qipcrtr={0x2a, 0x2}, 0x67) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r4, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0xf4fb, 0x6, 0x3}, 0x8) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0xe1, 0x5, 0x7, 0x9, 0x2, 0x3, 0x4e6, 0x368, 0x40, 0x1d8, 0xfc000000, 0x8, 0x38, 0x1, 0x1, 0x8, 0x100}, [{0x4, 0x200, 0x4b40, 0x9, 0x9, 0x101, 0x0, 0xfffffffffffffffc}, {0x4, 0x5, 0x5, 0x4, 0x0, 0xffff, 0x4, 0x6}], "b365d449c6d40a736fea3e0063193e4d4259e0239b96d38f5e095716b194e946ea9acd9fdbd4e4f0351541112a759c32644721855c0d1f9d5905a6e0ba0ca37f93292d68809dcceec873ab8f72dcb2f632b905956a6c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x706) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = signalfd(r5, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000100)={0xc0, 0x40, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 22:58:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x2, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) syz_io_uring_setup(0x2c85, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00'}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@hci={0x1f, 0xffffffffffffffff, 0x4}}, 0x12000) syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x23d5, 0x8, 0x0, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) getpriority(0x2, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) pidfd_open(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) [ 169.079009] device lo left promiscuous mode 22:58:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2000000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4000) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000180)=""/4096) r3 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x80800) fallocate(r3, 0x4a, 0x9, 0x800000000002) [ 169.190230] device lo entered promiscuous mode 22:58:36 executing program 1: set_mempolicy(0x3, &(0x7f0000000000)=0x8000000009, 0x4a) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x1) 22:58:36 executing program 0: accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10, 0x800) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@debug_want_extra_isize}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x63, 0x65, 0x35, 0x32, 0x36, 0x62, 0x31], 0x2d, [0x30, 0x66, 0x36, 0x62], 0x2d, [0x30, 0x36, 0x32, 0x63], 0x2d, [0x64, 0x65, 0x39, 0x31], 0x2d, [0x35, 0x65, 0x63, 0x64, 0x33, 0x0, 0x64, 0x34]}}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 22:58:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x6a8, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0xc, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) r3 = openat$random(0xffffffffffffff9c, 0x0, 0x20000, 0x0) fcntl$setpipe(r3, 0x407, 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000018c0)={{r3}, "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"}) io_setup(0x4, 0x0) clone3(&(0x7f0000000440)={0x86003000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x35}, &(0x7f00000002c0)=""/53, 0x35, &(0x7f0000000300)=""/221, &(0x7f0000000400)=[0x0], 0x1, {r1}}, 0x58) r4 = syz_open_procfs(0x0, 0x0) read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) fcntl$setpipe(r1, 0x407, 0x10001) 22:58:36 executing program 6: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x20}}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x90) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x322, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20008000) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcd, 0xe}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7252, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4850}, 0x81) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xc0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb8fc}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) [ 169.399454] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 22:58:36 executing program 0: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000240)={0x1c, 0xf, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getgroups(0x3, &(0x7f0000000100)=[0xee01, 0xffffffffffffffff, 0x0]) fchown(r0, 0x0, r4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) [ 169.460323] loop3: detected capacity change from 0 to 40 22:58:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/13, 0xd}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="2400000000000000010000000100000062107930d994931474c2a508da0e", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000010000000201000015fec02447142a043e65cb422b1fe81b084ae72f43ab740f16ba83baa8646947f3f8baa3531d7d82", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xc8}, 0x2002) r1 = fork() tgkill(r1, r1, 0x3b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4000) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x2, 0x4, 0xf7, 0x0, 0x101, 0x8000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2000, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x205a, 0x1, 0x7, 0x3, 0x3, 0x4, 0x4, 0x0, 0x7, 0x0, 0x5}, r1, 0xffffffffffffffff, r2, 0x2) pread64(r0, &(0x7f0000000880)=""/223, 0xdf, 0x549) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000740)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}], {}, [{0x8, 0x3}, {0x8, 0x7}, {0x8, 0x1}, {}, {0x8, 0x1}, {}, {0x8, 0x6}, {0x8, 0x4}, {0x8, 0x2}], {0x10, 0x2}, {0x20, 0x2}}, 0x84, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 22:58:36 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe00}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffffff, r0, 0xd}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) [ 169.622634] FAT-fs (loop3): bogus number of reserved sectors [ 169.623371] FAT-fs (loop3): Can't find a valid FAT filesystem [ 169.900108] [ 169.900302] ====================================================== [ 169.900773] WARNING: possible circular locking dependency detected [ 169.901189] 6.2.0-rc7-next-20230210 #1 Not tainted [ 169.901522] ------------------------------------------------------ [ 169.901929] syz-executor.1/4128 is trying to acquire lock: [ 169.902293] ffff88800ff7c170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x162/0x310 [ 169.905514] [ 169.905514] but task is already holding lock: [ 169.906524] ffff88800ff7ab90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x17f/0x550 [ 169.908176] [ 169.908176] which lock already depends on the new lock. [ 169.908176] [ 169.908718] [ 169.908718] the existing dependency chain (in reverse order) is: [ 169.909226] [ 169.909226] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 169.909711] percpu_down_write+0x51/0x350 [ 169.910045] ext4_ind_migrate+0x23b/0x840 [ 169.910380] ext4_fileattr_set+0x1521/0x19f0 [ 169.910726] vfs_fileattr_set+0x7a2/0xbd0 [ 169.911059] do_vfs_ioctl+0xfc1/0x1690 [ 169.911373] __x64_sys_ioctl+0x110/0x210 [ 169.911699] do_syscall_64+0x3f/0x90 [ 169.912009] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 169.912408] [ 169.912408] -> #2 (&sb->s_type->i_mutex_key#6){++++}-{3:3}: [ 169.913005] down_read+0x3d/0x50 [ 169.913390] ext4_bmap+0x52/0x470 [ 169.913792] bmap+0xb0/0x130 [ 169.914136] jbd2_journal_bmap+0xac/0x1d0 [ 169.914581] jbd2_journal_flush+0x87f/0xc90 [ 169.915048] __ext4_ioctl+0x9fd/0x4330 [ 169.915470] __x64_sys_ioctl+0x19e/0x210 [ 169.915906] do_syscall_64+0x3f/0x90 [ 169.916326] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 169.916886] [ 169.916886] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 169.917564] mutex_lock_io_nested+0x149/0x1300 [ 169.918046] jbd2_journal_flush+0x19e/0xc90 [ 169.918502] __ext4_ioctl+0x9fd/0x4330 [ 169.918932] __x64_sys_ioctl+0x19e/0x210 [ 169.919371] do_syscall_64+0x3f/0x90 [ 169.919775] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 169.920302] [ 169.920302] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 169.920938] __lock_acquire+0x2da7/0x63b0 [ 169.921402] lock_acquire.part.0+0xec/0x320 [ 169.921876] __mutex_lock+0x133/0x14a0 [ 169.922295] jbd2_journal_lock_updates+0x162/0x310 [ 169.922815] ext4_change_inode_journal_flag+0x187/0x550 [ 169.923370] ext4_fileattr_set+0x14fa/0x19f0 [ 169.923850] vfs_fileattr_set+0x7a2/0xbd0 [ 169.924294] do_vfs_ioctl+0xfc1/0x1690 [ 169.924740] __x64_sys_ioctl+0x110/0x210 [ 169.925095] do_syscall_64+0x3f/0x90 [ 169.925395] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 169.925797] [ 169.925797] other info that might help us debug this: [ 169.925797] [ 169.926332] Chain exists of: [ 169.926332] &journal->j_barrier --> &sb->s_type->i_mutex_key#6 --> &sbi->s_writepages_rwsem [ 169.926332] [ 169.927214] Possible unsafe locking scenario: [ 169.927214] [ 169.927624] CPU0 CPU1 [ 169.927946] ---- ---- [ 169.928262] lock(&sbi->s_writepages_rwsem); [ 169.928581] lock(&sb->s_type->i_mutex_key#6); [ 169.929076] lock(&sbi->s_writepages_rwsem); [ 169.929551] lock(&journal->j_barrier); [ 169.929837] [ 169.929837] *** DEADLOCK *** [ 169.929837] [ 169.930244] 4 locks held by syz-executor.1/4128: [ 169.930575] #0: ffff88800ff78438 (sb_writers#3){.+.+}-{0:0}, at: do_vfs_ioctl+0xf86/0x1690 [ 169.931178] #1: ffff88801bf5bfa0 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: vfs_fileattr_set+0x14c/0xbd0 [ 169.931876] #2: ffff88801bf5c140 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x126/0x550 [ 169.932638] #3: ffff88800ff7ab90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x17f/0x550 [ 169.933406] [ 169.933406] stack backtrace: [ 169.933718] CPU: 1 PID: 4128 Comm: syz-executor.1 Not tainted 6.2.0-rc7-next-20230210 #1 [ 169.934272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 169.934841] Call Trace: [ 169.935026] [ 169.935190] dump_stack_lvl+0x91/0xf0 [ 169.935468] check_noncircular+0x263/0x2e0 [ 169.935776] ? __pfx_check_noncircular+0x10/0x10 [ 169.936120] ? hlock_conflict+0x58/0x200 [ 169.936415] ? __bfs+0x29e/0x6b0 [ 169.936684] ? __pfx_check_irq_usage+0x10/0x10 [ 169.937018] ? lock_is_held_type+0x9f/0x120 [ 169.937329] ? __pfx___bfs+0x10/0x10 [ 169.937606] __lock_acquire+0x2da7/0x63b0 [ 169.937923] ? __pfx___lock_acquire+0x10/0x10 [ 169.938252] ? __pfx___lock_acquire+0x10/0x10 [ 169.938592] lock_acquire.part.0+0xec/0x320 [ 169.938911] ? jbd2_journal_lock_updates+0x162/0x310 [ 169.939277] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 169.939639] ? jbd2_journal_lock_updates+0x162/0x310 [ 169.940003] ? rcu_read_lock_sched_held+0x42/0x80 [ 169.940347] ? trace_lock_acquire+0x170/0x1e0 [ 169.940690] ? jbd2_journal_lock_updates+0x162/0x310 [ 169.941059] ? lock_acquire+0x32/0xc0 [ 169.941337] ? jbd2_journal_lock_updates+0x162/0x310 [ 169.941700] __mutex_lock+0x133/0x14a0 [ 169.941978] ? jbd2_journal_lock_updates+0x162/0x310 [ 169.942340] ? lock_is_held_type+0x9f/0x120 [ 169.942653] ? jbd2_journal_lock_updates+0x162/0x310 [ 169.943014] ? __pfx___mutex_lock+0x10/0x10 [ 169.943318] ? lock_release+0x1e3/0x710 [ 169.943612] ? __pfx_lock_release+0x10/0x10 [ 169.943925] ? __pfx_do_raw_write_lock+0x10/0x10 [ 169.944264] ? lock_acquire+0x32/0xc0 [ 169.944546] ? jbd2_journal_lock_updates+0xc5/0x310 [ 169.944921] jbd2_journal_lock_updates+0x162/0x310 [ 169.945278] ? __pfx_jbd2_journal_lock_updates+0x10/0x10 [ 169.945662] ? _find_next_bit+0x11b/0x150 [ 169.945965] ? percpu_down_write+0x234/0x350 [ 169.946284] ? lock_is_held_type+0x9f/0x120 [ 169.946594] ext4_change_inode_journal_flag+0x187/0x550 [ 169.946969] ? __ext4_journal_stop+0x10b/0x1f0 [ 169.947298] ext4_fileattr_set+0x14fa/0x19f0 [ 169.947616] ? __pfx_ext4_fileattr_set+0x10/0x10 [ 169.947951] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 169.948337] ? ext4_fileattr_get+0xc1/0x280 [ 169.948651] ? ext4_fileattr_get+0x13a/0x280 [ 169.948969] vfs_fileattr_set+0x7a2/0xbd0 [ 169.949263] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 169.949598] ? write_comp_data+0x3c/0x90 [ 169.949892] do_vfs_ioctl+0xfc1/0x1690 [ 169.950171] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 169.950479] ? inode_has_perm+0x171/0x1d0 [ 169.950783] ? __pfx_file_has_perm+0x10/0x10 [ 169.951104] ? __pfx___fget_files+0x10/0x10 [ 169.951411] ? lock_acquire+0x32/0xc0 [ 169.951690] ? __pfx___fget_files+0x10/0x10 [ 169.951997] ? selinux_file_ioctl+0xba/0x270 [ 169.952318] __x64_sys_ioctl+0x110/0x210 [ 169.952616] do_syscall_64+0x3f/0x90 [ 169.952889] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 169.953253] RIP: 0033:0x7f44dedb6b19 [ 169.953516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 169.954740] RSP: 002b:00007f44dc32c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.955260] RAX: ffffffffffffffda RBX: 00007f44deec9f60 RCX: 00007f44dedb6b19 [ 169.955750] RDX: 0000000020000040 RSI: 0000000040086602 RDI: 0000000000000004 [ 169.956242] RBP: 00007f44dee10f6d R08: 0000000000000000 R09: 0000000000000000 [ 169.956745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.957229] R13: 00007fff4b4c3ecf R14: 00007f44dc32c300 R15: 0000000000022000 [ 169.957721] [ 170.054917] syz-executor.0 (4116) used greatest stack depth: 23448 bytes left VM DIAGNOSIS: 22:58:36 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff81529066 RDX=fffffbfff0ba2b23 RSI=0000000000000008 RDI=ffffffff85d15910 RBP=ffffffff817f54b5 RSP=ffff888016a17518 R8 =0000000000000000 R9 =ffffffff85d15917 R10=fffffbfff0ba2b22 R11=0000000000000001 R12=00000000ffffffff R13=0000000000000246 R14=0000000000000048 R15=0000000000000000 RIP=ffffffff8152906e RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe432d4a1000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe432d49f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c011e9b000 CR3=000000000d684000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041886cb940000000 XMM03=7055ddddd6f1b1a95238db0f7e54c64e XMM04=b620fbe3e5559ed87d2b9693eb4c22dd XMM05=e2ac5e6749cf5de57abe5ba713a4aef0 XMM06=58f5a68fd8f25f02a40f2e7d3834d919 XMM07=f524f2bb81add4fbac20dfa35ef9ba97 XMM08=d919e2ac5e6749cf5de57abe5ba713a4 XMM09=ba9758f5a68fd8f25f02a40f2e7d3834 XMM10=ebf5f524f2bb81add4fbac20dfa35ef9 XMM11=e19982b35f62969e203fbee1d62a6aff XMM12=6a3e98e6857c8335631dd752aef4137d XMM13=965c5e663259584868d050211921b2d0 XMM14=421843aba02b9575eaecf8296aad45e9 XMM15=6f176535156786484d5dcabad92985c4 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824f92f5 RDI=ffffffff87ef3ce0 RBP=ffffffff87ef3ca0 RSP=ffff888014116fb8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87ef3ca0 R14=0000000000000010 R15=ffffffff824f92e0 RIP=ffffffff824f934d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f44dc32c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe656a454000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe656a452000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c011e94000 CR3=0000000042378000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041841cb040000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000