Warning: Permanently added '[localhost]:27185' (ECDSA) to the list of known hosts. 2023/12/10 18:40:13 fuzzer started 2023/12/10 18:40:13 dialing manager at localhost:41757 syzkaller login: [ 27.715049] cgroup: Unknown subsys name 'net' [ 27.716252] cgroup: Unknown subsys name 'net_prio' [ 27.717883] cgroup: Unknown subsys name 'devices' [ 27.719115] cgroup: Unknown subsys name 'blkio' [ 27.758939] cgroup: Unknown subsys name 'hugetlb' [ 27.762013] cgroup: Unknown subsys name 'rlimit' 2023/12/10 18:40:26 syscalls: 2215 2023/12/10 18:40:26 code coverage: enabled 2023/12/10 18:40:26 comparison tracing: enabled 2023/12/10 18:40:26 extra coverage: enabled 2023/12/10 18:40:26 setuid sandbox: enabled 2023/12/10 18:40:26 namespace sandbox: enabled 2023/12/10 18:40:26 Android sandbox: enabled 2023/12/10 18:40:26 fault injection: enabled 2023/12/10 18:40:26 leak checking: enabled 2023/12/10 18:40:26 net packet injection: enabled 2023/12/10 18:40:26 net device setup: enabled 2023/12/10 18:40:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/12/10 18:40:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/12/10 18:40:26 USB emulation: enabled 2023/12/10 18:40:26 hci packet injection: enabled 2023/12/10 18:40:26 wifi device emulation: enabled 2023/12/10 18:40:26 802.15.4 emulation: enabled 2023/12/10 18:40:27 fetching corpus: 50, signal 38728/40529 (executing program) 2023/12/10 18:40:27 fetching corpus: 100, signal 51468/54935 (executing program) 2023/12/10 18:40:27 fetching corpus: 150, signal 65352/70357 (executing program) 2023/12/10 18:40:27 fetching corpus: 200, signal 73673/80194 (executing program) 2023/12/10 18:40:27 fetching corpus: 250, signal 83894/91791 (executing program) 2023/12/10 18:40:27 fetching corpus: 300, signal 92235/101504 (executing program) 2023/12/10 18:40:27 fetching corpus: 350, signal 98701/109292 (executing program) 2023/12/10 18:40:28 fetching corpus: 400, signal 105263/117117 (executing program) 2023/12/10 18:40:28 fetching corpus: 450, signal 110534/123629 (executing program) 2023/12/10 18:40:28 fetching corpus: 500, signal 113408/127801 (executing program) 2023/12/10 18:40:28 fetching corpus: 550, signal 116226/131902 (executing program) 2023/12/10 18:40:28 fetching corpus: 600, signal 121640/138454 (executing program) 2023/12/10 18:40:28 fetching corpus: 650, signal 125522/143547 (executing program) 2023/12/10 18:40:28 fetching corpus: 700, signal 129355/148484 (executing program) 2023/12/10 18:40:29 fetching corpus: 750, signal 131985/152303 (executing program) 2023/12/10 18:40:29 fetching corpus: 800, signal 135488/156856 (executing program) 2023/12/10 18:40:29 fetching corpus: 850, signal 138432/160880 (executing program) 2023/12/10 18:40:29 fetching corpus: 900, signal 141740/165165 (executing program) 2023/12/10 18:40:29 fetching corpus: 950, signal 144649/169060 (executing program) 2023/12/10 18:40:29 fetching corpus: 1000, signal 148706/173955 (executing program) 2023/12/10 18:40:29 fetching corpus: 1050, signal 150692/177010 (executing program) 2023/12/10 18:40:30 fetching corpus: 1100, signal 152737/180103 (executing program) 2023/12/10 18:40:30 fetching corpus: 1150, signal 155920/184201 (executing program) 2023/12/10 18:40:30 fetching corpus: 1200, signal 159451/188580 (executing program) 2023/12/10 18:40:30 fetching corpus: 1250, signal 162220/192219 (executing program) 2023/12/10 18:40:30 fetching corpus: 1300, signal 165022/195837 (executing program) 2023/12/10 18:40:30 fetching corpus: 1350, signal 168075/199608 (executing program) 2023/12/10 18:40:30 fetching corpus: 1400, signal 170575/202954 (executing program) 2023/12/10 18:40:31 fetching corpus: 1450, signal 172616/205899 (executing program) 2023/12/10 18:40:31 fetching corpus: 1500, signal 174106/208274 (executing program) 2023/12/10 18:40:31 fetching corpus: 1550, signal 176708/211666 (executing program) 2023/12/10 18:40:31 fetching corpus: 1600, signal 178362/214151 (executing program) 2023/12/10 18:40:31 fetching corpus: 1650, signal 180298/216910 (executing program) 2023/12/10 18:40:31 fetching corpus: 1700, signal 181924/219408 (executing program) 2023/12/10 18:40:31 fetching corpus: 1750, signal 183849/222087 (executing program) 2023/12/10 18:40:32 fetching corpus: 1800, signal 186204/225060 (executing program) 2023/12/10 18:40:32 fetching corpus: 1850, signal 187766/227385 (executing program) 2023/12/10 18:40:32 fetching corpus: 1900, signal 189429/229793 (executing program) 2023/12/10 18:40:32 fetching corpus: 1950, signal 190731/231858 (executing program) 2023/12/10 18:40:32 fetching corpus: 2000, signal 191785/233819 (executing program) 2023/12/10 18:40:32 fetching corpus: 2050, signal 193234/236028 (executing program) 2023/12/10 18:40:32 fetching corpus: 2100, signal 194681/238243 (executing program) 2023/12/10 18:40:33 fetching corpus: 2150, signal 195886/240243 (executing program) 2023/12/10 18:40:33 fetching corpus: 2200, signal 197488/242537 (executing program) 2023/12/10 18:40:33 fetching corpus: 2250, signal 198773/244588 (executing program) 2023/12/10 18:40:33 fetching corpus: 2300, signal 199986/246515 (executing program) 2023/12/10 18:40:33 fetching corpus: 2350, signal 202113/249171 (executing program) 2023/12/10 18:40:33 fetching corpus: 2400, signal 203699/251359 (executing program) 2023/12/10 18:40:33 fetching corpus: 2450, signal 205048/253368 (executing program) 2023/12/10 18:40:33 fetching corpus: 2500, signal 206815/255703 (executing program) 2023/12/10 18:40:34 fetching corpus: 2550, signal 207860/257429 (executing program) 2023/12/10 18:40:34 fetching corpus: 2600, signal 208979/259203 (executing program) 2023/12/10 18:40:34 fetching corpus: 2650, signal 210324/261156 (executing program) 2023/12/10 18:40:34 fetching corpus: 2700, signal 211318/262804 (executing program) 2023/12/10 18:40:34 fetching corpus: 2750, signal 212179/264398 (executing program) 2023/12/10 18:40:34 fetching corpus: 2800, signal 212976/265961 (executing program) 2023/12/10 18:40:34 fetching corpus: 2850, signal 214099/267729 (executing program) 2023/12/10 18:40:34 fetching corpus: 2900, signal 215371/269576 (executing program) 2023/12/10 18:40:35 fetching corpus: 2950, signal 216721/271458 (executing program) 2023/12/10 18:40:35 fetching corpus: 3000, signal 217560/272943 (executing program) 2023/12/10 18:40:35 fetching corpus: 3050, signal 218670/274653 (executing program) 2023/12/10 18:40:35 fetching corpus: 3100, signal 219707/276319 (executing program) 2023/12/10 18:40:35 fetching corpus: 3150, signal 220699/277922 (executing program) 2023/12/10 18:40:35 fetching corpus: 3200, signal 221811/279600 (executing program) 2023/12/10 18:40:35 fetching corpus: 3250, signal 222623/281099 (executing program) 2023/12/10 18:40:36 fetching corpus: 3300, signal 223405/282501 (executing program) 2023/12/10 18:40:36 fetching corpus: 3350, signal 224645/284209 (executing program) 2023/12/10 18:40:36 fetching corpus: 3400, signal 225307/285553 (executing program) 2023/12/10 18:40:36 fetching corpus: 3450, signal 226052/286880 (executing program) 2023/12/10 18:40:36 fetching corpus: 3500, signal 227157/288499 (executing program) 2023/12/10 18:40:36 fetching corpus: 3550, signal 228405/290236 (executing program) 2023/12/10 18:40:36 fetching corpus: 3600, signal 229261/291623 (executing program) 2023/12/10 18:40:36 fetching corpus: 3650, signal 230114/293009 (executing program) 2023/12/10 18:40:37 fetching corpus: 3700, signal 231039/294432 (executing program) 2023/12/10 18:40:37 fetching corpus: 3750, signal 231777/295801 (executing program) 2023/12/10 18:40:37 fetching corpus: 3800, signal 232791/297276 (executing program) 2023/12/10 18:40:37 fetching corpus: 3850, signal 233553/298613 (executing program) 2023/12/10 18:40:37 fetching corpus: 3900, signal 234566/300074 (executing program) 2023/12/10 18:40:37 fetching corpus: 3950, signal 235462/301412 (executing program) 2023/12/10 18:40:37 fetching corpus: 4000, signal 236320/302720 (executing program) 2023/12/10 18:40:38 fetching corpus: 4050, signal 237282/304141 (executing program) 2023/12/10 18:40:38 fetching corpus: 4100, signal 238168/305449 (executing program) 2023/12/10 18:40:38 fetching corpus: 4150, signal 239090/306810 (executing program) 2023/12/10 18:40:38 fetching corpus: 4200, signal 239926/308105 (executing program) 2023/12/10 18:40:38 fetching corpus: 4250, signal 240689/309366 (executing program) 2023/12/10 18:40:38 fetching corpus: 4300, signal 241911/310848 (executing program) 2023/12/10 18:40:38 fetching corpus: 4350, signal 242533/312002 (executing program) 2023/12/10 18:40:39 fetching corpus: 4400, signal 243273/313238 (executing program) 2023/12/10 18:40:39 fetching corpus: 4450, signal 244070/314486 (executing program) 2023/12/10 18:40:39 fetching corpus: 4500, signal 245002/315794 (executing program) 2023/12/10 18:40:39 fetching corpus: 4550, signal 245761/317035 (executing program) 2023/12/10 18:40:39 fetching corpus: 4600, signal 246693/318339 (executing program) 2023/12/10 18:40:39 fetching corpus: 4650, signal 247539/319550 (executing program) 2023/12/10 18:40:39 fetching corpus: 4700, signal 248368/320752 (executing program) 2023/12/10 18:40:39 fetching corpus: 4750, signal 249186/321968 (executing program) 2023/12/10 18:40:40 fetching corpus: 4800, signal 250088/323226 (executing program) 2023/12/10 18:40:40 fetching corpus: 4850, signal 250741/324323 (executing program) 2023/12/10 18:40:40 fetching corpus: 4900, signal 251210/325320 (executing program) 2023/12/10 18:40:40 fetching corpus: 4950, signal 251890/326429 (executing program) 2023/12/10 18:40:40 fetching corpus: 5000, signal 252446/327489 (executing program) 2023/12/10 18:40:40 fetching corpus: 5050, signal 253177/328609 (executing program) 2023/12/10 18:40:40 fetching corpus: 5100, signal 253712/329614 (executing program) 2023/12/10 18:40:40 fetching corpus: 5150, signal 254528/330770 (executing program) 2023/12/10 18:40:41 fetching corpus: 5200, signal 255289/331901 (executing program) 2023/12/10 18:40:41 fetching corpus: 5250, signal 255982/332978 (executing program) 2023/12/10 18:40:41 fetching corpus: 5300, signal 256611/334012 (executing program) 2023/12/10 18:40:41 fetching corpus: 5350, signal 257335/335094 (executing program) 2023/12/10 18:40:41 fetching corpus: 5400, signal 257954/336077 (executing program) 2023/12/10 18:40:41 fetching corpus: 5450, signal 258545/337073 (executing program) 2023/12/10 18:40:41 fetching corpus: 5500, signal 259259/338134 (executing program) 2023/12/10 18:40:42 fetching corpus: 5550, signal 260264/339322 (executing program) 2023/12/10 18:40:42 fetching corpus: 5600, signal 260908/340342 (executing program) 2023/12/10 18:40:42 fetching corpus: 5650, signal 261516/341338 (executing program) 2023/12/10 18:40:42 fetching corpus: 5700, signal 262015/342291 (executing program) 2023/12/10 18:40:42 fetching corpus: 5750, signal 262512/343239 (executing program) 2023/12/10 18:40:42 fetching corpus: 5800, signal 263373/344283 (executing program) 2023/12/10 18:40:42 fetching corpus: 5850, signal 264020/345251 (executing program) 2023/12/10 18:40:43 fetching corpus: 5900, signal 264555/346187 (executing program) 2023/12/10 18:40:43 fetching corpus: 5950, signal 265240/347140 (executing program) 2023/12/10 18:40:43 fetching corpus: 6000, signal 265797/348082 (executing program) 2023/12/10 18:40:43 fetching corpus: 6050, signal 266553/349041 (executing program) 2023/12/10 18:40:43 fetching corpus: 6100, signal 267108/349934 (executing program) 2023/12/10 18:40:43 fetching corpus: 6150, signal 267788/350881 (executing program) 2023/12/10 18:40:43 fetching corpus: 6200, signal 268195/351693 (executing program) 2023/12/10 18:40:43 fetching corpus: 6250, signal 268885/352551 (executing program) 2023/12/10 18:40:44 fetching corpus: 6300, signal 269322/353409 (executing program) 2023/12/10 18:40:44 fetching corpus: 6350, signal 269971/354300 (executing program) 2023/12/10 18:40:44 fetching corpus: 6400, signal 270469/355161 (executing program) 2023/12/10 18:40:44 fetching corpus: 6450, signal 270903/355956 (executing program) 2023/12/10 18:40:44 fetching corpus: 6500, signal 271481/356801 (executing program) 2023/12/10 18:40:44 fetching corpus: 6550, signal 271982/357649 (executing program) 2023/12/10 18:40:44 fetching corpus: 6600, signal 272492/358465 (executing program) 2023/12/10 18:40:44 fetching corpus: 6650, signal 272865/359243 (executing program) 2023/12/10 18:40:45 fetching corpus: 6700, signal 273331/360039 (executing program) 2023/12/10 18:40:45 fetching corpus: 6750, signal 273887/360894 (executing program) 2023/12/10 18:40:45 fetching corpus: 6800, signal 274443/361703 (executing program) 2023/12/10 18:40:45 fetching corpus: 6850, signal 275098/362601 (executing program) 2023/12/10 18:40:45 fetching corpus: 6900, signal 275685/363453 (executing program) 2023/12/10 18:40:45 fetching corpus: 6950, signal 276076/364187 (executing program) 2023/12/10 18:40:45 fetching corpus: 7000, signal 276691/365026 (executing program) 2023/12/10 18:40:46 fetching corpus: 7050, signal 277278/365822 (executing program) 2023/12/10 18:40:46 fetching corpus: 7100, signal 277803/366601 (executing program) 2023/12/10 18:40:46 fetching corpus: 7150, signal 278497/367426 (executing program) 2023/12/10 18:40:46 fetching corpus: 7200, signal 279174/368230 (executing program) 2023/12/10 18:40:46 fetching corpus: 7250, signal 279615/368985 (executing program) 2023/12/10 18:40:46 fetching corpus: 7300, signal 279905/369678 (executing program) 2023/12/10 18:40:46 fetching corpus: 7350, signal 280555/370492 (executing program) 2023/12/10 18:40:47 fetching corpus: 7400, signal 281240/371268 (executing program) 2023/12/10 18:40:47 fetching corpus: 7450, signal 281702/371992 (executing program) 2023/12/10 18:40:47 fetching corpus: 7500, signal 282059/372647 (executing program) 2023/12/10 18:40:47 fetching corpus: 7550, signal 282410/373321 (executing program) 2023/12/10 18:40:47 fetching corpus: 7600, signal 282831/374045 (executing program) 2023/12/10 18:40:47 fetching corpus: 7650, signal 283205/374747 (executing program) 2023/12/10 18:40:47 fetching corpus: 7700, signal 283576/375431 (executing program) 2023/12/10 18:40:47 fetching corpus: 7750, signal 284113/376153 (executing program) 2023/12/10 18:40:47 fetching corpus: 7800, signal 284526/376840 (executing program) 2023/12/10 18:40:48 fetching corpus: 7850, signal 284889/377492 (executing program) 2023/12/10 18:40:48 fetching corpus: 7900, signal 285315/378186 (executing program) 2023/12/10 18:40:48 fetching corpus: 7950, signal 285706/378866 (executing program) 2023/12/10 18:40:48 fetching corpus: 8000, signal 286255/379547 (executing program) 2023/12/10 18:40:48 fetching corpus: 8050, signal 286642/380180 (executing program) 2023/12/10 18:40:48 fetching corpus: 8100, signal 287197/380882 (executing program) 2023/12/10 18:40:48 fetching corpus: 8150, signal 287479/381526 (executing program) 2023/12/10 18:40:49 fetching corpus: 8200, signal 287938/382195 (executing program) 2023/12/10 18:40:49 fetching corpus: 8250, signal 288446/382840 (executing program) 2023/12/10 18:40:49 fetching corpus: 8300, signal 288851/383466 (executing program) 2023/12/10 18:40:49 fetching corpus: 8350, signal 289364/384132 (executing program) 2023/12/10 18:40:49 fetching corpus: 8400, signal 289734/384736 (executing program) 2023/12/10 18:40:49 fetching corpus: 8450, signal 290329/385401 (executing program) 2023/12/10 18:40:49 fetching corpus: 8500, signal 290757/386022 (executing program) 2023/12/10 18:40:50 fetching corpus: 8550, signal 291212/386651 (executing program) 2023/12/10 18:40:50 fetching corpus: 8600, signal 291705/387273 (executing program) 2023/12/10 18:40:50 fetching corpus: 8650, signal 292076/387871 (executing program) 2023/12/10 18:40:50 fetching corpus: 8700, signal 292513/388474 (executing program) 2023/12/10 18:40:50 fetching corpus: 8750, signal 292852/389064 (executing program) 2023/12/10 18:40:50 fetching corpus: 8800, signal 293265/389680 (executing program) 2023/12/10 18:40:50 fetching corpus: 8850, signal 293621/390288 (executing program) 2023/12/10 18:40:50 fetching corpus: 8900, signal 293899/390856 (executing program) 2023/12/10 18:40:50 fetching corpus: 8950, signal 294303/391449 (executing program) 2023/12/10 18:40:51 fetching corpus: 9000, signal 294785/392032 (executing program) 2023/12/10 18:40:51 fetching corpus: 9050, signal 295164/392590 (executing program) 2023/12/10 18:40:51 fetching corpus: 9100, signal 295566/393140 (executing program) 2023/12/10 18:40:51 fetching corpus: 9150, signal 295975/393725 (executing program) 2023/12/10 18:40:51 fetching corpus: 9200, signal 296318/394273 (executing program) 2023/12/10 18:40:51 fetching corpus: 9250, signal 296685/394825 (executing program) 2023/12/10 18:40:51 fetching corpus: 9300, signal 297212/395405 (executing program) 2023/12/10 18:40:52 fetching corpus: 9350, signal 297623/395987 (executing program) 2023/12/10 18:40:52 fetching corpus: 9400, signal 298070/396552 (executing program) 2023/12/10 18:40:52 fetching corpus: 9450, signal 298487/397120 (executing program) 2023/12/10 18:40:52 fetching corpus: 9500, signal 299044/397669 (executing program) 2023/12/10 18:40:52 fetching corpus: 9550, signal 299546/398237 (executing program) 2023/12/10 18:40:52 fetching corpus: 9600, signal 299976/398765 (executing program) 2023/12/10 18:40:52 fetching corpus: 9650, signal 300432/399288 (executing program) 2023/12/10 18:40:52 fetching corpus: 9700, signal 300842/399868 (executing program) 2023/12/10 18:40:53 fetching corpus: 9750, signal 301244/400395 (executing program) 2023/12/10 18:40:53 fetching corpus: 9800, signal 301577/400921 (executing program) 2023/12/10 18:40:53 fetching corpus: 9850, signal 301995/401434 (executing program) 2023/12/10 18:40:53 fetching corpus: 9900, signal 302455/401928 (executing program) 2023/12/10 18:40:53 fetching corpus: 9950, signal 302823/402433 (executing program) 2023/12/10 18:40:53 fetching corpus: 10000, signal 303146/402953 (executing program) 2023/12/10 18:40:53 fetching corpus: 10050, signal 303471/403460 (executing program) 2023/12/10 18:40:53 fetching corpus: 10100, signal 303793/403939 (executing program) 2023/12/10 18:40:53 fetching corpus: 10150, signal 304089/403939 (executing program) 2023/12/10 18:40:53 fetching corpus: 10200, signal 304405/403939 (executing program) 2023/12/10 18:40:54 fetching corpus: 10250, signal 304804/403939 (executing program) 2023/12/10 18:40:54 fetching corpus: 10300, signal 305192/403939 (executing program) 2023/12/10 18:40:54 fetching corpus: 10350, signal 305522/403939 (executing program) 2023/12/10 18:40:54 fetching corpus: 10400, signal 305925/403939 (executing program) 2023/12/10 18:40:54 fetching corpus: 10450, signal 306368/403939 (executing program) 2023/12/10 18:40:54 fetching corpus: 10500, signal 306680/403939 (executing program) 2023/12/10 18:40:54 fetching corpus: 10550, signal 307045/403939 (executing program) 2023/12/10 18:40:55 fetching corpus: 10600, signal 307385/403939 (executing program) 2023/12/10 18:40:55 fetching corpus: 10650, signal 307701/403939 (executing program) 2023/12/10 18:40:55 fetching corpus: 10700, signal 308106/403939 (executing program) 2023/12/10 18:40:55 fetching corpus: 10750, signal 308513/403939 (executing program) 2023/12/10 18:40:55 fetching corpus: 10800, signal 308832/403939 (executing program) 2023/12/10 18:40:55 fetching corpus: 10850, signal 309191/403939 (executing program) 2023/12/10 18:40:55 fetching corpus: 10900, signal 309648/403939 (executing program) 2023/12/10 18:40:55 fetching corpus: 10950, signal 310068/403939 (executing program) 2023/12/10 18:40:56 fetching corpus: 11000, signal 310493/403939 (executing program) 2023/12/10 18:40:56 fetching corpus: 11050, signal 310881/403939 (executing program) 2023/12/10 18:40:56 fetching corpus: 11100, signal 311313/403939 (executing program) 2023/12/10 18:40:56 fetching corpus: 11150, signal 311624/403939 (executing program) 2023/12/10 18:40:56 fetching corpus: 11200, signal 311875/403939 (executing program) 2023/12/10 18:40:56 fetching corpus: 11250, signal 312299/403939 (executing program) 2023/12/10 18:40:56 fetching corpus: 11300, signal 312638/403939 (executing program) 2023/12/10 18:40:56 fetching corpus: 11350, signal 312988/403941 (executing program) 2023/12/10 18:40:57 fetching corpus: 11400, signal 313356/403941 (executing program) 2023/12/10 18:40:57 fetching corpus: 11450, signal 313842/403941 (executing program) 2023/12/10 18:40:57 fetching corpus: 11500, signal 314156/403941 (executing program) 2023/12/10 18:40:57 fetching corpus: 11550, signal 314533/403941 (executing program) 2023/12/10 18:40:57 fetching corpus: 11600, signal 314922/403941 (executing program) 2023/12/10 18:40:57 fetching corpus: 11650, signal 315219/403941 (executing program) 2023/12/10 18:40:57 fetching corpus: 11700, signal 315485/403941 (executing program) 2023/12/10 18:40:58 fetching corpus: 11750, signal 315723/403941 (executing program) 2023/12/10 18:40:58 fetching corpus: 11800, signal 316045/403941 (executing program) 2023/12/10 18:40:58 fetching corpus: 11850, signal 316389/403941 (executing program) 2023/12/10 18:40:58 fetching corpus: 11900, signal 316748/403941 (executing program) 2023/12/10 18:40:58 fetching corpus: 11950, signal 317154/403941 (executing program) 2023/12/10 18:40:58 fetching corpus: 12000, signal 317467/403942 (executing program) 2023/12/10 18:40:58 fetching corpus: 12050, signal 317758/403942 (executing program) 2023/12/10 18:40:58 fetching corpus: 12100, signal 318011/403942 (executing program) 2023/12/10 18:40:59 fetching corpus: 12150, signal 318406/403942 (executing program) 2023/12/10 18:40:59 fetching corpus: 12200, signal 318686/403942 (executing program) 2023/12/10 18:40:59 fetching corpus: 12250, signal 319050/403942 (executing program) 2023/12/10 18:40:59 fetching corpus: 12300, signal 319296/403942 (executing program) 2023/12/10 18:40:59 fetching corpus: 12350, signal 319653/403942 (executing program) 2023/12/10 18:40:59 fetching corpus: 12400, signal 320050/403942 (executing program) 2023/12/10 18:40:59 fetching corpus: 12450, signal 320303/403942 (executing program) 2023/12/10 18:40:59 fetching corpus: 12500, signal 320642/403942 (executing program) 2023/12/10 18:41:00 fetching corpus: 12550, signal 320893/403942 (executing program) 2023/12/10 18:41:00 fetching corpus: 12600, signal 321285/403942 (executing program) 2023/12/10 18:41:00 fetching corpus: 12650, signal 321650/403942 (executing program) 2023/12/10 18:41:00 fetching corpus: 12700, signal 321982/403942 (executing program) 2023/12/10 18:41:00 fetching corpus: 12750, signal 322362/403942 (executing program) 2023/12/10 18:41:00 fetching corpus: 12800, signal 322613/403942 (executing program) 2023/12/10 18:41:00 fetching corpus: 12850, signal 322947/403942 (executing program) 2023/12/10 18:41:00 fetching corpus: 12900, signal 323281/403942 (executing program) 2023/12/10 18:41:01 fetching corpus: 12950, signal 323611/403942 (executing program) 2023/12/10 18:41:01 fetching corpus: 13000, signal 323969/403942 (executing program) 2023/12/10 18:41:01 fetching corpus: 13050, signal 324189/403942 (executing program) 2023/12/10 18:41:01 fetching corpus: 13100, signal 324404/403942 (executing program) 2023/12/10 18:41:01 fetching corpus: 13150, signal 324698/403942 (executing program) 2023/12/10 18:41:02 fetching corpus: 13200, signal 324987/403942 (executing program) 2023/12/10 18:41:02 fetching corpus: 13250, signal 325305/403942 (executing program) 2023/12/10 18:41:02 fetching corpus: 13300, signal 325509/403942 (executing program) 2023/12/10 18:41:02 fetching corpus: 13350, signal 325813/403942 (executing program) 2023/12/10 18:41:02 fetching corpus: 13400, signal 326107/403942 (executing program) 2023/12/10 18:41:02 fetching corpus: 13450, signal 326325/403942 (executing program) 2023/12/10 18:41:03 fetching corpus: 13500, signal 326599/403942 (executing program) 2023/12/10 18:41:03 fetching corpus: 13550, signal 327007/403942 (executing program) 2023/12/10 18:41:03 fetching corpus: 13600, signal 327221/403942 (executing program) 2023/12/10 18:41:03 fetching corpus: 13650, signal 327448/403942 (executing program) 2023/12/10 18:41:03 fetching corpus: 13700, signal 327727/403942 (executing program) 2023/12/10 18:41:03 fetching corpus: 13750, signal 328095/403942 (executing program) 2023/12/10 18:41:03 fetching corpus: 13800, signal 328319/403942 (executing program) 2023/12/10 18:41:03 fetching corpus: 13850, signal 328592/403942 (executing program) 2023/12/10 18:41:03 fetching corpus: 13900, signal 328825/403942 (executing program) 2023/12/10 18:41:04 fetching corpus: 13950, signal 329129/403942 (executing program) 2023/12/10 18:41:04 fetching corpus: 14000, signal 329470/403942 (executing program) 2023/12/10 18:41:04 fetching corpus: 14050, signal 329665/403942 (executing program) 2023/12/10 18:41:04 fetching corpus: 14100, signal 329965/403942 (executing program) 2023/12/10 18:41:04 fetching corpus: 14150, signal 330286/403942 (executing program) 2023/12/10 18:41:04 fetching corpus: 14200, signal 330525/403942 (executing program) 2023/12/10 18:41:04 fetching corpus: 14250, signal 330800/403942 (executing program) 2023/12/10 18:41:05 fetching corpus: 14300, signal 331049/403942 (executing program) 2023/12/10 18:41:05 fetching corpus: 14350, signal 331305/403942 (executing program) 2023/12/10 18:41:05 fetching corpus: 14400, signal 331673/403942 (executing program) 2023/12/10 18:41:05 fetching corpus: 14450, signal 332049/403942 (executing program) 2023/12/10 18:41:05 fetching corpus: 14500, signal 332271/403942 (executing program) 2023/12/10 18:41:05 fetching corpus: 14550, signal 332466/403942 (executing program) 2023/12/10 18:41:05 fetching corpus: 14600, signal 332769/403942 (executing program) 2023/12/10 18:41:05 fetching corpus: 14650, signal 332999/403942 (executing program) 2023/12/10 18:41:06 fetching corpus: 14700, signal 333222/403942 (executing program) 2023/12/10 18:41:06 fetching corpus: 14750, signal 333493/403942 (executing program) 2023/12/10 18:41:06 fetching corpus: 14800, signal 333788/403942 (executing program) 2023/12/10 18:41:06 fetching corpus: 14850, signal 334071/403942 (executing program) 2023/12/10 18:41:06 fetching corpus: 14900, signal 334383/403942 (executing program) 2023/12/10 18:41:06 fetching corpus: 14950, signal 334614/403942 (executing program) 2023/12/10 18:41:06 fetching corpus: 15000, signal 334854/403942 (executing program) 2023/12/10 18:41:07 fetching corpus: 15050, signal 335067/403942 (executing program) 2023/12/10 18:41:07 fetching corpus: 15100, signal 335340/403942 (executing program) 2023/12/10 18:41:07 fetching corpus: 15150, signal 335573/403942 (executing program) 2023/12/10 18:41:07 fetching corpus: 15200, signal 335889/403942 (executing program) 2023/12/10 18:41:07 fetching corpus: 15250, signal 336071/403942 (executing program) 2023/12/10 18:41:07 fetching corpus: 15300, signal 336345/403942 (executing program) 2023/12/10 18:41:07 fetching corpus: 15350, signal 336586/403942 (executing program) 2023/12/10 18:41:07 fetching corpus: 15400, signal 336813/403942 (executing program) 2023/12/10 18:41:08 fetching corpus: 15450, signal 337105/403945 (executing program) 2023/12/10 18:41:08 fetching corpus: 15500, signal 337404/403945 (executing program) 2023/12/10 18:41:08 fetching corpus: 15550, signal 337579/403945 (executing program) 2023/12/10 18:41:08 fetching corpus: 15600, signal 337765/403945 (executing program) 2023/12/10 18:41:08 fetching corpus: 15650, signal 337955/403945 (executing program) 2023/12/10 18:41:08 fetching corpus: 15700, signal 338199/403945 (executing program) 2023/12/10 18:41:08 fetching corpus: 15750, signal 338379/403945 (executing program) 2023/12/10 18:41:09 fetching corpus: 15800, signal 338606/403945 (executing program) 2023/12/10 18:41:09 fetching corpus: 15850, signal 338819/403945 (executing program) 2023/12/10 18:41:09 fetching corpus: 15900, signal 339083/403945 (executing program) 2023/12/10 18:41:09 fetching corpus: 15950, signal 339734/403945 (executing program) 2023/12/10 18:41:09 fetching corpus: 16000, signal 339981/403945 (executing program) 2023/12/10 18:41:09 fetching corpus: 16050, signal 340230/403945 (executing program) 2023/12/10 18:41:09 fetching corpus: 16100, signal 340510/403945 (executing program) 2023/12/10 18:41:09 fetching corpus: 16150, signal 340836/403945 (executing program) 2023/12/10 18:41:10 fetching corpus: 16200, signal 340970/403945 (executing program) 2023/12/10 18:41:10 fetching corpus: 16250, signal 341271/403945 (executing program) 2023/12/10 18:41:10 fetching corpus: 16300, signal 341456/403945 (executing program) 2023/12/10 18:41:10 fetching corpus: 16350, signal 341646/403945 (executing program) 2023/12/10 18:41:10 fetching corpus: 16400, signal 341820/403945 (executing program) 2023/12/10 18:41:10 fetching corpus: 16450, signal 342102/403945 (executing program) 2023/12/10 18:41:10 fetching corpus: 16500, signal 342363/403946 (executing program) 2023/12/10 18:41:10 fetching corpus: 16550, signal 342629/403946 (executing program) 2023/12/10 18:41:10 fetching corpus: 16600, signal 342778/403946 (executing program) 2023/12/10 18:41:10 fetching corpus: 16650, signal 342945/403946 (executing program) 2023/12/10 18:41:11 fetching corpus: 16700, signal 343200/403946 (executing program) 2023/12/10 18:41:11 fetching corpus: 16750, signal 343410/403946 (executing program) 2023/12/10 18:41:11 fetching corpus: 16800, signal 344068/403946 (executing program) 2023/12/10 18:41:11 fetching corpus: 16850, signal 344339/403946 (executing program) 2023/12/10 18:41:11 fetching corpus: 16900, signal 344613/403946 (executing program) 2023/12/10 18:41:11 fetching corpus: 16950, signal 344940/403946 (executing program) 2023/12/10 18:41:11 fetching corpus: 17000, signal 345171/403946 (executing program) 2023/12/10 18:41:12 fetching corpus: 17050, signal 345391/403946 (executing program) 2023/12/10 18:41:12 fetching corpus: 17100, signal 345617/403946 (executing program) 2023/12/10 18:41:12 fetching corpus: 17150, signal 345774/403946 (executing program) 2023/12/10 18:41:12 fetching corpus: 17200, signal 345946/403946 (executing program) 2023/12/10 18:41:12 fetching corpus: 17250, signal 346177/403946 (executing program) 2023/12/10 18:41:12 fetching corpus: 17300, signal 346362/403946 (executing program) 2023/12/10 18:41:12 fetching corpus: 17350, signal 346570/403946 (executing program) 2023/12/10 18:41:12 fetching corpus: 17400, signal 346846/403946 (executing program) 2023/12/10 18:41:13 fetching corpus: 17450, signal 347114/403946 (executing program) 2023/12/10 18:41:13 fetching corpus: 17500, signal 347320/403946 (executing program) 2023/12/10 18:41:13 fetching corpus: 17550, signal 347484/403946 (executing program) 2023/12/10 18:41:13 fetching corpus: 17600, signal 347699/403946 (executing program) 2023/12/10 18:41:13 fetching corpus: 17650, signal 347860/403946 (executing program) 2023/12/10 18:41:13 fetching corpus: 17700, signal 348059/403946 (executing program) 2023/12/10 18:41:13 fetching corpus: 17750, signal 348281/403946 (executing program) 2023/12/10 18:41:14 fetching corpus: 17800, signal 348605/403946 (executing program) 2023/12/10 18:41:14 fetching corpus: 17850, signal 348803/403946 (executing program) 2023/12/10 18:41:14 fetching corpus: 17900, signal 349083/403946 (executing program) 2023/12/10 18:41:14 fetching corpus: 17950, signal 349343/403946 (executing program) 2023/12/10 18:41:14 fetching corpus: 18000, signal 349542/403946 (executing program) 2023/12/10 18:41:14 fetching corpus: 18050, signal 349711/403946 (executing program) 2023/12/10 18:41:14 fetching corpus: 18100, signal 349985/403946 (executing program) 2023/12/10 18:41:14 fetching corpus: 18150, signal 350287/403946 (executing program) 2023/12/10 18:41:15 fetching corpus: 18200, signal 350437/403946 (executing program) 2023/12/10 18:41:15 fetching corpus: 18250, signal 350612/403946 (executing program) 2023/12/10 18:41:15 fetching corpus: 18300, signal 350906/403946 (executing program) 2023/12/10 18:41:15 fetching corpus: 18350, signal 351129/403946 (executing program) 2023/12/10 18:41:15 fetching corpus: 18400, signal 351334/403946 (executing program) 2023/12/10 18:41:15 fetching corpus: 18450, signal 351521/403946 (executing program) 2023/12/10 18:41:15 fetching corpus: 18500, signal 351812/403946 (executing program) 2023/12/10 18:41:15 fetching corpus: 18550, signal 351974/403946 (executing program) 2023/12/10 18:41:16 fetching corpus: 18600, signal 352228/403946 (executing program) 2023/12/10 18:41:16 fetching corpus: 18650, signal 352476/403946 (executing program) 2023/12/10 18:41:16 fetching corpus: 18700, signal 352652/403946 (executing program) 2023/12/10 18:41:16 fetching corpus: 18750, signal 352844/403946 (executing program) 2023/12/10 18:41:16 fetching corpus: 18800, signal 353036/403946 (executing program) 2023/12/10 18:41:16 fetching corpus: 18850, signal 353186/403946 (executing program) 2023/12/10 18:41:16 fetching corpus: 18900, signal 353393/403946 (executing program) 2023/12/10 18:41:17 fetching corpus: 18950, signal 353626/403946 (executing program) 2023/12/10 18:41:17 fetching corpus: 19000, signal 353849/403946 (executing program) 2023/12/10 18:41:17 fetching corpus: 19050, signal 354014/403946 (executing program) 2023/12/10 18:41:17 fetching corpus: 19100, signal 354212/403946 (executing program) 2023/12/10 18:41:17 fetching corpus: 19150, signal 354403/403946 (executing program) 2023/12/10 18:41:17 fetching corpus: 19200, signal 354547/403946 (executing program) 2023/12/10 18:41:17 fetching corpus: 19250, signal 354748/403946 (executing program) 2023/12/10 18:41:17 fetching corpus: 19300, signal 354930/403946 (executing program) 2023/12/10 18:41:18 fetching corpus: 19350, signal 355137/403946 (executing program) 2023/12/10 18:41:18 fetching corpus: 19400, signal 355299/403946 (executing program) 2023/12/10 18:41:18 fetching corpus: 19439, signal 355464/403946 (executing program) 2023/12/10 18:41:18 fetching corpus: 19439, signal 355464/403946 (executing program) 2023/12/10 18:41:20 starting 8 fuzzer processes 18:41:20 executing program 7: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40881}, 0x80) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2a6b, 0x48}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x80, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xad}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x20}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xb72759088d912cdf}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x114, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x114}}, 0x8040) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x78}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3246a2cafb0868d53f0cbeb86b"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000010) r7 = fsopen(&(0x7f0000000980)='ceph\x00', 0x1) preadv(r7, &(0x7f0000000b40)=[{&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/31, 0x1f}, {&(0x7f0000000a40)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/102, 0x66}], 0x4, 0x4, 0x1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1b0, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x20}, @NL80211_ATTR_IE={0x12, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @chsw_timing={0x68, 0x4, {0x7, 0x3}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x54, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="727f677a44ba"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_IE={0x53, 0x2a, [@ibss={0x6, 0x2, 0x4}, @random_vendor={0xdd, 0x3f, "b9422f5d1116c79c124bc2874408d06e896f7f937cae1cf2d03bc418312e8f66e87cfe86a4295e9082c3b07130e1f1dece05d610667a78eace7493dec898ba"}, @peer_mgmt={0x75, 0x8, {0x0, 0x9, @val=0x1, @val=0x36, @void}}]}, @NL80211_ATTR_IE={0xc6, 0x2a, [@ibss={0x6, 0x2, 0x7}, @dsss={0x3, 0x1, 0x38}, @ibss={0x6, 0x2, 0x20}, @chsw_timing={0x68, 0x4, {0x4, 0x1}}, @mic={0x8c, 0x10, {0x9e8, "a1f2088b9411", @short="aac4207c8d828d0d"}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x60}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random={0xff, 0x83, "8420dd0536c9c41de6f2d3252349957e0ebc05357af5ed99372b4b990968a0db5cab8fa20280c963b43c7cfbbdc9904e058b68fb84feb604fdc2f4c57b149e34f3a85834bf604a2bf0f1e454c35f019e7e02e0d2499238abc075914f67f0dfe815ca5728673339ac0ba6bf34ee146ee6f1f064836e14d5a925383fddc4b6140590f10d"}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0x28}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = accept4(r2, 0x0, &(0x7f0000000e00), 0x80000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, 0x0, 0x22d, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x7f, @bearer=@udp='udp:syz1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x200040d1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x800) 18:41:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x90, 0xd1, 0x4, 0x11, @remote, @remote, 0x1, 0x10, 0x7, 0xffffffff}}) r1 = syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x6, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9e71c72917ea2ddb0d6a9ad88913838c1ed675489a1c7787b0b1a990d68bcfc6010531da50", 0x25, 0x1}, {&(0x7f0000000200)="0a6335d6d2181f7a022f6db2c71f0f0059572576a07f5ede9f3e43e42cf1d01d99c48f9534f0a4fa3ba646358b4914602fe3114a71c72014c51a69de3553281356ea6bbb93c23f12fc38560a9e9cb76659373a4f91d68d68fc37255985322c3e1986248a97c7c95b3e78c65669bae71b0db59a23b916c221d86812e452570c61ba3bd54f7feb78b11744d05aa677de80b96a40eb1f8837c8921a0f977194cfcc6c5c47b301327b7aa162acffcd469b1628f09bc6fdf5593e2bf2f4d5c0390693b9287a7af83d3db0621bc1371bb9421b5d06d9820a0e824af531ed95c6c31d5d3f957b3dde60e2", 0xe7, 0x1f}], 0x1040, &(0x7f0000000340)={[{@size={'size', 0x3d, [0x6d, 0x25, 0x31, 0x38, 0x0, 0x35]}}, {@huge_always}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x31, 0x35, 0x66, 0x62, 0x35, 0x32, 0x36], 0x2d, [0x33, 0x35, 0x31, 0x62], 0x2d, [0x30, 0x37, 0x35, 0x39], 0x2d, [0x63, 0x63, 0x34, 0x31], 0x2d, [0x39, 0x32, 0x30, 0x61, 0x65, 0x62, 0x38, 0x56]}}}]}) readv(r1, &(0x7f00000017c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/31, 0x1f}, {&(0x7f0000001440)=""/124, 0x7c}, {&(0x7f00000014c0)=""/81, 0x51}, {&(0x7f0000001540)=""/36, 0x24}, {&(0x7f0000001580)}, {&(0x7f00000015c0)=""/82, 0x52}, {&(0x7f0000001640)=""/128, 0x80}, {&(0x7f00000016c0)=""/222, 0xde}], 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001880)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0xa, 0x80, 0x0, 0x8, 0x4, 0x1}, 0x7fff) pidfd_send_signal(r0, 0x1f, &(0x7f00000018c0)={0x14, 0x1, 0x864}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001a00)={&(0x7f0000001940), 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x10, 0x3f8, 0x4, 0x70bd29, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0xc080) r2 = syz_open_dev$usbmon(&(0x7f0000001a40), 0x3800000, 0x129100) dup3(0xffffffffffffffff, r2, 0x80000) r3 = syz_open_dev$vcsn(&(0x7f0000001a80), 0x1, 0x42000) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) recvmsg$unix(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001ac0)=""/71, 0x47}, {&(0x7f0000001b40)=""/86, 0x56}, {&(0x7f0000001bc0)=""/212, 0xd4}, {&(0x7f0000001cc0)=""/6, 0x6}], 0x4, &(0x7f0000001d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}, 0x10161) r6 = signalfd4(r0, &(0x7f0000001ec0)={[0x6]}, 0x8, 0x80000) dup2(r4, r6) r7 = openat$incfs(r5, &(0x7f0000001f00)='.log\x00', 0x80000, 0xca) openat(r7, &(0x7f0000001f40)='./file0\x00', 0x42100, 0x100) openat(r1, &(0x7f0000001f80)='./file0\x00', 0x40, 0x88) syz_io_uring_setup(0x7d68, &(0x7f0000001fc0)={0x0, 0x6adb, 0x4, 0x1, 0x26b, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002040)=0x0, &(0x7f0000002080)) syz_io_uring_submit(r8, 0x0, &(0x7f00000020c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x8, 0x8, {}, 0x7, 0xc, 0x1, {0x0, 0x0, r4}}, 0xda7) 18:41:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, 0x0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, r0) r1 = request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', r0) r2 = add_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="04797f9176e7180384b27871fd4bc2be7e332c139764235428b73fe1fd154098aec8a57b7b3dc7b6ffa6d9e59db08b01896994b812d9c8856ce847b42e59c5ade6c6225db93c296b453ab4c2fba310bae0423f524aa68436622e1f7ec61cf52381527284979ddeef8da0a04f1af1424fa14282ea949b9e6047315f3bc30e10085322c8ba30982a3cdf62b516e2fcad495f33e2b8bf654fc4d728cc18b1", 0x9d, 0xfffffffffffffffd) r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "980ff6be443f77a2f6409881de401089210e0403780d14f711553a003571874019810a49f4b263c357a97e0d44322f748434358e6a5d0235b975b306865edb63", 0x3a}, 0x48, r1) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$fscrypt_provisioning(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)={0x3, 0x0, @b}, 0x48, r2) r5 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc2}, &(0x7f0000000600)={0x0, "2fd7c533ec12c1a7e4f3b6f352fbdb80863054dc933f703f3aa1d0206e59a334afb89aa96b13fc2c0b9a4b9e15080f421e12597c31f7b25a58aba2297c2805ce", 0x11}, 0x48, r0) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f0000000700)='syzkaller\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$unlink(0x9, r4, r3) add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x33, 0x38, 0x33, 0x31, 0x37, 0x37, 0x30, 0x36, 0x55, 0x66, 0x65, 0x62, 0x63, 0x37, 0x30, 0x33]}, &(0x7f0000000880)={0x0, "4008a6cfad56a1d9607237f16472d9712f5be39ef3d66302ba5260333f5f9c0d14553f10bcc030f3ce71591db2e91410d20dab8e83e8ac4f0037cfba549793bc", 0x19}, 0x48, r1) keyctl$link(0x8, r3, r6) r7 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r7, 0x1) r8 = request_key(&(0x7f0000000980)='blacklist\x00', &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)='id_legacy\x00', 0xfffffffffffffffc) keyctl$chown(0x4, r8, 0xee00, 0xee00) add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x0}, 0x0, 0x0, r1) request_key(&(0x7f0000000ac0)='encrypted\x00', &(0x7f0000000b00)={'syz', 0x2}, &(0x7f0000000b40)='syz', 0xfffffffffffffffd) 18:41:20 executing program 0: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000400)={0x1ca, 0x7}) r0 = io_uring_setup(0x756, &(0x7f0000000440)={0x0, 0xde97, 0x1, 0x2, 0x344}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000004c0)) syncfs(r0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000540)) r3 = signalfd4(r1, &(0x7f0000000580)={[0x6]}, 0x8, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) write$binfmt_elf64(r3, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x1, 0x1, 0x100000000, 0x2, 0x3e, 0x0, 0xf4, 0x40, 0x280, 0x0, 0x7, 0x38, 0x2, 0x8e92, 0xd57, 0x9}, [{0x5, 0x8, 0x20c, 0x2, 0x7, 0x80000000, 0x6, 0x1}, {0x5, 0xffffffff, 0x8, 0x3, 0x2, 0xfffffffffffffff7, 0x401, 0x7}], "9cfb876e9368e3ea38110d653d46b7cf75f76a892aaa24e1dcfb82a2956085202b5694fc755e74f14a5c51ed575bfa3ff1c488a382f0f4c314115fe9ff20167d387daa1e9396a0a342756ceebdf2e3bebc24601b407810014dbf9ff58cfe6f42d529fca12b45818f3c477be7b6108ef94d7404e04bb5a92bf8c0a52c70033dc4d45b226225ea7eb832de974a2af29aeba0789a6cd74faa87215cdff37532a12a8eb2bfe74c9475b048e70e9567330b5e8218e99c7670410f7cbaca4e8dd6eb7d26ffaeb61a50c15d742cbb5e9ff93698b4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa81) io_uring_enter(r3, 0x537d, 0xc52c, 0xd230537d794fc6c9, &(0x7f0000001080)={[0x7fff]}, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) fcntl$setstatus(r4, 0x4, 0x1c00) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000001100)) r5 = syz_open_dev$vcsu(&(0x7f0000001140), 0x2, 0x115902) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000001180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f00000011c0)={0x5, 0xfffffffc}) r7 = syz_open_dev$vcsn(&(0x7f0000001280), 0x1, 0x208002) perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0x1, 0x5, 0x0, 0x6, 0x0, 0x9, 0x810, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_config_ext={0x200, 0xfff}, 0xc482, 0x7, 0xfffffffb, 0x6, 0xa4, 0x3, 0x0, 0x0, 0xffffff00, 0x0, 0x8}, 0x0, 0x0, r7, 0x0) [ 94.674697] audit: type=1400 audit(1702233680.604:6): avc: denied { execmem } for pid=272 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:41:20 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000000)={0x4, 0x0, 0x400, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x2, 0x20001000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000100)={0x100, 0x20001000, 0x5000, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000140)={0x0, 0x20001000, 0x400, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000180)={0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x1, 0x0, 0x4000, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000200)={0xbbd8, 0x1000, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000240)={0x1f, 0x1000, 0x1000, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000280)={0x8000, 0x1000, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000002c0)={0x1, 0x20000800, 0x1000, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000300)={0x3, 0x20001000, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000340)={0xbe47, 0x0, 0x2000, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000380)={0xff, 0x100000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000003c0)={0x5eb8, 0x100000, 0x400, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000400)={0x644, 0x1000, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000440)={0x9, 0xffffffffffffffff, 0xffffffffffffefff, 0x1, 0x3, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000480)={0x6, 0x1000, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000004c0)={0x6, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) 18:41:20 executing program 1: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @val={0x6, 0x80, 0x1ff, 0xe1, 0x20, 0x4}, @arp=@generic={0x300, 0x88ca, 0x6, 0x0, 0x8, @random="f7ad83b7892a", "", @remote, "8e003eaea9a7d50d"}}, 0x26) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@cache_mmap}, {@privport}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@uname={'uname', 0x3d, '),,:'}}, {@cache_fscache}, {@loose}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@posixacl}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) r3 = fcntl$dupfd(r0, 0x0, r0) close_range(r0, r3, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000280)) r4 = syz_io_uring_setup(0x1eae, &(0x7f0000000300)={0x0, 0x988f, 0x8, 0x1, 0x124, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x80004, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r3, 0x7f, {}, 0x7f, 0x9, 0x1, {0x0, 0x0, r6}}, 0x7) r7 = syz_open_dev$usbmon(&(0x7f0000000480), 0x1, 0x8000) r8 = dup(r7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) ioctl$sock_inet_SIOCGARP(r9, 0x8954, &(0x7f0000000500)={{0x2, 0x4e21, @empty}, {0x306, @local}, 0x32, {0x2, 0x4e24, @empty}, 'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r10}, 0x14) poll(&(0x7f0000000600)=[{r3, 0x1318}, {r6, 0x1000}, {r8, 0x45}, {r4, 0x2a}], 0x4, 0xdd05) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000000640)) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x2, r1, 0x3, 0x801d, 0x8001, 0x200, 0x0, 0x30e52d15}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000007c0)={0x2, 0x0, 0x6, 0x9}) 18:41:20 executing program 5: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x101, 0x7, 0x800, 0x7}) r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f00000000c0)="3bf634573af8c477d0dc791475b29940727fbe672b62263ff412e357b91614cab7df061ad4cceb684636b7bc6e1d736c5558138c2856d212ea416186e7b711b451d5b9718f27f9a7ebb05c8b9eee1135f62278d1f22c32f3cce6a87b3bd20320c4276f8a8a40fbcb96ae08379238aec29703ae29", 0x74, 0x2}, {&(0x7f0000000140)="ad673881746d4c196bc62df9968b5946a14fb7065b7f4bc5b4b319f00385f7cdedc4845e9c348807a2b4eface1b4f54378c814121c880c4b3dee03ee9df7ec89b84ada98c7ed47558a3ca9bfab34226c21f88129fff7b2a3eeb8b6ed4246c33cd20ae974064ffe8b214dfb0130cae05e756d9517d98ef177a78133b72b40", 0x7e, 0x4}, {&(0x7f00000001c0)="7d6dcc6f1fbc6bc5b82ae5adebbd95cc6884825660a374a9acd5b5ffa504067b725708890846e38a47a9878c183ca3a43ba033967690c9450d4692862b5a3b32818cf18685b4bf8dc2cce64b592a54b29444a74d60abeb9d6b4b553169767bf5eb070535e28511cd", 0x68, 0xffffffff00000001}], 0xa00000, &(0x7f00000002c0)={[{'%'}], [{@uid_lt={'uid<', 0xee01}}, {@fsname={'fsname', 0x3d, ')'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x6}}]}) ioctl$FITHAW(r0, 0xc0045878) r1 = fsopen(&(0x7f0000000340)='ufs\x00', 0x0) fgetxattr(r1, &(0x7f0000000380)=@random={'btrfs.', '.}^(:+{*.\'#\x00'}, &(0x7f00000003c0)=""/4096, 0x1000) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000013c0)=@abs, &(0x7f0000001440)=0x6e, 0x80000) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000001480)={0x2, 0x0, @remote}, &(0x7f00000014c0)=0x10, 0x400) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) poll(&(0x7f0000001540)=[{r1, 0x1080}, {r2, 0x2014}, {r0, 0x7000}, {r3, 0xa0d2}, {r0, 0x8084}, {r1, 0x2300}, {0xffffffffffffffff, 0x8600}, {r4, 0x600}, {r0, 0x700}, {r1, 0x8000}], 0xa, 0x5) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000015c0)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x11, 0xffffffffffffffff, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x5, 0x50, 0xffffffffffffffff, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001680)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x1, &(0x7f0000001600)="acc7ef2a0df99b14850884359a3bda04ae65cc21193c2ac28bd1738163c7e1d33934aa8c80ee43e923cddac466b0af297bbb6ff1debb75b096150b0651c58ada0d401cd8272a2760650e07142b1ffc85bacdcf922fe305d0eb7e2a457d3376777b930caf6711311a096095a552dca225b6b6acdfdafef1e471d3", 0xffffffff, 0x0, 0x1, {0x1, r7}}, 0x39708325) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r9 = signalfd(r8, &(0x7f00000016c0)={[0x8]}, 0x8) creat(&(0x7f0000001700)='./file0\x00', 0x100) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001740), 0x40000, 0x0) recvmmsg$unix(r10, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001780)=""/29, 0x1d}, {&(0x7f00000017c0)=""/177, 0xb1}, {&(0x7f0000001880)}, {&(0x7f00000018c0)=""/197, 0xc5}, {&(0x7f00000019c0)=""/88, 0x58}, {&(0x7f0000001a40)=""/89, 0x59}], 0x6, &(0x7f0000001b40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000001cc0)=@abs, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001d40)=""/228, 0xe4}, {&(0x7f0000001e40)=""/55, 0x37}, {&(0x7f0000001e80)=""/225, 0xe1}, {&(0x7f0000001f80)=""/224, 0xe0}, {&(0x7f0000002080)=""/80, 0x50}, {&(0x7f0000002100)=""/196, 0xc4}, {&(0x7f0000002200)=""/8, 0x8}, {&(0x7f0000002240)=""/181, 0xb5}, {&(0x7f0000002300)=""/244, 0xf4}], 0x9, &(0x7f00000024c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x2, 0x4000, &(0x7f0000002680)={0x77359400}) fchmod(r9, 0x20) 18:41:20 executing program 6: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x2004, @fd, 0xe99, &(0x7f0000000080)=[{&(0x7f0000000000)="dfa4ece207f1268f4adfe85832", 0xd}, {&(0x7f0000000040)="2e9c5648786e8dd02a902174651d37c142e21ff2a3c1a433b344058f862b92191cadfa38766c44cceb8e008f1e0ae574", 0x30}], 0x2, 0x1f, 0x0, {0x0, r1}}, 0x1f) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000200)={r3, 0x1, r4, 0xaf800000}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x9, 0x8010, r4, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000240)=[r2], 0x1, 0x0, 0x1, {0x0, r1}}, 0x1) r6 = signalfd4(r2, &(0x7f00000002c0)={[0x7ff]}, 0x8, 0x80800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup2(r6, r7) fallocate(r6, 0x21, 0x83d, 0x7fffffff) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x81, 0xc1, 0x1, 0x10000, 0x2, 0x3, 0x83d, 0x31a, 0x40, 0x3b1, 0x0, 0x101, 0x38, 0x2, 0x81, 0xfff8, 0x2}, [{0x5, 0x1f, 0x7caf, 0x400, 0x6, 0xb996, 0x2, 0x2}], "57bc26b43369a30b58cf455e1780fdcf4540ebd5df1dcb66f00eb241e43b4038d30a388d014711a144152a983c112da5123349aa3e04724023c6e38b2de345e925e2727772ba115fd39e48f26786696ee6f69e4686b0fcbb097273ad22f4fc27d5888d161f923f1d96589aa1ee929a80237d2537a5b2ea9d8669dc42c1bfb4262bc683b0ab32e30f815daf1b7330cf32ec6bacaa8edc5c6823a312ecb6a66379253f213dd27fd56be5942645eea3d5a681d3c6e3", ['\x00', '\x00', '\x00', '\x00']}, 0x52c) r8 = getuid() sendmsg$netlink(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)={0x1c4, 0x30, 0x800, 0x70bd25, 0x25dfdbfb, "", [@nested={0x28, 0x5f, 0x0, 0x1, [@typed={0x8, 0x52, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x25, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x68, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x93, 0x0, 0x0, @uid}]}, @generic="aec2744778cb84f04ca5dd5f35e09108a7c66d77689fb760c46bb097fc299f036e9b774114e60e056be6422d9be0a4aa8e5fae25511c3efe5a7055ba261b4cd6d8efa2ca0e0c0659f1bb7ac8b23c30fba23b93e7a7d4a5fe1c6f44037341d1084e273dd62a0e5b00d97666468269804c21204b8385303415eb4a2e57fe695acf8efabb5314843eb9c0d0e55da5d59f256fe541969d13c284687862b79a7ce4f33400699dd211b4", @generic="8302c35bec6ad588bba1a02ca489cec543f38bae10cceae98015bec4b14d85e8700b634fc8180f7e1fc4562342d9e5a9a9b168dca3f827fbf92f015845ebfcbf92bb632df408da4e3731c33e59c0fb4f284c19529a191f2f9169f95663a6863d5f359a7817815273bd276a50", @generic="ed46add6c90560bcfe82932b9b085b6b1d3af5f513aa9dd3b3dc6317f303d96b5cf4f46e7f1ce4e26269e6b352634f9f9e868053632d7a7bea22eb744c11789915815e54df2076e4c71e065e198eb75def0d8df5dac73a7634", @generic="b1be57bce3e9daf4a45e7d73f7a9d899a5c2743281a3c9f8ecfbf550b1"]}, 0x1c4}], 0x1, 0x0, 0x0, 0x40014}, 0x800) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000ac0)) r9 = accept4$inet(r6, &(0x7f0000000b00)={0x2, 0x0, @multicast1}, &(0x7f0000000b40)=0x10, 0x0) lseek(r9, 0x372, 0x3) mknodat$loop(r2, &(0x7f0000000b80)='./file0\x00', 0x100, 0x1) [ 97.858860] Bluetooth: hci0: command 0x0409 tx timeout [ 97.985430] Bluetooth: hci1: command 0x0409 tx timeout [ 97.985556] Bluetooth: hci4: command 0x0409 tx timeout [ 97.987167] Bluetooth: hci3: command 0x0409 tx timeout [ 97.988166] Bluetooth: hci2: command 0x0409 tx timeout [ 98.050476] Bluetooth: hci7: command 0x0409 tx timeout [ 98.052125] Bluetooth: hci6: command 0x0409 tx timeout [ 98.052754] Bluetooth: hci5: command 0x0409 tx timeout [ 99.905633] Bluetooth: hci0: command 0x041b tx timeout [ 100.033479] Bluetooth: hci2: command 0x041b tx timeout [ 100.034117] Bluetooth: hci3: command 0x041b tx timeout [ 100.034760] Bluetooth: hci4: command 0x041b tx timeout [ 100.035339] Bluetooth: hci1: command 0x041b tx timeout [ 100.098486] Bluetooth: hci5: command 0x041b tx timeout [ 100.099147] Bluetooth: hci6: command 0x041b tx timeout [ 100.100434] Bluetooth: hci7: command 0x041b tx timeout [ 101.953435] Bluetooth: hci0: command 0x040f tx timeout [ 102.082450] Bluetooth: hci1: command 0x040f tx timeout [ 102.083115] Bluetooth: hci4: command 0x040f tx timeout [ 102.083765] Bluetooth: hci3: command 0x040f tx timeout [ 102.084347] Bluetooth: hci2: command 0x040f tx timeout [ 102.145432] Bluetooth: hci7: command 0x040f tx timeout [ 102.146062] Bluetooth: hci6: command 0x040f tx timeout [ 102.146679] Bluetooth: hci5: command 0x040f tx timeout [ 104.001430] Bluetooth: hci0: command 0x0419 tx timeout [ 104.130468] Bluetooth: hci2: command 0x0419 tx timeout [ 104.132150] Bluetooth: hci3: command 0x0419 tx timeout [ 104.132821] Bluetooth: hci4: command 0x0419 tx timeout [ 104.133419] Bluetooth: hci1: command 0x0419 tx timeout [ 104.193711] Bluetooth: hci5: command 0x0419 tx timeout [ 104.195024] Bluetooth: hci6: command 0x0419 tx timeout [ 104.195640] Bluetooth: hci7: command 0x0419 tx timeout [ 111.169257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.170297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.171850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.201113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.202024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.208478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.212731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.213512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.214706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.277132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.278317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.282060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.282953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.287128] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.288217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.289673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.290539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.294300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.310606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.311629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.312784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.317220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.318307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.319497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.358360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.359194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.363955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.364323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.365086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.366840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.433967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.434940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.436036] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.461744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.462993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.464077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.467305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.468110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.469608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.476131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.476983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.522854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:41:37 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x19, 0x2}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x80000002}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6bf6, 0x0, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 111.625130] audit: type=1400 audit(1702233697.554:7): avc: denied { open } for pid=3892 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 111.627326] audit: type=1400 audit(1702233697.554:8): avc: denied { kernel } for pid=3892 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 111.632327] nfs: Unknown parameter '%' [ 111.641198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.642079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.643342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.649109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.649944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.651069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.894294] ====================================================== [ 111.894294] WARNING: the mand mount option is being deprecated and [ 111.894294] will be removed in v5.15! [ 111.894294] ====================================================== [ 111.946418] hrtimer: interrupt took 18985 ns 18:41:49 executing program 6: creat(0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2bd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73668553b300080820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000400), 0x0, 0x9e0}, {&(0x7f0000010400)}, {&(0x7f0000010800)}], 0x0, 0x0) unlinkat(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@mmap}], [{@audit}, {@obj_type={'obj_type', 0x3d, '9p\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, '+%'}}]}}) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=']) 18:41:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x19, 0x2}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x80000002}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6bf6, 0x0, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:41:49 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x19, 0x2}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x80000002}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6bf6, 0x0, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:41:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000000000000000000000500000000000000b20d5f13000080487fec864b245e0f3f9be149f8d6c77220c3fcf35d29bc50e2970787aa50661508725c391553a10ac329f228a4ecdcbf1f6963052f3351f9dde59442b4b0bf27aaf14a1e025d4dbe7a1275b210fdea34bd1d74404d404bd572bd3ad148d3d5f2f48693c2fc1e48895ebdeca2e1f23e618de65bbad5501041647feb9ecddc70760d94252454f66a1a6945c364f2c7e716a9476393d5c7e50ea91bb8342355259b2a14b3855f6043ab78cf8ae36fce00"/213], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x51665cf0772cf6eb, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, {}, {}, 0x0, 0x8}}, [@policy_type={0xa}]}, 0xcc}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x4080, 0x1) unshare(0x48020200) unshare(0x0) 18:41:49 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0x0, 0x1}, 0x50080, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 18:41:49 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r1, 0x0, r3) openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x4000, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001000), &(0x7f0000001040)=0xc) getgroups(0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$bt_hci(r4, &(0x7f0000000180)={0x1, @write_current_iac_lap={{0xc3a, 0x7}, {0x6, "e8a7262fe413"}}}, 0xb) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40086607, &(0x7f0000000040)={0x80000}) 18:41:49 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0xfffffffffffffddf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1810b13cd5c616a6}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x60501, 0x108, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x65}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="2a000000290200001002006970b8d3ff81f43900ff000000000107002e2f66696c6530703147bf3045dfae6fdbb3f06197cca3ba3baab516c22a5f4be144e0473067dfc18c5a1c4872926397f3c91d4457aa1f9872f4fe3d984175dbda9884a40bac333e4c94823bf4e87edf78f85710e3b91fbb4834323f24626d1e18c6b9416201e2335c9b67a829aef5eeeff1022342068e3eef527c9bea3258c748c99911e3123b6c1cfdf89341f4784cd48c33403939c26f62b42d9baf25988cbde3f75eb914535a1758728962fa1b87974d6909d95efdc0c0ee46a37f1e7950d12acc7cd413b1b7eb94e589bb2d075cf4b4dd46454143d3c148e6d36ff6d072a30b7b47f56f2222ecd4883b1d2cc54301e0b1d8186fa36419e209f3"], 0x2a) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0800050004000000140004007665746831993a"], 0x38}}, 0x0) 18:41:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000234}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 123.963208] [ 123.963571] ====================================================== [ 123.964868] WARNING: possible circular locking dependency detected [ 123.966161] 5.10.203 #1 Not tainted [ 123.966909] ------------------------------------------------------ [ 123.971733] syz-executor.1/3976 is trying to acquire lock: [ 123.972854] ffff88800fbb4ae8 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 123.974822] [ 123.974822] but task is already holding lock: [ 123.976021] ffff88800fbb4f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 123.977774] [ 123.977774] which lock already depends on the new lock. [ 123.977774] [ 123.979470] [ 123.979470] the existing dependency chain (in reverse order) is: [ 123.980998] [ 123.980998] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 123.982291] __mutex_lock+0x13d/0x10b0 [ 123.983195] hci_dev_do_close+0xef/0x1240 [ 123.984156] hci_rfkill_set_block+0x166/0x1a0 [ 123.985212] rfkill_set_block+0x1fd/0x540 [ 123.986168] rfkill_fop_write+0x253/0x4b0 [ 123.987148] vfs_write+0x29a/0xa70 [ 123.987985] ksys_write+0x1f6/0x260 [ 123.988830] do_syscall_64+0x33/0x40 [ 123.989683] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 123.990822] [ 123.990822] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 123.992186] __mutex_lock+0x13d/0x10b0 [ 123.993076] rfkill_register+0x36/0xa10 [ 123.994003] hci_register_dev+0x42e/0xc00 [ 123.994970] __vhci_create_device+0x2c8/0x5c0 [ 123.996024] vhci_open_timeout+0x38/0x50 [ 123.996968] process_one_work+0x9a9/0x14b0 [ 123.997943] worker_thread+0x61d/0x1310 [ 123.998867] kthread+0x38f/0x470 [ 123.999683] ret_from_fork+0x22/0x30 [ 124.000545] [ 124.000545] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 124.001863] __mutex_lock+0x13d/0x10b0 [ 124.002753] vhci_send_frame+0x63/0xa0 [ 124.003656] hci_send_frame+0x1b9/0x320 [ 124.004578] hci_tx_work+0x10af/0x1660 [ 124.005482] process_one_work+0x9a9/0x14b0 [ 124.006430] worker_thread+0x61d/0x1310 [ 124.007350] kthread+0x38f/0x470 [ 124.008129] ret_from_fork+0x22/0x30 [ 124.008972] [ 124.008972] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 124.010567] __lock_acquire+0x29e7/0x5b00 [ 124.011519] lock_acquire+0x197/0x470 [ 124.012391] __flush_work+0x105/0xa90 [ 124.013276] hci_dev_do_close+0x131/0x1240 [ 124.014249] hci_rfkill_set_block+0x166/0x1a0 [ 124.015268] rfkill_set_block+0x1fd/0x540 [ 124.016199] rfkill_fop_write+0x253/0x4b0 [ 124.017131] vfs_write+0x29a/0xa70 [ 124.017950] ksys_write+0x1f6/0x260 [ 124.018404] audit: type=1400 audit(1702233709.943:9): avc: denied { write } for pid=3969 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.018797] do_syscall_64+0x33/0x40 [ 124.018820] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 124.024830] [ 124.024830] other info that might help us debug this: [ 124.024830] [ 124.026445] Chain exists of: [ 124.026445] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 124.026445] [ 124.029063] Possible unsafe locking scenario: [ 124.029063] [ 124.030277] CPU0 CPU1 [ 124.031224] ---- ---- [ 124.032156] lock(&hdev->req_lock); [ 124.032924] lock(rfkill_global_mutex); [ 124.034274] lock(&hdev->req_lock); [ 124.035554] lock((work_completion)(&hdev->tx_work)); [ 124.036638] [ 124.036638] *** DEADLOCK *** [ 124.036638] [ 124.037871] 2 locks held by syz-executor.1/3976: [ 124.038842] #0: ffffffff85619528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 124.040769] #1: ffff88800fbb4f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 124.042636] [ 124.042636] stack backtrace: [ 124.043578] CPU: 0 PID: 3976 Comm: syz-executor.1 Not tainted 5.10.203 #1 [ 124.044988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.046710] Call Trace: [ 124.047261] dump_stack+0x107/0x167 [ 124.048016] check_noncircular+0x263/0x2e0 [ 124.048892] ? register_lock_class+0xbb/0x17b0 [ 124.049845] ? print_circular_bug+0x470/0x470 [ 124.050777] ? stack_trace_consume_entry+0x160/0x160 [ 124.051842] ? alloc_chain_hlocks+0x342/0x5a0 [ 124.052773] __lock_acquire+0x29e7/0x5b00 [ 124.053639] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 124.054725] ? rwlock_bug.part.0+0x90/0x90 [ 124.055620] lock_acquire+0x197/0x470 [ 124.056407] ? __flush_work+0xdd/0xa90 [ 124.057214] ? lock_release+0x680/0x680 [ 124.058039] ? lock_release+0x680/0x680 [ 124.058863] ? lock_chain_count+0x20/0x20 [ 124.059737] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 124.060821] ? lock_chain_count+0x20/0x20 [ 124.061680] ? lock_acquire+0x197/0x470 [ 124.062503] __flush_work+0x105/0xa90 [ 124.063304] ? __flush_work+0xdd/0xa90 [ 124.064112] ? queue_delayed_work_on+0xe0/0xe0 [ 124.065057] ? hci_dev_do_close+0xef/0x1240 [ 124.065951] ? __cancel_work_timer+0x2a9/0x4c0 [ 124.066897] ? mutex_lock_io_nested+0xf30/0xf30 [ 124.067869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 124.068960] ? __cancel_work+0x250/0x2b0 [ 124.069814] ? trace_hardirqs_on+0x5b/0x180 [ 124.070712] ? __cancel_work+0x1bb/0x2b0 [ 124.071575] ? try_to_grab_pending+0xe0/0xe0 [ 124.072502] hci_dev_do_close+0x131/0x1240 [ 124.073386] ? rfkill_set_block+0x18f/0x540 [ 124.074285] ? hci_dev_open+0x350/0x350 [ 124.075142] ? mark_held_locks+0x9e/0xe0 [ 124.075991] hci_rfkill_set_block+0x166/0x1a0 [ 124.076920] ? hci_power_off+0x20/0x20 [ 124.077724] rfkill_set_block+0x1fd/0x540 [ 124.078587] rfkill_fop_write+0x253/0x4b0 [ 124.079456] ? rfkill_sync_work+0xa0/0xa0 [ 124.080321] ? security_file_permission+0x24e/0x570 [ 124.081364] ? rfkill_sync_work+0xa0/0xa0 [ 124.082228] vfs_write+0x29a/0xa70 [ 124.082970] ksys_write+0x1f6/0x260 [ 124.083743] ? __ia32_sys_read+0xb0/0xb0 [ 124.084613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 124.085701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 124.086776] do_syscall_64+0x33/0x40 [ 124.087558] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 124.088623] RIP: 0033:0x7fab4e538b19 [ 124.089394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.093232] RSP: 002b:00007fab4baae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.094811] RAX: ffffffffffffffda RBX: 00007fab4e64bf60 RCX: 00007fab4e538b19 [ 124.096308] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000004 [ 124.097790] RBP: 00007fab4e592f6d R08: 0000000000000000 R09: 0000000000000000 [ 124.099282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.100765] R13: 00007ffeb84903ef R14: 00007fab4baae300 R15: 0000000000022000 18:41:50 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000003540)="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", 0x50b}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000001280), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x5a, 0x2, 0x9, 0x7fff}) 18:41:50 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0xffffffffffffffd2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x100000, &(0x7f00000002c0)) 18:41:50 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r1, 0x0, r3) openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x4000, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001000), &(0x7f0000001040)=0xc) getgroups(0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$bt_hci(r4, &(0x7f0000000180)={0x1, @write_current_iac_lap={{0xc3a, 0x7}, {0x6, "e8a7262fe413"}}}, 0xb) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40086607, &(0x7f0000000040)={0x80000}) 18:41:50 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0xfffffffffffffddf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1810b13cd5c616a6}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x60501, 0x108, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x65}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x2a) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0800050004000000140004007665746831993a"], 0x38}}, 0x0) 18:41:50 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0xfffffffffffffddf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1810b13cd5c616a6}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x60501, 0x108, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x65}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x2a) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0800050004000000140004007665746831993a"], 0x38}}, 0x0) 18:41:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8}, @val={0xc, 0x99, {0x1dca, 0x4a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40084) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x18, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) 18:41:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000234}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 18:41:59 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0xfffffffffffffddf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1810b13cd5c616a6}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x60501, 0x108, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x65}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="2a000000290200001002006970b8d3ff81f43900ff000000000107002e2f66696c6530703147bf3045dfae6fdbb3f06197cca3ba3baab516c22a5f4be144e0473067dfc18c5a1c4872926397f3c91d4457aa1f9872f4fe3d984175dbda9884a40bac333e4c94823bf4e87edf78f85710e3b91fbb4834323f24626d1e18c6b9416201e2335c9b67a829aef5eeeff1022342068e3eef527c9bea3258c748c99911e3123b6c1cfdf89341f4784cd48c33403939c26f62b42d9baf25988cbde3f75eb914535a1758728962fa1b87974d6909d95efdc0c0ee46a37f1e7950d12acc7cd413b1b7eb94e589bb2d075cf4b4dd46454143d3c148e6d36ff6d072a30b7b47f56f2222ecd4883b1d2cc54301e0b1d8186fa36419e209f3"], 0x2a) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0800050004000000140004007665746831993a"], 0x38}}, 0x0) 18:41:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e22, 0x400, @mcast1, 0xfffffff7}, 0x1c) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40280, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000300)=""/208, 0xd0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000400)=ANY=[]) getsockname$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @multicast2}, &(0x7f0000000480)=0x10) r1 = socket$netlink(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x66000, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 18:41:59 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r1, 0x0, r3) openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x4000, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001000), &(0x7f0000001040)=0xc) getgroups(0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$bt_hci(r4, &(0x7f0000000180)={0x1, @write_current_iac_lap={{0xc3a, 0x7}, {0x6, "e8a7262fe413"}}}, 0xb) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40086607, &(0x7f0000000040)={0x80000}) 18:41:59 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0xfffffffffffffddf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1810b13cd5c616a6}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x60501, 0x108, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x65}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x2a) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0800050004000000140004007665746831993a"], 0x38}}, 0x0) 18:41:59 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000003540)="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", 0x50b}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000001280), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x5a, 0x2, 0x9, 0x7fff}) 18:41:59 executing program 6: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') r1 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'ip6tnl0\x00', {}, 0x7}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x61}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x80}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xb2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3f1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r3}}, 0x7d7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000540)={0x0, 0x100, 0x20, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) [ 133.574168] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 133.591813] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' 18:41:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000234}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 18:41:59 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0xfffffffffffffddf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1810b13cd5c616a6}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x60501, 0x108, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x65}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x2a) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0800050004000000140004007665746831993a"], 0x38}}, 0x0) 18:41:59 executing program 3: r0 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x1c280, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key(&(0x7f0000000180)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="5922b98cd6cb753e6af5929ff3b932c00888182e78f51f0847eb590bab5d8d8f0a6ee1137ce2091e5f707dcc709c61485f7665685530506b4bf136d0fe1c2c103ef684b1b0d3ce71adc8252c1c6bb06a6a67a2cec1282485236a45e322f4f92bbf06684a52a775411a69907824a5a25457d0d4a36e8da6fef51e453dbcd78410e91fbca149", 0x85, r0) 18:41:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e22, 0x400, @mcast1, 0xfffffff7}, 0x1c) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40280, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000300)=""/208, 0xd0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000400)=ANY=[]) getsockname$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @multicast2}, &(0x7f0000000480)=0x10) r1 = socket$netlink(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x66000, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 18:41:59 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0xfffffffffffffddf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1810b13cd5c616a6}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x60501, 0x108, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x65}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x2a) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0800050004000000140004007665746831993a"], 0x38}}, 0x0) 18:41:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001f00195e183ed40000000000000000000000000000000000000000ac1e000100"/50], 0x40}}, 0x0) 18:41:59 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0xfffffffffffffddf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1810b13cd5c616a6}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x60501, 0x108, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x65}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="2a000000290200001002006970b8d3ff81f43900ff000000000107002e2f66696c6530703147bf3045dfae6fdbb3f06197cca3ba3baab516c22a5f4be144e0473067dfc18c5a1c4872926397f3c91d4457aa1f9872f4fe3d984175dbda9884a40bac333e4c94823bf4e87edf78f85710e3b91fbb4834323f24626d1e18c6b9416201e2335c9b67a829aef5eeeff1022342068e3eef527c9bea3258c748c99911e3123b6c1cfdf89341f4784cd48c33403939c26f62b42d9baf25988cbde3f75eb914535a1758728962fa1b87974d6909d95efdc0c0ee46a37f1e7950d12acc7cd413b1b7eb94e589bb2d075cf4b4dd46454143d3c148e6d36ff6d072a30b7b47f56f2222ecd4883b1d2cc54301e0b1d8186fa36419e209f3"], 0x2a) 18:41:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001f00195e183ed40000000000000000000000000000000000000000ac1e000100"/50], 0x40}}, 0x0) 18:41:59 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0xfffffffffffffddf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1810b13cd5c616a6}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x60501, 0x108, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x65}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x2a) 18:41:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000234}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 18:41:59 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2000000, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 18:41:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001f00195e183ed40000000000000000000000000000000000000000ac1e000100"/50], 0x40}}, 0x0) 18:41:59 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0xfffffffffffffddf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1810b13cd5c616a6}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x60501, 0x108, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x65}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) 18:41:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001f00195e183ed40000000000000000000000000000000000000000ac1e000100"/50], 0x40}}, 0x0) 18:41:59 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0xfffffffffffffddf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1810b13cd5c616a6}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x60501, 0x108, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x65}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') VM DIAGNOSIS: 18:41:50 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822cae9c RDI=ffffffff879e8240 RBP=ffffffff879e8200 RSP=ffff88802035f290 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d094 R14=fffffbfff0f3d04a R15=dffffc0000000000 RIP=ffffffff822caef0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fab4baae700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7bdf855000 CR3=0000000048446000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8146f598 RDX=ffff8880088b0000 RSI=0000000000000000 RDI=0000000000000000 RBP=ffffffff850a5a40 RSP=ffff8880088bf6d0 R8 =0000000000000000 R9 =ffffffff850a5a43 R10=0000000000000000 R11=0000000000000001 R12=0000000000000cc0 R13=0000000000000cc0 R14=000000000000001f R15=0000000000000000 RIP=ffffffff814085a4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f13dded9900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562022119a80 CR3=000000000dddc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=732f70756f7267632f73662f7379732f XMM01=6563696c732e6d65747379732f70756f XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005620220f562000005620221b71a0 XMM06=000056202211e5a000005620221e9040 XMM07=00000000000000000000000000000000 XMM08=00000000000000210000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000