Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:8764' (ECDSA) to the list of known hosts. 2022/10/04 00:51:54 fuzzer started 2022/10/04 00:51:54 dialing manager at localhost:35095 syzkaller login: [ 38.550264] cgroup: Unknown subsys name 'net' [ 38.631947] cgroup: Unknown subsys name 'rlimit' 2022/10/04 00:52:09 syscalls: 2215 2022/10/04 00:52:09 code coverage: enabled 2022/10/04 00:52:09 comparison tracing: enabled 2022/10/04 00:52:09 extra coverage: enabled 2022/10/04 00:52:09 setuid sandbox: enabled 2022/10/04 00:52:09 namespace sandbox: enabled 2022/10/04 00:52:09 Android sandbox: enabled 2022/10/04 00:52:09 fault injection: enabled 2022/10/04 00:52:09 leak checking: enabled 2022/10/04 00:52:09 net packet injection: enabled 2022/10/04 00:52:09 net device setup: enabled 2022/10/04 00:52:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/04 00:52:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/04 00:52:09 USB emulation: enabled 2022/10/04 00:52:09 hci packet injection: enabled 2022/10/04 00:52:09 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/04 00:52:09 802.15.4 emulation: enabled 2022/10/04 00:52:10 fetching corpus: 50, signal 29356/31170 (executing program) 2022/10/04 00:52:10 fetching corpus: 100, signal 42668/46137 (executing program) 2022/10/04 00:52:10 fetching corpus: 150, signal 50252/55291 (executing program) 2022/10/04 00:52:10 fetching corpus: 200, signal 54047/60663 (executing program) 2022/10/04 00:52:10 fetching corpus: 250, signal 57585/65793 (executing program) 2022/10/04 00:52:10 fetching corpus: 300, signal 62227/71923 (executing program) 2022/10/04 00:52:10 fetching corpus: 350, signal 65815/76957 (executing program) 2022/10/04 00:52:10 fetching corpus: 400, signal 68375/80979 (executing program) 2022/10/04 00:52:10 fetching corpus: 450, signal 71700/85704 (executing program) 2022/10/04 00:52:11 fetching corpus: 500, signal 75215/90552 (executing program) 2022/10/04 00:52:11 fetching corpus: 550, signal 77703/94415 (executing program) 2022/10/04 00:52:11 fetching corpus: 600, signal 81162/99105 (executing program) 2022/10/04 00:52:11 fetching corpus: 650, signal 86299/105317 (executing program) 2022/10/04 00:52:11 fetching corpus: 700, signal 89394/109584 (executing program) 2022/10/04 00:52:11 fetching corpus: 750, signal 92617/113951 (executing program) 2022/10/04 00:52:11 fetching corpus: 800, signal 96463/118787 (executing program) 2022/10/04 00:52:11 fetching corpus: 850, signal 99261/122613 (executing program) 2022/10/04 00:52:12 fetching corpus: 900, signal 100389/124964 (executing program) 2022/10/04 00:52:12 fetching corpus: 950, signal 102585/128250 (executing program) 2022/10/04 00:52:12 fetching corpus: 1000, signal 105032/131749 (executing program) 2022/10/04 00:52:12 fetching corpus: 1050, signal 106973/134802 (executing program) 2022/10/04 00:52:12 fetching corpus: 1100, signal 112062/140425 (executing program) 2022/10/04 00:52:12 fetching corpus: 1150, signal 113484/142925 (executing program) 2022/10/04 00:52:12 fetching corpus: 1200, signal 114658/145242 (executing program) 2022/10/04 00:52:12 fetching corpus: 1250, signal 116735/148249 (executing program) 2022/10/04 00:52:13 fetching corpus: 1300, signal 118675/151132 (executing program) 2022/10/04 00:52:13 fetching corpus: 1350, signal 120565/153953 (executing program) 2022/10/04 00:52:13 fetching corpus: 1400, signal 123597/157732 (executing program) 2022/10/04 00:52:13 fetching corpus: 1450, signal 125127/160127 (executing program) 2022/10/04 00:52:13 fetching corpus: 1500, signal 127122/162925 (executing program) 2022/10/04 00:52:13 fetching corpus: 1550, signal 128738/165400 (executing program) 2022/10/04 00:52:13 fetching corpus: 1600, signal 130411/167965 (executing program) 2022/10/04 00:52:14 fetching corpus: 1650, signal 131834/170268 (executing program) 2022/10/04 00:52:14 fetching corpus: 1700, signal 133880/173036 (executing program) 2022/10/04 00:52:14 fetching corpus: 1750, signal 134821/174928 (executing program) 2022/10/04 00:52:14 fetching corpus: 1800, signal 136561/177385 (executing program) 2022/10/04 00:52:14 fetching corpus: 1850, signal 137537/179254 (executing program) 2022/10/04 00:52:14 fetching corpus: 1900, signal 138388/181010 (executing program) 2022/10/04 00:52:14 fetching corpus: 1950, signal 139931/183302 (executing program) 2022/10/04 00:52:14 fetching corpus: 2000, signal 141121/185256 (executing program) 2022/10/04 00:52:15 fetching corpus: 2050, signal 142329/187263 (executing program) 2022/10/04 00:52:15 fetching corpus: 2100, signal 143648/189338 (executing program) 2022/10/04 00:52:15 fetching corpus: 2150, signal 146152/192279 (executing program) 2022/10/04 00:52:15 fetching corpus: 2200, signal 148538/195138 (executing program) 2022/10/04 00:52:15 fetching corpus: 2250, signal 149588/196947 (executing program) 2022/10/04 00:52:15 fetching corpus: 2300, signal 150504/198642 (executing program) 2022/10/04 00:52:15 fetching corpus: 2350, signal 151270/200141 (executing program) 2022/10/04 00:52:15 fetching corpus: 2400, signal 152259/201863 (executing program) 2022/10/04 00:52:16 fetching corpus: 2450, signal 152992/203371 (executing program) 2022/10/04 00:52:16 fetching corpus: 2500, signal 153686/204859 (executing program) 2022/10/04 00:52:16 fetching corpus: 2550, signal 155100/206861 (executing program) 2022/10/04 00:52:16 fetching corpus: 2600, signal 156517/208856 (executing program) 2022/10/04 00:52:16 fetching corpus: 2650, signal 157425/210451 (executing program) 2022/10/04 00:52:16 fetching corpus: 2700, signal 158103/211861 (executing program) 2022/10/04 00:52:16 fetching corpus: 2750, signal 159051/213497 (executing program) 2022/10/04 00:52:16 fetching corpus: 2800, signal 159916/215021 (executing program) 2022/10/04 00:52:16 fetching corpus: 2850, signal 161360/216944 (executing program) 2022/10/04 00:52:17 fetching corpus: 2900, signal 162099/218367 (executing program) 2022/10/04 00:52:17 fetching corpus: 2950, signal 163004/219893 (executing program) 2022/10/04 00:52:17 fetching corpus: 3000, signal 163815/221317 (executing program) 2022/10/04 00:52:17 fetching corpus: 3050, signal 165077/223102 (executing program) 2022/10/04 00:52:17 fetching corpus: 3100, signal 165827/224521 (executing program) 2022/10/04 00:52:17 fetching corpus: 3150, signal 166574/225912 (executing program) 2022/10/04 00:52:17 fetching corpus: 3200, signal 167198/227247 (executing program) 2022/10/04 00:52:17 fetching corpus: 3250, signal 168159/228755 (executing program) 2022/10/04 00:52:18 fetching corpus: 3300, signal 168988/230154 (executing program) 2022/10/04 00:52:18 fetching corpus: 3350, signal 169313/231269 (executing program) 2022/10/04 00:52:18 fetching corpus: 3400, signal 170044/232614 (executing program) 2022/10/04 00:52:18 fetching corpus: 3450, signal 171174/234152 (executing program) 2022/10/04 00:52:18 fetching corpus: 3500, signal 171741/235395 (executing program) 2022/10/04 00:52:18 fetching corpus: 3550, signal 172236/236579 (executing program) 2022/10/04 00:52:18 fetching corpus: 3600, signal 173167/238015 (executing program) 2022/10/04 00:52:18 fetching corpus: 3650, signal 174510/239614 (executing program) 2022/10/04 00:52:18 fetching corpus: 3700, signal 175443/240960 (executing program) 2022/10/04 00:52:19 fetching corpus: 3750, signal 177420/242854 (executing program) 2022/10/04 00:52:19 fetching corpus: 3800, signal 178178/244101 (executing program) 2022/10/04 00:52:19 fetching corpus: 3850, signal 178683/245247 (executing program) 2022/10/04 00:52:19 fetching corpus: 3900, signal 179153/246364 (executing program) 2022/10/04 00:52:19 fetching corpus: 3950, signal 179672/247451 (executing program) 2022/10/04 00:52:19 fetching corpus: 4000, signal 180647/248772 (executing program) 2022/10/04 00:52:19 fetching corpus: 4050, signal 181290/249993 (executing program) 2022/10/04 00:52:19 fetching corpus: 4100, signal 181705/250997 (executing program) 2022/10/04 00:52:20 fetching corpus: 4150, signal 182316/252071 (executing program) 2022/10/04 00:52:20 fetching corpus: 4200, signal 183045/253288 (executing program) 2022/10/04 00:52:20 fetching corpus: 4250, signal 183452/254293 (executing program) 2022/10/04 00:52:20 fetching corpus: 4300, signal 184006/255363 (executing program) 2022/10/04 00:52:20 fetching corpus: 4350, signal 184477/256408 (executing program) 2022/10/04 00:52:20 fetching corpus: 4400, signal 185842/257848 (executing program) 2022/10/04 00:52:20 fetching corpus: 4450, signal 186319/258858 (executing program) 2022/10/04 00:52:20 fetching corpus: 4500, signal 187597/260222 (executing program) 2022/10/04 00:52:20 fetching corpus: 4550, signal 188022/261225 (executing program) 2022/10/04 00:52:20 fetching corpus: 4600, signal 188596/262256 (executing program) 2022/10/04 00:52:21 fetching corpus: 4650, signal 189238/263306 (executing program) 2022/10/04 00:52:21 fetching corpus: 4700, signal 189574/264241 (executing program) 2022/10/04 00:52:21 fetching corpus: 4750, signal 190028/265222 (executing program) 2022/10/04 00:52:21 fetching corpus: 4800, signal 190792/266315 (executing program) 2022/10/04 00:52:21 fetching corpus: 4850, signal 191488/267357 (executing program) 2022/10/04 00:52:21 fetching corpus: 4900, signal 193036/268750 (executing program) 2022/10/04 00:52:21 fetching corpus: 4950, signal 194130/269918 (executing program) 2022/10/04 00:52:22 fetching corpus: 5000, signal 194623/270796 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/271559 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/272329 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/273073 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/273855 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/274569 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/275355 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/276144 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/276905 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/277673 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/278409 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/279198 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/279999 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/280745 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/281446 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/282157 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/282907 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/283662 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/284428 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/285231 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/285991 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/286769 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/287497 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/288253 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/289049 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/289833 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/290570 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/291318 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/292087 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/292828 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/293644 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/294396 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/295162 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/295917 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/296645 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/297385 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/298147 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/298920 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/299675 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/300423 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/301176 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/301958 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/302707 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/303486 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/304245 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/304993 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/305749 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/306497 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/307272 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/308021 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/308760 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/309519 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/310285 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/311069 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/311837 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/312351 (executing program) 2022/10/04 00:52:22 fetching corpus: 5001, signal 194785/312351 (executing program) 2022/10/04 00:52:25 starting 8 fuzzer processes 00:52:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x149) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x66500, 0xa) r2 = accept$unix(r1, 0x0, &(0x7f0000000140)) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x9}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x24a00, 0x2) recvfrom(r3, &(0x7f0000000240)=""/91, 0x5b, 0x40002062, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010102}}, 0x80) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x81) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) recvmmsg(r5, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3, &(0x7f0000001580)=""/169, 0xa9}, 0x6a9}, {{&(0x7f0000001640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003900)=[{&(0x7f00000016c0)=""/227, 0xe3}, {&(0x7f00000017c0)=""/152, 0x98}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/101, 0x65}], 0x5, &(0x7f0000003980)=""/3, 0x3}, 0x5}], 0x2, 0x100, 0x0) mount$cgroup2(0x0, &(0x7f0000003a40)='./file0\x00', &(0x7f0000003a80), 0xd0, &(0x7f0000003ac0)={[{}, {@memory_recursiveprot}], [{@uid_lt={'uid<', 0xee00}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.opaque\x00'}}, {@fsname={'fsname', 0x3d, '-%'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@subj_type={'subj_type', 0x3d, 'y\x00'}}]}) recvfrom$unix(r1, &(0x7f0000003b80)=""/46, 0x2e, 0x121, &(0x7f0000003bc0)=@file={0x0, './file0\x00'}, 0x6e) waitid$P_PIDFD(0x3, r3, &(0x7f0000003c40), 0x2, &(0x7f0000003cc0)) r6 = openat(r0, &(0x7f0000003d80)='./file0\x00', 0x400, 0xa0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) getpeername$unix(r1, &(0x7f0000003dc0), &(0x7f0000003e40)=0x6e) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000050c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000005100)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) sendmmsg$unix(r2, &(0x7f0000008dc0)=[{{&(0x7f0000003e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005080)=[{&(0x7f0000003f00)="ead622796c1684b0361a1d58bc6b5d7d62d43fb25e6f62d92ce5c550236f397f2d21713e459ac7a6221522c9376641e3057c5ddc02c582bb877c310e663f0f6ee8f5b4c8b4bf23799b25548060862c37df80abcaa3c99ef205987f750e511efdda6fff02450393308f97a5db508fb8149b59f8827fc8c7f4396a55107fc4b1f556eb8f9471385a1294689d3ea67b99c69e7cda3255", 0x95}, {&(0x7f0000003fc0)="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", 0x1000}, {&(0x7f0000004fc0)="21b19f3d8e5b7542", 0x8}, {&(0x7f0000005000)="93d585ae0cf4bcc18827f443809fd6d1f88d5557a5f4ddc5f20e169d2334df7b4fc89be31949f2cedd252324e8f7dd09434b0e9762b41779696b6a427c58ed09dd625ea97a2c2a2ba78e0e6e48c8fd7e1a9b19878c3fa5", 0x57}], 0x4, &(0x7f0000008100)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x28, 0x1, 0x1, [r7, r8, r3, r0, r9, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r0, r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [r0, r6, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe8, 0x8004}}, {{&(0x7f0000008200)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008340)=[{&(0x7f0000008280)="11a26e22fb9f99ee3792177f0b674236b57ee97ec1eefd077dddf2400fd8d1c88f92581a8556ecf545d465b0e9b57b819201b75db8bf879d", 0x38}, {&(0x7f00000082c0)="7ef7cb6b3760c6e302bd78e09f9bd52258500a0b2318f8948605542bb10c8a8c32f127732015e79c19", 0x29}, {&(0x7f0000008300)="b3b74a9c6f0c23144f574be9336179ae3c3ac0901016091eaac9006808568d2958c1017364b0aeb5bcc089a4", 0x2c}], 0x3, &(0x7f0000008640)=[@rights={{0x30, 0x1, 0x1, [r6, r4, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r4]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r6]}}], 0xe0, 0x4040010}}, {{0x0, 0x0, &(0x7f00000088c0)=[{&(0x7f0000008740)="af77e2e5b1db6483eeb9f3c5991f116ba613c33fffb7fd49b5c271c402306b72912b3ba556", 0x25}, {&(0x7f0000008780)="272d50abb96c9483bdb5db177fefe164958b23b804d50cbfdaaac8fe0db8e307fa9516fa", 0x24}, {&(0x7f00000087c0)="1c38c540d095cbb97909087461852dcecc513a0d4603e77cf1c3775988035b1ca5db0f041847a36ff1f63bda58a72dfcd85fc2336699b3926046b49d5afbffdb6dd51cb03a9b37a35271e109fa2a732e620c544639e46c6a58b659e87397beb72bc9b22fe26f93df79b96aa722bcecbda2bcfd0e1563b18453508a1307975b3ea2427ce461925612168aab37ecec5b6b45fb55d8c25248422352dd86220deddc9b22419da439a052a40fc9725beec102ffc93c2447ad6654cc9ec0b7d2afccf969efd352bfc3fcd4dde0ebdebc8e99b9bb02a9dc1cb835fcd1367cac9c6500", 0xdf}], 0x3, &(0x7f0000008b00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r6, 0xffffffffffffffff, r6, r3]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r5, r4, r2, 0xffffffffffffffff, 0xffffffffffffffff, r6, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r1, r5, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r2, r4, r5]}}], 0x110, 0x4000000}}, {{&(0x7f0000008c40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008d80)=[{&(0x7f0000008cc0)="0f5da9f616bec393ba754746ef00d1eae1a0f24335a112c4ca7ce535746cbca37afc2caf10e011699d9fb95712345c3650e9b6c843a6d836bd0c30e1b76451092596733851cc206966c1dc070565c4bdf5fba1e08550e1e6037bd54bc1bc17fdce698f593dc890c81250cce9dd58c764def7671d914bba488e62888ab651058817ce2029bb58e17a1adf2d76b9c3be", 0x8f}], 0x1, 0x0, 0x0, 0x7f89b95e72810873}}], 0x4, 0x810) 00:52:25 executing program 1: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x4040) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4011) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r1 = getpgrp(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20044}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x24}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8000}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x240440d1) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000}, 0xaa9c3a2ae358fdd1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x39}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0xa7f, 0x8, 0x3ff, 0x81}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x2000c880) r5 = openat$incfs(r3, &(0x7f0000000940)='.pending_reads\x00', 0x1, 0x140) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r4, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x51) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r7) 00:52:25 executing program 2: sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd27, 0xe3, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24002}, 0x800) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x811, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0xffff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) sendmsg$AUDIT_USER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x3ed, 0x200, 0x70bd26, 0x25dfdbff, "c4d3e0c511d8459ba18420c233bd0b6f", ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc97}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2ebcbb2b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x880) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0xc800) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7ff}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5b75}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$AUDIT_SET(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, 0x3e9, 0x100, 0x70bd27, 0x25dfdbfd, {0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xff, 0x40, 0x81, 0x0, 0xffffffff}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40854}, 0x40080) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x20004001) bind$netlink(0xffffffffffffffff, &(0x7f0000000f40)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) 00:52:25 executing program 4: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) lseek(r1, 0x1, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x3, r2, &(0x7f00000000c0)="3d9e622fe0e8dfe998fb7033fefdfde3fc1980bcd8cc4533cedef86d56e9d15ec092b2e2d6a6f4348e5ee5b3f080b4eeab2f42b1635d12b8e41a54211d0f6718f7f9c6167f65133b96736dfedfbdba22be57846480fdddd7f42a2e195501ec6d2cdd0b73966c00731ac54e01c03cd49d4bff25def6b98d7958ab7f29d9a2dc2544632bb0843a862fdc6d882a43be1da4d74ba44cb7cd8912c8e8e4b8633607ee93ccc84bf019a47a64bacf63fd91c72a6f98036daf1c43b16ea44d47e42a1cdb20f9bad4d10c0db14ce03c0ad3c6d3eaf83a138760282ff4b8991feafc0b25d6a4be4d763f4af8dd9c4fa53876bfd32e99b6b7066861", 0xf6, 0x5, 0x0, 0x1, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x28c4, r1, &(0x7f0000000200)="aef7bd7fe3314c467f703784583bf763f0412a74cc71904b3d37f3d672d8fde8b0176dbc2455c174ae49dae2f49c43bb10b1031cdff40dbfb4cb4fd479f377fdc2cd1bde71bab2cdeb71a4b643b578953272e29bfb2e2831222eea7a1dab3f47cd2da0fb82810e583aedbe2d4d3b7eb9cb2a18bf51d1039954a9e0517cd6ac093399743f4ae7f14410a2a9f38b9a77cbac6d86b80cbc089b8dc139f732559ffa3ae0c85ab00b59b72cf0ec4043c11a443dd10f256d30debb086e7a0ab4ba99760d973d21430c7f8851d5c10ccbe23cd34ff46213df45ff150bd3bfc98077f6826a01e269c20a20341b57a8bd22cc5ccf45fd9d", 0xf3, 0x5, 0x0, 0x1, r0}]) pread64(r1, &(0x7f0000000380)=""/53, 0x35, 0xfffffffffffffffb) io_uring_setup(0x69a4, &(0x7f00000003c0)={0x0, 0x7b16, 0x8, 0x2, 0x8c, 0x0, r2}) io_uring_setup(0x5b62, &(0x7f0000000440)={0x0, 0xcab3, 0x0, 0x0, 0xa8, 0x0, r0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x900, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6d9a6d1773eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) syz_genetlink_get_family_id$fou(&(0x7f00000005c0), 0xffffffffffffffff) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/boot_params', 0x200, 0x2) poll(&(0x7f0000000640)=[{r2, 0x1200}], 0x1, 0x101) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000680)={{0x7ff, 0x54f1}, 0x100, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000007c0)) signalfd4(r3, &(0x7f00000009c0)={[0x7fff]}, 0x8, 0xc0000) bind(r3, &(0x7f0000000a00)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc4}}, 0x14048000) 00:52:25 executing program 7: fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x3, 0x5, 0x490}) setsockopt(0xffffffffffffffff, 0xa9, 0x7, &(0x7f0000000040)="57c8e96b57bb79a1d6ed0f21ee4195d6f23d058606669ac283d0205e8aa5887662d45e7dec3131020a61f2ab11054ee4b1d42322ea05a8295fbd4482150ca8857a683b77572819e194c5360f1881a2d36e4b30d59c402577d1204dc85807ed5812937b283412", 0x66) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x189002, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0x7ff, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x320, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) r2 = dup2(r0, r0) r3 = open_tree(r2, &(0x7f0000000380)='./file0\x00', 0x100) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x26808009}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x198, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfe6c}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2830}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400000}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77214ed3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe617}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa2, 0x3, "5525a6863e18bef9354afe2f6a88c3bd9aded074ddee138a355df38949ca888fbedf6f1eb8e2bc3acfe60b685bf825cf81f6581ebbe81861450f8da1ff9608a7332b45bd76f7b9aa32f703c6a21e069f62c61dc63afbc3684d685d56c873047de62509154cee23eb4d333b68c7f705197bcbd467b9a276414efe34469fd7fb97d98cbab5cedd53295242416caea1d6acad1e066837f2f7546930cd8deb4f"}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x80041}, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000640)='cgroup.controllers\x00', 0x0, 0x0) write$nbd(r4, &(0x7f0000000680)={0x67446698, 0x1, 0x1, 0x0, 0x1, "7ebeb604a2a7d63209e0de883958d8f57d55754519e8d79c86d80c7917dad75ff0e71492beb5b0f481393dc3ae2e077b8c1058748faa9ca61ab97c22afc4a5dcaf4a795abb6a2138b7c782970fda0683c5bb9ae2e5bff02d7b860ea8762047ea966962bcb059cc94d5a58d02a08b58b22584578f4d32418c691d90c61d57697e898d7f488dc25d976583341f"}, 0x9c) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000740)=0x800) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb3d}}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f00000007c0)={{r5}, "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"}) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x20, 0x1, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1f}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40095}, 0x4) r6 = openat$incfs(r4, &(0x7f00000018c0)='.pending_reads\x00', 0x20000, 0x20) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000001900)) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4008040) [ 69.211716] audit: type=1400 audit(1664844745.209:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:52:25 executing program 3: sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x200, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x5, 0x2, 0x0, @empty, @private2, 0x7800, 0x8, 0x1, 0xd16}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, 0x0, 0x301, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000000c) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x29}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x408c0}, 0x800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/devices/msr', 0x80081, 0x142) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x4, 0x2, 0x6, 0x13c4a013b200102c, @private2, @private1, 0x20, 0x80, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6gre0\x00', r3, 0x4, 0x3, 0x8, 0x80000001, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7800, 0x1, 0x6}}) getsockname(r2, &(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000840)=0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl0\x00', r1, 0x29, 0x0, 0x1f, 0x25, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x8, 0x401, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000009c0)={'wg0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000a00)={@empty, @rand_addr, 0x0}, &(0x7f0000000a40)=0xc) recvmmsg(r2, &(0x7f0000009280)=[{{&(0x7f0000000a80)=@ieee802154, 0x80, &(0x7f0000001000)=[{&(0x7f0000000b00)=""/111, 0x6f}, {&(0x7f0000000b80)=""/123, 0x7b}, {&(0x7f0000000c00)=""/225, 0xe1}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/123, 0x7b}, {&(0x7f0000000dc0)=""/247, 0xf7}, {&(0x7f0000000ec0)=""/28, 0x1c}, {&(0x7f0000000f00)=""/85, 0x55}, {&(0x7f0000000f80)=""/82, 0x52}], 0x9, &(0x7f00000010c0)=""/20, 0x14}, 0xc377f4d3}, {{&(0x7f0000001100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003700)=[{&(0x7f0000001180)=""/211, 0xd3}, {&(0x7f0000001280)=""/225, 0xe1}, {&(0x7f0000001380)=""/11, 0xb}, {&(0x7f00000013c0)=""/202, 0xca}, {&(0x7f00000014c0)=""/218, 0xda}, {&(0x7f00000015c0)=""/59, 0x3b}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/162, 0xa2}, {&(0x7f00000036c0)=""/20, 0x14}], 0xa, &(0x7f00000037c0)=""/101, 0x65}, 0x9}, {{&(0x7f0000003840)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/220, 0xdc}], 0x2, &(0x7f0000004a00)=""/59, 0x3b}, 0x4}, {{&(0x7f0000004a40)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000004ac0)=""/24, 0x18}, {&(0x7f0000004b00)=""/168, 0xa8}, {&(0x7f0000004bc0)=""/74, 0x4a}, {&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/175, 0xaf}, {&(0x7f0000005d00)=""/97, 0x61}, {&(0x7f0000005d80)=""/254, 0xfe}], 0x7}, 0x48b3}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005f00)=""/37, 0x25}], 0x1, &(0x7f0000005f80)=""/148, 0x94}, 0x1f}, {{&(0x7f0000006040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000006180)=[{&(0x7f00000060c0)=""/167, 0xa7}], 0x1, &(0x7f00000061c0)=""/80, 0x50}, 0x2dceacc9}, {{&(0x7f0000006240)=@phonet, 0x80, &(0x7f0000007580)=[{&(0x7f00000062c0)=""/9, 0x9}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/47, 0x2f}, {&(0x7f0000007340)=""/95, 0x5f}, {&(0x7f00000073c0)=""/5, 0x5}, {&(0x7f0000007400)=""/161, 0xa1}, {&(0x7f00000074c0)=""/58, 0x3a}, {&(0x7f0000007500)=""/87, 0x57}], 0x8, &(0x7f0000007600)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f00000078c0)=[{&(0x7f0000007640)=""/71, 0x47}, {&(0x7f00000076c0)=""/235, 0xeb}, {&(0x7f00000077c0)=""/248, 0xf8}], 0x3, &(0x7f0000007900)=""/132, 0x84}, 0x9}, {{&(0x7f00000079c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000007a40)=""/223, 0xdf}, {&(0x7f0000007b40)=""/152, 0x98}, {&(0x7f0000007c00)=""/222, 0xde}], 0x3, &(0x7f0000007d40)=""/240, 0xf0}, 0x1}, {{&(0x7f0000007e40)=@x25, 0x80, &(0x7f00000091c0)=[{&(0x7f0000007ec0)=""/218, 0xda}, {&(0x7f0000007fc0)=""/123, 0x7b}, {&(0x7f0000008040)=""/4096, 0x1000}, {&(0x7f0000009040)=""/48, 0x30}, {&(0x7f0000009080)=""/183, 0xb7}, {&(0x7f0000009140)=""/14, 0xe}, {&(0x7f0000009180)=""/48, 0x30}], 0x7, &(0x7f0000009240)=""/57, 0x39}, 0x6}], 0xa, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000009500)={@broadcast, @rand_addr, 0x0}, &(0x7f0000009540)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000009580)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000009700)={'ip6tnl0\x00', &(0x7f0000009680)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x32, 0x14, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, 0x7, 0x20, 0x936, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000009e80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000009e40)={&(0x7f0000009780)={0x6a8, 0x0, 0x322, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5b}}}]}}, {{0x8, 0x1, r10}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x10}, 0x20040002) 00:52:25 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x80000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x34, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9ed}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xde}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4044004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x5c}}, 0x8000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000600}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r3, 0x410, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0xd4a2a5d0438c7fe4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0xc000081) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x110, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:shell_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x48880) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x25}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x4008000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc815) 00:52:25 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@mcast2, 0x0}, &(0x7f0000000040)=0x14) connect$packet(r0, &(0x7f0000000080)={0x11, 0xf6, r1, 0x1, 0x18, 0x6, @remote}, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x0, 0x76, 0x4, 0x8, 0x1, 0x6a8b}, {0xa6d, 0xe641, 0x3, 0x0, 0x37cc1197, 0x100000001}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bind$inet(r2, &(0x7f00000004c0)={0x2, 0x4, @remote}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/104, 0x68}, {&(0x7f0000000800)=""/32, 0x20}, {&(0x7f0000000840)=""/52, 0x34}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000980)=""/215, 0xd7}, {&(0x7f0000000a80)=""/71, 0x47}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/69, 0x45}, {&(0x7f0000000bc0)=""/39, 0x27}], 0x9, &(0x7f0000000cc0)=""/230, 0xe6}, 0x6}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/149, 0x95}, {&(0x7f0000000e80)=""/235, 0xeb}], 0x2, &(0x7f0000000fc0)=""/253, 0xfd}}, {{&(0x7f00000010c0)=@nl=@proc, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000001180)=""/16, 0x10}, 0x3}, {{&(0x7f00000011c0)=@can={0x1d, 0x0}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001240)=""/11, 0xb}, {&(0x7f0000001280)=""/175, 0xaf}, {&(0x7f0000001340)=""/62, 0x3e}, {&(0x7f0000001380)=""/181, 0xb5}, {&(0x7f0000001440)=""/37, 0x25}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/246, 0xf6}, {&(0x7f00000015c0)=""/195, 0xc3}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/205, 0xcd}], 0xa, &(0x7f0000002880)=""/69, 0x45}, 0x2a1ffc02}, {{&(0x7f0000002900)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002980)=""/206, 0xce}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/6, 0x6}], 0x3, &(0x7f0000003b00)=""/117, 0x75}, 0x80000001}], 0x5, 0x0, &(0x7f0000003cc0)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003dc0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000004040)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004000)={&(0x7f0000003e00)={0x1c8, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004080), 0x40000, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f00000040c0)={{0x8, 0x3}, 0x100, './file1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000004280)={'ip6gre0\x00', &(0x7f0000004200)={'syztnl0\x00', r3, 0x2f, 0x5, 0x0, 0x3, 0xd6, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x20, 0x10, 0x6, 0x7f}}) io_setup(0x8, &(0x7f00000042c0)=0x0) r8 = syz_mount_image$iso9660(&(0x7f0000004300), &(0x7f0000004340)='./file1\x00', 0x100000001, 0x1, &(0x7f0000004440)=[{&(0x7f0000004380)="74da65f62a7d433fccadcd248c5f155eef6d0a5c5b55439c1af1ba4a563a3a386932150710ccb106976e8e67c5f17547dd915272befef7ce3ac616cbcfb50f4a9a2b39670811edfdc8c94578abf6450bd44fcc4fd8e98c154b0f16e92085718185b238a50ce9915f9b28de64e2ed5915805717ffed6893b2ec41ff2d431b6464a3f2450aac717fe503621ee6314ecc14835fc250576e8e69d702d045188bc3c195151003ccc5643ffdd18d4a623c28", 0xaf, 0x400000}], 0x3030080, &(0x7f0000004480)={[{@map_acorn}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@permit_directio}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0xff}}, {@permit_directio}]}) io_cancel(r7, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x6, 0x9, r8, &(0x7f0000004500)="c8247a605418bf407cca274f9ca86621920963fcadbaee61d9402bf308a2d6db14f5b7d4ce37be09ef0d1e3c6c7a4710bcd66d846ec1b00434c8582470469c9f1edbe39f5001d1b66c2c58b3f8e345e61c4ffa6a4205e20fd01f7660815bb1a6e67e9a5176bb28b81c85a6e412be1f6ba0fa4077069f0bccebe144245be804f754bc7aa8de6a8f560402e3fa50e047d1cbeb6247126e868f6b4c3f16888a485f9b189ac3a89ef65db5df004116dd674c6016124a88ec27b26d940b850b54ac297cc470abdc9fb8c627e25c028a7a9c8d", 0xd0, 0x9, 0x0, 0x0, r2}, &(0x7f0000004640)) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000004680)={{0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}, {0xa, 0x4e24, 0x1000, @empty, 0x8}, 0x8, [0x80000000, 0x5, 0xd4a00000, 0x8, 0x10001, 0x3, 0x7, 0xa0]}, 0x5c) io_setup(0x7, &(0x7f0000004700)) [ 70.500095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.501901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.506528] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.507626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.509671] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.510900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.516489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.517616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.522386] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.524177] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.525375] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.531964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.533594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.535551] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.536956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.538153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.540643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.542913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.546477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.549328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.550616] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.551236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.553392] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.558403] Bluetooth: hci0: HCI_REQ-0x0c1a [ 70.565789] Bluetooth: hci2: HCI_REQ-0x0c1a [ 70.574844] Bluetooth: hci1: HCI_REQ-0x0c1a [ 70.606220] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.610956] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.640576] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.643542] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.645265] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 70.647153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.652087] Bluetooth: hci5: HCI_REQ-0x0c1a [ 70.653790] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.655526] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 70.657244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 70.662314] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 70.664042] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 70.665549] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.670176] Bluetooth: hci6: HCI_REQ-0x0c1a [ 70.678312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.711798] Bluetooth: hci3: HCI_REQ-0x0c1a [ 72.634876] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 72.636212] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 72.636873] Bluetooth: hci1: command 0x0409 tx timeout [ 72.637836] Bluetooth: hci2: command 0x0409 tx timeout [ 72.638205] Bluetooth: hci0: command 0x0409 tx timeout [ 72.698922] Bluetooth: hci6: command 0x0409 tx timeout [ 72.763973] Bluetooth: hci3: command 0x0409 tx timeout [ 72.764100] Bluetooth: hci5: command 0x0409 tx timeout [ 74.682869] Bluetooth: hci0: command 0x041b tx timeout [ 74.683744] Bluetooth: hci2: command 0x041b tx timeout [ 74.683827] Bluetooth: hci1: command 0x041b tx timeout [ 74.747432] Bluetooth: hci6: command 0x041b tx timeout [ 74.810775] Bluetooth: hci5: command 0x041b tx timeout [ 74.811751] Bluetooth: hci3: command 0x041b tx timeout [ 75.732585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.735209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.736653] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.744160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.746906] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.750358] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.756082] Bluetooth: hci4: HCI_REQ-0x0c1a [ 75.841070] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.842537] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.844601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.847460] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.848579] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.854949] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.864447] Bluetooth: hci7: HCI_REQ-0x0c1a [ 76.730811] Bluetooth: hci1: command 0x040f tx timeout [ 76.730835] Bluetooth: hci2: command 0x040f tx timeout [ 76.731294] Bluetooth: hci0: command 0x040f tx timeout [ 76.794740] Bluetooth: hci6: command 0x040f tx timeout [ 76.859796] Bluetooth: hci3: command 0x040f tx timeout [ 76.859843] Bluetooth: hci5: command 0x040f tx timeout [ 77.818759] Bluetooth: hci4: command 0x0409 tx timeout [ 77.882796] Bluetooth: hci7: command 0x0409 tx timeout [ 78.778820] Bluetooth: hci2: command 0x0419 tx timeout [ 78.779305] Bluetooth: hci0: command 0x0419 tx timeout [ 78.779759] Bluetooth: hci1: command 0x0419 tx timeout [ 78.842742] Bluetooth: hci6: command 0x0419 tx timeout [ 78.906847] Bluetooth: hci3: command 0x0419 tx timeout [ 78.907323] Bluetooth: hci5: command 0x0419 tx timeout [ 79.866744] Bluetooth: hci4: command 0x041b tx timeout [ 79.930834] Bluetooth: hci7: command 0x041b tx timeout [ 81.914756] Bluetooth: hci4: command 0x040f tx timeout [ 81.978737] Bluetooth: hci7: command 0x040f tx timeout [ 83.962735] Bluetooth: hci4: command 0x0419 tx timeout [ 84.026741] Bluetooth: hci7: command 0x0419 tx timeout 00:53:19 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "eed1ea"}) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x4, 0x1}, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x1}) 00:53:19 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r4 = openat(r3, &(0x7f00000000c0)='./file1\x00', 0x70d141, 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x120) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(r0, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r6 = signalfd4(r4, &(0x7f0000000180)={[0x6]}, 0x8, 0x0) r7 = getpid() openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x410101, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000001c0)={0x29, 0x37, 0x1, {0x0, 0x80, 0x80000001, r7, 0xb, '{@+:)\\-@#,\\'}}, 0x29) sendfile(r5, r3, 0x0, 0xfffffdef) [ 123.664373] loop3: detected capacity change from 0 to 40 [ 123.788378] audit: type=1400 audit(1664844799.786:7): avc: denied { open } for pid=3610 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.789974] audit: type=1400 audit(1664844799.786:8): avc: denied { kernel } for pid=3610 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.799913] ------------[ cut here ]------------ [ 123.799935] [ 123.799939] ====================================================== [ 123.799942] WARNING: possible circular locking dependency detected [ 123.799946] 6.0.0-rc7-next-20220930 #1 Not tainted [ 123.799953] ------------------------------------------------------ [ 123.799956] syz-executor.3/3612 is trying to acquire lock: [ 123.799962] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 123.800001] [ 123.800001] but task is already holding lock: [ 123.800004] ffff8880175c3c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 123.800030] [ 123.800030] which lock already depends on the new lock. [ 123.800030] [ 123.800032] [ 123.800032] the existing dependency chain (in reverse order) is: [ 123.800035] [ 123.800035] -> #3 (&ctx->lock){....}-{2:2}: [ 123.800049] _raw_spin_lock+0x2a/0x40 [ 123.800060] __perf_event_task_sched_out+0x53b/0x18d0 [ 123.800072] __schedule+0xedd/0x2470 [ 123.800088] schedule+0xda/0x1b0 [ 123.800101] futex_wait_queue+0xf5/0x1e0 [ 123.800113] futex_wait+0x28e/0x690 [ 123.800123] do_futex+0x2ff/0x380 [ 123.800132] __x64_sys_futex+0x1c6/0x4d0 [ 123.800142] do_syscall_64+0x3b/0x90 [ 123.800159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.800172] [ 123.800172] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 123.800185] _raw_spin_lock_nested+0x30/0x40 [ 123.800195] raw_spin_rq_lock_nested+0x1e/0x30 [ 123.800208] task_fork_fair+0x63/0x4d0 [ 123.800224] sched_cgroup_fork+0x3d0/0x540 [ 123.800238] copy_process+0x4183/0x6e20 [ 123.800249] kernel_clone+0xe7/0x890 [ 123.800258] user_mode_thread+0xad/0xf0 [ 123.800268] rest_init+0x24/0x250 [ 123.800279] arch_call_rest_init+0xf/0x14 [ 123.800296] start_kernel+0x4c6/0x4eb [ 123.800311] secondary_startup_64_no_verify+0xe0/0xeb [ 123.800325] [ 123.800325] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 123.800338] _raw_spin_lock_irqsave+0x39/0x60 [ 123.800349] try_to_wake_up+0xab/0x1930 [ 123.800362] up+0x75/0xb0 [ 123.800376] __up_console_sem+0x6e/0x80 [ 123.800391] console_unlock+0x46a/0x590 [ 123.800407] vt_ioctl+0x2822/0x2ca0 [ 123.800418] tty_ioctl+0x785/0x16b0 [ 123.800428] __x64_sys_ioctl+0x19a/0x210 [ 123.800442] do_syscall_64+0x3b/0x90 [ 123.800458] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.800471] [ 123.800471] -> #0 ((console_sem).lock){....}-{2:2}: [ 123.800484] __lock_acquire+0x2a02/0x5e70 [ 123.800500] lock_acquire+0x1a2/0x530 [ 123.800516] _raw_spin_lock_irqsave+0x39/0x60 [ 123.800526] down_trylock+0xe/0x70 [ 123.800541] __down_trylock_console_sem+0x3b/0xd0 [ 123.800557] vprintk_emit+0x16b/0x560 [ 123.800572] vprintk+0x84/0xa0 [ 123.800588] _printk+0xba/0xf1 [ 123.800599] report_bug.cold+0x72/0xab [ 123.800615] handle_bug+0x3c/0x70 [ 123.800631] exc_invalid_op+0x14/0x50 [ 123.800648] asm_exc_invalid_op+0x16/0x20 [ 123.800659] group_sched_out.part.0+0x2c7/0x460 [ 123.800677] ctx_sched_out+0x8f1/0xc10 [ 123.800693] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.800704] __schedule+0xedd/0x2470 [ 123.800718] schedule+0xda/0x1b0 [ 123.800731] futex_wait_queue+0xf5/0x1e0 [ 123.800741] futex_wait+0x28e/0x690 [ 123.800751] do_futex+0x2ff/0x380 [ 123.800760] __x64_sys_futex+0x1c6/0x4d0 [ 123.800770] do_syscall_64+0x3b/0x90 [ 123.800787] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.800799] [ 123.800799] other info that might help us debug this: [ 123.800799] [ 123.800802] Chain exists of: [ 123.800802] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 123.800802] [ 123.800816] Possible unsafe locking scenario: [ 123.800816] [ 123.800819] CPU0 CPU1 [ 123.800821] ---- ---- [ 123.800823] lock(&ctx->lock); [ 123.800829] lock(&rq->__lock); [ 123.800835] lock(&ctx->lock); [ 123.800841] lock((console_sem).lock); [ 123.800846] [ 123.800846] *** DEADLOCK *** [ 123.800846] [ 123.800848] 2 locks held by syz-executor.3/3612: [ 123.800855] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 123.800884] #1: ffff8880175c3c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 123.800910] [ 123.800910] stack backtrace: [ 123.800913] CPU: 0 PID: 3612 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 123.800925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 123.800933] Call Trace: [ 123.800936] [ 123.800941] dump_stack_lvl+0x8b/0xb3 [ 123.800958] check_noncircular+0x263/0x2e0 [ 123.800975] ? format_decode+0x26c/0xb50 [ 123.800990] ? print_circular_bug+0x450/0x450 [ 123.801007] ? simple_strtoul+0x30/0x30 [ 123.801022] ? __lockdep_reset_lock+0x180/0x180 [ 123.801038] ? format_decode+0x26c/0xb50 [ 123.801055] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 123.801073] __lock_acquire+0x2a02/0x5e70 [ 123.801094] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 123.801116] lock_acquire+0x1a2/0x530 [ 123.801132] ? down_trylock+0xe/0x70 [ 123.801149] ? lock_release+0x750/0x750 [ 123.801167] ? find_held_lock+0x2c/0x110 [ 123.801184] ? vprintk+0x84/0xa0 [ 123.801201] _raw_spin_lock_irqsave+0x39/0x60 [ 123.801213] ? down_trylock+0xe/0x70 [ 123.801229] down_trylock+0xe/0x70 [ 123.801244] ? vprintk+0x84/0xa0 [ 123.801261] __down_trylock_console_sem+0x3b/0xd0 [ 123.801278] vprintk_emit+0x16b/0x560 [ 123.801297] vprintk+0x84/0xa0 [ 123.801314] _printk+0xba/0xf1 [ 123.801325] ? record_print_text.cold+0x16/0x16 [ 123.801339] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 123.801353] ? lock_downgrade+0x6d0/0x6d0 [ 123.801370] ? report_bug.cold+0x66/0xab [ 123.801388] ? group_sched_out.part.0+0x2c7/0x460 [ 123.801406] report_bug.cold+0x72/0xab [ 123.801425] handle_bug+0x3c/0x70 [ 123.801442] exc_invalid_op+0x14/0x50 [ 123.801460] asm_exc_invalid_op+0x16/0x20 [ 123.801472] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 123.801493] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 123.801504] RSP: 0018:ffff8880186478f8 EFLAGS: 00010006 [ 123.801513] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.801520] RDX: ffff888017763580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 123.801528] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 123.801535] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880175c3c00 [ 123.801542] R13: ffff88806ce3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 123.801553] ? group_sched_out.part.0+0x2c7/0x460 [ 123.801572] ? group_sched_out.part.0+0x2c7/0x460 [ 123.801592] ctx_sched_out+0x8f1/0xc10 [ 123.801611] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.801625] ? lock_is_held_type+0xd7/0x130 [ 123.801639] ? __perf_cgroup_move+0x160/0x160 [ 123.801649] ? set_next_entity+0x304/0x550 [ 123.801669] ? lock_is_held_type+0xd7/0x130 [ 123.801682] __schedule+0xedd/0x2470 [ 123.801699] ? io_schedule_timeout+0x150/0x150 [ 123.801715] ? futex_wait_setup+0x166/0x230 [ 123.801738] schedule+0xda/0x1b0 [ 123.801753] futex_wait_queue+0xf5/0x1e0 [ 123.801765] futex_wait+0x28e/0x690 [ 123.801778] ? futex_wait_setup+0x230/0x230 [ 123.801791] ? wake_up_q+0x8b/0xf0 [ 123.801804] ? do_raw_spin_unlock+0x4f/0x220 [ 123.801823] ? futex_wake+0x158/0x490 [ 123.801838] ? lock_downgrade+0x6d0/0x6d0 [ 123.801855] ? lock_is_held_type+0xd7/0x130 [ 123.801869] do_futex+0x2ff/0x380 [ 123.801880] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 123.801893] ? ktime_get+0x153/0x1f0 [ 123.801909] __x64_sys_futex+0x1c6/0x4d0 [ 123.801921] ? hrtimer_interrupt+0x5b0/0x770 [ 123.801934] ? __x64_sys_futex_time32+0x480/0x480 [ 123.801947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.801961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.801976] do_syscall_64+0x3b/0x90 [ 123.801994] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.802007] RIP: 0033:0x7f69cf08cb19 [ 123.802015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.802026] RSP: 002b:00007f69cc602218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.802037] RAX: ffffffffffffffda RBX: 00007f69cf19ff68 RCX: 00007f69cf08cb19 [ 123.802045] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69cf19ff68 [ 123.802052] RBP: 00007f69cf19ff60 R08: 0000000000000000 R09: 0000000000000000 [ 123.802059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69cf19ff6c [ 123.802066] R13: 00007ffdf96c899f R14: 00007f69cc602300 R15: 0000000000022000 [ 123.802078] [ 123.854113] syz-executor.3: attempt to access beyond end of device [ 123.854113] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 123.854142] WARNING: CPU: 0 PID: 3612 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 123.854518] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 123.854812] Modules linked in: [ 123.854819] CPU: 0 PID: 3612 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 123.854832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 123.854840] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 123.866869] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 123.868179] RSP: 0018:ffff8880186478f8 EFLAGS: 00010006 [ 123.868568] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.869085] RDX: ffff888017763580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 123.869591] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 123.870113] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880175c3c00 [ 123.870634] R13: ffff88806ce3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 123.871163] FS: 00007f69cc602700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 123.871772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.872204] CR2: 00007f2984d414a1 CR3: 000000003e82a000 CR4: 0000000000350ef0 [ 123.872728] Call Trace: [ 123.872922] [ 123.873092] ctx_sched_out+0x8f1/0xc10 [ 123.873395] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.873793] ? lock_is_held_type+0xd7/0x130 [ 123.874122] ? __perf_cgroup_move+0x160/0x160 [ 123.874459] ? set_next_entity+0x304/0x550 [ 123.874787] ? lock_is_held_type+0xd7/0x130 [ 123.875118] __schedule+0xedd/0x2470 [ 123.875408] ? io_schedule_timeout+0x150/0x150 [ 123.875758] ? futex_wait_setup+0x166/0x230 [ 123.876081] schedule+0xda/0x1b0 [ 123.876345] futex_wait_queue+0xf5/0x1e0 [ 123.876654] futex_wait+0x28e/0x690 [ 123.876930] ? futex_wait_setup+0x230/0x230 [ 123.877252] ? wake_up_q+0x8b/0xf0 [ 123.877525] ? do_raw_spin_unlock+0x4f/0x220 [ 123.877875] ? futex_wake+0x158/0x490 [ 123.878167] ? lock_downgrade+0x6d0/0x6d0 [ 123.878478] ? lock_is_held_type+0xd7/0x130 [ 123.878805] do_futex+0x2ff/0x380 [ 123.879071] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 123.879503] ? ktime_get+0x153/0x1f0 [ 123.879793] __x64_sys_futex+0x1c6/0x4d0 [ 123.880095] ? hrtimer_interrupt+0x5b0/0x770 [ 123.880428] ? __x64_sys_futex_time32+0x480/0x480 [ 123.880790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.881181] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.881569] do_syscall_64+0x3b/0x90 [ 123.881860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.882252] RIP: 0033:0x7f69cf08cb19 [ 123.882533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.883906] RSP: 002b:00007f69cc602218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.884485] RAX: ffffffffffffffda RBX: 00007f69cf19ff68 RCX: 00007f69cf08cb19 [ 123.884979] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69cf19ff68 [ 123.885470] RBP: 00007f69cf19ff60 R08: 0000000000000000 R09: 0000000000000000 [ 123.885974] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69cf19ff6c [ 123.886477] R13: 00007ffdf96c899f R14: 00007f69cc602300 R15: 0000000000022000 [ 123.886990] [ 123.887162] irq event stamp: 4300 [ 123.887406] hardirqs last enabled at (4299): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 123.888129] hardirqs last disabled at (4300): [] __schedule+0x1225/0x2470 [ 123.888801] softirqs last enabled at (3744): [] __irq_exit_rcu+0x11b/0x180 [ 123.889411] softirqs last disabled at (3715): [] __irq_exit_rcu+0x11b/0x180 [ 123.890048] ---[ end trace 0000000000000000 ]--- 00:53:19 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r4 = openat(r3, &(0x7f00000000c0)='./file1\x00', 0x70d141, 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x120) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(r0, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r6 = signalfd4(r4, &(0x7f0000000180)={[0x6]}, 0x8, 0x0) r7 = getpid() openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x410101, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000001c0)={0x29, 0x37, 0x1, {0x0, 0x80, 0x80000001, r7, 0xb, '{@+:)\\-@#,\\'}}, 0x29) sendfile(r5, r3, 0x0, 0xfffffdef) [ 123.992275] loop3: detected capacity change from 0 to 40 [ 124.064240] syz-executor.3: attempt to access beyond end of device [ 124.064240] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 124.065241] Buffer I/O error on dev loop3, logical block 10, lost async page write 00:53:20 executing program 3: r0 = getpid() pidfd_open(r0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe2, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x12a600, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x2, 0x8, 0x7f, 0x0, 0x3ff, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x1a02, 0x8, 0x0, 0x1, 0x1, 0x3, 0x2, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x6, 0x1, 0x3f, 0x72, 0x0, 0x2, 0x8b000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x800, 0x8, 0x10000, 0x3, 0x49, 0x1, 0x6, 0x0, 0x369b, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000880)={0x2080, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000700), {0x31}, &(0x7f0000000740)=""/168, 0xa8, &(0x7f0000000800)=""/32, &(0x7f0000000840)=[r0, r0, 0x0, r0, 0x0], 0x5}, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) close_range(r2, r3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r4) vmsplice(r4, &(0x7f0000000680)=[{&(0x7f0000000140)="b3738ca06eaeccd3810c5716039bccc4ddad974a6579f8f61a7ca1e3aaefd647d0127d45d678009fa18463f759ea82f8bc621011868815d3e22f4e09fe33b5c41d54ef32ae36eebc6f6d3327ea937502fa913cecf844b7efd08fb52ff2da49fc603163dc4a8d97833928c105b991922b644242d311357a412d9b7d65c80a4ba78c53fa68", 0x84}, {&(0x7f0000000300)="1210cb112c1160ff8bbfeab73894466f7fd2264a185fdbbb4b4a9db749792bd439b097c48adca9c0bd003389135f4489127207f85fec2e3fe0c3b2e52b8a3a6241bae59e60ece246d9485efa85e98fc91cfeab22147dc9027a80bbfdaab0dbac", 0x60}, {&(0x7f0000000400)="4311c2f0819b8f47cabc057afbebb1266dcd7700fdc0ea2ed47ec22a0867c5167927a2713d702535b457e6fb1d0d743f9eda011b71e5539faf4ac128674a8b857729c8c879167066423851b7e2de846a63484a2167d8012ff26185b7cca847cbf7b167baf9ba7214d540735a329c16035d7992aa7fabb54731dcf0c2c5d845a3fea63782c2fbe3cb442b7d5a3924bec3090be538", 0x94}, {&(0x7f00000004c0)="0eae6a88db361dbcd4fbf043fbde4f04450e8ce649af377279308643ade37c99a06c3036a696ebe6af593e2633e0d1fd1b8a464ddbd08b9f3053d583de3d8798f798532690ead83f0ac04b59c370731d4fe9814763c6e05be7291f6026ef2e161603f2c4282f2eb1fa784d6389777db668d748458cd8a306c08be708caa330b28fb265f99ffac3735518675283b68c2f57c92a37101bd9683746727bedae1e9b9efc8bdf3649fd7609a278c153572a13374bca90bd771c3478cc27c81b98101495202c267062f2b62dc463594220e9967354719d5802ffece57cd1f6643eac2effb543ef402eb4a86e1961155f6e5c594d929656e9b8df55e7", 0xf9}, {&(0x7f00000005c0)="0ec9930d61111ba47ef9daa921ba62f56730b8b4092034f39eae184c0adef923f9bffca3f477bcc2d5061ea5a5a11b1ab8afdd0ed68d6474ed96667a9cde4b197030400361f7d4d4e55f0ab361360c671509a2c9dacaaa88a1d21774bd708856a56bfcc618b87c5ba775d7ac6c143b7f5fb2ae19ce4e973934a80254fc13d8281fd4c11a6eb250731ac6893bcb4a6891c888a4643ca2", 0x96}], 0x5, 0x3) r5 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r5, 0x10000000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) 00:53:20 executing program 3: r0 = getpid() pidfd_open(r0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe2, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x12a600, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x2, 0x8, 0x7f, 0x0, 0x3ff, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x1a02, 0x8, 0x0, 0x1, 0x1, 0x3, 0x2, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x6, 0x1, 0x3f, 0x72, 0x0, 0x2, 0x8b000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x800, 0x8, 0x10000, 0x3, 0x49, 0x1, 0x6, 0x0, 0x369b, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000880)={0x2080, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000700), {0x31}, &(0x7f0000000740)=""/168, 0xa8, &(0x7f0000000800)=""/32, &(0x7f0000000840)=[r0, r0, 0x0, r0, 0x0], 0x5}, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) close_range(r2, r3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r4) vmsplice(r4, &(0x7f0000000680)=[{&(0x7f0000000140)="b3738ca06eaeccd3810c5716039bccc4ddad974a6579f8f61a7ca1e3aaefd647d0127d45d678009fa18463f759ea82f8bc621011868815d3e22f4e09fe33b5c41d54ef32ae36eebc6f6d3327ea937502fa913cecf844b7efd08fb52ff2da49fc603163dc4a8d97833928c105b991922b644242d311357a412d9b7d65c80a4ba78c53fa68", 0x84}, {&(0x7f0000000300)="1210cb112c1160ff8bbfeab73894466f7fd2264a185fdbbb4b4a9db749792bd439b097c48adca9c0bd003389135f4489127207f85fec2e3fe0c3b2e52b8a3a6241bae59e60ece246d9485efa85e98fc91cfeab22147dc9027a80bbfdaab0dbac", 0x60}, {&(0x7f0000000400)="4311c2f0819b8f47cabc057afbebb1266dcd7700fdc0ea2ed47ec22a0867c5167927a2713d702535b457e6fb1d0d743f9eda011b71e5539faf4ac128674a8b857729c8c879167066423851b7e2de846a63484a2167d8012ff26185b7cca847cbf7b167baf9ba7214d540735a329c16035d7992aa7fabb54731dcf0c2c5d845a3fea63782c2fbe3cb442b7d5a3924bec3090be538", 0x94}, {&(0x7f00000004c0)="0eae6a88db361dbcd4fbf043fbde4f04450e8ce649af377279308643ade37c99a06c3036a696ebe6af593e2633e0d1fd1b8a464ddbd08b9f3053d583de3d8798f798532690ead83f0ac04b59c370731d4fe9814763c6e05be7291f6026ef2e161603f2c4282f2eb1fa784d6389777db668d748458cd8a306c08be708caa330b28fb265f99ffac3735518675283b68c2f57c92a37101bd9683746727bedae1e9b9efc8bdf3649fd7609a278c153572a13374bca90bd771c3478cc27c81b98101495202c267062f2b62dc463594220e9967354719d5802ffece57cd1f6643eac2effb543ef402eb4a86e1961155f6e5c594d929656e9b8df55e7", 0xf9}, {&(0x7f00000005c0)="0ec9930d61111ba47ef9daa921ba62f56730b8b4092034f39eae184c0adef923f9bffca3f477bcc2d5061ea5a5a11b1ab8afdd0ed68d6474ed96667a9cde4b197030400361f7d4d4e55f0ab361360c671509a2c9dacaaa88a1d21774bd708856a56bfcc618b87c5ba775d7ac6c143b7f5fb2ae19ce4e973934a80254fc13d8281fd4c11a6eb250731ac6893bcb4a6891c888a4643ca2", 0x96}], 0x5, 0x3) r5 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r5, 0x10000000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) 00:53:20 executing program 3: r0 = getpid() pidfd_open(r0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe2, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x12a600, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x2, 0x8, 0x7f, 0x0, 0x3ff, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x1a02, 0x8, 0x0, 0x1, 0x1, 0x3, 0x2, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x6, 0x1, 0x3f, 0x72, 0x0, 0x2, 0x8b000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x800, 0x8, 0x10000, 0x3, 0x49, 0x1, 0x6, 0x0, 0x369b, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000880)={0x2080, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000700), {0x31}, &(0x7f0000000740)=""/168, 0xa8, &(0x7f0000000800)=""/32, &(0x7f0000000840)=[r0, r0, 0x0, r0, 0x0], 0x5}, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) close_range(r2, r3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r4) vmsplice(r4, &(0x7f0000000680)=[{&(0x7f0000000140)="b3738ca06eaeccd3810c5716039bccc4ddad974a6579f8f61a7ca1e3aaefd647d0127d45d678009fa18463f759ea82f8bc621011868815d3e22f4e09fe33b5c41d54ef32ae36eebc6f6d3327ea937502fa913cecf844b7efd08fb52ff2da49fc603163dc4a8d97833928c105b991922b644242d311357a412d9b7d65c80a4ba78c53fa68", 0x84}, {&(0x7f0000000300)="1210cb112c1160ff8bbfeab73894466f7fd2264a185fdbbb4b4a9db749792bd439b097c48adca9c0bd003389135f4489127207f85fec2e3fe0c3b2e52b8a3a6241bae59e60ece246d9485efa85e98fc91cfeab22147dc9027a80bbfdaab0dbac", 0x60}, {&(0x7f0000000400)="4311c2f0819b8f47cabc057afbebb1266dcd7700fdc0ea2ed47ec22a0867c5167927a2713d702535b457e6fb1d0d743f9eda011b71e5539faf4ac128674a8b857729c8c879167066423851b7e2de846a63484a2167d8012ff26185b7cca847cbf7b167baf9ba7214d540735a329c16035d7992aa7fabb54731dcf0c2c5d845a3fea63782c2fbe3cb442b7d5a3924bec3090be538", 0x94}, {&(0x7f00000004c0)="0eae6a88db361dbcd4fbf043fbde4f04450e8ce649af377279308643ade37c99a06c3036a696ebe6af593e2633e0d1fd1b8a464ddbd08b9f3053d583de3d8798f798532690ead83f0ac04b59c370731d4fe9814763c6e05be7291f6026ef2e161603f2c4282f2eb1fa784d6389777db668d748458cd8a306c08be708caa330b28fb265f99ffac3735518675283b68c2f57c92a37101bd9683746727bedae1e9b9efc8bdf3649fd7609a278c153572a13374bca90bd771c3478cc27c81b98101495202c267062f2b62dc463594220e9967354719d5802ffece57cd1f6643eac2effb543ef402eb4a86e1961155f6e5c594d929656e9b8df55e7", 0xf9}, {&(0x7f00000005c0)="0ec9930d61111ba47ef9daa921ba62f56730b8b4092034f39eae184c0adef923f9bffca3f477bcc2d5061ea5a5a11b1ab8afdd0ed68d6474ed96667a9cde4b197030400361f7d4d4e55f0ab361360c671509a2c9dacaaa88a1d21774bd708856a56bfcc618b87c5ba775d7ac6c143b7f5fb2ae19ce4e973934a80254fc13d8281fd4c11a6eb250731ac6893bcb4a6891c888a4643ca2", 0x96}], 0x5, 0x3) r5 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r5, 0x10000000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) 00:53:20 executing program 3: r0 = getpid() pidfd_open(r0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe2, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x12a600, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x2, 0x8, 0x7f, 0x0, 0x3ff, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x1a02, 0x8, 0x0, 0x1, 0x1, 0x3, 0x2, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x6, 0x1, 0x3f, 0x72, 0x0, 0x2, 0x8b000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x800, 0x8, 0x10000, 0x3, 0x49, 0x1, 0x6, 0x0, 0x369b, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000880)={0x2080, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000700), {0x31}, &(0x7f0000000740)=""/168, 0xa8, &(0x7f0000000800)=""/32, &(0x7f0000000840)=[r0, r0, 0x0, r0, 0x0], 0x5}, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) close_range(r2, r3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r4) vmsplice(r4, &(0x7f0000000680)=[{&(0x7f0000000140)="b3738ca06eaeccd3810c5716039bccc4ddad974a6579f8f61a7ca1e3aaefd647d0127d45d678009fa18463f759ea82f8bc621011868815d3e22f4e09fe33b5c41d54ef32ae36eebc6f6d3327ea937502fa913cecf844b7efd08fb52ff2da49fc603163dc4a8d97833928c105b991922b644242d311357a412d9b7d65c80a4ba78c53fa68", 0x84}, {&(0x7f0000000300)="1210cb112c1160ff8bbfeab73894466f7fd2264a185fdbbb4b4a9db749792bd439b097c48adca9c0bd003389135f4489127207f85fec2e3fe0c3b2e52b8a3a6241bae59e60ece246d9485efa85e98fc91cfeab22147dc9027a80bbfdaab0dbac", 0x60}, {&(0x7f0000000400)="4311c2f0819b8f47cabc057afbebb1266dcd7700fdc0ea2ed47ec22a0867c5167927a2713d702535b457e6fb1d0d743f9eda011b71e5539faf4ac128674a8b857729c8c879167066423851b7e2de846a63484a2167d8012ff26185b7cca847cbf7b167baf9ba7214d540735a329c16035d7992aa7fabb54731dcf0c2c5d845a3fea63782c2fbe3cb442b7d5a3924bec3090be538", 0x94}, {&(0x7f00000004c0)="0eae6a88db361dbcd4fbf043fbde4f04450e8ce649af377279308643ade37c99a06c3036a696ebe6af593e2633e0d1fd1b8a464ddbd08b9f3053d583de3d8798f798532690ead83f0ac04b59c370731d4fe9814763c6e05be7291f6026ef2e161603f2c4282f2eb1fa784d6389777db668d748458cd8a306c08be708caa330b28fb265f99ffac3735518675283b68c2f57c92a37101bd9683746727bedae1e9b9efc8bdf3649fd7609a278c153572a13374bca90bd771c3478cc27c81b98101495202c267062f2b62dc463594220e9967354719d5802ffece57cd1f6643eac2effb543ef402eb4a86e1961155f6e5c594d929656e9b8df55e7", 0xf9}, {&(0x7f00000005c0)="0ec9930d61111ba47ef9daa921ba62f56730b8b4092034f39eae184c0adef923f9bffca3f477bcc2d5061ea5a5a11b1ab8afdd0ed68d6474ed96667a9cde4b197030400361f7d4d4e55f0ab361360c671509a2c9dacaaa88a1d21774bd708856a56bfcc618b87c5ba775d7ac6c143b7f5fb2ae19ce4e973934a80254fc13d8281fd4c11a6eb250731ac6893bcb4a6891c888a4643ca2", 0x96}], 0x5, 0x3) r5 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r5, 0x10000000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) 00:53:20 executing program 3: r0 = getpid() pidfd_open(r0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe2, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x12a600, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x2, 0x8, 0x7f, 0x0, 0x3ff, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x1a02, 0x8, 0x0, 0x1, 0x1, 0x3, 0x2, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x6, 0x1, 0x3f, 0x72, 0x0, 0x2, 0x8b000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x800, 0x8, 0x10000, 0x3, 0x49, 0x1, 0x6, 0x0, 0x369b, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000880)={0x2080, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000700), {0x31}, &(0x7f0000000740)=""/168, 0xa8, &(0x7f0000000800)=""/32, &(0x7f0000000840)=[r0, r0, 0x0, r0, 0x0], 0x5}, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) close_range(r2, r3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r4) vmsplice(r4, &(0x7f0000000680)=[{&(0x7f0000000140)="b3738ca06eaeccd3810c5716039bccc4ddad974a6579f8f61a7ca1e3aaefd647d0127d45d678009fa18463f759ea82f8bc621011868815d3e22f4e09fe33b5c41d54ef32ae36eebc6f6d3327ea937502fa913cecf844b7efd08fb52ff2da49fc603163dc4a8d97833928c105b991922b644242d311357a412d9b7d65c80a4ba78c53fa68", 0x84}, {&(0x7f0000000300)="1210cb112c1160ff8bbfeab73894466f7fd2264a185fdbbb4b4a9db749792bd439b097c48adca9c0bd003389135f4489127207f85fec2e3fe0c3b2e52b8a3a6241bae59e60ece246d9485efa85e98fc91cfeab22147dc9027a80bbfdaab0dbac", 0x60}, {&(0x7f0000000400)="4311c2f0819b8f47cabc057afbebb1266dcd7700fdc0ea2ed47ec22a0867c5167927a2713d702535b457e6fb1d0d743f9eda011b71e5539faf4ac128674a8b857729c8c879167066423851b7e2de846a63484a2167d8012ff26185b7cca847cbf7b167baf9ba7214d540735a329c16035d7992aa7fabb54731dcf0c2c5d845a3fea63782c2fbe3cb442b7d5a3924bec3090be538", 0x94}, {&(0x7f00000004c0)="0eae6a88db361dbcd4fbf043fbde4f04450e8ce649af377279308643ade37c99a06c3036a696ebe6af593e2633e0d1fd1b8a464ddbd08b9f3053d583de3d8798f798532690ead83f0ac04b59c370731d4fe9814763c6e05be7291f6026ef2e161603f2c4282f2eb1fa784d6389777db668d748458cd8a306c08be708caa330b28fb265f99ffac3735518675283b68c2f57c92a37101bd9683746727bedae1e9b9efc8bdf3649fd7609a278c153572a13374bca90bd771c3478cc27c81b98101495202c267062f2b62dc463594220e9967354719d5802ffece57cd1f6643eac2effb543ef402eb4a86e1961155f6e5c594d929656e9b8df55e7", 0xf9}, {&(0x7f00000005c0)="0ec9930d61111ba47ef9daa921ba62f56730b8b4092034f39eae184c0adef923f9bffca3f477bcc2d5061ea5a5a11b1ab8afdd0ed68d6474ed96667a9cde4b197030400361f7d4d4e55f0ab361360c671509a2c9dacaaa88a1d21774bd708856a56bfcc618b87c5ba775d7ac6c143b7f5fb2ae19ce4e973934a80254fc13d8281fd4c11a6eb250731ac6893bcb4a6891c888a4643ca2", 0x96}], 0x5, 0x3) r5 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r5, 0x10000000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) [ 126.888642] loop6: detected capacity change from 0 to 264192 [ 126.894472] loop6: detected capacity change from 0 to 264192 [ 127.145041] ======================================================= [ 127.145041] WARNING: The mand mount option has been deprecated and [ 127.145041] and is ignored by this kernel. Remove the mand [ 127.145041] option from the mount to silence this warning. [ 127.145041] ======================================================= [ 127.153860] cgroup2: Unknown parameter 'uid<00000000000000060928' [ 127.159931] cgroup2: Unknown parameter 'uid<00000000000000060928' VM DIAGNOSIS: 00:53:20 Registers: info registers vcpu 0 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888018647340 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000063 R11=0000000000000001 R12=0000000000000063 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f69cc602700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2984d414a1 CR3=000000003e82a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 YMM01=0000000000000000 0000000000000000 2323232323232323 2323232323232323 YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000080000000 RBX=0000000000000001 RCX=0000000080000000 RDX=ffff88800ff5d040 RSI=ffffffff814684d7 RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88803ef0f310 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff8544da08 R15=0000000000000000 RIP=ffffffff81460c3d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe31e279028 CR3=000000001d7ea000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000