Warning: Permanently added '[localhost]:47300' (ECDSA) to the list of known hosts. 2023/02/24 11:58:47 fuzzer started 2023/02/24 11:58:48 dialing manager at localhost:41417 syzkaller login: [ 43.713548] cgroup: Unknown subsys name 'net' [ 43.819855] cgroup: Unknown subsys name 'rlimit' 2023/02/24 11:59:02 syscalls: 2217 2023/02/24 11:59:02 code coverage: enabled 2023/02/24 11:59:02 comparison tracing: enabled 2023/02/24 11:59:02 extra coverage: enabled 2023/02/24 11:59:02 setuid sandbox: enabled 2023/02/24 11:59:02 namespace sandbox: enabled 2023/02/24 11:59:02 Android sandbox: enabled 2023/02/24 11:59:02 fault injection: enabled 2023/02/24 11:59:02 leak checking: enabled 2023/02/24 11:59:02 net packet injection: enabled 2023/02/24 11:59:02 net device setup: enabled 2023/02/24 11:59:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/24 11:59:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/24 11:59:02 USB emulation: enabled 2023/02/24 11:59:02 hci packet injection: enabled 2023/02/24 11:59:02 wifi device emulation: enabled 2023/02/24 11:59:02 802.15.4 emulation: enabled 2023/02/24 11:59:02 fetching corpus: 0, signal 0/2000 (executing program) 2023/02/24 11:59:02 fetching corpus: 43, signal 29169/32773 (executing program) 2023/02/24 11:59:02 fetching corpus: 92, signal 40914/46071 (executing program) 2023/02/24 11:59:03 fetching corpus: 142, signal 53850/60405 (executing program) 2023/02/24 11:59:03 fetching corpus: 192, signal 62541/70441 (executing program) 2023/02/24 11:59:03 fetching corpus: 241, signal 73874/82937 (executing program) 2023/02/24 11:59:03 fetching corpus: 291, signal 78877/89211 (executing program) 2023/02/24 11:59:03 fetching corpus: 341, signal 84637/96114 (executing program) 2023/02/24 11:59:03 fetching corpus: 391, signal 92730/105140 (executing program) 2023/02/24 11:59:03 fetching corpus: 441, signal 96363/109889 (executing program) 2023/02/24 11:59:04 fetching corpus: 491, signal 100970/115515 (executing program) 2023/02/24 11:59:04 fetching corpus: 541, signal 105516/121063 (executing program) 2023/02/24 11:59:04 fetching corpus: 591, signal 109520/126018 (executing program) 2023/02/24 11:59:04 fetching corpus: 641, signal 111822/129376 (executing program) 2023/02/24 11:59:04 fetching corpus: 690, signal 115373/133812 (executing program) 2023/02/24 11:59:04 fetching corpus: 740, signal 119571/138729 (executing program) 2023/02/24 11:59:04 fetching corpus: 789, signal 123285/143193 (executing program) 2023/02/24 11:59:05 fetching corpus: 839, signal 125942/146767 (executing program) 2023/02/24 11:59:05 fetching corpus: 889, signal 128366/150018 (executing program) 2023/02/24 11:59:05 fetching corpus: 939, signal 132201/154493 (executing program) 2023/02/24 11:59:05 fetching corpus: 989, signal 135182/158179 (executing program) 2023/02/24 11:59:05 fetching corpus: 1039, signal 136911/160749 (executing program) 2023/02/24 11:59:05 fetching corpus: 1089, signal 138527/163194 (executing program) 2023/02/24 11:59:05 fetching corpus: 1139, signal 140464/165880 (executing program) 2023/02/24 11:59:05 fetching corpus: 1189, signal 141985/168219 (executing program) 2023/02/24 11:59:05 fetching corpus: 1238, signal 145009/171751 (executing program) 2023/02/24 11:59:06 fetching corpus: 1288, signal 148051/175321 (executing program) 2023/02/24 11:59:06 fetching corpus: 1338, signal 149879/177854 (executing program) 2023/02/24 11:59:06 fetching corpus: 1387, signal 151579/180206 (executing program) 2023/02/24 11:59:06 fetching corpus: 1437, signal 153091/182412 (executing program) 2023/02/24 11:59:06 fetching corpus: 1487, signal 154853/184752 (executing program) 2023/02/24 11:59:06 fetching corpus: 1537, signal 156471/186943 (executing program) 2023/02/24 11:59:06 fetching corpus: 1587, signal 157723/188867 (executing program) 2023/02/24 11:59:07 fetching corpus: 1637, signal 160092/191653 (executing program) 2023/02/24 11:59:07 fetching corpus: 1687, signal 161638/193764 (executing program) 2023/02/24 11:59:07 fetching corpus: 1737, signal 163003/195691 (executing program) 2023/02/24 11:59:07 fetching corpus: 1787, signal 163890/197221 (executing program) 2023/02/24 11:59:07 fetching corpus: 1837, signal 165320/199200 (executing program) 2023/02/24 11:59:07 fetching corpus: 1887, signal 166774/201202 (executing program) 2023/02/24 11:59:07 fetching corpus: 1937, signal 168163/203133 (executing program) 2023/02/24 11:59:08 fetching corpus: 1986, signal 170314/205552 (executing program) 2023/02/24 11:59:08 fetching corpus: 2036, signal 171783/207501 (executing program) 2023/02/24 11:59:08 fetching corpus: 2086, signal 173291/209407 (executing program) 2023/02/24 11:59:08 fetching corpus: 2134, signal 174819/211299 (executing program) 2023/02/24 11:59:08 fetching corpus: 2183, signal 176313/213163 (executing program) 2023/02/24 11:59:08 fetching corpus: 2233, signal 177720/214962 (executing program) 2023/02/24 11:59:08 fetching corpus: 2282, signal 178858/216538 (executing program) 2023/02/24 11:59:09 fetching corpus: 2330, signal 180030/218170 (executing program) 2023/02/24 11:59:09 fetching corpus: 2379, signal 181706/220068 (executing program) 2023/02/24 11:59:09 fetching corpus: 2429, signal 182867/221669 (executing program) 2023/02/24 11:59:09 fetching corpus: 2478, signal 184522/223561 (executing program) 2023/02/24 11:59:09 fetching corpus: 2527, signal 185509/224989 (executing program) 2023/02/24 11:59:09 fetching corpus: 2576, signal 186952/226653 (executing program) 2023/02/24 11:59:09 fetching corpus: 2626, signal 188339/228328 (executing program) 2023/02/24 11:59:09 fetching corpus: 2676, signal 189758/229939 (executing program) 2023/02/24 11:59:10 fetching corpus: 2726, signal 190646/231252 (executing program) 2023/02/24 11:59:10 fetching corpus: 2776, signal 192412/233087 (executing program) 2023/02/24 11:59:10 fetching corpus: 2826, signal 193642/234555 (executing program) 2023/02/24 11:59:10 fetching corpus: 2876, signal 196933/237236 (executing program) 2023/02/24 11:59:10 fetching corpus: 2925, signal 197870/238432 (executing program) 2023/02/24 11:59:10 fetching corpus: 2975, signal 198555/239532 (executing program) 2023/02/24 11:59:11 fetching corpus: 3025, signal 199503/240740 (executing program) 2023/02/24 11:59:11 fetching corpus: 3075, signal 200742/242146 (executing program) 2023/02/24 11:59:11 fetching corpus: 3125, signal 202588/243862 (executing program) 2023/02/24 11:59:11 fetching corpus: 3175, signal 203787/245210 (executing program) 2023/02/24 11:59:11 fetching corpus: 3224, signal 204770/246378 (executing program) 2023/02/24 11:59:11 fetching corpus: 3274, signal 205552/247457 (executing program) 2023/02/24 11:59:11 fetching corpus: 3324, signal 206405/248545 (executing program) 2023/02/24 11:59:11 fetching corpus: 3374, signal 207509/249738 (executing program) 2023/02/24 11:59:12 fetching corpus: 3423, signal 208357/250804 (executing program) 2023/02/24 11:59:12 fetching corpus: 3473, signal 208899/251713 (executing program) 2023/02/24 11:59:12 fetching corpus: 3523, signal 209821/252826 (executing program) 2023/02/24 11:59:12 fetching corpus: 3573, signal 210543/253805 (executing program) 2023/02/24 11:59:12 fetching corpus: 3623, signal 211132/254743 (executing program) 2023/02/24 11:59:12 fetching corpus: 3671, signal 211941/255756 (executing program) 2023/02/24 11:59:12 fetching corpus: 3721, signal 212836/256750 (executing program) 2023/02/24 11:59:12 fetching corpus: 3771, signal 213626/257651 (executing program) 2023/02/24 11:59:13 fetching corpus: 3821, signal 214967/258852 (executing program) 2023/02/24 11:59:13 fetching corpus: 3871, signal 215674/259790 (executing program) 2023/02/24 11:59:13 fetching corpus: 3921, signal 216373/260658 (executing program) 2023/02/24 11:59:13 fetching corpus: 3971, signal 216993/261481 (executing program) 2023/02/24 11:59:13 fetching corpus: 4021, signal 217578/262285 (executing program) 2023/02/24 11:59:13 fetching corpus: 4071, signal 218542/263298 (executing program) 2023/02/24 11:59:13 fetching corpus: 4121, signal 219227/264141 (executing program) 2023/02/24 11:59:13 fetching corpus: 4171, signal 219825/264958 (executing program) 2023/02/24 11:59:14 fetching corpus: 4221, signal 220474/265724 (executing program) 2023/02/24 11:59:14 fetching corpus: 4271, signal 221085/266522 (executing program) 2023/02/24 11:59:14 fetching corpus: 4321, signal 221677/267292 (executing program) 2023/02/24 11:59:14 fetching corpus: 4371, signal 222290/268054 (executing program) 2023/02/24 11:59:14 fetching corpus: 4421, signal 223136/268904 (executing program) 2023/02/24 11:59:14 fetching corpus: 4471, signal 223697/269617 (executing program) 2023/02/24 11:59:14 fetching corpus: 4521, signal 224306/270349 (executing program) 2023/02/24 11:59:15 fetching corpus: 4571, signal 225109/271188 (executing program) 2023/02/24 11:59:15 fetching corpus: 4621, signal 225678/271903 (executing program) 2023/02/24 11:59:15 fetching corpus: 4671, signal 226577/272716 (executing program) 2023/02/24 11:59:15 fetching corpus: 4721, signal 227144/273427 (executing program) 2023/02/24 11:59:15 fetching corpus: 4771, signal 227857/274135 (executing program) 2023/02/24 11:59:15 fetching corpus: 4821, signal 228313/274764 (executing program) 2023/02/24 11:59:15 fetching corpus: 4871, signal 228966/275484 (executing program) 2023/02/24 11:59:15 fetching corpus: 4921, signal 229835/276223 (executing program) 2023/02/24 11:59:16 fetching corpus: 4971, signal 230530/276918 (executing program) 2023/02/24 11:59:16 fetching corpus: 5021, signal 231236/277658 (executing program) 2023/02/24 11:59:16 fetching corpus: 5071, signal 232027/278350 (executing program) 2023/02/24 11:59:16 fetching corpus: 5121, signal 232879/279100 (executing program) 2023/02/24 11:59:16 fetching corpus: 5171, signal 233433/279724 (executing program) 2023/02/24 11:59:16 fetching corpus: 5221, signal 234083/280365 (executing program) 2023/02/24 11:59:16 fetching corpus: 5271, signal 234914/281035 (executing program) 2023/02/24 11:59:16 fetching corpus: 5321, signal 235637/281637 (executing program) 2023/02/24 11:59:17 fetching corpus: 5371, signal 236262/282246 (executing program) 2023/02/24 11:59:17 fetching corpus: 5421, signal 236992/282841 (executing program) 2023/02/24 11:59:17 fetching corpus: 5471, signal 237523/283389 (executing program) 2023/02/24 11:59:17 fetching corpus: 5521, signal 238129/283935 (executing program) 2023/02/24 11:59:17 fetching corpus: 5571, signal 238749/284528 (executing program) 2023/02/24 11:59:17 fetching corpus: 5620, signal 239310/285053 (executing program) 2023/02/24 11:59:17 fetching corpus: 5670, signal 240074/285631 (executing program) 2023/02/24 11:59:18 fetching corpus: 5720, signal 240726/286206 (executing program) 2023/02/24 11:59:18 fetching corpus: 5770, signal 241497/286796 (executing program) 2023/02/24 11:59:18 fetching corpus: 5819, signal 241962/287272 (executing program) 2023/02/24 11:59:18 fetching corpus: 5869, signal 242604/287801 (executing program) 2023/02/24 11:59:18 fetching corpus: 5919, signal 243561/288373 (executing program) 2023/02/24 11:59:18 fetching corpus: 5968, signal 244278/288912 (executing program) 2023/02/24 11:59:18 fetching corpus: 6017, signal 244713/289344 (executing program) 2023/02/24 11:59:19 fetching corpus: 6067, signal 245191/289795 (executing program) 2023/02/24 11:59:19 fetching corpus: 6117, signal 245661/290243 (executing program) 2023/02/24 11:59:19 fetching corpus: 6167, signal 246306/290722 (executing program) 2023/02/24 11:59:19 fetching corpus: 6217, signal 246868/291162 (executing program) 2023/02/24 11:59:19 fetching corpus: 6267, signal 247184/291564 (executing program) 2023/02/24 11:59:19 fetching corpus: 6316, signal 247659/291952 (executing program) 2023/02/24 11:59:19 fetching corpus: 6366, signal 248190/292364 (executing program) 2023/02/24 11:59:19 fetching corpus: 6415, signal 248767/292766 (executing program) 2023/02/24 11:59:19 fetching corpus: 6465, signal 249300/293175 (executing program) 2023/02/24 11:59:20 fetching corpus: 6515, signal 250063/293618 (executing program) 2023/02/24 11:59:20 fetching corpus: 6564, signal 250595/294006 (executing program) 2023/02/24 11:59:20 fetching corpus: 6614, signal 251114/294366 (executing program) 2023/02/24 11:59:20 fetching corpus: 6664, signal 251459/294743 (executing program) 2023/02/24 11:59:20 fetching corpus: 6714, signal 251986/295112 (executing program) 2023/02/24 11:59:21 fetching corpus: 6764, signal 252684/295491 (executing program) 2023/02/24 11:59:21 fetching corpus: 6814, signal 253239/295849 (executing program) 2023/02/24 11:59:21 fetching corpus: 6863, signal 253588/296186 (executing program) 2023/02/24 11:59:21 fetching corpus: 6913, signal 254158/296558 (executing program) 2023/02/24 11:59:21 fetching corpus: 6962, signal 254616/296913 (executing program) 2023/02/24 11:59:21 fetching corpus: 7011, signal 255106/297207 (executing program) 2023/02/24 11:59:21 fetching corpus: 7060, signal 255490/297535 (executing program) 2023/02/24 11:59:22 fetching corpus: 7110, signal 256088/297856 (executing program) 2023/02/24 11:59:22 fetching corpus: 7160, signal 256788/298157 (executing program) 2023/02/24 11:59:22 fetching corpus: 7210, signal 257407/298463 (executing program) 2023/02/24 11:59:22 fetching corpus: 7259, signal 257770/298741 (executing program) 2023/02/24 11:59:22 fetching corpus: 7309, signal 258202/299049 (executing program) 2023/02/24 11:59:22 fetching corpus: 7359, signal 258732/299339 (executing program) 2023/02/24 11:59:22 fetching corpus: 7409, signal 259073/299542 (executing program) 2023/02/24 11:59:23 fetching corpus: 7459, signal 259548/299542 (executing program) 2023/02/24 11:59:23 fetching corpus: 7509, signal 259972/299542 (executing program) 2023/02/24 11:59:23 fetching corpus: 7558, signal 260371/299542 (executing program) 2023/02/24 11:59:23 fetching corpus: 7608, signal 260991/299542 (executing program) 2023/02/24 11:59:23 fetching corpus: 7657, signal 261446/299542 (executing program) 2023/02/24 11:59:23 fetching corpus: 7707, signal 261857/299542 (executing program) 2023/02/24 11:59:23 fetching corpus: 7757, signal 262485/299542 (executing program) 2023/02/24 11:59:24 fetching corpus: 7807, signal 262839/299545 (executing program) 2023/02/24 11:59:24 fetching corpus: 7857, signal 263342/299545 (executing program) 2023/02/24 11:59:24 fetching corpus: 7907, signal 263782/299545 (executing program) 2023/02/24 11:59:24 fetching corpus: 7956, signal 264127/299548 (executing program) 2023/02/24 11:59:24 fetching corpus: 8006, signal 264648/299555 (executing program) 2023/02/24 11:59:24 fetching corpus: 8056, signal 265061/299555 (executing program) 2023/02/24 11:59:24 fetching corpus: 8104, signal 265370/299555 (executing program) 2023/02/24 11:59:25 fetching corpus: 8154, signal 265866/299555 (executing program) 2023/02/24 11:59:25 fetching corpus: 8202, signal 266316/299556 (executing program) 2023/02/24 11:59:25 fetching corpus: 8252, signal 266650/299560 (executing program) 2023/02/24 11:59:25 fetching corpus: 8302, signal 266948/299560 (executing program) 2023/02/24 11:59:25 fetching corpus: 8351, signal 267477/299560 (executing program) 2023/02/24 11:59:25 fetching corpus: 8399, signal 267894/299560 (executing program) 2023/02/24 11:59:26 fetching corpus: 8449, signal 268402/299560 (executing program) 2023/02/24 11:59:26 fetching corpus: 8499, signal 268886/299560 (executing program) 2023/02/24 11:59:26 fetching corpus: 8549, signal 269226/299560 (executing program) 2023/02/24 11:59:26 fetching corpus: 8599, signal 269578/299560 (executing program) 2023/02/24 11:59:26 fetching corpus: 8649, signal 269920/299560 (executing program) 2023/02/24 11:59:26 fetching corpus: 8699, signal 270275/299561 (executing program) 2023/02/24 11:59:26 fetching corpus: 8748, signal 270725/299600 (executing program) 2023/02/24 11:59:26 fetching corpus: 8797, signal 271183/299600 (executing program) 2023/02/24 11:59:27 fetching corpus: 8847, signal 271723/299600 (executing program) 2023/02/24 11:59:27 fetching corpus: 8897, signal 272048/299600 (executing program) 2023/02/24 11:59:27 fetching corpus: 8945, signal 272496/299600 (executing program) 2023/02/24 11:59:27 fetching corpus: 8995, signal 272899/299600 (executing program) 2023/02/24 11:59:27 fetching corpus: 9045, signal 273271/299600 (executing program) 2023/02/24 11:59:27 fetching corpus: 9095, signal 273638/299610 (executing program) 2023/02/24 11:59:27 fetching corpus: 9145, signal 274091/299610 (executing program) 2023/02/24 11:59:28 fetching corpus: 9195, signal 274433/299610 (executing program) 2023/02/24 11:59:28 fetching corpus: 9245, signal 274789/299610 (executing program) 2023/02/24 11:59:28 fetching corpus: 9295, signal 275261/299610 (executing program) 2023/02/24 11:59:28 fetching corpus: 9345, signal 275750/299610 (executing program) 2023/02/24 11:59:28 fetching corpus: 9395, signal 276081/299610 (executing program) 2023/02/24 11:59:28 fetching corpus: 9445, signal 276808/299610 (executing program) 2023/02/24 11:59:28 fetching corpus: 9495, signal 277145/299610 (executing program) 2023/02/24 11:59:28 fetching corpus: 9545, signal 277447/299610 (executing program) 2023/02/24 11:59:29 fetching corpus: 9595, signal 277796/299610 (executing program) 2023/02/24 11:59:29 fetching corpus: 9645, signal 278165/299610 (executing program) 2023/02/24 11:59:29 fetching corpus: 9694, signal 278473/299610 (executing program) 2023/02/24 11:59:29 fetching corpus: 9744, signal 278830/299610 (executing program) 2023/02/24 11:59:29 fetching corpus: 9794, signal 279158/299610 (executing program) 2023/02/24 11:59:29 fetching corpus: 9844, signal 279508/299610 (executing program) 2023/02/24 11:59:29 fetching corpus: 9894, signal 280766/299610 (executing program) 2023/02/24 11:59:30 fetching corpus: 9944, signal 281117/299610 (executing program) 2023/02/24 11:59:30 fetching corpus: 9994, signal 281414/299610 (executing program) 2023/02/24 11:59:30 fetching corpus: 10043, signal 281706/299610 (executing program) 2023/02/24 11:59:30 fetching corpus: 10093, signal 282028/299610 (executing program) 2023/02/24 11:59:30 fetching corpus: 10142, signal 282365/299610 (executing program) 2023/02/24 11:59:30 fetching corpus: 10192, signal 282635/299610 (executing program) 2023/02/24 11:59:30 fetching corpus: 10241, signal 282878/299614 (executing program) 2023/02/24 11:59:30 fetching corpus: 10291, signal 283343/299621 (executing program) 2023/02/24 11:59:31 fetching corpus: 10341, signal 283732/299621 (executing program) 2023/02/24 11:59:31 fetching corpus: 10391, signal 284033/299621 (executing program) 2023/02/24 11:59:31 fetching corpus: 10440, signal 284388/299621 (executing program) 2023/02/24 11:59:31 fetching corpus: 10489, signal 284706/299621 (executing program) 2023/02/24 11:59:31 fetching corpus: 10536, signal 285064/299636 (executing program) 2023/02/24 11:59:31 fetching corpus: 10586, signal 285347/299637 (executing program) 2023/02/24 11:59:31 fetching corpus: 10636, signal 285833/299637 (executing program) 2023/02/24 11:59:31 fetching corpus: 10684, signal 286107/299639 (executing program) 2023/02/24 11:59:32 fetching corpus: 10733, signal 286413/299648 (executing program) 2023/02/24 11:59:32 fetching corpus: 10783, signal 286717/299648 (executing program) 2023/02/24 11:59:32 fetching corpus: 10833, signal 287014/299648 (executing program) 2023/02/24 11:59:32 fetching corpus: 10883, signal 287291/299650 (executing program) 2023/02/24 11:59:32 fetching corpus: 10932, signal 287667/299650 (executing program) 2023/02/24 11:59:32 fetching corpus: 10982, signal 287949/299650 (executing program) 2023/02/24 11:59:32 fetching corpus: 11032, signal 288217/299650 (executing program) 2023/02/24 11:59:33 fetching corpus: 11082, signal 288473/299650 (executing program) 2023/02/24 11:59:33 fetching corpus: 11132, signal 288740/299650 (executing program) 2023/02/24 11:59:33 fetching corpus: 11181, signal 288987/299700 (executing program) 2023/02/24 11:59:33 fetching corpus: 11230, signal 289308/299714 (executing program) 2023/02/24 11:59:33 fetching corpus: 11280, signal 289572/299714 (executing program) 2023/02/24 11:59:33 fetching corpus: 11330, signal 289836/299714 (executing program) 2023/02/24 11:59:33 fetching corpus: 11380, signal 290046/299714 (executing program) 2023/02/24 11:59:33 fetching corpus: 11430, signal 290417/299714 (executing program) 2023/02/24 11:59:34 fetching corpus: 11479, signal 290759/299714 (executing program) 2023/02/24 11:59:34 fetching corpus: 11527, signal 291068/299714 (executing program) 2023/02/24 11:59:34 fetching corpus: 11576, signal 291296/299714 (executing program) 2023/02/24 11:59:34 fetching corpus: 11624, signal 291714/299714 (executing program) 2023/02/24 11:59:34 fetching corpus: 11674, signal 292047/299714 (executing program) 2023/02/24 11:59:34 fetching corpus: 11724, signal 292346/299714 (executing program) 2023/02/24 11:59:34 fetching corpus: 11774, signal 292661/299722 (executing program) 2023/02/24 11:59:35 fetching corpus: 11824, signal 293013/299722 (executing program) 2023/02/24 11:59:35 fetching corpus: 11874, signal 293374/299722 (executing program) 2023/02/24 11:59:35 fetching corpus: 11923, signal 293655/299722 (executing program) 2023/02/24 11:59:35 fetching corpus: 11973, signal 293904/299722 (executing program) 2023/02/24 11:59:35 fetching corpus: 12023, signal 294235/299722 (executing program) 2023/02/24 11:59:35 fetching corpus: 12073, signal 294877/299722 (executing program) 2023/02/24 11:59:35 fetching corpus: 12123, signal 295140/299722 (executing program) 2023/02/24 11:59:35 fetching corpus: 12173, signal 295412/299722 (executing program) 2023/02/24 11:59:36 fetching corpus: 12223, signal 295700/299722 (executing program) 2023/02/24 11:59:36 fetching corpus: 12273, signal 295860/299763 (executing program) 2023/02/24 11:59:36 fetching corpus: 12305, signal 296012/299763 (executing program) 2023/02/24 11:59:36 fetching corpus: 12305, signal 296012/299763 (executing program) 2023/02/24 11:59:39 starting 8 fuzzer processes 11:59:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000840)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{@none}]}) 11:59:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) lstat(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 11:59:39 executing program 3: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00'}, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:59:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x20}], 0x1}, 0x0) [ 94.783800] audit: type=1400 audit(1677239979.401:6): avc: denied { execmem } for pid=258 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:59:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000040000cc8c516278b50000000000000000000000000000000000000000000000000000000074c8b2125d24277f72821b50096192df28f4e9b84c"]) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x18440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x612, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 11:59:39 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:59:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x12, &(0x7f0000000000)) 11:59:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001680)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'wg0\x00'}) [ 96.089212] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.091054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.093319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.103966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.112927] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.114226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.152183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.154179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.155463] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.158755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.160514] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.161863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.177541] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.180145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.184151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.185445] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.187157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.188298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.207226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.208618] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 96.209423] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 96.210060] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.212101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.213001] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.214122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.215354] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.216705] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.217132] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 96.219713] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.221123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.222017] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.223294] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.224283] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 96.225621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 96.225799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.230870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.238684] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.239672] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 96.241791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.245095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.250194] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.261787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.264811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 96.269098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.271120] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 96.272444] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.272689] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 96.274825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.174370] Bluetooth: hci3: command 0x0409 tx timeout [ 98.174395] Bluetooth: hci0: command 0x0409 tx timeout [ 98.238292] Bluetooth: hci1: command 0x0409 tx timeout [ 98.302086] Bluetooth: hci4: command 0x0409 tx timeout [ 98.303059] Bluetooth: hci5: command 0x0409 tx timeout [ 98.303087] Bluetooth: hci7: command 0x0409 tx timeout [ 98.303849] Bluetooth: hci6: command 0x0409 tx timeout [ 98.304468] Bluetooth: hci2: command 0x0409 tx timeout [ 100.221961] Bluetooth: hci0: command 0x041b tx timeout [ 100.223759] Bluetooth: hci3: command 0x041b tx timeout [ 100.285980] Bluetooth: hci1: command 0x041b tx timeout [ 100.349981] Bluetooth: hci6: command 0x041b tx timeout [ 100.350405] Bluetooth: hci7: command 0x041b tx timeout [ 100.350764] Bluetooth: hci5: command 0x041b tx timeout [ 100.351418] Bluetooth: hci4: command 0x041b tx timeout [ 100.351850] Bluetooth: hci2: command 0x041b tx timeout [ 102.270954] Bluetooth: hci3: command 0x040f tx timeout [ 102.271397] Bluetooth: hci0: command 0x040f tx timeout [ 102.333962] Bluetooth: hci1: command 0x040f tx timeout [ 102.398053] Bluetooth: hci2: command 0x040f tx timeout [ 102.398764] Bluetooth: hci4: command 0x040f tx timeout [ 102.399664] Bluetooth: hci5: command 0x040f tx timeout [ 102.400354] Bluetooth: hci7: command 0x040f tx timeout [ 102.401036] Bluetooth: hci6: command 0x040f tx timeout [ 104.317997] Bluetooth: hci0: command 0x0419 tx timeout [ 104.318746] Bluetooth: hci3: command 0x0419 tx timeout [ 104.383038] Bluetooth: hci1: command 0x0419 tx timeout [ 104.447079] Bluetooth: hci6: command 0x0419 tx timeout [ 104.447812] Bluetooth: hci7: command 0x0419 tx timeout [ 104.448526] Bluetooth: hci5: command 0x0419 tx timeout [ 104.449219] Bluetooth: hci4: command 0x0419 tx timeout [ 104.449927] Bluetooth: hci2: command 0x0419 tx timeout [ 140.413866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.414544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.417519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.581812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.582434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.584000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.099241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.099845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.101488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.214191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.214782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.216477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.371981] audit: type=1400 audit(1677240025.989:7): avc: denied { open } for pid=3733 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 141.373339] audit: type=1400 audit(1677240025.989:8): avc: denied { kernel } for pid=3733 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:00:26 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 141.985899] hrtimer: interrupt took 19547 ns 12:00:26 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 142.286579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.287223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.288560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 12:00:26 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 142.557146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.557782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.559355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:00:27 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:00:27 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:00:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) pipe(&(0x7f0000000040)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000200)=""/15, 0xf}], 0x3, 0x62, 0x2) 12:00:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) pipe(&(0x7f0000000040)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000200)=""/15, 0xf}], 0x3, 0x62, 0x2) 12:00:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) pipe(&(0x7f0000000040)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000200)=""/15, 0xf}], 0x3, 0x62, 0x2) [ 144.922310] cgroup: Need name or subsystem set [ 144.942552] cgroup: Need name or subsystem set [ 146.262517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.263294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.264698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.360682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.362051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.366569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.546732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.548174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.550144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.643068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.644151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.646394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.724419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.725509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.727737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.829047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.830120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.832308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.108175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.109310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.113289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.209451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.210608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.213022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.846359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.847546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.850207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.993271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.994345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.000253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.860531] syz-executor.1 (3953) used greatest stack depth: 23752 bytes left [ 148.861971] syz-executor.1 (3939) used greatest stack depth: 22936 bytes left 12:00:33 executing program 0: r0 = syz_io_uring_setup(0x6945, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:00:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) 12:00:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) pipe(&(0x7f0000000040)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000200)=""/15, 0xf}], 0x3, 0x62, 0x2) 12:00:33 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:00:33 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="bb866168658e2f3343de227011e6db342d15cb8a23eed8ec0c4ee9c1b6e69565b63b9abdec263aa0accac58b53c2e5d40328547434c580c870f2f1bab900cf8c9726178b6a5cac101a378bc0250fc35b9a4aaf9351790c1c9d81d6b43dbdcaede3ae3e9d4827b0acf85ef8e19407989eafe571ec9b00d4e8ea169fa25b2ee305d45dcadba8eee9848ac42dd081442a2f29ef6fcfe6b66481bba62275f72f3344615f97078a8efc38e56ca4745f91617eec00e833d6cd86a7521ee370fe44ff3fdc0febf251afe9deb23917d9f92df519b33656a84fb3049ac7c05cca3ab674f9", 0xe0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x800, 0x0, 0x80000000000}]}) 12:00:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000040000cc8c516278b50000000000000000000000000000000000000000000000000000000074c8b2125d24277f72821b50096192df28f4e9b84c"]) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x18440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x612, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 12:00:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "74463b4401a62f7ad7a5725928fb5f5118c8fd2ae12e42b86ede9e74d0ec9f27b1b8c3c21836a4d494093d12c2d9bb24c7c4f60475dd03b0e2885c26e089d7d2209562660b7356b03b7d69c83b1546c6"}, 0xd8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, r4}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@multicast2, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0x100, 0x20, 0x3a, r4, r5}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x100000001, 0x7}, {0x3f, 0x3, 0x8}, 0x5, 0x0, 0xbf34fa06ad07616f, 0x1, 0x7, 0x2}, {{@in6=@private2, 0x4d5, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x4, 0x2, 0x2, 0x200, 0x7}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x11, &(0x7f0000000100), 0x4) 12:00:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000040000cc8c516278b50000000000000000000000000000000000000000000000000000000074c8b2125d24277f72821b50096192df28f4e9b84c"]) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x18440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x612, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 12:00:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) sendfile(r0, r0, 0x0, 0x100000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, 0x0, 0x0) 12:00:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) 12:00:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "74463b4401a62f7ad7a5725928fb5f5118c8fd2ae12e42b86ede9e74d0ec9f27b1b8c3c21836a4d494093d12c2d9bb24c7c4f60475dd03b0e2885c26e089d7d2209562660b7356b03b7d69c83b1546c6"}, 0xd8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, r4}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@multicast2, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0x100, 0x20, 0x3a, r4, r5}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x100000001, 0x7}, {0x3f, 0x3, 0x8}, 0x5, 0x0, 0xbf34fa06ad07616f, 0x1, 0x7, 0x2}, {{@in6=@private2, 0x4d5, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x4, 0x2, 0x2, 0x200, 0x7}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x11, &(0x7f0000000100), 0x4) 12:00:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5a, 0xffff}, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') ftruncate(0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24e1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) 12:00:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000040000cc8c516278b50000000000000000000000000000000000000000000000000000000074c8b2125d24277f72821b50096192df28f4e9b84c"]) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x18440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x612, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 12:00:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000040000cc8c516278b50000000000000000000000000000000000000000000000000000000074c8b2125d24277f72821b50096192df28f4e9b84c"]) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x18440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x612, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 12:00:34 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="bb866168658e2f3343de227011e6db342d15cb8a23eed8ec0c4ee9c1b6e69565b63b9abdec263aa0accac58b53c2e5d40328547434c580c870f2f1bab900cf8c9726178b6a5cac101a378bc0250fc35b9a4aaf9351790c1c9d81d6b43dbdcaede3ae3e9d4827b0acf85ef8e19407989eafe571ec9b00d4e8ea169fa25b2ee305d45dcadba8eee9848ac42dd081442a2f29ef6fcfe6b66481bba62275f72f3344615f97078a8efc38e56ca4745f91617eec00e833d6cd86a7521ee370fe44ff3fdc0febf251afe9deb23917d9f92df519b33656a84fb3049ac7c05cca3ab674f9", 0xe0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x800, 0x0, 0x80000000000}]}) 12:00:34 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9) 12:00:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) 12:00:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_mrelease(0xffffffffffffffff, 0x0) 12:00:34 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9) 12:00:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "74463b4401a62f7ad7a5725928fb5f5118c8fd2ae12e42b86ede9e74d0ec9f27b1b8c3c21836a4d494093d12c2d9bb24c7c4f60475dd03b0e2885c26e089d7d2209562660b7356b03b7d69c83b1546c6"}, 0xd8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, r4}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@multicast2, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0x100, 0x20, 0x3a, r4, r5}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x100000001, 0x7}, {0x3f, 0x3, 0x8}, 0x5, 0x0, 0xbf34fa06ad07616f, 0x1, 0x7, 0x2}, {{@in6=@private2, 0x4d5, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x4, 0x2, 0x2, 0x200, 0x7}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x11, &(0x7f0000000100), 0x4) 12:00:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@local}, 0x0, @in=@private}}, 0xe8) 12:00:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) 12:00:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5a, 0xffff}, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') ftruncate(0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24e1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) 12:00:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000040000cc8c516278b50000000000000000000000000000000000000000000000000000000074c8b2125d24277f72821b50096192df28f4e9b84c"]) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x18440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x612, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 12:00:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "74463b4401a62f7ad7a5725928fb5f5118c8fd2ae12e42b86ede9e74d0ec9f27b1b8c3c21836a4d494093d12c2d9bb24c7c4f60475dd03b0e2885c26e089d7d2209562660b7356b03b7d69c83b1546c6"}, 0xd8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, r4}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@multicast2, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0x100, 0x20, 0x3a, r4, r5}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x100000001, 0x7}, {0x3f, 0x3, 0x8}, 0x5, 0x0, 0xbf34fa06ad07616f, 0x1, 0x7, 0x2}, {{@in6=@private2, 0x4d5, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x4, 0x2, 0x2, 0x200, 0x7}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x11, &(0x7f0000000100), 0x4) 12:00:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x40}}, 0x0) 12:00:35 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9) 12:00:35 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="bb866168658e2f3343de227011e6db342d15cb8a23eed8ec0c4ee9c1b6e69565b63b9abdec263aa0accac58b53c2e5d40328547434c580c870f2f1bab900cf8c9726178b6a5cac101a378bc0250fc35b9a4aaf9351790c1c9d81d6b43dbdcaede3ae3e9d4827b0acf85ef8e19407989eafe571ec9b00d4e8ea169fa25b2ee305d45dcadba8eee9848ac42dd081442a2f29ef6fcfe6b66481bba62275f72f3344615f97078a8efc38e56ca4745f91617eec00e833d6cd86a7521ee370fe44ff3fdc0febf251afe9deb23917d9f92df519b33656a84fb3049ac7c05cca3ab674f9", 0xe0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x800, 0x0, 0x80000000000}]}) 12:00:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000040000cc8c516278b50000000000000000000000000000000000000000000000000000000074c8b2125d24277f72821b50096192df28f4e9b84c"]) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x18440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x612, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) [ 150.053235] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 12:00:35 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8916, &(0x7f0000000380)={@empty, 0x0, r2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r5, 0x2f, 0x3d, 0x5, 0x5, 0xa, @remote, @private1, 0x10, 0x10, 0x5, 0x3}}) recvfrom(r0, &(0x7f0000000040), 0x0, 0x10042, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0x80) 12:00:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) 12:00:36 executing program 6: keyctl$chown(0x4, 0x0, 0xee00, 0x0) read$hiddev(0xffffffffffffffff, 0x0, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000240)=""/154, 0x9a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8b", 0x1, r0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, 0xfffffffffffffffe, 0x0) 12:00:36 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="bb866168658e2f3343de227011e6db342d15cb8a23eed8ec0c4ee9c1b6e69565b63b9abdec263aa0accac58b53c2e5d40328547434c580c870f2f1bab900cf8c9726178b6a5cac101a378bc0250fc35b9a4aaf9351790c1c9d81d6b43dbdcaede3ae3e9d4827b0acf85ef8e19407989eafe571ec9b00d4e8ea169fa25b2ee305d45dcadba8eee9848ac42dd081442a2f29ef6fcfe6b66481bba62275f72f3344615f97078a8efc38e56ca4745f91617eec00e833d6cd86a7521ee370fe44ff3fdc0febf251afe9deb23917d9f92df519b33656a84fb3049ac7c05cca3ab674f9", 0xe0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x4d, 0x0, '\x00', [{}, {0x800, 0x0, 0x80000000000}]}) 12:00:36 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9) 12:00:36 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, 0x0, 0x0) 12:00:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5a, 0xffff}, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') ftruncate(0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24e1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) 12:00:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xb) 12:00:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x0) [ 151.128094] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 12:00:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, 0x0, &(0x7f0000000180)=0x600) 12:00:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=@polexpire={0xc0, 0x19, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@local}}}}, 0xc0}}, 0x0) 12:00:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40100000284) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/107, 0x6b, 0x0) pipe(&(0x7f0000000040)) [ 152.014942] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 152.430654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 12:00:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, 0x0, &(0x7f0000000180)=0x600) 12:00:37 executing program 7: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 12:00:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5a, 0xffff}, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') ftruncate(0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24e1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) 12:00:37 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) 12:00:37 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8916, &(0x7f0000000380)={@empty, 0x0, r2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r5, 0x2f, 0x3d, 0x5, 0x5, 0xa, @remote, @private1, 0x10, 0x10, 0x5, 0x3}}) recvfrom(r0, &(0x7f0000000040), 0x0, 0x10042, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0x80) 12:00:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x0) 12:00:37 executing program 6: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0x1000000, 0x4) 12:00:37 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8916, &(0x7f0000000380)={@empty, 0x0, r2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r5, 0x2f, 0x3d, 0x5, 0x5, 0xa, @remote, @private1, 0x10, 0x10, 0x5, 0x3}}) recvfrom(r0, &(0x7f0000000040), 0x0, 0x10042, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0x80) 12:00:37 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8916, &(0x7f0000000380)={@empty, 0x0, r2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r5, 0x2f, 0x3d, 0x5, 0x5, 0xa, @remote, @private1, 0x10, 0x10, 0x5, 0x3}}) recvfrom(r0, &(0x7f0000000040), 0x0, 0x10042, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0x80) 12:00:37 executing program 6: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0x1000000, 0x4) 12:00:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) read(r0, 0x0, 0x0) keyctl$link(0x15, 0x0, 0x0) 12:00:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, 0x0, &(0x7f0000000180)=0x600) 12:00:37 executing program 5: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0) 12:00:37 executing program 6: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0x1000000, 0x4) 12:00:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, 0x0, &(0x7f0000000180)=0x600) 12:00:38 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8916, &(0x7f0000000380)={@empty, 0x0, r2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r5, 0x2f, 0x3d, 0x5, 0x5, 0xa, @remote, @private1, 0x10, 0x10, 0x5, 0x3}}) recvfrom(r0, &(0x7f0000000040), 0x0, 0x10042, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0x80) 12:00:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f00000000c0)) [ 153.033738] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 202.785934] [ 202.787233] ====================================================== [ 202.787991] WARNING: possible circular locking dependency detected [ 202.788734] 6.2.0-next-20230224 #1 Not tainted [ 202.789296] ------------------------------------------------------ [ 202.793652] syz-executor.7/274 is trying to acquire lock: [ 202.794320] ffff888016390880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80 [ 202.795616] [ 202.795616] but task is already holding lock: [ 202.796334] ffff888016390920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 202.797495] [ 202.797495] which lock already depends on the new lock. [ 202.797495] [ 202.798464] [ 202.798464] the existing dependency chain (in reverse order) is: [ 202.799359] [ 202.799359] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}: [ 202.800244] __mutex_lock+0x133/0x14a0 [ 202.800816] hci_cmd_sync_work+0x1e6/0x320 [ 202.801422] process_one_work+0xa0f/0x1790 [ 202.802019] worker_thread+0x63b/0x1260 [ 202.802600] kthread+0x2e9/0x3a0 [ 202.803087] ret_from_fork+0x2c/0x50 [ 202.803619] [ 202.803619] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}: [ 202.804635] __lock_acquire+0x2d56/0x6380 [ 202.805238] lock_acquire.part.0+0xea/0x320 [ 202.805855] __flush_work+0x109/0xd80 [ 202.806403] __cancel_work_timer+0x39c/0x4e0 [ 202.807010] hci_cmd_sync_clear+0x52/0x250 [ 202.807605] hci_unregister_dev+0xf9/0x410 [ 202.808212] vhci_release+0x80/0x100 [ 202.808757] __fput+0x263/0xa40 [ 202.809233] task_work_run+0x174/0x280 [ 202.809801] do_exit+0xad8/0x2800 [ 202.810318] do_group_exit+0xd4/0x2a0 [ 202.810854] get_signal+0x23c8/0x2450 [ 202.811392] arch_do_signal_or_restart+0x79/0x590 [ 202.812051] exit_to_user_mode_prepare+0x122/0x190 [ 202.812727] syscall_exit_to_user_mode+0x1d/0x50 [ 202.813381] do_syscall_64+0x4c/0x90 [ 202.813902] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 202.814592] [ 202.814592] other info that might help us debug this: [ 202.814592] [ 202.815528] Possible unsafe locking scenario: [ 202.815528] [ 202.816248] CPU0 CPU1 [ 202.816799] ---- ---- [ 202.817357] lock(&hdev->cmd_sync_work_lock); [ 202.817923] lock((work_completion)(&hdev->cmd_sync_work)); [ 202.818908] lock(&hdev->cmd_sync_work_lock); [ 202.819741] lock((work_completion)(&hdev->cmd_sync_work)); [ 202.820467] [ 202.820467] *** DEADLOCK *** [ 202.820467] [ 202.821180] 1 lock held by syz-executor.7/274: [ 202.821736] #0: ffff888016390920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 202.822986] [ 202.822986] stack backtrace: [ 202.823529] CPU: 0 PID: 274 Comm: syz-executor.7 Not tainted 6.2.0-next-20230224 #1 [ 202.824469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 202.825486] Call Trace: [ 202.825818] [ 202.826115] dump_stack_lvl+0x91/0xf0 [ 202.826616] check_noncircular+0x263/0x2e0 [ 202.827172] ? __pfx_check_noncircular+0x10/0x10 [ 202.827792] ? save_trace+0x285/0xcb0 [ 202.828305] ? __pfx_register_lock_class+0x10/0x10 [ 202.828947] __lock_acquire+0x2d56/0x6380 [ 202.829497] ? __pfx___lock_acquire+0x10/0x10 [ 202.830083] ? __pfx___lock_acquire+0x10/0x10 [ 202.830668] ? __pfx___lock_acquire+0x10/0x10 [ 202.831255] lock_acquire.part.0+0xea/0x320 [ 202.831816] ? __flush_work+0xdd/0xd80 [ 202.832353] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 202.832991] ? __flush_work+0xdd/0xd80 [ 202.833497] ? rcu_read_lock_sched_held+0x42/0x80 [ 202.834106] ? trace_lock_acquire+0x170/0x1e0 [ 202.834683] ? mark_held_locks+0x9e/0xe0 [ 202.835215] ? __flush_work+0xdd/0xd80 [ 202.835722] ? lock_acquire+0x32/0xc0 [ 202.836244] ? __flush_work+0xdd/0xd80 [ 202.836754] __flush_work+0x109/0xd80 [ 202.837254] ? __flush_work+0xdd/0xd80 [ 202.837766] ? __pfx_mark_lock.part.0+0x10/0x10 [ 202.838368] ? __pfx___flush_work+0x10/0x10 [ 202.838929] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 202.839557] ? hci_cmd_sync_clear+0x45/0x250 [ 202.840144] ? rcu_read_lock_sched_held+0x42/0x80 [ 202.840753] ? trace_lock_acquire+0x170/0x1e0 [ 202.841333] ? lock_is_held_type+0x9f/0x120 [ 202.841896] ? mark_held_locks+0x9e/0xe0 [ 202.842430] __cancel_work_timer+0x39c/0x4e0 [ 202.842988] ? __pfx___cancel_work_timer+0x10/0x10 [ 202.843600] ? __cancel_work_timer+0x2aa/0x4e0 [ 202.844187] ? __pfx___cancel_work_timer+0x10/0x10 [ 202.844795] ? lock_release+0x1e3/0x710 [ 202.845318] ? __pfx_lock_release+0x10/0x10 [ 202.845874] ? do_raw_write_lock+0x11e/0x3b0 [ 202.846436] ? __pfx_vhci_release+0x10/0x10 [ 202.846991] hci_cmd_sync_clear+0x52/0x250 [ 202.847538] ? __pfx_vhci_release+0x10/0x10 [ 202.848247] hci_unregister_dev+0xf9/0x410 [ 202.848940] vhci_release+0x80/0x100 [ 202.849540] __fput+0x263/0xa40 [ 202.850077] task_work_run+0x174/0x280 [ 202.850705] ? __pfx_task_work_run+0x10/0x10 [ 202.851404] ? switch_task_namespaces+0xb1/0xd0 [ 202.852150] ? kmem_cache_free+0xff/0x510 [ 202.852810] do_exit+0xad8/0x2800 [ 202.853372] ? find_held_lock+0x2c/0x110 [ 202.854145] ? lock_release+0x1e3/0x710 [ 202.854822] ? __pfx_do_exit+0x10/0x10 [ 202.855434] ? lock_is_held_type+0x9f/0x120 [ 202.856143] do_group_exit+0xd4/0x2a0 [ 202.856751] get_signal+0x23c8/0x2450 [ 202.857367] ? hrtimer_nanosleep+0x1bb/0x420 [ 202.858071] ? __pfx_get_signal+0x10/0x10 [ 202.858725] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 202.859442] arch_do_signal_or_restart+0x79/0x590 [ 202.860204] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 202.861044] ? __x64_sys_clock_nanosleep+0x346/0x480 [ 202.861841] exit_to_user_mode_prepare+0x122/0x190 [ 202.862617] syscall_exit_to_user_mode+0x1d/0x50 [ 202.863374] do_syscall_64+0x4c/0x90 [ 202.863986] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 202.864767] RIP: 0033:0x7f94146178e1 [ 202.865234] Code: Unable to access opcode bytes at 0x7f94146178b7. [ 202.865987] RSP: 002b:00007ffe0b020b40 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 202.866924] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 00007f94146178e1 [ 202.867804] RDX: 00007ffe0b020b80 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.868670] RBP: 00007ffe0b020c0c R08: 0000000000000000 R09: 00007ffe0b09d080 [ 202.869525] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 202.870395] R13: 0000000000025351 R14: 0000000000000000 R15: 00007ffe0b020c70 [ 202.871260] 12:01:27 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8916, &(0x7f0000000380)={@empty, 0x0, r2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r5, 0x2f, 0x3d, 0x5, 0x5, 0xa, @remote, @private1, 0x10, 0x10, 0x5, 0x3}}) recvfrom(r0, &(0x7f0000000040), 0x0, 0x10042, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0x80) 12:01:27 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8916, &(0x7f0000000380)={@empty, 0x0, r2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r5, 0x2f, 0x3d, 0x5, 0x5, 0xa, @remote, @private1, 0x10, 0x10, 0x5, 0x3}}) recvfrom(r0, &(0x7f0000000040), 0x0, 0x10042, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0x80) 12:01:27 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8916, &(0x7f0000000380)={@empty, 0x0, r2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r5, 0x2f, 0x3d, 0x5, 0x5, 0xa, @remote, @private1, 0x10, 0x10, 0x5, 0x3}}) recvfrom(r0, &(0x7f0000000040), 0x0, 0x10042, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0x80) 12:01:27 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x13061}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 12:01:27 executing program 5: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0) 12:01:27 executing program 6: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0x1000000, 0x4) 12:01:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x0) 12:01:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) epoll_create(0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) close(r0) 12:01:27 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x4) [ 208.638002] Bluetooth: hci6: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 12:01:27 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff825027d0 RDI=ffffffff87f10da0 RBP=ffffffff87f10d60 RSP=ffff888018fe6f18 R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0fe2205 R15=dffffc0000000000 RIP=ffffffff82502825 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe72e15bd000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe72e15bb000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558a840f2648 CR3=0000000005482000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000416d73ab00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88806cf34f80 RBX=ffff888008da5040 RCX=ffffffff84483c3e RDX=ffffed100d9e69f1 RSI=0000000000000004 RDI=ffffffff812847b0 RBP=0000000000000001 RSP=ffff888008e1fe70 R8 =0000000000000000 R9 =ffff88806cf34f83 R10=ffffed100d9e69f0 R11=0000000000000001 R12=ffffed10011b4a08 R13=ffffffff85d27a90 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84484c5f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe7472895000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe7472893000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558a840f2648 CR3=000000000e708000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000416d73ab00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000