Warning: Permanently added '[localhost]:58109' (ECDSA) to the list of known hosts. 2022/10/01 08:07:28 fuzzer started 2022/10/01 08:07:29 dialing manager at localhost:35095 syzkaller login: [ 45.429997] cgroup: Unknown subsys name 'net' [ 45.518326] cgroup: Unknown subsys name 'rlimit' 2022/10/01 08:07:43 syscalls: 2215 2022/10/01 08:07:43 code coverage: enabled 2022/10/01 08:07:43 comparison tracing: enabled 2022/10/01 08:07:43 extra coverage: enabled 2022/10/01 08:07:43 setuid sandbox: enabled 2022/10/01 08:07:43 namespace sandbox: enabled 2022/10/01 08:07:43 Android sandbox: enabled 2022/10/01 08:07:43 fault injection: enabled 2022/10/01 08:07:43 leak checking: enabled 2022/10/01 08:07:43 net packet injection: enabled 2022/10/01 08:07:43 net device setup: enabled 2022/10/01 08:07:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 08:07:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 08:07:43 USB emulation: enabled 2022/10/01 08:07:43 hci packet injection: enabled 2022/10/01 08:07:43 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 08:07:43 802.15.4 emulation: enabled 2022/10/01 08:07:43 fetching corpus: 50, signal 32110/33816 (executing program) 2022/10/01 08:07:43 fetching corpus: 100, signal 38228/41525 (executing program) 2022/10/01 08:07:43 fetching corpus: 150, signal 45775/50490 (executing program) 2022/10/01 08:07:43 fetching corpus: 200, signal 51150/57246 (executing program) 2022/10/01 08:07:44 fetching corpus: 250, signal 57363/64687 (executing program) 2022/10/01 08:07:44 fetching corpus: 300, signal 62480/71012 (executing program) 2022/10/01 08:07:44 fetching corpus: 350, signal 65370/75126 (executing program) 2022/10/01 08:07:44 fetching corpus: 400, signal 71372/82052 (executing program) 2022/10/01 08:07:44 fetching corpus: 450, signal 74213/85993 (executing program) 2022/10/01 08:07:44 fetching corpus: 500, signal 81379/93835 (executing program) 2022/10/01 08:07:44 fetching corpus: 550, signal 86583/99764 (executing program) 2022/10/01 08:07:44 fetching corpus: 600, signal 89897/103866 (executing program) 2022/10/01 08:07:45 fetching corpus: 650, signal 94251/108858 (executing program) 2022/10/01 08:07:45 fetching corpus: 700, signal 96635/112087 (executing program) 2022/10/01 08:07:45 fetching corpus: 750, signal 99359/115525 (executing program) 2022/10/01 08:07:45 fetching corpus: 800, signal 101553/118476 (executing program) 2022/10/01 08:07:45 fetching corpus: 850, signal 103152/120874 (executing program) 2022/10/01 08:07:45 fetching corpus: 900, signal 105872/124215 (executing program) 2022/10/01 08:07:45 fetching corpus: 950, signal 108989/127769 (executing program) 2022/10/01 08:07:45 fetching corpus: 1000, signal 110711/130121 (executing program) 2022/10/01 08:07:45 fetching corpus: 1050, signal 111769/131901 (executing program) 2022/10/01 08:07:46 fetching corpus: 1100, signal 113554/134270 (executing program) 2022/10/01 08:07:46 fetching corpus: 1150, signal 115694/136936 (executing program) 2022/10/01 08:07:46 fetching corpus: 1200, signal 118135/139775 (executing program) 2022/10/01 08:07:46 fetching corpus: 1250, signal 119462/141720 (executing program) 2022/10/01 08:07:46 fetching corpus: 1300, signal 120785/143561 (executing program) 2022/10/01 08:07:46 fetching corpus: 1350, signal 123023/146142 (executing program) 2022/10/01 08:07:46 fetching corpus: 1400, signal 124607/148161 (executing program) 2022/10/01 08:07:46 fetching corpus: 1450, signal 125992/150054 (executing program) 2022/10/01 08:07:47 fetching corpus: 1500, signal 127498/152014 (executing program) 2022/10/01 08:07:47 fetching corpus: 1550, signal 128903/153903 (executing program) 2022/10/01 08:07:47 fetching corpus: 1600, signal 130597/155962 (executing program) 2022/10/01 08:07:47 fetching corpus: 1650, signal 131396/157319 (executing program) 2022/10/01 08:07:47 fetching corpus: 1700, signal 132276/158669 (executing program) 2022/10/01 08:07:47 fetching corpus: 1750, signal 133904/160519 (executing program) 2022/10/01 08:07:47 fetching corpus: 1800, signal 134827/161926 (executing program) 2022/10/01 08:07:47 fetching corpus: 1850, signal 135838/163349 (executing program) 2022/10/01 08:07:47 fetching corpus: 1900, signal 136701/164639 (executing program) 2022/10/01 08:07:47 fetching corpus: 1950, signal 139457/167119 (executing program) 2022/10/01 08:07:48 fetching corpus: 2000, signal 141005/168813 (executing program) 2022/10/01 08:07:48 fetching corpus: 2050, signal 143634/171185 (executing program) 2022/10/01 08:07:48 fetching corpus: 2100, signal 145513/172976 (executing program) 2022/10/01 08:07:48 fetching corpus: 2150, signal 146086/174007 (executing program) 2022/10/01 08:07:48 fetching corpus: 2200, signal 146870/175098 (executing program) 2022/10/01 08:07:48 fetching corpus: 2250, signal 147727/176260 (executing program) 2022/10/01 08:07:48 fetching corpus: 2300, signal 149292/177853 (executing program) 2022/10/01 08:07:48 fetching corpus: 2350, signal 150523/179170 (executing program) 2022/10/01 08:07:49 fetching corpus: 2400, signal 150997/180035 (executing program) 2022/10/01 08:07:49 fetching corpus: 2450, signal 151996/181186 (executing program) 2022/10/01 08:07:49 fetching corpus: 2500, signal 153315/182486 (executing program) 2022/10/01 08:07:49 fetching corpus: 2550, signal 154086/183472 (executing program) 2022/10/01 08:07:49 fetching corpus: 2600, signal 154843/184429 (executing program) 2022/10/01 08:07:49 fetching corpus: 2650, signal 155575/185350 (executing program) 2022/10/01 08:07:49 fetching corpus: 2700, signal 157699/186939 (executing program) 2022/10/01 08:07:49 fetching corpus: 2750, signal 158346/187797 (executing program) 2022/10/01 08:07:49 fetching corpus: 2800, signal 159931/189095 (executing program) 2022/10/01 08:07:50 fetching corpus: 2850, signal 160579/189922 (executing program) 2022/10/01 08:07:50 fetching corpus: 2900, signal 161397/190788 (executing program) 2022/10/01 08:07:50 fetching corpus: 2950, signal 162281/191702 (executing program) 2022/10/01 08:07:50 fetching corpus: 3000, signal 162700/192393 (executing program) 2022/10/01 08:07:50 fetching corpus: 3050, signal 163407/193243 (executing program) 2022/10/01 08:07:50 fetching corpus: 3100, signal 164526/194239 (executing program) 2022/10/01 08:07:50 fetching corpus: 3150, signal 165497/195166 (executing program) 2022/10/01 08:07:50 fetching corpus: 3200, signal 168054/196690 (executing program) 2022/10/01 08:07:51 fetching corpus: 3250, signal 168880/197441 (executing program) 2022/10/01 08:07:51 fetching corpus: 3300, signal 169658/198183 (executing program) 2022/10/01 08:07:51 fetching corpus: 3350, signal 170849/199088 (executing program) 2022/10/01 08:07:51 fetching corpus: 3400, signal 171519/199835 (executing program) 2022/10/01 08:07:51 fetching corpus: 3450, signal 172213/200488 (executing program) 2022/10/01 08:07:51 fetching corpus: 3500, signal 172726/201140 (executing program) 2022/10/01 08:07:51 fetching corpus: 3550, signal 173287/201802 (executing program) 2022/10/01 08:07:51 fetching corpus: 3600, signal 173898/202525 (executing program) 2022/10/01 08:07:51 fetching corpus: 3650, signal 174826/203335 (executing program) 2022/10/01 08:07:52 fetching corpus: 3700, signal 175421/203946 (executing program) 2022/10/01 08:07:52 fetching corpus: 3750, signal 176103/204535 (executing program) 2022/10/01 08:07:52 fetching corpus: 3800, signal 177000/205157 (executing program) 2022/10/01 08:07:52 fetching corpus: 3850, signal 177787/205789 (executing program) 2022/10/01 08:07:52 fetching corpus: 3900, signal 178518/206326 (executing program) 2022/10/01 08:07:52 fetching corpus: 3950, signal 179636/207018 (executing program) 2022/10/01 08:07:52 fetching corpus: 4000, signal 180675/207649 (executing program) 2022/10/01 08:07:53 fetching corpus: 4050, signal 181412/208187 (executing program) 2022/10/01 08:07:53 fetching corpus: 4100, signal 182392/208734 (executing program) 2022/10/01 08:07:53 fetching corpus: 4150, signal 182971/209202 (executing program) 2022/10/01 08:07:53 fetching corpus: 4200, signal 183943/209733 (executing program) 2022/10/01 08:07:53 fetching corpus: 4250, signal 184786/210198 (executing program) 2022/10/01 08:07:53 fetching corpus: 4300, signal 185867/210743 (executing program) 2022/10/01 08:07:53 fetching corpus: 4350, signal 187163/211283 (executing program) 2022/10/01 08:07:53 fetching corpus: 4400, signal 187653/211636 (executing program) 2022/10/01 08:07:53 fetching corpus: 4450, signal 188247/212015 (executing program) 2022/10/01 08:07:54 fetching corpus: 4500, signal 188980/212393 (executing program) 2022/10/01 08:07:54 fetching corpus: 4550, signal 190019/212806 (executing program) 2022/10/01 08:07:54 fetching corpus: 4600, signal 191073/213268 (executing program) 2022/10/01 08:07:54 fetching corpus: 4650, signal 191546/213570 (executing program) 2022/10/01 08:07:54 fetching corpus: 4700, signal 192150/213895 (executing program) 2022/10/01 08:07:54 fetching corpus: 4750, signal 193002/214288 (executing program) 2022/10/01 08:07:54 fetching corpus: 4800, signal 193856/214594 (executing program) 2022/10/01 08:07:54 fetching corpus: 4850, signal 194521/214911 (executing program) 2022/10/01 08:07:55 fetching corpus: 4870, signal 194679/215127 (executing program) 2022/10/01 08:07:55 fetching corpus: 4870, signal 194679/215361 (executing program) 2022/10/01 08:07:55 fetching corpus: 4870, signal 194679/215567 (executing program) 2022/10/01 08:07:55 fetching corpus: 4870, signal 194679/215757 (executing program) 2022/10/01 08:07:55 fetching corpus: 4870, signal 194679/215965 (executing program) 2022/10/01 08:07:55 fetching corpus: 4870, signal 194679/216170 (executing program) 2022/10/01 08:07:55 fetching corpus: 4870, signal 194679/216354 (executing program) 2022/10/01 08:07:55 fetching corpus: 4870, signal 194679/216560 (executing program) 2022/10/01 08:07:55 fetching corpus: 4870, signal 194679/216773 (executing program) 2022/10/01 08:07:55 fetching corpus: 4870, signal 194679/216885 (executing program) 2022/10/01 08:07:55 fetching corpus: 4870, signal 194679/216885 (executing program) 2022/10/01 08:07:57 starting 8 fuzzer processes 08:07:57 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000440)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x101000, 0x0) fchdir(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'ip6gre0\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000008c0)={0x0, 0x0, 0x1}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000900)={{0x1, 0xf75}, 0x100, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x400000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/timer_list\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x2) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000ac0)={@loopback, @broadcast}, &(0x7f0000000b00)=0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) syz_open_pts(r4, 0x100) r5 = openat(r2, &(0x7f0000000b80)='./file0/file0\x00', 0x751040, 0x10) ioctl$CDROMMULTISESSION(r5, 0x5310, &(0x7f0000000bc0)={@msf={0x2, 0x4, 0x6}, 0x1, 0x1}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000c80)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000d80)=0xe8) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x8, &(0x7f0000000dc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x9}}, {@uname={'uname', 0x3d, '\\-.!*)L.*-:('}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x5, 0x33, 0x39, 0x30, 0x37, 0x37, 0x66, 0x66], 0x2d, [0x63, 0x35, 0x66, 0x33], 0x2d, [0x62, 0x35, 0x36, 0x66], 0x2d, [0x35, 0x5b, 0x35, 0x35], 0x2d, [0x33, 0x30, 0x61, 0x33, 0x65, 0x63, 0x6, 0x63]}}}, {@euid_gt={'euid>', r6}}, {@dont_measure}]}}) r7 = accept$inet(r4, &(0x7f0000000e80)={0x2, 0x0, @dev}, &(0x7f0000000ec0)=0x10) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000000f00)={0x84, @local, 0x4e22, 0x4, 'dh\x00', 0x0, 0x5, 0x1}, 0x2c) 08:07:57 executing program 1: r0 = pidfd_open(0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x2) getsockopt(0xffffffffffffffff, 0x9e, 0x5, &(0x7f0000000000)=""/228, &(0x7f0000000100)=0xe4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r1, &(0x7f0000000180)=""/2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x3}, 0x1}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000280)=""/24, &(0x7f00000002c0)=0x18) r2 = accept4(r1, &(0x7f0000000300)=@tipc=@id, &(0x7f0000000380)=0x80, 0x800) connect$802154_dgram(r2, &(0x7f00000003c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000440)={0x6, 0x3}, 0x2) r4 = memfd_secret(0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r2) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x204, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8ea}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x385f}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa1c9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3ff, @remote, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x839}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6cf5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc981}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8e47}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaaed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x8800}, 0x8040) recvmsg$unix(r3, &(0x7f0000001c40)={&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/133, 0x85}, {&(0x7f0000001900)=""/184, 0xb8}, {&(0x7f00000019c0)=""/108, 0x6c}, {&(0x7f0000001a40)=""/117, 0x75}, {&(0x7f0000001ac0)=""/38, 0x26}], 0x6, &(0x7f0000001b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x0) accept(r6, &(0x7f0000001c80)=@isdn, &(0x7f0000001d00)=0x80) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001d40), 0x3c1ac0, 0x0) fsetxattr$security_capability(r7, &(0x7f0000001d80), &(0x7f0000001dc0)=@v1={0x1000000, [{0x1, 0x4}]}, 0xc, 0x5) 08:07:57 executing program 2: io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8c7, 0xffffffffffffffff, &(0x7f0000000000)="06014cb846da4cbf4264126d4ed8896ef873b9aaa616b915de4c89ca42c1531de1c1ba1e35e93b841e1689385a1fe482c55bc8f1a591216a563bf307b0d59b7357ccdccac3ada09d7076a57e44e0b482d94f296fca2435dda861c054056b1db6a5af85975a943b83765128fd97a0b4d818734b1448fa140164d62f7582ab3a4d8164ff7429e1a8bae2", 0x89, 0x200}, &(0x7f0000000100)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000180)={0x0, 0x5, 0x1, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000580)={0x5, 0x3, {0x6653, @struct={0x6, 0x1000}, r1, 0xfffffffffffffffd, 0x3, 0x3, 0x100000000, 0x10001, 0x8a8, @usage=0x6, 0xef, 0x2, [0x8, 0xfffffffffffffffb, 0x80000000, 0x4, 0x1, 0x200]}, {0x3, @usage=0x1, 0x0, 0x7fffffff, 0x4, 0x3, 0xfffffffffffffffa, 0x8, 0x8, @struct={0x7fff, 0x4}, 0xc7, 0x6, [0x5, 0x2, 0x100, 0x80, 0xfffffffffffffd82]}, {0x73a, @struct={0x73, 0x3fc}, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x20, 0xff, 0xc, @usage=0x4, 0x7a8, 0x8, [0x8, 0x4, 0x7, 0x2, 0x0, 0x800]}, {0x8, 0x9, 0x4}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000980)={r2, 0x2, 0x4800000000000}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000d80)={r3, 0x7, 0x4, 0x1}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000001180)={0x8000, 0x2, 0xda, 0x8001, 0x6, 0x6}) r4 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x2c180, 0xc4) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001200), 0x0, 0x2021, &(0x7f0000001280)={r5, r6+10000000}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x80, 0x6, 0x0, 0x77, 0x0, 0x9, 0x13, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x9}, 0x5400, 0x7ff, 0x7, 0x3, 0x8, 0xc5c1, 0xff, 0x0, 0x7fffffff}, r4, 0x2, r7, 0xd) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000001380)={0x0, 0x2}) r9 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f00000013c0), 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000001400)={{r4}, "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"}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r9, 0x8008f513, &(0x7f0000002400)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000002440)) 08:07:57 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/suspend', 0x10002, 0x85) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f00000000c0)={0x6e8, r1, 0x400, 0x70bd2b, 0x3f, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x4, 0x4, 0x685, 0x1ff, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x4}, {0x3, 0x2}, {0x3}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x7}, {0x4, 0x4}, {0x2, 0x9}, {0x7, 0x7}, {0x1, 0xa}, {0x7, 0x2}, {0x4, 0x8}, {0x4}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x7}, {0x5, 0x1a}, {0x5, 0x2}, {0x4, 0x7}, {0x6, 0x4}, {0x0, 0x5}, {0x1, 0xa}, {0x3, 0x1}, {0x6, 0x2}, {0x7, 0x5}, {0x4, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x2}, {0x2, 0x6}, {0x4, 0x7}, {0x6, 0x6}, {0x7, 0x6}, {0x3, 0xa}, {0x3, 0x2}, {0x4, 0x6}, {0x4}, {0x7, 0x8}, {0x5, 0x5}, {0x3, 0x4}, {0x5, 0x1}, {0x4, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x5, 0xf000, 0x101, 0x5, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x1b, 0x30, 0xa, 0x1b, 0x16, 0x1, 0x30, 0x3, 0x5, 0x24, 0x60, 0x16, 0x3a, 0x4, 0x9, 0x48, 0x36, 0x60, 0x16, 0x6c, 0x3, 0xc, 0x6, 0x1b]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x6c, 0x0, 0x2, 0x12, 0xc, 0x9, 0x3, 0x5, 0x5, 0x60, 0x0, 0xb, 0x1b, 0xb, 0x2, 0x9, 0x2, 0x18, 0x740e146c67db4db7, 0x3, 0x6c, 0x6, 0x4, 0x1, 0x30, 0x24, 0x4, 0x36, 0x12]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x1, 0x721bdfe72632eb9a, 0xc, 0x48, 0x48]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x9, 0x16, 0x1b, 0x9, 0x6c, 0x16, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x1b, 0x60, 0x48, 0xc, 0x48, 0x4, 0x1, 0x1b, 0x60, 0x5, 0x36, 0x60, 0x2, 0x1, 0x18, 0x2, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x6, 0xfae2, 0x4, 0x7, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0xc, 0x48, 0x2, 0x6c, 0x6, 0xb, 0xc, 0x48, 0x6, 0x0, 0x1b, 0x3, 0x18, 0x36, 0x30, 0x33, 0x36, 0xc]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x5, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x5, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x3, 0x7}, {0x2, 0xa}, {0x7, 0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x5, 0x6}, {0x4, 0x6}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x55, 0xfff7, 0x1, 0x7, 0x5, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0xa}, {0x2, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x7}, {0x5}, {0x7, 0x3}, {0x2, 0x4}, {0x4, 0x4}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0x4}, {0x6, 0xa}, {0x0, 0x8}, {0x5, 0x4}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0xa}, {0x5, 0x6}, {0x6, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x3, 0x7}, {0x0, 0x5}, {0x4}, {0x6, 0x9}, {0x5}, {0x6}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x3, 0x6}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x8}, {0x3, 0x9}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x7, 0x9}, {0x2, 0x2}, {0x0, 0x2}, {0x5, 0xa}, {0x6, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x7}, {0x5, 0xa}, {0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x4, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x60, 0x1b, 0xb, 0x1, 0x12, 0x60, 0x1, 0x1, 0x5, 0x30, 0x4, 0x6c, 0x36, 0x2, 0x1, 0x60, 0x1d, 0x48]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x4, 0x7d37, 0x6, 0x7ff, 0x7, 0x89e2, 0x9]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x4, 0x2, 0x9, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5}, {0x6, 0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x4, 0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x2}, {}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x9}, {0x4, 0x8}, {0x7, 0x5}, {0x1, 0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x2, 0x904, 0x5, 0x5641, 0xe30, 0x5e52, 0x5]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x36]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf443, 0x7fff, 0x2, 0x1, 0x8, 0x22f4, 0x6]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0x1b, 0x12, 0xb, 0x24, 0x6]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x7}, {0x6, 0x8}, {}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0x4}, {0x7, 0x7}, {0x2, 0x3}, {0x7, 0x8}, {0x3, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x9}, {0x7, 0x8}, {0x4, 0x2}, {0x7, 0x6}, {0x4, 0x3}, {0x0, 0x7}, {0x4, 0x1}, {0x6}, {0x7, 0x9}, {0x3}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0x7}, {0x4, 0x3}, {0x3, 0x1}]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0xc, 0x6c, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x4, 0x1, 0x4, 0x7ff, 0x762, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x1}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x7, 0xa}, {0x5, 0xa}, {0x4, 0x6}, {0x6, 0x8}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x4, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x7}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x9}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0x1}, {0x2, 0x6}, {0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x7, 0x6}, {0x2, 0x2}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {}, {0x1, 0x6}, {}, {0x6, 0x3}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x9}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x3}, {0x1, 0x7}, {0x5, 0x9}, {0x5, 0x6}, {0x3, 0xa}, {0x2, 0x4}, {0x5}, {0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x3, 0x3}, {0x3, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x7, 0x9}, {0x3, 0x6}, {0x3, 0x8}, {0x7, 0x2}, {0x5, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x5, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfceb, 0x7ff, 0x9, 0x0, 0x5, 0x7, 0x180, 0x3]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x4}, {0x4, 0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x1}, {0x6, 0x9}, {0x6, 0x6}, {0x2, 0x2}, {0x6, 0xa}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x3}, {0x6, 0x2}, {0x3}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x6, 0xa}, {0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x3}, {0x4, 0x1}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x4}, {}, {0x3}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x2, 0x5}, {0x4, 0x9}, {0x7, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x6, 0x7, 0x2, 0x1, 0x8, 0x5, 0x100]}}]}]}, @NL80211_ATTR_TX_RATES={0x2d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8001, 0x4, 0x6, 0x6, 0x9, 0x93, 0x3ff]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0xa}, {0x1, 0x6}, {0x3, 0x1}, {0x3, 0x3}, {0x4}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x2, 0xa}, {0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x0, 0x4}, {0x3, 0x1}, {0x4, 0x6}, {0x6}, {0x4, 0x4}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0x9}, {0x4}, {0x2, 0x5}, {0x3, 0x3}, {0x1, 0x7}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0x1}, {0x4}, {0x7, 0x2}, {0x4, 0x4}, {0x4, 0x9}, {0x4, 0x5}, {0x0, 0x1}, {0x7, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x6}, {0x0, 0x1}, {}, {0x2, 0x9}, {0x2, 0x4}, {0x7}, {0x7, 0x4}, {0x1, 0x4}, {0x3, 0x8}, {0x3, 0x4}, {0x7, 0x9}, {0x6, 0xa}, {0x4, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x1}, {0x1, 0x12}, {0x3, 0x4}, {0x1, 0xa}, {0x6, 0x9}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x5, 0xa}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {}, {0x4, 0x2}, {0x2, 0x4}, {0x0, 0x9}, {0x5, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x7}, {0x1}, {0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6a, 0x800, 0x1, 0xeefb, 0x6d28, 0x0, 0x3644, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa4, 0xffa, 0x93, 0x5, 0xfff8, 0x9c, 0x6, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x19, 0x40, 0xc3, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x12, 0x60, 0x12, 0x2, 0x12, 0x18, 0x24, 0x30, 0xc, 0x3]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8b5, 0x1, 0x4, 0x0, 0xfffe, 0x0, 0x51a9, 0x2]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7}, {0x5}, {0x7, 0xa}, {0x0, 0x2}, {0x6}, {0x4, 0x1}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x1, 0x4, 0x1b, 0x16, 0x1, 0x5, 0x9, 0x4, 0x24, 0x0, 0x1, 0xc, 0x4, 0x16, 0x12, 0x24, 0xc, 0x1, 0x18, 0x4]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x2}, {0x6, 0x8}, {0x1, 0x7}, {0x7}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x6}, {0x7, 0x6}, {0x5, 0x5}, {0x3, 0x9}, {0x7, 0x6}, {0x0, 0x5}, {0x2}, {0x5, 0x7}, {0x0, 0x7}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x4}, {0x0, 0x2}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x2, 0x6}, {0x1, 0x8}, {0x4}, {0x2, 0x2}, {0x3, 0x2}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0x9}, {0x0, 0x9}, {0x1}, {0x6, 0x7}, {0x6, 0x7}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x3}, {0x7, 0xa}, {0x7, 0x6}, {0x0, 0x8}, {0x0, 0x5}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x8}, {0x7, 0x8}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x3, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x0, 0xf48, 0x9f6, 0x5, 0x0, 0xa18e, 0x8001]}}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x2, 0x4, 0x36, 0x1b, 0x1, 0x36, 0x3, 0x30, 0x3, 0x24, 0x6c, 0x1, 0x1b, 0xc, 0x60, 0x1, 0x3, 0x48, 0x24, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x5, 0x48, 0x1b, 0x3, 0xb, 0x5, 0x3, 0x9, 0x6c, 0xb, 0x60, 0x5, 0x4, 0x18, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x3, 0x9, 0x7, 0x400, 0x2, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4401, 0x4, 0x7, 0x5, 0x6c4e, 0x3ff, 0x4, 0x81]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x9}, {0x6, 0x8}, {0x7, 0xa}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x3}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x800, 0x0, 0x9, 0x7ff, 0x101]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x620, 0x6, 0x2, 0x81, 0xfffc, 0x3, 0x800]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x6c]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x3, 0x7ff, 0x7fff, 0x0, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x9}, {0x2, 0x4}, {0x3, 0x3}, {0x6, 0x9}, {0x2, 0x9}, {0x3, 0x9}, {0x4, 0x5}, {0x6, 0x1f}, {0x4, 0xa}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0x9}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x6}, {0x2, 0x7}, {0x1, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x3}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x6, 0x9}, {0x7, 0x7}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x4}, {0x2, 0x4}, {0x6, 0xa}, {0x5, 0x5}, {0x1, 0x4}, {0x6, 0x2}, {0x2, 0x3}, {0x1, 0x2}, {0x2, 0x6}, {0x6, 0x9}, {0x3, 0x1}, {0x2, 0x3}, {0x1, 0x3}, {0x5, 0x6}, {0x6, 0x6}, {0x3, 0xa}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x6}, {0x3, 0x7}, {0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x7}, {0x1, 0x9}, {0x5, 0x1}, {0x0, 0x2}, {0x3, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x4, 0x7}, {0x0, 0xa}, {0x5, 0x5}, {0x6, 0x6}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x5, 0x5}, {0x7, 0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x6, 0x5}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x3}, {0x7, 0x1}, {0x7, 0x3}, {0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x5}, {0x4, 0x5}, {0x6, 0x2}, {0x5, 0xa}, {0x3, 0x7}, {0x7, 0x7}, {0x2, 0x6}, {0x4, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x6}, {}, {0x1, 0x4}, {0x5, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x4, 0x6}, {0x2, 0x8}, {0x2, 0x4}, {0x1, 0x7}, {0x3, 0x7}, {0x7}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x6e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = open$dir(&(0x7f0000000840)='./file0\x00', 0x202080, 0x100) sendfile(r2, r3, &(0x7f0000000880)=0x1ff, 0x81) r4 = signalfd4(r2, &(0x7f00000008c0)={[0x325]}, 0x8, 0x80000) fcntl$setown(r4, 0x8, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x3f, 0x100]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1c}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x5800}, 0xc000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000b40)) r6 = syz_io_uring_complete(0x0) sendfile(r3, r6, &(0x7f0000000b80)=0x81, 0x9) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r3, {0xad8}}, './file0\x00'}) inotify_add_watch(r7, &(0x7f0000000c00)='./file1\x00', 0x40000000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000c40)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r8 = gettid() sendmsg$nl_generic(r6, &(0x7f0000000fc0)={&(0x7f0000000cc0), 0xc, &(0x7f0000000f80)={&(0x7f0000000d00)={0x258, 0x27, 0x100, 0x70bd26, 0x25dfdbfe, {0xa}, [@typed={0xc, 0x64, 0x0, 0x0, @u64=0x5}, @generic="3f190e7ab609e2b75154a2d555f6799fe9cce4e964473c21c53eb8c078a5652fd2ce6e1933d0518a15ed5bb9010d1c601acf273b4ceff52b6b73f61b1bd0207ca0c8b5c869ff48d688e8404f00e809697434f0d3826634731f8218d11c6fb616e9c19c89286a16779a747bcee39cb2d7e8e6af5129c82a787a67395f6b5c02c1379ee8b8d80d3a28453553ac4efebd097f73c874845448c9c34e7320b1203436ba41277dcce68903a1cb4113dc2f67488a3aa6afb0a734e14c", @generic="f556ad8e3eac6882e1ff2d2dfe579e7a04582fa513a4abfc2794a02e7f1dbea1c9850a684c8e8661d78de6072ec33f29254ee1bac0bad0c41d078474cc31336508d102f83c2b855a46332050b8207096f101f442cf911d9b6ac296be89c8972767c3e9519d06fb5a223674be4b01fa6ac661446b8bb57f9a6e6f60570d4d8d3e7a7523b0ff6001d49802bc394cfa2bdf42c837b3c8c4fb656ef4923cbafb34e96df8a8649ff4a02cb4856c912ad46ce0de49ec1a39d776b783f04368d3fea6d9003bbb4ec23ae4846979f15ab87f2cfef085319bd74827da2605f88bcba570", @generic="b58654d61caa02153e9a13ca095b909a0f5900117330bbde0dcb92ba31c6336b3c83ee922b2e5e85d6e00aba8125f95401342f223b8a14829e60a8551b28d70c2380b870bd27b85fe4b2d6acaf5e80f192c9d912464c4a15dafbc106fdd04fa922b7f95a396aaf996108f479acacc03e861a613e7efc069cbb290b13304e4ef195da916db358b50f9cfb5537d7c0b08c4bff5484090be117", @typed={0x8, 0x34, 0x0, 0x0, @pid=r8}]}, 0x258}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$ETHTOOL_MSG_RINGS_GET(r7, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, 0x0, 0xa00, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 73.539040] audit: type=1400 audit(1664611677.555:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:07:57 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000000)={0x0, 0x20c}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001000)=""/125, 0x7d}, {&(0x7f0000001080)=""/133, 0x85}], 0x2, &(0x7f0000001180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x40010102) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000001500)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)={0x12c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xeeb, 0x4}}}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac0a, 0xfac0c, 0x2, 0xfac0c, 0xfac0a]}], @NL80211_ATTR_DISABLE_HT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x92}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x23}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x64c3b194}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}], @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x5, 0x9, 0x80, 0xff, 0x11, 0x8, 0x1f, 0x3389, 0x7, 0x2, 0x400, 0x401, 0xfff, 0x40, 0x1464, 0x546]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x0, 0x0, 0x0, {0x1ff, 0x1f, 0x0, 0x40, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x3, 0x9}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x3, 0xec7, 0x3, 0x3, 0x9, 0x3, 0x5, 0x8, 0x2, 0x200, 0xfff8, 0x1, 0x5a27, 0x7e, 0x3, 0xd3]}]}, 0x12c}}, 0x4004000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001800)={&(0x7f00000016c0)={0x11c, r9, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "335a9d85b0434341857620850f91f68f118083fac2ec27ab"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "59279366e5c7fc1af00566bfd4e93cbec469961480601cb6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x11c}, 0x1, 0x0, 0x0, 0xc4}, 0x4008000) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f00000018c0)=@add_del={0x2, &(0x7f0000001880)='rose0\x00'}) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000001900)=0x1) ioctl$CDROM_GET_CAPABILITY(r1, 0x5331) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000001940)={{0x1, 0x1, 0x18, r6, {0x7fff, 0x5}}, './file0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0xa0, r11, 0x304, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e68f7522a88c85d66cfe522a8328d6c6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="fc75c5e4c4b0"}, @NL80211_ATTR_PMKID={0x14, 0x55, "e9b8d547b9c0fcbe72f950027213457b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x44}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x35}, @NL80211_ATTR_PMKID={0x14, 0x55, "25f3a09d617ea7416efa7ced9669eb6d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "5e6705f9789d9c3f1c9c754f49804cd7"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004000}, 0x28040818) r12 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001b40)='cpu.max\x00', 0x2, 0x0) fstat(r12, &(0x7f0000001b80)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000001c00)=0x5a34157d) r13 = accept4$inet6(r6, &(0x7f0000001c40)={0xa, 0x0, 0x0, @local}, &(0x7f0000001c80)=0x1c, 0x80800) fstat(r13, &(0x7f0000001cc0)) open(&(0x7f0000001d40)='./file0\x00', 0x1c3200, 0x8) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xab}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) 08:07:57 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @loopback}, &(0x7f0000000140)=0xc) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)) r3 = open(&(0x7f0000000440)='./file0\x00', 0x4002, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r5, &(0x7f0000000500)=0x4, 0x100) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x1}}, '\x00'}) recvfrom(r6, &(0x7f0000000580)=""/65, 0x41, 0x10000, 0x0, 0x0) getdents(r0, &(0x7f0000000600)=""/36, 0x24) openat$cgroup_ro(r4, &(0x7f0000000640)='blkio.bfq.io_serviced\x00', 0x0, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000680), 0x2, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r9, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7c}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x6000}, 0x4) r10 = openat$incfs(r8, &(0x7f0000000880)='.pending_reads\x00', 0x301400, 0x21) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x1) 08:07:57 executing program 4: sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x1) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="806a41451b2254bd341c9e93fba5eb6a627c3563a66fc436351b664104f88200e4e75ec31f7181062fb4952ef0ba74178332ed9036e1f63c45063f4d3aac453e23dd271a5327dedcd07f64d164d86cf600af28385ab0adb8bdc6147cb880ccfc913baa7637ad23f7167ea66e56e9d699c01ba881bd11f78f34a6be3baca12de53aa9a36eb1b40a44beef27361aaac55f6a62ee43fccadaf3bc246a1f6cab7412ac5853e14487123db2234ea8de2af65bb20e22907b9f7d8a55143b0849ce1749e82084b2a340c8efe27f8d7daf32768b3a114e0ddf9be87974129a89948f6004f8db89ed73726f5786ac83f357919412e387d3d2dd9b", 0xf6, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000300)='cifs.spnego\x00', &(0x7f0000000340)={'syz', 0x1}, r2) add_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="b5734212bfd7e456724c5f91243fbf2dd317ec9cedf3020ddc4d2e25c3f47a9c23683fba33f16169ad3a980abdb8d5411a91143d62b6cbc89a62099167fa091466101e840cb71a03cf85013d6ad5dffd1b2188f46aed95705de8b082d91bc708285d854a3d8c10dc17f7dc81b0f628f4d3549e626ebea4f3d3b74c9fb94bb815c0155ca28cc5563efc", 0x89, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x120, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x44, 0x4, "100e47f5d996a469d94149e894c5cc521f4dfea53f613f3a415ada73a3eb817e46c3810a6a073a501cb16e6a967e12456fcc33d9448f57c43a70994e78580ca1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "b9f743e2bba464d2d9301fdc275bfedeae791990d3f1f5a8f20b95419f4ed5dd484b6db9f168dc6dc6d28815ee2ad05b6dcdf357faa6c46b7aac0abdccf810e4bdb7c7c583999c100bfc88e789ec7ea93f493873853b210214a489d8524b5990ce6ab6b28db0f5f9e3d29ccd7079a112f9ed18c6b736752f8099dd854ce6be47fb96286f38b08979998253a33bee8e98ad6b5a2bab9cbdea9fa5c33b5588f4e7e5e5b4c02c8e7328b84dbc7a77fc319740d971f0504a0fc3912ea7307f62c04d5caa64feff367e0f845c04d43b30"}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) add_key(&(0x7f0000000780)='big_key\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800)="fee635fc9c9a84073c2213a6a0ad5bf44cf2b921fc846eace45fa5938c389cdee5ab69a170b8f5552df9623a3417b8b14972501dd19f3d56e54d3a861d79c87321b278e5b2a04d6c72e3aa98dc59e96c23f34f2b182af71340d8f1db6c3f2c7ce81f2a887d33ce0d4e10521dbc60ccdf5fca09d16d7833b20f38eeb1917cda5f28a7bef42dab2c2ad35d389d068d2fda27dcab03abd19cf8500743bdfb9450158021508cfd23794d169a971e8f0abe3fbd139aebd52f0aa8b8de73930fb0d0c6e5dc9768bfcf8835b7d0ae028b488a53132974c2", 0xd4, r2) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x801) r4 = add_key(&(0x7f0000000b00)='cifs.spnego\x00', &(0x7f0000000b40)={'syz', 0x2}, &(0x7f0000000b80)="5b014484f231cbb03d71f22bad1f1408979a30c1b3f4b8003594a99f5ba6776063cab44e7bc88c60", 0x28, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc3}, &(0x7f0000000a80)={0x0, "73aa77bcc1beb79a948e389c7b8ff12b5535f4cf63942148c1ec878aa2cfe733099fc4bd547fd326b0013b6ed34cf338e47cfff01b3890a7855cd8ef66fd17f7", 0x1d}, 0x48, r4) r5 = add_key$fscrypt_provisioning(&(0x7f0000000bc0), &(0x7f0000000c00)={'syz', 0x0}, &(0x7f0000000c40)={0x3, 0x0, @d}, 0x18, r4) keyctl$read(0xb, r5, &(0x7f0000000c80)=""/78, 0x4e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000e00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) keyctl$chown(0x4, r0, r6, r8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) recvfrom(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000, 0x2001, &(0x7f0000001ec0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) 08:07:57 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000400)=""/127, 0x7f}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000580)=""/89, 0x59}], 0xa, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000000840), 0x6e, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/58, 0x3a}, {&(0x7f0000001900)=""/161, 0xa1}], 0x3, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}}, {{&(0x7f0000001b80)=@abs, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000001c00)=""/195, 0xc3}, {&(0x7f0000001d00)=""/181, 0xb5}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/35, 0x23}, {&(0x7f0000002e00)=""/164, 0xa4}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/35, 0x23}], 0x7, &(0x7f0000003f80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000004040)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f00000040c0)=""/149, 0x95}], 0x1, &(0x7f00000041c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{&(0x7f0000004340)=@abs, 0x6e, &(0x7f0000004480)=[{&(0x7f00000043c0)=""/166, 0xa6}], 0x1, &(0x7f00000044c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000004580)=""/81, 0x51}, {&(0x7f0000004600)}, {&(0x7f0000004640)=""/221, 0xdd}, {&(0x7f0000004740)=""/75, 0x4b}], 0x4, &(0x7f0000004800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000048c0), 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004940)=""/146, 0x92}, {&(0x7f0000004a00)=""/108, 0x6c}], 0x2, &(0x7f0000004ac0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x7, 0x0, &(0x7f0000004cc0)={0x0, 0x989680}) fcntl$lock(r0, 0x24, &(0x7f0000004d00)={0x1, 0x0, 0x101, 0x3, r5}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000004d40)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffe, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x20, 0x11, 0x0, r8}, {0x5, 0x1f, 0xca, 0x8000000000000000, 0x9, 0x0, 0x30, 0x2}, {0x9, 0x701, 0xffffffff, 0x6}, 0x6, 0x6e6bbb, 0x2fed178335c87214, 0x1, 0x1, 0x706e46479d028f3b}, {{@in=@private=0xa010102, 0x4d2, 0x2b}, 0x2, @in6=@private1, 0x34ff, 0x0, 0x3, 0x5, 0xe5, 0x5, 0x2}}, 0xe8) r14 = openat$dir(0xffffffffffffff9c, &(0x7f0000004e40)='./file0\x00', 0x2, 0x84) ioctl$EXT4_IOC_GROUP_ADD(r14, 0x40286608, &(0x7f0000004e80)={0x4a2, 0x2, 0xffffffffffffffff, 0x5, 0x7, 0x7}) getpeername$inet(0xffffffffffffffff, &(0x7f0000004ec0), &(0x7f0000004f00)=0x10) sendmsg$TIPC_NL_NET_GET(r9, &(0x7f0000005240)={&(0x7f0000004f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005200)={&(0x7f0000004f80)={0x250, 0x0, 0x10, 0x8df70ad7, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcba2}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2498, @remote, 0xfff}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @remote, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, '\x00', 0x20}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x177b}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff150c}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r15 = openat2(r4, &(0x7f0000005280)='./file0\x00', &(0x7f00000052c0)={0x220000, 0x4, 0x5}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r15, 0x89f2, &(0x7f0000005380)={'syztnl1\x00', &(0x7f0000005300)={'syztnl1\x00', 0x0, 0x2b, 0x4, 0x0, 0x401, 0x4b, @dev={0xfe, 0x80, '\x00', 0xc}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7800, 0x0, 0x9}}) r17 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000053c0), 0x408082, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r17, 0xc038943b, &(0x7f0000005440)={0x4, 0x40, '\x00', 0x0, &(0x7f0000005400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f00000054c0), r3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000005580)={'ip6gre0\x00', &(0x7f0000005500)={'syztnl0\x00', r16, 0x29, 0xff, 0x9, 0x9, 0x40, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7, 0x1f, 0xffffe2eb}}) getsockopt$inet_mreqn(r13, 0x0, 0x20, &(0x7f00000055c0)={@loopback, @private, 0x0}, &(0x7f0000005600)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f00000056c0)={'ip6gre0\x00', &(0x7f0000005640)={'sit0\x00', r16, 0x29, 0x2, 0x40, 0x4, 0x67, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x20, 0x80, 0x7, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005700)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000005740)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000005980)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005940)={&(0x7f0000005780)={0x19c, r18, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r23}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r10, 0x89f4, &(0x7f0000005ac0)={'syztnl2\x00', &(0x7f0000005a40)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x0, 0xb7, 0xcb, @remote, @mcast1, 0x40, 0x7800, 0x1, 0x8}}) [ 74.748549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.751441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.752887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.755941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.758156] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.759887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.765656] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.883076] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.885030] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.887345] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.890770] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.893178] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.895345] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.900089] Bluetooth: hci5: HCI_REQ-0x0c1a [ 74.912116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.914199] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.917985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.931717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.937964] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.940589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.942560] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.944137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.945887] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.949186] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.950922] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.952254] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.970406] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.971251] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.978562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.986868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.988786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.991092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.997458] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.999405] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.001138] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.002520] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.004398] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.006426] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.008161] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.013615] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.015462] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.027457] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.028373] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.038994] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.043579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.051107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.054629] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.059975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.068576] Bluetooth: hci3: HCI_REQ-0x0c1a [ 76.774670] Bluetooth: hci0: command 0x0409 tx timeout [ 76.839315] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 76.967427] Bluetooth: hci5: command 0x0409 tx timeout [ 77.030395] Bluetooth: hci4: command 0x0409 tx timeout [ 77.031036] Bluetooth: hci6: command 0x0409 tx timeout [ 77.095353] Bluetooth: hci3: command 0x0409 tx timeout [ 77.095980] Bluetooth: hci7: command 0x0409 tx timeout [ 77.096511] Bluetooth: hci2: command 0x0409 tx timeout [ 78.823660] Bluetooth: hci0: command 0x041b tx timeout [ 79.014345] Bluetooth: hci5: command 0x041b tx timeout [ 79.078358] Bluetooth: hci6: command 0x041b tx timeout [ 79.078833] Bluetooth: hci4: command 0x041b tx timeout [ 79.143389] Bluetooth: hci2: command 0x041b tx timeout [ 79.143845] Bluetooth: hci7: command 0x041b tx timeout [ 79.144237] Bluetooth: hci3: command 0x041b tx timeout [ 80.324250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.325562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.326221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.338455] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.342070] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.343186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.348092] Bluetooth: hci1: HCI_REQ-0x0c1a [ 80.870309] Bluetooth: hci0: command 0x040f tx timeout [ 81.063420] Bluetooth: hci5: command 0x040f tx timeout [ 81.126321] Bluetooth: hci4: command 0x040f tx timeout [ 81.126788] Bluetooth: hci6: command 0x040f tx timeout [ 81.190352] Bluetooth: hci3: command 0x040f tx timeout [ 81.190799] Bluetooth: hci7: command 0x040f tx timeout [ 81.191220] Bluetooth: hci2: command 0x040f tx timeout [ 82.406379] Bluetooth: hci1: command 0x0409 tx timeout [ 82.919368] Bluetooth: hci0: command 0x0419 tx timeout [ 83.111355] Bluetooth: hci5: command 0x0419 tx timeout [ 83.174451] Bluetooth: hci6: command 0x0419 tx timeout [ 83.174904] Bluetooth: hci4: command 0x0419 tx timeout [ 83.238330] Bluetooth: hci2: command 0x0419 tx timeout [ 83.238788] Bluetooth: hci7: command 0x0419 tx timeout [ 83.239184] Bluetooth: hci3: command 0x0419 tx timeout [ 84.454463] Bluetooth: hci1: command 0x041b tx timeout [ 86.503320] Bluetooth: hci1: command 0x040f tx timeout [ 88.551361] Bluetooth: hci1: command 0x0419 tx timeout 08:08:49 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) shutdown(r2, 0x1) lseek(0xffffffffffffffff, 0x4, 0x6b417b1c08756aa5) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1ff) lseek(r0, 0x1, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) [ 125.037220] audit: type=1400 audit(1664611729.053:7): avc: denied { open } for pid=3681 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.039053] audit: type=1400 audit(1664611729.053:8): avc: denied { kernel } for pid=3681 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.071276] ------------[ cut here ]------------ [ 125.071297] [ 125.071300] ====================================================== [ 125.071304] WARNING: possible circular locking dependency detected [ 125.071308] 6.0.0-rc7-next-20220930 #1 Not tainted [ 125.071315] ------------------------------------------------------ [ 125.071318] syz-executor.4/3682 is trying to acquire lock: [ 125.071325] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 125.071367] [ 125.071367] but task is already holding lock: [ 125.071370] ffff88800d516820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.071397] [ 125.071397] which lock already depends on the new lock. [ 125.071397] [ 125.071400] [ 125.071400] the existing dependency chain (in reverse order) is: [ 125.071403] [ 125.071403] -> #3 (&ctx->lock){....}-{2:2}: [ 125.071417] _raw_spin_lock+0x2a/0x40 [ 125.071429] __perf_event_task_sched_out+0x53b/0x18d0 [ 125.071440] __schedule+0xedd/0x2470 [ 125.071454] schedule+0xda/0x1b0 [ 125.071467] futex_wait_queue+0xf5/0x1e0 [ 125.071479] futex_wait+0x28e/0x690 [ 125.071489] do_futex+0x2ff/0x380 [ 125.071499] __x64_sys_futex+0x1c6/0x4d0 [ 125.071509] do_syscall_64+0x3b/0x90 [ 125.071526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.071539] [ 125.071539] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 125.071552] _raw_spin_lock_nested+0x30/0x40 [ 125.071563] raw_spin_rq_lock_nested+0x1e/0x30 [ 125.071576] task_fork_fair+0x63/0x4d0 [ 125.071593] sched_cgroup_fork+0x3d0/0x540 [ 125.071607] copy_process+0x4183/0x6e20 [ 125.071618] kernel_clone+0xe7/0x890 [ 125.071627] user_mode_thread+0xad/0xf0 [ 125.071637] rest_init+0x24/0x250 [ 125.071649] arch_call_rest_init+0xf/0x14 [ 125.071667] start_kernel+0x4c6/0x4eb [ 125.071682] secondary_startup_64_no_verify+0xe0/0xeb [ 125.071697] [ 125.071697] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 125.071710] _raw_spin_lock_irqsave+0x39/0x60 [ 125.071721] try_to_wake_up+0xab/0x1930 [ 125.071734] up+0x75/0xb0 [ 125.071748] __up_console_sem+0x6e/0x80 [ 125.071764] console_unlock+0x46a/0x590 [ 125.071779] vt_ioctl+0x2822/0x2ca0 [ 125.071791] tty_ioctl+0x785/0x16b0 [ 125.071802] __x64_sys_ioctl+0x19a/0x210 [ 125.071816] do_syscall_64+0x3b/0x90 [ 125.071833] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.071845] [ 125.071845] -> #0 ((console_sem).lock){....}-{2:2}: [ 125.071858] __lock_acquire+0x2a02/0x5e70 [ 125.071875] lock_acquire+0x1a2/0x530 [ 125.071891] _raw_spin_lock_irqsave+0x39/0x60 [ 125.071902] down_trylock+0xe/0x70 [ 125.071916] __down_trylock_console_sem+0x3b/0xd0 [ 125.071932] vprintk_emit+0x16b/0x560 [ 125.071948] vprintk+0x84/0xa0 [ 125.071963] _printk+0xba/0xf1 [ 125.071975] report_bug.cold+0x72/0xab [ 125.071991] handle_bug+0x3c/0x70 [ 125.072007] exc_invalid_op+0x14/0x50 [ 125.072024] asm_exc_invalid_op+0x16/0x20 [ 125.072036] group_sched_out.part.0+0x2c7/0x460 [ 125.072054] ctx_sched_out+0x8f1/0xc10 [ 125.072070] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.072081] __schedule+0xedd/0x2470 [ 125.072094] schedule+0xda/0x1b0 [ 125.072107] futex_wait_queue+0xf5/0x1e0 [ 125.072118] futex_wait+0x28e/0x690 [ 125.072128] do_futex+0x2ff/0x380 [ 125.072137] __x64_sys_futex+0x1c6/0x4d0 [ 125.072147] do_syscall_64+0x3b/0x90 [ 125.072163] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.072176] [ 125.072176] other info that might help us debug this: [ 125.072176] [ 125.072178] Chain exists of: [ 125.072178] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 125.072178] [ 125.072193] Possible unsafe locking scenario: [ 125.072193] [ 125.072195] CPU0 CPU1 [ 125.072198] ---- ---- [ 125.072200] lock(&ctx->lock); [ 125.072206] lock(&rq->__lock); [ 125.072212] lock(&ctx->lock); [ 125.072218] lock((console_sem).lock); [ 125.072224] [ 125.072224] *** DEADLOCK *** [ 125.072224] [ 125.072226] 2 locks held by syz-executor.4/3682: [ 125.072233] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 125.072262] #1: ffff88800d516820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.072287] [ 125.072287] stack backtrace: [ 125.072290] CPU: 1 PID: 3682 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220930 #1 [ 125.072303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.072311] Call Trace: [ 125.072314] [ 125.072318] dump_stack_lvl+0x8b/0xb3 [ 125.072336] check_noncircular+0x263/0x2e0 [ 125.072353] ? format_decode+0x26c/0xb50 [ 125.072369] ? print_circular_bug+0x450/0x450 [ 125.072386] ? simple_strtoul+0x30/0x30 [ 125.072402] ? format_decode+0x26c/0xb50 [ 125.072419] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 125.072436] __lock_acquire+0x2a02/0x5e70 [ 125.072457] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 125.072479] lock_acquire+0x1a2/0x530 [ 125.072496] ? down_trylock+0xe/0x70 [ 125.072513] ? lock_release+0x750/0x750 [ 125.072533] ? vprintk+0x84/0xa0 [ 125.072550] _raw_spin_lock_irqsave+0x39/0x60 [ 125.072562] ? down_trylock+0xe/0x70 [ 125.072577] down_trylock+0xe/0x70 [ 125.072593] ? vprintk+0x84/0xa0 [ 125.072610] __down_trylock_console_sem+0x3b/0xd0 [ 125.072627] vprintk_emit+0x16b/0x560 [ 125.072645] vprintk+0x84/0xa0 [ 125.072662] _printk+0xba/0xf1 [ 125.072674] ? record_print_text.cold+0x16/0x16 [ 125.072689] ? report_bug.cold+0x66/0xab [ 125.072707] ? group_sched_out.part.0+0x2c7/0x460 [ 125.072725] report_bug.cold+0x72/0xab [ 125.072744] handle_bug+0x3c/0x70 [ 125.072761] exc_invalid_op+0x14/0x50 [ 125.072779] asm_exc_invalid_op+0x16/0x20 [ 125.072791] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.072812] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.072831] RSP: 0018:ffff88803f4cf8f8 EFLAGS: 00010006 [ 125.072840] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.072847] RDX: ffff88801b785040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 125.072855] RBP: ffff88803f300000 R08: 0000000000000005 R09: 0000000000000001 [ 125.072863] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800d516800 [ 125.072871] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 125.072881] ? group_sched_out.part.0+0x2c7/0x460 [ 125.072901] ? group_sched_out.part.0+0x2c7/0x460 [ 125.072921] ctx_sched_out+0x8f1/0xc10 [ 125.072940] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.072954] ? lock_is_held_type+0xd7/0x130 [ 125.072968] ? __perf_cgroup_move+0x160/0x160 [ 125.072979] ? set_next_entity+0x304/0x550 [ 125.072999] ? lock_is_held_type+0xd7/0x130 [ 125.073013] __schedule+0xedd/0x2470 [ 125.073030] ? io_schedule_timeout+0x150/0x150 [ 125.073045] ? futex_wait_setup+0x166/0x230 [ 125.073059] schedule+0xda/0x1b0 [ 125.073074] futex_wait_queue+0xf5/0x1e0 [ 125.073086] futex_wait+0x28e/0x690 [ 125.073099] ? futex_wait_setup+0x230/0x230 [ 125.073112] ? wake_up_q+0x8b/0xf0 [ 125.073125] ? do_raw_spin_unlock+0x4f/0x220 [ 125.073144] ? futex_wake+0x158/0x490 [ 125.073161] ? fd_install+0x1f9/0x640 [ 125.073176] do_futex+0x2ff/0x380 [ 125.073187] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 125.073203] __x64_sys_futex+0x1c6/0x4d0 [ 125.073216] ? __x64_sys_futex_time32+0x480/0x480 [ 125.073229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.073242] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.073258] do_syscall_64+0x3b/0x90 [ 125.073276] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.073289] RIP: 0033:0x7f667a35db19 [ 125.073297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.073308] RSP: 002b:00007f66778d3218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.073318] RAX: ffffffffffffffda RBX: 00007f667a470f68 RCX: 00007f667a35db19 [ 125.073326] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f667a470f68 [ 125.073333] RBP: 00007f667a470f60 R08: 0000000000000000 R09: 0000000000000000 [ 125.073340] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f667a470f6c [ 125.073347] R13: 00007ffdb7c8f8bf R14: 00007f66778d3300 R15: 0000000000022000 [ 125.073360] [ 125.132706] WARNING: CPU: 1 PID: 3682 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 125.133399] Modules linked in: [ 125.133639] CPU: 1 PID: 3682 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220930 #1 [ 125.134227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.135037] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.135443] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.136764] RSP: 0018:ffff88803f4cf8f8 EFLAGS: 00010006 [ 125.137158] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.137677] RDX: ffff88801b785040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 125.138194] RBP: ffff88803f300000 R08: 0000000000000005 R09: 0000000000000001 [ 125.138709] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800d516800 [ 125.139231] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 125.139759] FS: 00007f66778d3700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 125.140344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.140764] CR2: 00007f358f3111f0 CR3: 000000000eda6000 CR4: 0000000000350ee0 [ 125.141302] Call Trace: [ 125.141492] [ 125.141659] ctx_sched_out+0x8f1/0xc10 [ 125.141960] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.142337] ? lock_is_held_type+0xd7/0x130 [ 125.142657] ? __perf_cgroup_move+0x160/0x160 [ 125.142992] ? set_next_entity+0x304/0x550 [ 125.143313] ? lock_is_held_type+0xd7/0x130 [ 125.143633] __schedule+0xedd/0x2470 [ 125.143913] ? io_schedule_timeout+0x150/0x150 [ 125.144257] ? futex_wait_setup+0x166/0x230 [ 125.144574] schedule+0xda/0x1b0 [ 125.144838] futex_wait_queue+0xf5/0x1e0 [ 125.145144] futex_wait+0x28e/0x690 [ 125.145419] ? futex_wait_setup+0x230/0x230 [ 125.145737] ? wake_up_q+0x8b/0xf0 [ 125.146004] ? do_raw_spin_unlock+0x4f/0x220 [ 125.146335] ? futex_wake+0x158/0x490 [ 125.146620] ? fd_install+0x1f9/0x640 [ 125.146907] do_futex+0x2ff/0x380 [ 125.147169] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 125.147597] __x64_sys_futex+0x1c6/0x4d0 [ 125.147898] ? __x64_sys_futex_time32+0x480/0x480 [ 125.148252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.148635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.149027] do_syscall_64+0x3b/0x90 [ 125.149311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.149694] RIP: 0033:0x7f667a35db19 [ 125.149968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.151291] RSP: 002b:00007f66778d3218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.151848] RAX: ffffffffffffffda RBX: 00007f667a470f68 RCX: 00007f667a35db19 [ 125.152367] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f667a470f68 [ 125.152899] RBP: 00007f667a470f60 R08: 0000000000000000 R09: 0000000000000000 [ 125.153420] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f667a470f6c [ 125.153935] R13: 00007ffdb7c8f8bf R14: 00007f66778d3300 R15: 0000000000022000 [ 125.154454] [ 125.154631] irq event stamp: 610 [ 125.154879] hardirqs last enabled at (609): [] syscall_enter_from_user_mode+0x1d/0x50 [ 125.155568] hardirqs last disabled at (610): [] __schedule+0x1225/0x2470 [ 125.156182] softirqs last enabled at (358): [] __irq_exit_rcu+0x11b/0x180 [ 125.156807] softirqs last disabled at (351): [] __irq_exit_rcu+0x11b/0x180 [ 125.157438] ---[ end trace 0000000000000000 ]--- 08:08:49 executing program 1: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_IO(r2, 0x30d, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x300) symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00') openat(r1, &(0x7f0000000040)='.\x00', 0x28100, 0x125) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) 08:08:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd(0x849e) r3 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xf9, 0x20, 0x9, 0x7f, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x24bf, 0x4}, 0x0, 0x7, 0x3, 0x6, 0x8, 0xfffffc00, 0x4, 0x0, 0xfffffff7}, 0xffffffffffffffff, 0x9, r0, 0x3) dup2(r2, r3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0) sendfile(r0, r0, 0x0, 0x5f1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x3a9900, 0x0) fcntl$setown(r1, 0x8, r4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x0, @tick, {}, {}, @raw8={"6a4110372e4321349a15abcc"}}], 0x1c) fdatasync(r5) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$hiddev(r6, 0x0, 0x0) 08:08:49 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) shutdown(r2, 0x1) lseek(0xffffffffffffffff, 0x4, 0x6b417b1c08756aa5) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1ff) lseek(r0, 0x1, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) 08:08:49 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) shutdown(r2, 0x1) lseek(0xffffffffffffffff, 0x4, 0x6b417b1c08756aa5) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1ff) lseek(r0, 0x1, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) 08:08:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd(0x849e) r3 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xf9, 0x20, 0x9, 0x7f, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x24bf, 0x4}, 0x0, 0x7, 0x3, 0x6, 0x8, 0xfffffc00, 0x4, 0x0, 0xfffffff7}, 0xffffffffffffffff, 0x9, r0, 0x3) dup2(r2, r3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0) sendfile(r0, r0, 0x0, 0x5f1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x3a9900, 0x0) fcntl$setown(r1, 0x8, r4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x0, @tick, {}, {}, @raw8={"6a4110372e4321349a15abcc"}}], 0x1c) fdatasync(r5) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$hiddev(r6, 0x0, 0x0) 08:08:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd(0x849e) r3 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xf9, 0x20, 0x9, 0x7f, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x24bf, 0x4}, 0x0, 0x7, 0x3, 0x6, 0x8, 0xfffffc00, 0x4, 0x0, 0xfffffff7}, 0xffffffffffffffff, 0x9, r0, 0x3) dup2(r2, r3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0) sendfile(r0, r0, 0x0, 0x5f1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x3a9900, 0x0) fcntl$setown(r1, 0x8, r4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x0, @tick, {}, {}, @raw8={"6a4110372e4321349a15abcc"}}], 0x1c) fdatasync(r5) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$hiddev(r6, 0x0, 0x0) 08:08:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd(0x849e) r3 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xf9, 0x20, 0x9, 0x7f, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x24bf, 0x4}, 0x0, 0x7, 0x3, 0x6, 0x8, 0xfffffc00, 0x4, 0x0, 0xfffffff7}, 0xffffffffffffffff, 0x9, r0, 0x3) dup2(r2, r3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0) sendfile(r0, r0, 0x0, 0x5f1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x3a9900, 0x0) fcntl$setown(r1, 0x8, r4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x0, @tick, {}, {}, @raw8={"6a4110372e4321349a15abcc"}}], 0x1c) fdatasync(r5) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$hiddev(r6, 0x0, 0x0) VM DIAGNOSIS: 08:08:49 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3d5e0 RCX=0000000000000000 RDX=ffff88800ff61ac0 RSI=ffffffff813bbaa7 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff8880185ef958 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9e7abd R14=ffff88806cf3d5e8 R15=0000000000000001 RIP=ffffffff813bbaa9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555604e400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f667a46d0a0 CR3=000000000eda6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f667a4447c0 00007f667a4447c8 YMM02=0000000000000000 0000000000000000 00007f667a4447e0 00007f667a4447c0 YMM03=0000000000000000 0000000000000000 00007f667a4447c8 00007f667a4447c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803f4cf2e8 R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ecb584 R15=dffffc0000000000 RIP=ffffffff823bb0c1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f66778d3700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f358f3111f0 CR3=000000000eda6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f667a4447c0 00007f667a4447c8 YMM02=0000000000000000 0000000000000000 00007f667a4447e0 00007f667a4447c0 YMM03=0000000000000000 0000000000000000 00007f667a4447c8 00007f667a4447c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000