Warning: Permanently added '[localhost]:6094' (ECDSA) to the list of known hosts. 2022/10/01 18:53:41 fuzzer started 2022/10/01 18:53:42 dialing manager at localhost:35095 syzkaller login: [ 45.244700] cgroup: Unknown subsys name 'net' [ 45.359169] cgroup: Unknown subsys name 'rlimit' 2022/10/01 18:53:57 syscalls: 2215 2022/10/01 18:53:57 code coverage: enabled 2022/10/01 18:53:57 comparison tracing: enabled 2022/10/01 18:53:57 extra coverage: enabled 2022/10/01 18:53:57 setuid sandbox: enabled 2022/10/01 18:53:57 namespace sandbox: enabled 2022/10/01 18:53:57 Android sandbox: enabled 2022/10/01 18:53:57 fault injection: enabled 2022/10/01 18:53:57 leak checking: enabled 2022/10/01 18:53:57 net packet injection: enabled 2022/10/01 18:53:57 net device setup: enabled 2022/10/01 18:53:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 18:53:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 18:53:57 USB emulation: enabled 2022/10/01 18:53:57 hci packet injection: enabled 2022/10/01 18:53:57 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 18:53:57 802.15.4 emulation: enabled 2022/10/01 18:53:57 fetching corpus: 50, signal 32676/34400 (executing program) 2022/10/01 18:53:57 fetching corpus: 100, signal 42212/45539 (executing program) 2022/10/01 18:53:58 fetching corpus: 150, signal 50412/55213 (executing program) 2022/10/01 18:53:58 fetching corpus: 200, signal 57050/63217 (executing program) 2022/10/01 18:53:58 fetching corpus: 250, signal 61772/69308 (executing program) 2022/10/01 18:53:58 fetching corpus: 300, signal 65918/74763 (executing program) 2022/10/01 18:53:58 fetching corpus: 350, signal 69557/79676 (executing program) 2022/10/01 18:53:58 fetching corpus: 400, signal 73289/84586 (executing program) 2022/10/01 18:53:58 fetching corpus: 450, signal 80229/92416 (executing program) 2022/10/01 18:53:58 fetching corpus: 500, signal 83823/97038 (executing program) 2022/10/01 18:53:59 fetching corpus: 550, signal 86568/100859 (executing program) 2022/10/01 18:53:59 fetching corpus: 600, signal 89688/104909 (executing program) 2022/10/01 18:53:59 fetching corpus: 650, signal 92416/108582 (executing program) 2022/10/01 18:53:59 fetching corpus: 700, signal 97551/114390 (executing program) 2022/10/01 18:53:59 fetching corpus: 750, signal 99438/117216 (executing program) 2022/10/01 18:53:59 fetching corpus: 800, signal 101599/120292 (executing program) 2022/10/01 18:53:59 fetching corpus: 850, signal 104348/123847 (executing program) 2022/10/01 18:53:59 fetching corpus: 900, signal 106608/126894 (executing program) 2022/10/01 18:54:00 fetching corpus: 950, signal 109186/130219 (executing program) 2022/10/01 18:54:00 fetching corpus: 1000, signal 112196/133869 (executing program) 2022/10/01 18:54:00 fetching corpus: 1050, signal 114185/136614 (executing program) 2022/10/01 18:54:00 fetching corpus: 1100, signal 115202/138444 (executing program) 2022/10/01 18:54:00 fetching corpus: 1150, signal 117359/141251 (executing program) 2022/10/01 18:54:00 fetching corpus: 1200, signal 118931/143529 (executing program) 2022/10/01 18:54:00 fetching corpus: 1250, signal 121094/146251 (executing program) 2022/10/01 18:54:00 fetching corpus: 1300, signal 122198/148133 (executing program) 2022/10/01 18:54:01 fetching corpus: 1350, signal 123967/150497 (executing program) 2022/10/01 18:54:01 fetching corpus: 1400, signal 125889/152980 (executing program) 2022/10/01 18:54:01 fetching corpus: 1450, signal 127779/155393 (executing program) 2022/10/01 18:54:01 fetching corpus: 1500, signal 130589/158537 (executing program) 2022/10/01 18:54:01 fetching corpus: 1550, signal 133292/161535 (executing program) 2022/10/01 18:54:01 fetching corpus: 1600, signal 134532/163383 (executing program) 2022/10/01 18:54:01 fetching corpus: 1650, signal 136352/165555 (executing program) 2022/10/01 18:54:02 fetching corpus: 1700, signal 137546/167288 (executing program) 2022/10/01 18:54:02 fetching corpus: 1750, signal 138360/168766 (executing program) 2022/10/01 18:54:02 fetching corpus: 1800, signal 139500/170412 (executing program) 2022/10/01 18:54:02 fetching corpus: 1850, signal 141038/172398 (executing program) 2022/10/01 18:54:02 fetching corpus: 1900, signal 142352/174142 (executing program) 2022/10/01 18:54:02 fetching corpus: 1950, signal 144225/176249 (executing program) 2022/10/01 18:54:02 fetching corpus: 2000, signal 144896/177527 (executing program) 2022/10/01 18:54:02 fetching corpus: 2050, signal 145990/179056 (executing program) 2022/10/01 18:54:02 fetching corpus: 2100, signal 147015/180503 (executing program) 2022/10/01 18:54:02 fetching corpus: 2150, signal 148568/182338 (executing program) 2022/10/01 18:54:03 fetching corpus: 2200, signal 149711/183894 (executing program) 2022/10/01 18:54:03 fetching corpus: 2250, signal 150677/185258 (executing program) 2022/10/01 18:54:03 fetching corpus: 2300, signal 151623/186615 (executing program) 2022/10/01 18:54:03 fetching corpus: 2350, signal 153123/188348 (executing program) 2022/10/01 18:54:03 fetching corpus: 2400, signal 154053/189696 (executing program) 2022/10/01 18:54:03 fetching corpus: 2450, signal 154928/191009 (executing program) 2022/10/01 18:54:03 fetching corpus: 2500, signal 155635/192177 (executing program) 2022/10/01 18:54:03 fetching corpus: 2550, signal 156748/193541 (executing program) 2022/10/01 18:54:03 fetching corpus: 2600, signal 157749/194825 (executing program) 2022/10/01 18:54:04 fetching corpus: 2650, signal 158235/195824 (executing program) 2022/10/01 18:54:04 fetching corpus: 2700, signal 159791/197356 (executing program) 2022/10/01 18:54:04 fetching corpus: 2750, signal 160314/198356 (executing program) 2022/10/01 18:54:04 fetching corpus: 2800, signal 161080/199475 (executing program) 2022/10/01 18:54:04 fetching corpus: 2850, signal 161841/200624 (executing program) 2022/10/01 18:54:04 fetching corpus: 2900, signal 162698/201764 (executing program) 2022/10/01 18:54:04 fetching corpus: 2950, signal 164380/203333 (executing program) 2022/10/01 18:54:04 fetching corpus: 3000, signal 166269/204952 (executing program) 2022/10/01 18:54:05 fetching corpus: 3050, signal 167989/206415 (executing program) 2022/10/01 18:54:05 fetching corpus: 3100, signal 168555/207308 (executing program) 2022/10/01 18:54:05 fetching corpus: 3150, signal 169171/208233 (executing program) 2022/10/01 18:54:05 fetching corpus: 3200, signal 169582/209047 (executing program) 2022/10/01 18:54:05 fetching corpus: 3250, signal 170291/210012 (executing program) 2022/10/01 18:54:05 fetching corpus: 3300, signal 171382/211095 (executing program) 2022/10/01 18:54:05 fetching corpus: 3350, signal 172015/211998 (executing program) 2022/10/01 18:54:05 fetching corpus: 3400, signal 172539/212749 (executing program) 2022/10/01 18:54:06 fetching corpus: 3450, signal 173705/213853 (executing program) 2022/10/01 18:54:06 fetching corpus: 3500, signal 174247/214707 (executing program) 2022/10/01 18:54:06 fetching corpus: 3550, signal 174748/215512 (executing program) 2022/10/01 18:54:06 fetching corpus: 3600, signal 175411/216324 (executing program) 2022/10/01 18:54:06 fetching corpus: 3650, signal 176195/217233 (executing program) 2022/10/01 18:54:06 fetching corpus: 3700, signal 177378/218235 (executing program) 2022/10/01 18:54:06 fetching corpus: 3750, signal 178174/219089 (executing program) 2022/10/01 18:54:06 fetching corpus: 3800, signal 179307/220105 (executing program) 2022/10/01 18:54:06 fetching corpus: 3850, signal 179928/220889 (executing program) 2022/10/01 18:54:06 fetching corpus: 3900, signal 180623/221647 (executing program) 2022/10/01 18:54:07 fetching corpus: 3950, signal 181171/222372 (executing program) 2022/10/01 18:54:07 fetching corpus: 4000, signal 181655/223074 (executing program) 2022/10/01 18:54:07 fetching corpus: 4050, signal 182348/223824 (executing program) 2022/10/01 18:54:07 fetching corpus: 4100, signal 183338/224657 (executing program) 2022/10/01 18:54:07 fetching corpus: 4150, signal 184954/225714 (executing program) 2022/10/01 18:54:07 fetching corpus: 4200, signal 186238/226580 (executing program) 2022/10/01 18:54:07 fetching corpus: 4250, signal 186834/227257 (executing program) 2022/10/01 18:54:08 fetching corpus: 4300, signal 187638/227984 (executing program) 2022/10/01 18:54:08 fetching corpus: 4350, signal 188586/228739 (executing program) 2022/10/01 18:54:08 fetching corpus: 4400, signal 189144/229335 (executing program) 2022/10/01 18:54:08 fetching corpus: 4450, signal 189621/229921 (executing program) 2022/10/01 18:54:08 fetching corpus: 4500, signal 189954/230522 (executing program) 2022/10/01 18:54:08 fetching corpus: 4550, signal 190460/231200 (executing program) 2022/10/01 18:54:08 fetching corpus: 4600, signal 191050/231906 (executing program) 2022/10/01 18:54:08 fetching corpus: 4650, signal 191780/232638 (executing program) 2022/10/01 18:54:08 fetching corpus: 4700, signal 192242/233190 (executing program) 2022/10/01 18:54:09 fetching corpus: 4750, signal 192978/233799 (executing program) 2022/10/01 18:54:09 fetching corpus: 4800, signal 193688/234426 (executing program) 2022/10/01 18:54:09 fetching corpus: 4850, signal 194339/234976 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/235476 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/235909 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/236341 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/236793 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/237232 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/237604 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/238017 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/238442 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/238860 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/239304 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/239698 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/240113 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/240534 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/240926 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/241321 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/241702 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/242105 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/242542 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/242942 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/243338 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/243746 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/244149 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/244567 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/244889 (executing program) 2022/10/01 18:54:09 fetching corpus: 4871, signal 194680/244889 (executing program) 2022/10/01 18:54:12 starting 8 fuzzer processes 18:54:12 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000280)=""/134, 0x86}], 0x4, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x121) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000440)={{r2}, "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"}) r3 = dup3(r1, r1, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000001440)=[0x8, 0x7fa]) close_range(r2, r1, 0x0) write$P9_RSETATTR(r1, &(0x7f0000001480)={0x7, 0x1b, 0x2}, 0x7) r4 = memfd_create(&(0x7f00000014c0)=',\x00', 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001500)={{r4}, 0x0, 0x4, @unused=[0x4, 0x9, 0x1, 0x3], @devid}) recvmmsg$unix(r3, &(0x7f0000004a80)=[{{&(0x7f0000002500), 0x6e, &(0x7f0000002740)=[{&(0x7f0000002580)=""/113, 0x71}, {&(0x7f0000002600)=""/66, 0x42}, {&(0x7f0000002680)=""/155, 0x9b}], 0x3, &(0x7f0000002780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000003900)=[{&(0x7f0000002880)=""/96, 0x60}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000003940)=@abs, 0x6e, &(0x7f0000003a40)=[{&(0x7f00000039c0)=""/127, 0x7f}], 0x1, &(0x7f0000003a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}, {{&(0x7f0000003ac0), 0x6e, &(0x7f0000004000)=[{&(0x7f0000003b40)=""/210, 0xd2}, {&(0x7f0000003c40)=""/65, 0x41}, {&(0x7f0000003cc0)=""/38, 0x26}, {&(0x7f0000003d00)=""/68, 0x44}, {&(0x7f0000003d80)=""/234, 0xea}, {&(0x7f0000003e80)=""/237, 0xed}, {&(0x7f0000003f80)=""/116, 0x74}], 0x7, &(0x7f0000004080)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000004180)=""/231, 0xe7}, {&(0x7f0000004280)=""/42, 0x2a}, {&(0x7f00000042c0)=""/50, 0x32}, {&(0x7f0000004300)=""/92, 0x5c}, {&(0x7f0000004380)=""/114, 0x72}, {&(0x7f0000004400)=""/34, 0x22}, {&(0x7f0000004440)=""/225, 0xe1}, {&(0x7f0000004540)=""/80, 0x50}, {&(0x7f00000045c0)=""/12, 0xc}, {&(0x7f0000004600)=""/118, 0x76}], 0xa, &(0x7f0000004740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}}, {{&(0x7f0000004780), 0x6e, &(0x7f0000004980)=[{&(0x7f0000004800)=""/178, 0xb2}, {&(0x7f00000048c0)=""/153, 0x99}], 0x2, &(0x7f00000049c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x90}}], 0x6, 0x0, &(0x7f0000004c00)={0x0, 0x3938700}) getsockopt$inet_mreqn(r16, 0x0, 0x24, &(0x7f0000004c40)={@broadcast, @remote}, &(0x7f0000004c80)=0xc) r19 = creat(&(0x7f0000004cc0)='./file0\x00', 0x1b6) r20 = gettid() r21 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004e80)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000004f80)=0xe8) recvmmsg$unix(r7, &(0x7f0000006980)=[{{&(0x7f0000004fc0)=@abs, 0x6e, &(0x7f00000050c0)=[{&(0x7f0000005040)=""/54, 0x36}, {&(0x7f0000005080)=""/34, 0x22}], 0x2, &(0x7f0000005100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000005240)=@abs, 0x6e, &(0x7f0000006680)=[{&(0x7f00000052c0)=""/215, 0xd7}, {&(0x7f00000053c0)=""/123, 0x7b}, {&(0x7f0000005440)=""/37, 0x25}, {&(0x7f0000005480)=""/231, 0xe7}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/254, 0xfe}], 0x6}}, {{&(0x7f0000006700), 0x6e, &(0x7f0000006900)=[{&(0x7f0000006780)=""/35, 0x23}, {&(0x7f00000067c0)=""/45, 0x2d}, {&(0x7f0000006800)=""/60, 0x3c}, {&(0x7f0000006840)=""/165, 0xa5}], 0x4, &(0x7f0000006940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x3, 0x10102, &(0x7f0000006a40)={0x0, 0x3938700}) r24 = getegid() clock_gettime(0x0, &(0x7f0000007140)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000070c0)=[{{&(0x7f0000006a80), 0x6e, &(0x7f0000006c00)=[{&(0x7f0000006b00)=""/207, 0xcf}], 0x1, &(0x7f0000006c40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000006d80)=@abs, 0x6e, &(0x7f0000007040)=[{&(0x7f0000006e00)=""/252, 0xfc}, {&(0x7f0000006f00)=""/225, 0xe1}, {&(0x7f0000007000)=""/51, 0x33}], 0x3, &(0x7f0000007080)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x40000040, &(0x7f0000007180)={r25, r26+10000000}) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000071c0)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f00000072c0)=0xe8) sendmsg$unix(r19, &(0x7f0000007400)={&(0x7f0000004d00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004e40)=[{&(0x7f0000004d80)="c98fbc3a7713c9be2f4f6d52759613dd928f170b7aa037a1e71e865c0e2298b0bc6768", 0x23}, {&(0x7f0000004dc0)="7a5a3569f2c2146107795f1a4066752169bab2e4ee6743ac713282d6ec47ad6e4e764dc0f84073efafb05cf39d0d98f80e17b757559b4763024a7dc8cc723b2f67fa5df061c94c5e8baf22cb92e378504edb5690fe401d53f04fea61d46ee8f09b03ed91ed637577", 0x68}], 0x2, &(0x7f0000007300)=[@cred={{0x1c, 0x1, 0x2, {r20, r0, r14}}}, @rights={{0x18, 0x1, 0x1, [r4, r1]}}, @rights={{0x28, 0x1, 0x1, [r2, r15, r21, r8, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {r11, r22, r5}}}, @cred={{0x1c, 0x1, 0x2, {r23, r10, r24}}}, @cred={{0x1c, 0x1, 0x2, {r17, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r18}}}], 0xe0, 0x44004}, 0x4) 18:54:12 executing program 1: ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'macvlan1\x00', {0x2, 0x0, @loopback}}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3d}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x2, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) r2 = openat(r0, &(0x7f00000004c0)='./file0\x00', 0x58800, 0x28) getsockopt$inet_buf(r2, 0x0, 0xdb8fe4d426f5cd8, &(0x7f0000000500)=""/237, &(0x7f0000000600)=0xed) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = pidfd_getfd(r2, r0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x6c, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x6c}}, 0x20000000) r6 = syz_open_dev$vcsa(&(0x7f0000001c80), 0xfffffffffffffffa, 0x10002) syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), r4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001f40)={'syztnl1\x00', &(0x7f0000001ec0)={'syztnl2\x00', 0x0, 0x29, 0x7f, 0x6, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, @private1, 0x10, 0x700, 0x40, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000002000)={'syztnl2\x00', &(0x7f0000001f80)={'syztnl0\x00', 0x0, 0x6, 0x2, 0x78, 0x7ff, 0x61, @local, @private2, 0x8000, 0x8000, 0x7fffffff, 0x10000000}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000021c0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002180)={&(0x7f0000002040)={0x118, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x101}, 0x1) 18:54:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="4d18f90b15276da102d734c4d8a0eaafd862f9a9c27e52fb68370a0fc34dc7914c015d08cd91f153525728006999b8e2865f3a7721cec4d8acd440824d509366f3726f8be349580d5324fb8145a8176e44c61720fcddc4f569c4e5994489e76a1bc37876c23b", 0x66, 0xd081}], 0x1104002, &(0x7f0000000140)={[{@rodir}, {@uni_xlate}, {@rodir}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsfloor}]}) r1 = openat(r0, &(0x7f0000000200)='./file0/file0\x00', 0x72e7f041d1ce5f6f, 0x8) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/124, 0x7c}], 0x1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000) r3 = mq_open(&(0x7f0000003500)='smackfsfloor', 0x40, 0x50, &(0x7f0000003540)={0x8, 0x7, 0x9, 0xab26}) r4 = open(&(0x7f00000035c0)='./file0/file0\x00', 0x4000, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000003680)={{0x1, 0x1, 0x18, r1, {0x64ba}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003700)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000003940), 0x101000, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x9, &(0x7f0000003c80)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f0000000300)="5b816f8b91445c63e95de37dbfd6e6e17b315dcf7218f1cd7538448efc62a54fcefc18ecc4e931ba3d21e639c473e28236b13a31790a70326f901c4048317af24d17301f3c0c9680bb25e2a9d04c819358fb26a908993bd73a515ec249a63779ee4fd6dd67903ec2a5a6d82aeae2bb7b13d81d855ae706acaf90658718489841b6bac0e0a2fb5d8670a6a0af16d10c72c30600bd9f187e839926bf4b91e37c6c12273ed6a57ad5be9f", 0xa9, 0x0, 0x0, 0x2, r1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000000400)="dc68f9043835372696324dc7ebb3cc8e51ffc51cb993d9e42fbed1de4d2586727edb3293f33f3622c1c4f3c807d20330b29070aa3d3947e9e34fcd12c261b6f1d5ecfbd24fed8f28ffc9809ce561a9cc4435aaa0e35401471b027d8ad12d3a52909f867b5b1c9e9537bd3699f55be1f0b9e29630a85275cee2ecfa3c915aa7491cf915daea43b42b11e21eb5c1102a450ddba848a26aa397ccefb9768502ff67f54be470155030d3741fed45f3fbeadee07368", 0xb3, 0xbe94, 0x0, 0x2, r1}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x7, 0x7, r3, &(0x7f0000003580), 0x0, 0x2, 0x0, 0x0, r4}, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x5, 0x100, r1, &(0x7f0000003640), 0x0, 0x401, 0x0, 0x1, r5}, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x7, 0x7, r6, &(0x7f0000003740)="7575086ad5ea88c4b792d6d62406cbc37fde2aeb9e069ec829257be41477fd02478ef48ff33036816fabfffc56c42d7a42395585eac4d24135b60ba93cc9c3bf22ddc75c0d5d03c30e0a809d681aaeba31b00638dd2e9472b90dd44ad3a55049eb53fc4f6c4dc770a543c47f4a45320035d6ee3c15e85ffcea1f2395d82662fabcb78449676a65e0d0d5df1f1e653aed37df937da3d2c6c240fa24f9dc0b97f2778021d528f24df8ac8fd574116eadab9a094ddc0f57e0c5838d0a24bb4845c23055e73b042e5c03acba9c5a0da81013f2123a19d04e147ded234b5826ab37ec562fd780d053", 0xe6, 0x100000000, 0x0, 0x0, r1}, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x5, 0x1f, r7, &(0x7f0000003880)="657399162cfc1a1d4b0a0689d4c36130e2c562a1aab6b4be2f558ac47bf709123205cc052d20127b29f28c1780f745742ec8f7366febdb4ad14976fcebe6a4ef412ab3138727", 0x46, 0x6, 0x0, 0x3, r1}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x2, 0xfff9, r8, &(0x7f0000003980)="995e6947f120ea5b1d97326bc48e04cfb19ebc1b371607c3bddae154adff587f015d722a5b9dc72652e205bead8e6d083c59ec1d111afbeca248cc0cdd285473687fe300cd94e94ca663abb649", 0x4d, 0x6, 0x0, 0x1, r1}, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0x2, 0x7, r9, &(0x7f0000003a40)="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", 0xfd, 0x1, 0x0, 0x3}, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000003b80)="afe80aa2e52477472d6addfc6ed58bb48d479c2e93aea5f939f5758595c9c78cea7cb6b0f4034e7239cd61554ce81e989a16b8d2163e58905a2cf00f7aaac688f5bb5bd1170da405d0f4bc53e0c3cbb09191e60e056d15245a602ee926ac4f87a786184f5f0a855406ef72395c24d0f6bc08405c8818ff1a87513aaae77d2158e20e39fc7f8f6a160d32d981093e52221d50993ee3b144d37f50e2ec156883becd59fdd96c", 0xa5, 0x2f, 0x0, 0x2}]) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000003d00), 0x103000, 0x0) ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000003d40)) ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f0000003d80)={0x81, 0x101}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000003dc0)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000003e00)={0x7f, 0x8, 0xa61, 0x7, 0x4}) ioctl$BLKFLSBUF(r10, 0x1261, &(0x7f0000003e40)=0x2) openat(0xffffffffffffff9c, &(0x7f0000003e80)='./file0/file0\x00', 0x200001, 0x125) ioctl$EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000003ec0)) 18:54:12 executing program 3: sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x8, 0x4, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4090) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x210600, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x120, r1, 0x210, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa3, 0xbe, "5c1e5d57e5fa5e4cd49c8e93cb4c315c8b59e18a2dd0404a8801701aa395fce70c77541a355734773378512e086c71581114dfb65ef4590aa17b4bfc739e8d17fbfa587922366b1f0ed2f6be8194c3e503878efe6f85556c44fe64f64cef0ef7a4fb6e238932fff93f23f41f6fe6aacd863ac200fd921cc77dcca27c5d44c94d0e09ce42d920a1ace7616a618fd70a2417a17e1284e1044a4d64b9267f61bc"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, [{0x30, 0x1}, {0x3, 0x1}, {0x64}, {0x9, 0x1}, {0x16, 0x1}, {0x60, 0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0xb}, {0x24, 0x1}, {0xb, 0x1}, {0x30, 0x1}, {0x0, 0x1}, {0x24}, {0x5e}, {0x18, 0x1}, {0x6c, 0x1}, {0x6c, 0x1}, {0x1, 0x1}, {0x9}, {}, {0x6, 0x1}, {0x1b}, {0x30, 0x1}, {0x12, 0x1}, {0x12, 0x1}, {0x36}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x120}, 0x1, 0x0, 0x0, 0x48df1564d5cb361a}, 0x4008080) r3 = dup(r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) r5 = syz_open_dev$vcsa(&(0x7f0000000500), 0x3, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x70, 0x20}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0xc000) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000680)=0x73) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r0) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x30}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x63}}}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="cdb9204863527b1d06e6acd9f3124b81890d359d7e1d800c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x10800}, 0x20000881) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f00000009c0)=0x20) r10 = openat$cgroup_pressure(r7, &(0x7f0000000a00)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000a40)=[{r10, 0xc2}, {0xffffffffffffffff, 0x100}, {r3, 0x6000}, {r3, 0x6048}, {r0, 0xc498}, {r7, 0x1c1}, {0xffffffffffffffff, 0x20}], 0x7, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000ac0)={[0x2]}, 0x8) [ 75.113854] audit: type=1400 audit(1664650452.372:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:54:12 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2100880, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@debug={'debug', 0x3d, 0x4}}, {@cache_none}, {@cache_fscache}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x39, 0x32, 0x61, 0x26, 0x38, 0x36, 0xb], 0x2d, [0x30, 0x38, 0x66, 0x38], 0x2d, [0x63, 0x37, 0x32, 0x34], 0x2d, [0x32, 0x37, 0x34, 0x33], 0x2d, [0x90e649cf7d92fe41, 0x65, 0x31, 0x66, 0x63, 0x35, 0x57, 0x39]}}}, {@subj_role={'subj_role', 0x3d, '\x9c-'}}, {@obj_user={'obj_user', 0x3d, '/dev/full\x00'}}, {@subj_type}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x66, 0x36, 0x65, 0x66, 0x38, 0x30, 0x34], 0x2d, [0x62, 0x34, 0x65, 0x38], 0x2d, [0x33, 0x33, 0x63, 0x38], 0x2d, [0x39, 0x32, 0x61, 0x32], 0x2d, [0x33, 0x31, 0x66, 0x62, 0x33, 0x4, 0x34, 0x63]}}}, {@euid_lt={'euid<', 0xee01}}]}}) r1 = syz_io_uring_complete(0x0) r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x101600, 0x10b) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8000000000}}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000002c0)={r0, 0x4, 0x6, 0x2}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x101000, 0x28) getpeername$unix(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000440)=[r3, r3, r5], 0x3) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="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", 0xfe}], 0x2) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000600)=0x4) r6 = openat(r1, &(0x7f0000000640)='./file0\x00', 0x202, 0x41) r7 = openat(r4, &(0x7f0000000680)='./file0\x00', 0x420302, 0x11) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x408c0}, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x400800, 0x20) 18:54:12 executing program 5: prctl$PR_CAPBSET_DROP(0x18, 0x1f) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x11) prctl$PR_CAPBSET_DROP(0x18, 0x23) prctl$PR_CAPBSET_DROP(0x18, 0xc) prctl$PR_CAPBSET_DROP(0x18, 0x16) prctl$PR_CAPBSET_DROP(0x18, 0x14) prctl$PR_CAPBSET_DROP(0x18, 0x1f) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x7) prctl$PR_CAPBSET_DROP(0x18, 0x24) prctl$PR_CAPBSET_DROP(0x18, 0xd) prctl$PR_CAPBSET_DROP(0x18, 0x14) prctl$PR_CAPBSET_DROP(0x18, 0x3) prctl$PR_CAPBSET_DROP(0x18, 0x1c) prctl$PR_CAPBSET_DROP(0x18, 0xc) prctl$PR_CAPBSET_DROP(0x18, 0x24) prctl$PR_CAPBSET_DROP(0x18, 0x10) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x6) 18:54:12 executing program 7: flock(0xffffffffffffffff, 0x9) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x2f, 0x81, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00', @loopback, 0x40, 0x10, 0x5, 0x1225}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004280)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000004380)=0xe8) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000004480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x44, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x4800) syz_genetlink_get_family_id$ethtool(&(0x7f00000044c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004540), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000004600)={'ip6tnl0\x00', &(0x7f0000004580)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x1, 0xfff, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x7, 0x41, 0x80000001}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000004980)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004940)={&(0x7f0000004640)={0x2c4, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x228, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x694}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x12}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "addcd346e56f1119e79382ef7692ac5288a509e54196d7894c3bf436494ddb11ecdf93993eec2c420be5f4cfb4083c506944dba79f4ea87efc3d044e6889ddebd238d54b7ebb2d15859975c5d40c2a69983af66c374aa5ebac2276601835133021fc2d99c58dd3305497621d2231988c1ecd5ee80d3491ac3f2e3959e2c809d63f87581694f5"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2c4}}, 0x24000000) r6 = openat$cgroup_ro(r0, &(0x7f00000049c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000004b00)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x104181c}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x44, 0xf, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004b80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000004c40)={'sit0\x00', &(0x7f0000004bc0)={'syztnl1\x00', r2, 0x29, 0x0, 0x6, 0x0, 0x4, @local, @empty, 0x40, 0x80, 0x7fff, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000004d00)={'ip6gre0\x00', &(0x7f0000004c80)={'ip6gre0\x00', 0x0, 0x4, 0x65, 0x3, 0x7, 0x40, @rand_addr=' \x01\x00', @private0, 0x1, 0x80, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000004dc0)={'ip6_vti0\x00', &(0x7f0000004d40)={'syztnl0\x00', r3, 0x4, 0x0, 0x1, 0x9f, 0x40, @mcast2, @local, 0x8000, 0x7800, 0xffff486a, 0x1ff}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000005100)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000050c0)={&(0x7f0000004e00)={0x2a8, r7, 0x20, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x6c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xc8, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8000}, 0x840) r11 = openat$cgroup_ro(r6, &(0x7f0000005140)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r11, 0x89f6, &(0x7f0000005200)={'syztnl0\x00', &(0x7f0000005180)={'ip6tnl0\x00', r5, 0x4, 0x5, 0x8, 0x7fff, 0x25, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x1, 0x40, 0xe4, 0x7fff}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f00000053c0)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005380)={&(0x7f00000052c0)={0xa0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x101}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x34f9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1f}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x8050) 18:54:12 executing program 6: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @multicast2}}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]}, 0x24}}, 0x88c0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) r2 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000340)=0x80) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8c0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x29, 0x40, 0xd, 0x800, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x700, 0x1f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'gre0\x00', r1, 0x8, 0x20, 0x7f, 0xfffffff8, {{0x9, 0x4, 0x3, 0x3c, 0x24, 0x68, 0x0, 0x63, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0xed, [@rand_addr=0x64010101, @rand_addr=0x64010101, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000680)={'tunl0\x00', r1, 0x8000, 0x8000, 0xa3e, 0x0, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x68, 0x0, 0x40, 0x2f, 0x0, @loopback, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb6, 0x0, 0x4, [0xffff, 0xffffffff]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0xb, [0x0, 0xffff]}, @ssrr={0x89, 0x1b, 0xc, [@broadcast, @local, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @rr={0x7, 0x23, 0xe8, [@local, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @loopback, @rand_addr=0x64010102, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6_vti0\x00', r1, 0x4, 0x8, 0x2, 0x7fffffff, 0xd, @empty, @empty, 0x7800, 0x7, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'ip6gre0\x00', r1, 0x2f, 0x5, 0x7, 0x1, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x40, 0x700, 0x3f, 0x100}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000a00)={0x0, @remote, @private}, &(0x7f0000000a40)=0xc) getpeername$packet(r2, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ac0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000c00)={'ip6tnl0\x00', &(0x7f0000000b80)={'sit0\x00', r1, 0x29, 0x8, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x80, 0x200, 0x6}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000e40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x19c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x400}, 0x4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ec0), r2) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r11, 0x1301, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000fc0), 0x101400, 0x0) sendmsg$AUDIT_TRIM(r12, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x10, 0x3f6, 0x200, 0x70bd28, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4d}, 0x40400c0) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000001100)=0x7, 0x4) [ 76.432042] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.433854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.437144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.442116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.443862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.445604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.452239] Bluetooth: hci0: HCI_REQ-0x0c1a [ 76.497458] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.499801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.502068] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.513730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.516281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.518100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.528901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.540117] Bluetooth: hci1: HCI_REQ-0x0c1a [ 76.547542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.557133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.562280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.563495] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 76.570904] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 76.576352] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.578244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.578305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.579853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 76.584376] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.584483] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.587285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.588587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.593782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.594630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.596183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.596378] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.597773] Bluetooth: hci2: HCI_REQ-0x0c1a [ 76.598447] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.600732] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.602053] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.608168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.610844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.612501] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.614410] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 76.616059] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.617562] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.618819] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 76.620208] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.621884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.622941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.624818] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 76.627306] Bluetooth: hci6: HCI_REQ-0x0c1a [ 76.629690] Bluetooth: hci4: HCI_REQ-0x0c1a [ 76.639152] Bluetooth: hci3: HCI_REQ-0x0c1a [ 76.651508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.671637] Bluetooth: hci5: HCI_REQ-0x0c1a [ 76.691257] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 76.716267] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 76.718094] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 76.731220] Bluetooth: hci7: HCI_REQ-0x0c1a [ 78.514641] Bluetooth: hci0: command 0x0409 tx timeout [ 78.578153] Bluetooth: hci1: command 0x0409 tx timeout [ 78.642155] Bluetooth: hci6: command 0x0409 tx timeout [ 78.642175] Bluetooth: hci2: command 0x0409 tx timeout [ 78.706128] Bluetooth: hci4: command 0x0409 tx timeout [ 78.706158] Bluetooth: hci3: command 0x0409 tx timeout [ 78.707578] Bluetooth: hci5: command 0x0409 tx timeout [ 78.770146] Bluetooth: hci7: command 0x0409 tx timeout [ 80.563041] Bluetooth: hci0: command 0x041b tx timeout [ 80.626064] Bluetooth: hci1: command 0x041b tx timeout [ 80.690079] Bluetooth: hci2: command 0x041b tx timeout [ 80.691257] Bluetooth: hci6: command 0x041b tx timeout [ 80.754036] Bluetooth: hci3: command 0x041b tx timeout [ 80.760262] Bluetooth: hci5: command 0x041b tx timeout [ 80.760715] Bluetooth: hci4: command 0x041b tx timeout [ 80.819120] Bluetooth: hci7: command 0x041b tx timeout [ 82.610039] Bluetooth: hci0: command 0x040f tx timeout [ 82.674092] Bluetooth: hci1: command 0x040f tx timeout [ 82.738088] Bluetooth: hci6: command 0x040f tx timeout [ 82.738502] Bluetooth: hci2: command 0x040f tx timeout [ 82.802047] Bluetooth: hci4: command 0x040f tx timeout [ 82.802461] Bluetooth: hci5: command 0x040f tx timeout [ 82.802852] Bluetooth: hci3: command 0x040f tx timeout [ 82.866081] Bluetooth: hci7: command 0x040f tx timeout [ 84.659035] Bluetooth: hci0: command 0x0419 tx timeout [ 84.722075] Bluetooth: hci1: command 0x0419 tx timeout [ 84.786089] Bluetooth: hci2: command 0x0419 tx timeout [ 84.786500] Bluetooth: hci6: command 0x0419 tx timeout [ 84.851103] Bluetooth: hci3: command 0x0419 tx timeout [ 84.851508] Bluetooth: hci5: command 0x0419 tx timeout [ 84.851896] Bluetooth: hci4: command 0x0419 tx timeout [ 84.915028] Bluetooth: hci7: command 0x0419 tx timeout 18:55:06 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33373631313835303700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000c7b2a4502ed64a6eb421652eb677bbba010040000c00000000000000d6f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000003800000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010500)="ff010000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d6f4655fd6f4655fd6f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000030000000", 0x40, 0x1800}, {&(0x7f0000010f00)="20000000681d5748681d574800000000d6f4655f00"/32, 0x20, 0x1880}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000500000000200000004000000520000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d6f4655f00"/160, 0xa0, 0x1c00}, {&(0x7f0000011100)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000600000000200000004000000620000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d6f4655f00"/160, 0xa0, 0x2000}, {&(0x7f0000011200)="c0410000002c0000d6f4655fd6f4655fd6f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000040000000", 0x40, 0x3c00}, {&(0x7f0000011300)="20000000000000000000000000000000d6f4655f000000000000000000000000000002ea00"/64, 0x40, 0x3c80}, {&(0x7f0000011400)="ed4100003c000000d7f4655fd7f4655fd7f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000097bbe33d00000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011500)="ed8100001a040000d7f4655fd7f4655fd7f4655f00000000000001002000000000000800010000000af301000400000000000000000000000200000070000000000000000000000000000000000000000000000000000000000000000000000000000000ba8b7ff700000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000", 0xa0, 0x4400}, {&(0x7f0000011600)="ffa1000026000000d7f4655fd7f4655fd7f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3337363131383530372f66696c65302f66696c6530000000000000000000000000000000000000000000008cbe886300000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000", 0xa0, 0x4800}, {&(0x7f0000011700)="ed8100000a000000d7f4655fd7f4655fd7f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d33368e00000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x4c00}, {&(0x7f0000011800)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800010000000af30100040000000000000000000000090000008000000000000000000000000000000000000000000000000000000000000000000000000000000072b2bc0c00000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000", 0xc0, 0x4fe0}, {&(0x7f0000011900)="ed81000064000000d7f4655fd7f4655fd7f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c0ac393e100000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x5400}, {&(0x7f0000011a00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x57c0}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0xc000}, {&(0x7f0000011c00)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x10000}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x10400}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x10800}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x10c00}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x11000}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x11400}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x11800}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x11c00}, {&(0x7f0000012400)="00000000000400"/32, 0x20, 0x12000}, {&(0x7f0000012500)="00000000000400"/32, 0x20, 0x12400}, {&(0x7f0000012600)="00000000000400"/32, 0x20, 0x12800}, {&(0x7f0000012700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x14000}, {&(0x7f0000012800)="0200"/32, 0x20, 0x14400}, {&(0x7f0000012900)="0300"/32, 0x20, 0x14800}, {&(0x7f0000012a00)="0400"/32, 0x20, 0x14c00}, {&(0x7f0000012b00)="0500"/32, 0x20, 0x15000}, {&(0x7f0000012c00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x15400}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x19400}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1c000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0009d9f90323f51f5d0278ee592753fb59660bb9bad7"]) [ 129.204122] loop6: detected capacity change from 0 to 1024 [ 129.254050] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 129.375451] EXT4-fs (loop6): unmounting filesystem. 18:55:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r1 = epoll_create1(0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) pread64(r0, &(0x7f0000000040)=""/158, 0x9e, 0x8) 18:55:06 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x4000) openat(r0, &(0x7f0000000040)='./file1\x00', 0x100, 0x18) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd7000fedbdf050400000008002b0006000000050038000000000006002800010000000500380000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000c010}, 0x801) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r2, &(0x7f0000000840)='./file0\x00', 0x2, 0x4a) io_setup(0x7, &(0x7f0000000000)) r3 = io_uring_setup(0x13eb, &(0x7f0000000100)={0x0, 0xa306, 0x0, 0x0, 0x32e}) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="0c0000000300000134c8622bfa18946b00000000"], 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x1) [ 129.595528] audit: type=1400 audit(1664650506.854:7): avc: denied { open } for pid=3854 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.597167] audit: type=1400 audit(1664650506.854:8): avc: denied { kernel } for pid=3854 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.628823] ------------[ cut here ]------------ [ 129.628843] [ 129.628846] ====================================================== [ 129.628849] WARNING: possible circular locking dependency detected [ 129.628854] 6.0.0-rc7-next-20220930 #1 Not tainted [ 129.628860] ------------------------------------------------------ [ 129.628863] syz-executor.6/3856 is trying to acquire lock: [ 129.628869] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 129.628909] [ 129.628909] but task is already holding lock: [ 129.628912] ffff88800e907020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.628939] [ 129.628939] which lock already depends on the new lock. [ 129.628939] [ 129.628941] [ 129.628941] the existing dependency chain (in reverse order) is: [ 129.628945] [ 129.628945] -> #3 (&ctx->lock){....}-{2:2}: [ 129.628959] _raw_spin_lock+0x2a/0x40 [ 129.628970] __perf_event_task_sched_out+0x53b/0x18d0 [ 129.628981] __schedule+0xedd/0x2470 [ 129.628995] schedule+0xda/0x1b0 [ 129.629008] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.629021] syscall_exit_to_user_mode+0x19/0x40 [ 129.629034] do_syscall_64+0x48/0x90 [ 129.629051] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.629064] [ 129.629064] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 129.629077] _raw_spin_lock_nested+0x30/0x40 [ 129.629088] raw_spin_rq_lock_nested+0x1e/0x30 [ 129.629101] task_fork_fair+0x63/0x4d0 [ 129.629118] sched_cgroup_fork+0x3d0/0x540 [ 129.629132] copy_process+0x4183/0x6e20 [ 129.629143] kernel_clone+0xe7/0x890 [ 129.629152] user_mode_thread+0xad/0xf0 [ 129.629162] rest_init+0x24/0x250 [ 129.629174] arch_call_rest_init+0xf/0x14 [ 129.629192] start_kernel+0x4c6/0x4eb [ 129.629207] secondary_startup_64_no_verify+0xe0/0xeb [ 129.629221] [ 129.629221] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 129.629234] _raw_spin_lock_irqsave+0x39/0x60 [ 129.629245] try_to_wake_up+0xab/0x1930 [ 129.629258] up+0x75/0xb0 [ 129.629272] __up_console_sem+0x6e/0x80 [ 129.629288] console_unlock+0x46a/0x590 [ 129.629303] do_con_write+0xc05/0x1d50 [ 129.629314] con_write+0x21/0x40 [ 129.629323] n_tty_write+0x4d4/0xfe0 [ 129.629335] file_tty_write.constprop.0+0x455/0x8a0 [ 129.629346] vfs_write+0x9c3/0xd90 [ 129.629363] ksys_write+0x127/0x250 [ 129.629378] do_syscall_64+0x3b/0x90 [ 129.629395] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.629408] [ 129.629408] -> #0 ((console_sem).lock){....}-{2:2}: [ 129.629423] __lock_acquire+0x2a02/0x5e70 [ 129.629442] lock_acquire+0x1a2/0x530 [ 129.629458] _raw_spin_lock_irqsave+0x39/0x60 [ 129.629469] down_trylock+0xe/0x70 [ 129.629483] __down_trylock_console_sem+0x3b/0xd0 [ 129.629499] vprintk_emit+0x16b/0x560 [ 129.629515] vprintk+0x84/0xa0 [ 129.629530] _printk+0xba/0xf1 [ 129.629542] report_bug.cold+0x72/0xab [ 129.629558] handle_bug+0x3c/0x70 [ 129.629574] exc_invalid_op+0x14/0x50 [ 129.629591] asm_exc_invalid_op+0x16/0x20 [ 129.629603] group_sched_out.part.0+0x2c7/0x460 [ 129.629620] ctx_sched_out+0x8f1/0xc10 [ 129.629637] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.629648] __schedule+0xedd/0x2470 [ 129.629661] schedule+0xda/0x1b0 [ 129.629674] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.629685] syscall_exit_to_user_mode+0x19/0x40 [ 129.629697] do_syscall_64+0x48/0x90 [ 129.629713] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.629725] [ 129.629725] other info that might help us debug this: [ 129.629725] [ 129.629728] Chain exists of: [ 129.629728] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 129.629728] [ 129.629743] Possible unsafe locking scenario: [ 129.629743] [ 129.629745] CPU0 CPU1 [ 129.629748] ---- ---- [ 129.629750] lock(&ctx->lock); [ 129.629755] lock(&rq->__lock); [ 129.629762] lock(&ctx->lock); [ 129.629768] lock((console_sem).lock); [ 129.629774] [ 129.629774] *** DEADLOCK *** [ 129.629774] [ 129.629776] 2 locks held by syz-executor.6/3856: [ 129.629783] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 129.629812] #1: ffff88800e907020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.629837] [ 129.629837] stack backtrace: [ 129.629840] CPU: 1 PID: 3856 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220930 #1 [ 129.629853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.629861] Call Trace: [ 129.629864] [ 129.629868] dump_stack_lvl+0x8b/0xb3 [ 129.629886] check_noncircular+0x263/0x2e0 [ 129.629903] ? format_decode+0x26c/0xb50 [ 129.629919] ? print_circular_bug+0x450/0x450 [ 129.629936] ? simple_strtoul+0x30/0x30 [ 129.629950] ? __lockdep_reset_lock+0x180/0x180 [ 129.629967] ? format_decode+0x26c/0xb50 [ 129.629984] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 129.630001] __lock_acquire+0x2a02/0x5e70 [ 129.630023] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 129.630045] lock_acquire+0x1a2/0x530 [ 129.630062] ? down_trylock+0xe/0x70 [ 129.630079] ? lock_release+0x750/0x750 [ 129.630097] ? find_held_lock+0x2c/0x110 [ 129.630113] ? vprintk+0x84/0xa0 [ 129.630131] _raw_spin_lock_irqsave+0x39/0x60 [ 129.630142] ? down_trylock+0xe/0x70 [ 129.630158] down_trylock+0xe/0x70 [ 129.630174] ? vprintk+0x84/0xa0 [ 129.630190] __down_trylock_console_sem+0x3b/0xd0 [ 129.630207] vprintk_emit+0x16b/0x560 [ 129.630226] vprintk+0x84/0xa0 [ 129.630243] _printk+0xba/0xf1 [ 129.630254] ? record_print_text.cold+0x16/0x16 [ 129.630285] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 129.630299] ? lock_downgrade+0x6d0/0x6d0 [ 129.630317] ? report_bug.cold+0x66/0xab [ 129.630335] ? group_sched_out.part.0+0x2c7/0x460 [ 129.630353] report_bug.cold+0x72/0xab [ 129.630371] handle_bug+0x3c/0x70 [ 129.630389] exc_invalid_op+0x14/0x50 [ 129.630407] asm_exc_invalid_op+0x16/0x20 [ 129.630419] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.630440] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.630451] RSP: 0018:ffff88803e717c48 EFLAGS: 00010006 [ 129.630460] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.630468] RDX: ffff88803e3b9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 129.630475] RBP: ffff88803e7a85c8 R08: 0000000000000005 R09: 0000000000000001 [ 129.630483] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e907000 [ 129.630490] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 129.630501] ? group_sched_out.part.0+0x2c7/0x460 [ 129.630521] ? group_sched_out.part.0+0x2c7/0x460 [ 129.630540] ctx_sched_out+0x8f1/0xc10 [ 129.630560] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.630574] ? lock_is_held_type+0xd7/0x130 [ 129.630587] ? __perf_cgroup_move+0x160/0x160 [ 129.630598] ? set_next_entity+0x304/0x550 [ 129.630615] ? update_curr+0x267/0x740 [ 129.630634] ? lock_is_held_type+0xd7/0x130 [ 129.630647] __schedule+0xedd/0x2470 [ 129.630664] ? io_schedule_timeout+0x150/0x150 [ 129.630681] ? __x64_sys_futex_time32+0x480/0x480 [ 129.630695] schedule+0xda/0x1b0 [ 129.630710] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.630723] syscall_exit_to_user_mode+0x19/0x40 [ 129.630736] do_syscall_64+0x48/0x90 [ 129.630753] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.630767] RIP: 0033:0x7fef2f77fb19 [ 129.630775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.630785] RSP: 002b:00007fef2ccf5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.630796] RAX: 0000000000000001 RBX: 00007fef2f892f68 RCX: 00007fef2f77fb19 [ 129.630803] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fef2f892f6c [ 129.630810] RBP: 00007fef2f892f60 R08: 000000000000000e R09: 0000000000000000 [ 129.630817] R10: 0000000000000008 R11: 0000000000000246 R12: 00007fef2f892f6c [ 129.630824] R13: 00007ffe9c7e631f R14: 00007fef2ccf5300 R15: 0000000000022000 [ 129.630837] [ 129.688363] WARNING: CPU: 1 PID: 3856 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 129.689060] Modules linked in: [ 129.689308] CPU: 1 PID: 3856 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220930 #1 [ 129.689905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.690755] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.691173] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.692540] RSP: 0018:ffff88803e717c48 EFLAGS: 00010006 [ 129.692948] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.693484] RDX: ffff88803e3b9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 129.694017] RBP: ffff88803e7a85c8 R08: 0000000000000005 R09: 0000000000000001 [ 129.694567] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e907000 [ 129.695112] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 129.695649] FS: 00007fef2ccf5700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 129.696247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.696692] CR2: 00005566a6cabfa8 CR3: 000000000d6d4000 CR4: 0000000000350ee0 [ 129.697234] Call Trace: [ 129.697427] [ 129.697606] ctx_sched_out+0x8f1/0xc10 [ 129.697913] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.698323] ? lock_is_held_type+0xd7/0x130 [ 129.698653] ? __perf_cgroup_move+0x160/0x160 [ 129.698999] ? set_next_entity+0x304/0x550 [ 129.699332] ? update_curr+0x267/0x740 [ 129.699636] ? lock_is_held_type+0xd7/0x130 [ 129.699975] __schedule+0xedd/0x2470 [ 129.700271] ? io_schedule_timeout+0x150/0x150 [ 129.700625] ? __x64_sys_futex_time32+0x480/0x480 [ 129.700999] schedule+0xda/0x1b0 [ 129.701267] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.701637] syscall_exit_to_user_mode+0x19/0x40 [ 129.701997] do_syscall_64+0x48/0x90 [ 129.702292] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.702687] RIP: 0033:0x7fef2f77fb19 [ 129.702966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.704307] RSP: 002b:00007fef2ccf5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.704875] RAX: 0000000000000001 RBX: 00007fef2f892f68 RCX: 00007fef2f77fb19 [ 129.705423] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fef2f892f6c [ 129.705959] RBP: 00007fef2f892f60 R08: 000000000000000e R09: 0000000000000000 [ 129.706492] R10: 0000000000000008 R11: 0000000000000246 R12: 00007fef2f892f6c [ 129.707022] R13: 00007ffe9c7e631f R14: 00007fef2ccf5300 R15: 0000000000022000 [ 129.707562] [ 129.707739] irq event stamp: 2174 [ 129.708003] hardirqs last enabled at (2173): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 129.708709] hardirqs last disabled at (2174): [] __schedule+0x1225/0x2470 [ 129.709354] softirqs last enabled at (1640): [] __irq_exit_rcu+0x11b/0x180 [ 129.710001] softirqs last disabled at (1635): [] __irq_exit_rcu+0x11b/0x180 [ 129.710637] ---[ end trace 0000000000000000 ]--- 18:55:06 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000003300)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:55:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c39703230e630302c000000000000000000"]) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 18:55:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c39703230e630302c000000000000000000"]) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 18:55:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c39703230e630302c000000000000000000"]) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 18:55:07 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x4000) openat(r0, &(0x7f0000000040)='./file1\x00', 0x100, 0x18) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd7000fedbdf050400000008002b0006000000050038000000000006002800010000000500380000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000c010}, 0x801) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r2, &(0x7f0000000840)='./file0\x00', 0x2, 0x4a) io_setup(0x7, &(0x7f0000000000)) r3 = io_uring_setup(0x13eb, &(0x7f0000000100)={0x0, 0xa306, 0x0, 0x0, 0x32e}) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="0c0000000300000134c8622bfa18946b00000000"], 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x1) [ 130.862974] loop2: detected capacity change from 0 to 208 [ 130.869327] loop2: detected capacity change from 0 to 208 [ 130.882549] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 VM DIAGNOSIS: 18:55:07 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff816cf36a RDX=ffff8880184f0000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffff88803e7a7a28 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=00007f03f4942000 R14=ffff88801a629a08 R15=00007f03f4812000 RIP=ffffffff81460815 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffd4bc8fc0 CR3=000000003e27a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000068 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803e717690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000068 R11=0000000000000001 R12=0000000000000068 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fef2ccf5700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005566a6cabfa8 CR3=000000000d6d4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fef2f8667c0 00007fef2f8667c8 YMM02=0000000000000000 0000000000000000 00007fef2f8667e0 00007fef2f8667c0 YMM03=0000000000000000 0000000000000000 00007fef2f8667c8 00007fef2f8667c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000