Warning: Permanently added '[localhost]:16834' (ECDSA) to the list of known hosts. 2022/10/02 15:01:08 fuzzer started 2022/10/02 15:01:08 dialing manager at localhost:35095 syzkaller login: [ 36.504551] cgroup: Unknown subsys name 'net' [ 36.585767] cgroup: Unknown subsys name 'rlimit' 2022/10/02 15:01:22 syscalls: 2215 2022/10/02 15:01:22 code coverage: enabled 2022/10/02 15:01:22 comparison tracing: enabled 2022/10/02 15:01:22 extra coverage: enabled 2022/10/02 15:01:22 setuid sandbox: enabled 2022/10/02 15:01:22 namespace sandbox: enabled 2022/10/02 15:01:22 Android sandbox: enabled 2022/10/02 15:01:22 fault injection: enabled 2022/10/02 15:01:22 leak checking: enabled 2022/10/02 15:01:22 net packet injection: enabled 2022/10/02 15:01:22 net device setup: enabled 2022/10/02 15:01:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 15:01:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 15:01:22 USB emulation: enabled 2022/10/02 15:01:22 hci packet injection: enabled 2022/10/02 15:01:22 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 15:01:22 802.15.4 emulation: enabled 2022/10/02 15:01:22 fetching corpus: 50, signal 28120/29932 (executing program) 2022/10/02 15:01:22 fetching corpus: 100, signal 41112/44515 (executing program) 2022/10/02 15:01:23 fetching corpus: 150, signal 45542/50542 (executing program) 2022/10/02 15:01:23 fetching corpus: 200, signal 50979/57445 (executing program) 2022/10/02 15:01:23 fetching corpus: 250, signal 56341/64270 (executing program) 2022/10/02 15:01:23 fetching corpus: 300, signal 61343/70690 (executing program) 2022/10/02 15:01:23 fetching corpus: 350, signal 65641/76347 (executing program) 2022/10/02 15:01:23 fetching corpus: 400, signal 70554/82475 (executing program) 2022/10/02 15:01:23 fetching corpus: 450, signal 76457/89500 (executing program) 2022/10/02 15:01:23 fetching corpus: 500, signal 80722/94892 (executing program) 2022/10/02 15:01:24 fetching corpus: 550, signal 85880/101096 (executing program) 2022/10/02 15:01:24 fetching corpus: 600, signal 88191/104577 (executing program) 2022/10/02 15:01:24 fetching corpus: 650, signal 92628/109960 (executing program) 2022/10/02 15:01:24 fetching corpus: 700, signal 93858/112452 (executing program) 2022/10/02 15:01:24 fetching corpus: 750, signal 97410/116977 (executing program) 2022/10/02 15:01:24 fetching corpus: 800, signal 98872/119559 (executing program) 2022/10/02 15:01:24 fetching corpus: 850, signal 101097/122810 (executing program) 2022/10/02 15:01:24 fetching corpus: 900, signal 102593/125442 (executing program) 2022/10/02 15:01:25 fetching corpus: 950, signal 104544/128420 (executing program) 2022/10/02 15:01:25 fetching corpus: 1000, signal 106194/131079 (executing program) 2022/10/02 15:01:25 fetching corpus: 1050, signal 107952/133817 (executing program) 2022/10/02 15:01:25 fetching corpus: 1100, signal 110007/136797 (executing program) 2022/10/02 15:01:25 fetching corpus: 1150, signal 112001/139690 (executing program) 2022/10/02 15:01:25 fetching corpus: 1200, signal 114198/142698 (executing program) 2022/10/02 15:01:25 fetching corpus: 1250, signal 116944/146171 (executing program) 2022/10/02 15:01:25 fetching corpus: 1300, signal 118489/148582 (executing program) 2022/10/02 15:01:26 fetching corpus: 1350, signal 121088/151871 (executing program) 2022/10/02 15:01:26 fetching corpus: 1400, signal 123373/154815 (executing program) 2022/10/02 15:01:26 fetching corpus: 1450, signal 124904/157090 (executing program) 2022/10/02 15:01:26 fetching corpus: 1500, signal 126906/159758 (executing program) 2022/10/02 15:01:26 fetching corpus: 1550, signal 128571/162129 (executing program) 2022/10/02 15:01:26 fetching corpus: 1600, signal 129437/163902 (executing program) 2022/10/02 15:01:26 fetching corpus: 1650, signal 132698/167504 (executing program) 2022/10/02 15:01:26 fetching corpus: 1700, signal 133822/169412 (executing program) 2022/10/02 15:01:26 fetching corpus: 1750, signal 135006/171342 (executing program) 2022/10/02 15:01:27 fetching corpus: 1800, signal 136693/173676 (executing program) 2022/10/02 15:01:27 fetching corpus: 1850, signal 138304/175903 (executing program) 2022/10/02 15:01:27 fetching corpus: 1900, signal 139748/178023 (executing program) 2022/10/02 15:01:27 fetching corpus: 1950, signal 141548/180377 (executing program) 2022/10/02 15:01:27 fetching corpus: 2000, signal 142434/182026 (executing program) 2022/10/02 15:01:27 fetching corpus: 2050, signal 144098/184238 (executing program) 2022/10/02 15:01:27 fetching corpus: 2100, signal 145455/186151 (executing program) 2022/10/02 15:01:27 fetching corpus: 2150, signal 146571/187965 (executing program) 2022/10/02 15:01:28 fetching corpus: 2200, signal 147855/189797 (executing program) 2022/10/02 15:01:28 fetching corpus: 2250, signal 149565/191928 (executing program) 2022/10/02 15:01:28 fetching corpus: 2300, signal 150574/193540 (executing program) 2022/10/02 15:01:28 fetching corpus: 2350, signal 151366/194988 (executing program) 2022/10/02 15:01:28 fetching corpus: 2400, signal 152469/196663 (executing program) 2022/10/02 15:01:28 fetching corpus: 2450, signal 153415/198179 (executing program) 2022/10/02 15:01:28 fetching corpus: 2500, signal 154510/199757 (executing program) 2022/10/02 15:01:28 fetching corpus: 2550, signal 155195/201159 (executing program) 2022/10/02 15:01:29 fetching corpus: 2600, signal 156599/202963 (executing program) 2022/10/02 15:01:29 fetching corpus: 2650, signal 157456/204354 (executing program) 2022/10/02 15:01:29 fetching corpus: 2700, signal 159397/206437 (executing program) 2022/10/02 15:01:29 fetching corpus: 2750, signal 160275/207782 (executing program) 2022/10/02 15:01:29 fetching corpus: 2800, signal 162166/209806 (executing program) 2022/10/02 15:01:29 fetching corpus: 2850, signal 163142/211240 (executing program) 2022/10/02 15:01:29 fetching corpus: 2900, signal 163778/212444 (executing program) 2022/10/02 15:01:30 fetching corpus: 2950, signal 164563/213714 (executing program) 2022/10/02 15:01:30 fetching corpus: 3000, signal 165174/214928 (executing program) 2022/10/02 15:01:30 fetching corpus: 3050, signal 165769/216085 (executing program) 2022/10/02 15:01:30 fetching corpus: 3100, signal 166983/217651 (executing program) 2022/10/02 15:01:30 fetching corpus: 3150, signal 167813/218971 (executing program) 2022/10/02 15:01:30 fetching corpus: 3200, signal 169067/220406 (executing program) 2022/10/02 15:01:30 fetching corpus: 3250, signal 169566/221459 (executing program) 2022/10/02 15:01:30 fetching corpus: 3300, signal 170224/222569 (executing program) 2022/10/02 15:01:30 fetching corpus: 3350, signal 171169/223833 (executing program) 2022/10/02 15:01:30 fetching corpus: 3400, signal 172131/225108 (executing program) 2022/10/02 15:01:31 fetching corpus: 3450, signal 173074/226392 (executing program) 2022/10/02 15:01:31 fetching corpus: 3500, signal 173833/227555 (executing program) 2022/10/02 15:01:31 fetching corpus: 3550, signal 174569/228696 (executing program) 2022/10/02 15:01:31 fetching corpus: 3600, signal 175731/230014 (executing program) 2022/10/02 15:01:31 fetching corpus: 3650, signal 176290/231009 (executing program) 2022/10/02 15:01:31 fetching corpus: 3700, signal 177065/232092 (executing program) 2022/10/02 15:01:31 fetching corpus: 3750, signal 177471/232986 (executing program) 2022/10/02 15:01:31 fetching corpus: 3800, signal 178430/234201 (executing program) 2022/10/02 15:01:31 fetching corpus: 3850, signal 179167/235281 (executing program) 2022/10/02 15:01:32 fetching corpus: 3900, signal 179540/236153 (executing program) 2022/10/02 15:01:32 fetching corpus: 3950, signal 180031/237084 (executing program) 2022/10/02 15:01:32 fetching corpus: 4000, signal 181093/238238 (executing program) 2022/10/02 15:01:32 fetching corpus: 4050, signal 181718/239251 (executing program) 2022/10/02 15:01:32 fetching corpus: 4100, signal 182170/240175 (executing program) 2022/10/02 15:01:32 fetching corpus: 4150, signal 182716/241059 (executing program) 2022/10/02 15:01:32 fetching corpus: 4200, signal 183957/242207 (executing program) 2022/10/02 15:01:32 fetching corpus: 4250, signal 184845/243239 (executing program) 2022/10/02 15:01:32 fetching corpus: 4300, signal 186777/244644 (executing program) 2022/10/02 15:01:33 fetching corpus: 4350, signal 187425/245559 (executing program) 2022/10/02 15:01:33 fetching corpus: 4400, signal 187820/246383 (executing program) 2022/10/02 15:01:33 fetching corpus: 4450, signal 188282/247225 (executing program) 2022/10/02 15:01:33 fetching corpus: 4500, signal 188772/248080 (executing program) 2022/10/02 15:01:33 fetching corpus: 4550, signal 189692/249048 (executing program) 2022/10/02 15:01:33 fetching corpus: 4600, signal 190353/249910 (executing program) 2022/10/02 15:01:33 fetching corpus: 4650, signal 190668/250694 (executing program) 2022/10/02 15:01:33 fetching corpus: 4700, signal 191106/251488 (executing program) 2022/10/02 15:01:34 fetching corpus: 4750, signal 191946/252417 (executing program) 2022/10/02 15:01:34 fetching corpus: 4800, signal 192342/253208 (executing program) 2022/10/02 15:01:34 fetching corpus: 4850, signal 192719/253952 (executing program) 2022/10/02 15:01:34 fetching corpus: 4900, signal 193209/254748 (executing program) 2022/10/02 15:01:34 fetching corpus: 4950, signal 194033/255633 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/256473 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/257062 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/257690 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/258334 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/258930 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/259485 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/260108 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/260700 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/261356 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/261972 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/262584 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/263214 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/263800 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/264420 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/265037 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/265651 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/266270 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/266891 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/267502 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/268094 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/268714 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/269320 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/269924 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/270569 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/271208 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/271836 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/272441 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/273089 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/273685 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/274307 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/274881 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/275508 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/276142 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/276759 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/277345 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/277957 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/278565 (executing program) 2022/10/02 15:01:34 fetching corpus: 4997, signal 194783/279157 (executing program) 2022/10/02 15:01:35 fetching corpus: 4997, signal 194783/279806 (executing program) 2022/10/02 15:01:35 fetching corpus: 4997, signal 194783/280058 (executing program) 2022/10/02 15:01:35 fetching corpus: 4997, signal 194783/280058 (executing program) 2022/10/02 15:01:37 starting 8 fuzzer processes 15:01:37 executing program 0: get_robust_list(0xffffffffffffffff, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff, 0x8000, 0x80000}) r0 = syz_open_dev$mouse(&(0x7f0000000200), 0x3, 0x121880) write$tcp_mem(r0, &(0x7f0000000240)={0x4, 0x20, 0x7fff, 0x20, 0x1}, 0x48) get_robust_list(0xffffffffffffffff, &(0x7f0000000380)=&(0x7f0000000340)={&(0x7f0000000300)={&(0x7f00000002c0)}}, &(0x7f00000003c0)=0x18) getsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x280100, 0x0) getsockname$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @dev}, &(0x7f0000000500)=0x10) r1 = accept$inet(r0, &(0x7f0000000540)={0x2, 0x0, @loopback}, &(0x7f0000000580)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000005c0)={0x3b, @local, 0x4e23, 0x3, 'lc\x00', 0x0, 0x2, 0x5a}, 0x2c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/module/hid', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) mq_timedreceive(r2, &(0x7f0000000640)=""/99, 0x63, 0xffff, &(0x7f0000000700)={r3, r4+10000000}) r5 = open(&(0x7f0000000740)='./file0\x00', 0x40, 0x1b1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000780)=0x1) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000007c0)={0x8, {{0x2, 0x4e24, @remote}}, 0x0, 0x3, [{{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e23, @local}}]}, 0x210) rmdir(&(0x7f0000000a00)='./file0/file0\x00') utime(&(0x7f0000000a40)='\x00', &(0x7f0000000a80)={0x5, 0x5}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000ac0)={0x1f, 0x3, 0x3, 0x20, 0x4, [{0x1, 0x0, 0x7, '\x00', 0x1000}, {0x0, 0x1, 0x6, '\x00', 0x400}, {0x100000001, 0x8, 0xffff, '\x00', 0x2282}, {0x40, 0x1, 0x100000000, '\x00', 0x1002}]}) mount_setattr(0xffffffffffffffff, &(0x7f0000000bc0)='./file0/file0\x00', 0x8c00, &(0x7f0000000c00)={0x10000c, 0x70, 0x0, {r2}}, 0x20) 15:01:37 executing program 1: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000080)=0x80) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = accept$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r0, 0xffffffffffffffff, r0, r2, r1, r1], 0x6) syz_io_uring_setup(0xd76, &(0x7f0000000280)={0x0, 0x6b1, 0x8, 0x0, 0x269, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/crypto\x00', 0x0, 0x0) recvmmsg(r3, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/153, 0x99}], 0x1, &(0x7f00000004c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000014c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)}], 0x1, &(0x7f00000015c0)=""/201, 0xc9}, 0x77672f5c}], 0x2, 0x20, &(0x7f0000001740)) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000001780), &(0x7f00000017c0)=@sha1={0x1, "ad3e57ab5a48fa0fd47d735b38113d00ffa8185f"}, 0x15, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001800)='/sys/module/snd_seq', 0x101000, 0x21) socketpair(0x5, 0xa, 0x3, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001880)={{0x1, 0x1, 0x18, r6, {0xee00, 0xee00}}, './file0\x00'}) r7 = accept4$packet(r4, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001900)=0x14, 0x80000) write(r7, &(0x7f0000001940)="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", 0x1000) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000002940)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000002980)=0x28) setsockopt$sock_void(r5, 0x1, 0x3f, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x2010, r3, 0x10000000) 15:01:37 executing program 2: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000140)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000240)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000280)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000002c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000340)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000380)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000400)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000440)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000480)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000004c0)) [ 65.711150] audit: type=1400 audit(1664722898.005:6): avc: denied { execmem } for pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:01:38 executing program 7: ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400104, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000080)={0x5, 0xfffffffffffeffff, 0x9, 0x104, 0xd7e}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x4) close_range(r1, r1, 0x2) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0x0, 0x0, 0x1ff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000200)={0x10001, 0x0, 0x7ff}) ioctl$TCXONC(r1, 0x540a, 0x1edc6aaa39cd99bf) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) fgetxattr(r3, &(0x7f0000000300)=@known='user.incfs.size\x00', &(0x7f0000000340)=""/10, 0xa) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000780)={0x1, 0x0, 0x12, 0xc, 0x133, &(0x7f0000000380)}) preadv(r0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/50, 0x32}, {&(0x7f0000000800)=""/77, 0x4d}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000980)=""/180, 0xb4}, {&(0x7f0000000a40)=""/134, 0x86}], 0x5, 0x1f80000, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r1) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = pidfd_getfd(r0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 15:01:38 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4050) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x19}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48802}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40082}, 0x8040) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r2, 0xa00, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x820) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000841}, 0x80) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24004001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048800}, 0x43) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r6, 0x410, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004005}, 0x54) 15:01:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "d7ddfab3eae4e1b22eab1baf58f1f87c2800ab2b"}, 0x15, 0x2) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r2}, 0x5, &(0x7f0000000180)=[0x2, 0xff, 0x3, 0x9, 0xe8d], 0x70, 0x2, [0x1, 0x4, 0x200, 0x4]}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1, 0x7, [@private=0xa010101, @empty, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2b}]}, 0x2c) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) write$binfmt_aout(r1, &(0x7f0000000280)={{0x107, 0x60, 0x80, 0x7f, 0x307, 0x5, 0x25, 0x400}, "cd13fb915e43a5397e35b70c05b28abbb385ee914b8c05456906041fb381f59ec27656bcba154a3b509e2512d080cc923b351223804fce57748b1ee97850de99b314b664f2619ba169c72a61f4f027dc826f273b736f2d7280e67a093ceca7955e489dcc23ec6b27434fc2b0417f261ac7e7f843ec9e8e266516d0a85f3870f1876675a00cc26b2b279875f69f130ce58b1aa9fbdf24837a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6b8) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000940)={0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x497770b9684b892b}}, './file0\x00'}) kcmp(0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff, r1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000009c0)={0xbc0, {{0x2, 0x8001, @broadcast}}}, 0x88) pread64(r3, &(0x7f0000000a80)=""/222, 0xde, 0x7) r4 = pidfd_getfd(r1, r2, 0x0) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000001040)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000bc0)={0x43c, 0x3f4, 0x400, 0x70bd2a, 0x25dfdbfc, {0x2, 0x1, 0x1d, [0x9, 0xfffffffe, 0x80000001, 0x37d, 0xfffffc00, 0x8001, 0x1, 0x3, 0x4d7, 0x7, 0xd45, 0xfffffff9, 0x8, 0x100, 0x5, 0x8, 0xe1, 0x800, 0x6, 0x5, 0x401, 0x400, 0x8, 0x9, 0xfffffeff, 0x5, 0xfffffff7, 0x1ff, 0x0, 0x5d, 0x8000, 0x400, 0xf2a, 0x4f1, 0x1747, 0x8, 0x7, 0x2, 0x20, 0x0, 0x7, 0x7, 0x6, 0x8, 0x8, 0x7fff, 0x10000, 0xfbf6, 0x1, 0x1c, 0x7fff, 0xffff0001, 0x3f, 0x8, 0x10000, 0x6, 0xffffffe1, 0x5, 0x0, 0x4, 0x40, 0xe5, 0x8000, 0x3f], [0x800, 0x2, 0x800, 0x466, 0x8, 0x7ff, 0x4, 0xbe, 0x7fffffff, 0x200, 0x8000, 0x9, 0x6, 0x8, 0xffff, 0x285, 0xd3, 0x7f, 0x200, 0x3ff, 0xd, 0x4, 0x4fda, 0x1, 0xfff, 0x8001, 0x3, 0x40, 0x2, 0x0, 0x2, 0x62cc, 0x7, 0x2814ccce, 0x80, 0x4, 0x200, 0x1, 0x34d, 0x72, 0x5, 0x0, 0x1, 0x7, 0x3, 0x2, 0xa828, 0x40, 0x101, 0xf, 0x5, 0x3f10, 0x1, 0x6, 0x2, 0x1000, 0x802, 0x0, 0xe177, 0x5, 0x1, 0xfffffffa, 0x5, 0x7fff], [0xba99, 0x1000, 0x2, 0x1, 0x5, 0x101, 0x100, 0x7, 0x3, 0xfffffff7, 0x3, 0xfffffff7, 0x70000000, 0xffffff81, 0x57, 0xfffffffc, 0x6, 0x80000001, 0x8001, 0x9a, 0x2, 0x81, 0x7fffffff, 0x0, 0x6, 0x4, 0xfff1, 0xfffffffd, 0x1, 0x200, 0x8, 0x7, 0x3, 0x101, 0x101, 0x1, 0xffffffff, 0x7, 0xa5f, 0x2, 0x2fe7, 0x9, 0x3e, 0xbd68, 0x2020, 0x20, 0x7, 0x20, 0x4, 0x7, 0x1f, 0x29, 0x3, 0x9, 0x5, 0x5, 0x2, 0x401, 0x34, 0x7f, 0x0, 0x0, 0x8, 0x6], [0xfffff217, 0x2adf, 0x1ff, 0x5, 0x3, 0xfffffc01, 0xffff, 0xfc, 0x9, 0x9, 0x4705, 0x80000001, 0xffff0b6b, 0x9, 0x1138da6d, 0x5d, 0x6, 0x6, 0x3, 0xff, 0x8001, 0x6, 0x1, 0x7, 0x800, 0x0, 0x7, 0x8, 0x7, 0x6, 0x6, 0x3, 0x20, 0x19c, 0x40, 0x16000000, 0xa035, 0x8, 0x9, 0xfffffeea, 0x5, 0x7, 0x1, 0x7, 0x7, 0xf7e, 0x7, 0x8, 0x4fd, 0x7ff, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x101, 0x7, 0x401, 0xffff0000, 0x836, 0x7f, 0x1b1, 0x7fff, 0x9], 0x1b, ['\x00', '\x00', '\x00', 'security.evm\x00', '+\x00', '\xe8#@\xa8\x00', '\xf8\x00', '\x00', '\x00']}, ["", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x80}, 0x4044044) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r1, {0x6, 0x7}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000001180)={'sit0\x00', &(0x7f0000001100)={'syztnl0\x00', 0x0, 0x4, 0x3f, 0x5, 0x2, 0x2, @private1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8009, 0x60, 0x7, 0x4}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000002580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, './file0\x00'}) 15:01:38 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40, 0x111) fcntl$notify(r0, 0x402, 0x8) r1 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x800, 0x40) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x3d) r2 = accept(r1, &(0x7f0000000100)=@xdp, &(0x7f0000000180)=0x80) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @private}, &(0x7f0000000340)=0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, 0xa, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffff8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x81}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x85) write$binfmt_misc(r1, &(0x7f0000000500)={'syz1', "28cac14cd4e164dab2f3788c44b5a1e3439f3987d2e9c0198a47545b1f03c11ae509c0999e654c27347b4962976f8e1fc63d48b3efdfdbbfa1f25740b62687eace6c3da8c230a2103a82242b1987612495d918dcf8dfe3089811f372"}, 0x60) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000580)={@initdev, @empty}, &(0x7f00000005c0)=0xc) r3 = accept(r1, &(0x7f0000000600)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000680)=0x80) accept4$packet(r3, 0x0, &(0x7f00000006c0), 0x400) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000700)={0x87, 0x4, 0x1, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local]}, 0x28) r4 = open(&(0x7f0000000740)='./file0/file0\x00', 0x400000, 0x44) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000007c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="7be0c4e2f48a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "97ac90bc448c759672bb4e93b7c8a67e"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe85}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "40241fea91c07f8a09caf8aa57e90f5a"}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = open_tree(r0, &(0x7f0000000940)='./file0/file0\x00', 0x48900) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000980), &(0x7f00000009c0)=0xc) 15:01:38 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'syzkaller1\x00'}) pread64(r0, &(0x7f0000000080)=""/2, 0x2, 0x8) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x3ff, 0x102) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "0ed701394bdecce972a795ab13cb302513a07697461fef32589402ded29062c05ce1abbc54c9ffb948198e9668428d58d221a6f23191c371e8568735eb5ec5b6dc3d6728b163c5030edad9de9a40479b40ba39bad60d19c2820a84d7117dfc29c4e4abc9"}, 0x68) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r2 = signalfd(r1, &(0x7f0000000180)={[0x80000000]}, 0x8) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000200)={'wg1\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000240)={0x0, 0x1000, 0x0, [0x8, 0x7fff, 0x7, 0x6, 0x5], [0x7, 0x7, 0x703, 0x200, 0xffffffffffffff7f, 0xffffffff00000000, 0x1ff, 0x1ff, 0x0, 0x1, 0x800, 0x0, 0xaf2, 0x4, 0x3, 0x400, 0x200, 0x0, 0x9, 0x3, 0xfffffffffffffff9, 0x0, 0x20, 0x6, 0x5, 0x6, 0x0, 0x6, 0x5f2, 0xfff, 0x3, 0xaf, 0x80000001, 0x1346, 0xa070, 0x7, 0x20, 0x80, 0x200, 0x12000, 0x8, 0x6, 0x8, 0xfffffffffffffaaf, 0x8, 0x8, 0xff, 0x101, 0xab3f, 0x7, 0xe7, 0xffffffffffffffff, 0x81, 0x8, 0x0, 0x1, 0x8, 0x800000000000, 0x7ff, 0xcf, 0x9, 0x4, 0x10000, 0x401, 0xffff, 0x1ff, 0x7, 0x30e, 0x8b6b, 0x1, 0x0, 0x7f, 0x6, 0x4, 0x678, 0x1, 0x8a, 0xfffffffffffffff8, 0x80, 0x171b, 0x8, 0x1, 0x3, 0x1f, 0x100000001, 0x3, 0x7fffffff, 0x7, 0x3, 0x81, 0x0, 0x4, 0x7fff, 0x7fffffff, 0x20, 0x100000001, 0x7f, 0x100000001, 0x1, 0x72, 0x3, 0x570, 0x5, 0x3, 0x4, 0x5, 0x0, 0x4, 0x3f, 0x7, 0xffffffff80000001, 0x5, 0x8, 0x1, 0x7f, 0xfffffffffffffffa, 0xadd, 0x81, 0x5, 0x4, 0x618934c5]}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x208000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f00000006c0)={0x0, 0x400000000, 0x3ff}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, r5) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000700)={'ip6gre0\x00', 0x2}) [ 67.052435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.055403] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.057230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.059235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.060900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.062972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.068585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.070022] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.074417] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.087145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.089367] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.091013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.115833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.120668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.122082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.123307] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.126145] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.127744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.129017] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.134487] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.134497] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.137081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.154678] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.160157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.162207] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.162383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.165349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.169354] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.202218] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.208723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.210769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.221730] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.223136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.227827] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.237974] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.241236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.243667] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.248232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.255713] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.257327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.260678] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.262043] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.263597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.265081] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.297315] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.298415] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.321165] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.324949] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.326001] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.328957] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.351669] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.354405] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.358903] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.370650] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.379404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.428592] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.187900] Bluetooth: hci2: command 0x0409 tx timeout [ 69.187912] Bluetooth: hci3: command 0x0409 tx timeout [ 69.251632] Bluetooth: hci1: command 0x0409 tx timeout [ 69.251654] Bluetooth: hci0: command 0x0409 tx timeout [ 69.314585] Bluetooth: hci4: command 0x0409 tx timeout [ 69.443054] Bluetooth: hci5: command 0x0409 tx timeout [ 69.443098] Bluetooth: hci6: command 0x0409 tx timeout [ 69.507648] Bluetooth: hci7: command 0x0409 tx timeout [ 71.234544] Bluetooth: hci2: command 0x041b tx timeout [ 71.235583] Bluetooth: hci3: command 0x041b tx timeout [ 71.298525] Bluetooth: hci1: command 0x041b tx timeout [ 71.299538] Bluetooth: hci0: command 0x041b tx timeout [ 71.363532] Bluetooth: hci4: command 0x041b tx timeout [ 71.490536] Bluetooth: hci6: command 0x041b tx timeout [ 71.491507] Bluetooth: hci5: command 0x041b tx timeout [ 71.554522] Bluetooth: hci7: command 0x041b tx timeout [ 73.282510] Bluetooth: hci3: command 0x040f tx timeout [ 73.282982] Bluetooth: hci2: command 0x040f tx timeout [ 73.346567] Bluetooth: hci0: command 0x040f tx timeout [ 73.347020] Bluetooth: hci1: command 0x040f tx timeout [ 73.410553] Bluetooth: hci4: command 0x040f tx timeout [ 73.538514] Bluetooth: hci5: command 0x040f tx timeout [ 73.538990] Bluetooth: hci6: command 0x040f tx timeout [ 73.602488] Bluetooth: hci7: command 0x040f tx timeout [ 75.330517] Bluetooth: hci2: command 0x0419 tx timeout [ 75.331013] Bluetooth: hci3: command 0x0419 tx timeout [ 75.394567] Bluetooth: hci1: command 0x0419 tx timeout [ 75.394989] Bluetooth: hci0: command 0x0419 tx timeout [ 75.458537] Bluetooth: hci4: command 0x0419 tx timeout [ 75.586553] Bluetooth: hci6: command 0x0419 tx timeout [ 75.586993] Bluetooth: hci5: command 0x0419 tx timeout [ 75.650490] Bluetooth: hci7: command 0x0419 tx timeout 15:02:31 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000001ac0)=0xe8) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001a00)={'nat\x00', 0x0, 0x3, 0x2f, [0x0, 0x2, 0x10000, 0x400, 0x2, 0xfffffffffffffffa], 0xa, &(0x7f0000001900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000019c0)=""/47}, &(0x7f0000001a80)=0x78) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r6, r7, 0x0) r8 = clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) process_vm_readv(r9, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/252, 0xfc}, {&(0x7f0000000140)}, {&(0x7f0000000700)=""/121, 0x79}, {&(0x7f0000000840)=""/171, 0xab}, {0x0}, {&(0x7f0000000900)=""/209, 0xd1}], 0x6, &(0x7f0000000400), 0x0, 0x0) clone3(&(0x7f0000000480)={0x100008100, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x3}, &(0x7f00000003c0)=""/147, 0x93, &(0x7f0000000240)=""/28, &(0x7f0000000300)=[r8, 0x0, r9], 0x3}, 0x58) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001700)={0x2, &(0x7f00000016c0)=[{0x6, 0x4, 0x80, 0x8}, {0x8, 0xb4, 0xff, 0x80000001}]}) sendmsg$netlink(r4, &(0x7f00000018c0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001880)=[{&(0x7f0000000280)={0x143c, 0x11, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x5, 0x0, 0x0, @uid=r5}, @generic="5b631e09b7c40f294ca7914ea01e2c561d59b1807822223af8066d428f97d40c7076d957a369a1eefdd10ff130b33e6e39d5856e7d2f9f5ef64744a906963708984776d9274fc99b19357dfc22195dd24e00c2ecb52c6f945737a89ecdd3fd6ed0492b8e556cee401724be1ba6e5f3ece7487c152ae108a45da92c11fd2212a866cbfcf0fd7c4470176c8be26570c7e967ef2f652014a54e9be675e68fc9ade0fe279c31829f03b637430c4d329fb74b10cd1d7863ffb5c4a5c4618ca2ed81395a1ca3b25654294864f001a4c3f81f6d4aed245aae45ea9145", @nested={0x20, 0x6c, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @uid=r7}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="0c880d935aa16cc142e47f2db0bfca678d8d238c6b71430aac12777668a017bf", @nested={0x1121, 0x86, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @pid=r9}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @generic="3e08e56e24bd6f22e982edc4316642c9ba3aef462120fd8cda6b7c3c0226bae3cc92546c65f83bccb07b7b551084dc2c504902c4d93e", @generic="2828ffb4c0d16fc0486e817ebcd096af57d2c9732f38bc49921bf6b9b9bcdade896cc31b806bb0c6b2969c51f606dda866ee614942d981b55d9619506a7a0f7b03097a82916d66baff94a06c66a36dc3aa0eb15d33ef1e7fe4e8ba44da10fd6b8889771319947f0dc29f9e74dbcef695fadac288ac3f262e82ffc4a445ebad9f312c3e239c10", @generic="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", @generic="665456283a1f65d25a93e29dc3e4590bf3fae4f9108fb6f0e83de5690fa7900290d69be21ff25ad03cdd97bff6f35d93a99df83e9884070000226881888bcc9a90381ce7aa"]}, @nested={0x1e1, 0x15, 0x0, 0x1, [@generic="9204a5a405f96cb7c6fe252837c5ff12ac2394c6273710882aa832e7b402465ad3c8193bf84b04bc79ed93e690c8eba8f616ce887a721d66f10984926201521cdcc7a3fc6c451dc8fbc0bbe897fde5217baa32dda4a3711a5557ea303d9ae5e7b85434f4d9f87ef2d575187a51a24a9ced4c31da2a0a4cea95c845f90f4d37608a867d2a80d30dad64ad1d0ecbf5f4fbedb7719952d10d714f385fd63ee718ac3a2b194ae073b9c9f429b338cc846888daea9727062a91a8bf88901be1265caa669a5a69f4621c9e79dd29b56fc7bb0c7a544fd863f1c3be8997f5ca9e823c395de9e4734694", @typed={0x11, 0x8f, 0x0, 0x0, @str='/dev/net/tun\x00'}, @generic="8d1b831f6276ecf774034201b210ad7a7eef3bed233f8c8083f80b2ccaef3f8b88c8952329c0c7cbc6f0ec26de034207c748ba0b7348b07778a2e2333e94a561b19c8bae69083cbf885f84d63913916e5768a713ecd728488a434360075909783888036c", @generic="98d193518695ae0da9b57c8fcfabcca99eebedadeb2fe863f141bab60c50d9f771b4ddbff20f927229039d805e5f97468570a4eb538366d66a0580199939f7c992e1744ab83eea4ac79e5d938bbc425fc947aa06a9f667fac1c2033cb129757c93080e2117a1", @typed={0x9, 0x93, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="64cd99382a"]}]}, 0x143c}, {&(0x7f0000001740)={0xcc, 0x37, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x11, 0x5e, 0x0, 0x0, @str='/dev/net/tun\x00'}, @generic="13aefc1408d4a89a305897b3ff5ca9ebb94abd62bb9b02fdbba64eb41040ee0ffdaae33461fc27ea3d68253ea224246957eec9af49182141111e997ee338b82f1c48e9050d537630ff87299586c365ab7eb6e54cbde51d32e025c1b660cef0f8bfb5c726283467adbaa74af3e1a1e21aabf48e7b8a048f90f5a704f1c29998a24d6b8f4fefacf3330140d482d0f4afb45d", @typed={0x8, 0x3b, 0x0, 0x0, @fd=r10}, @typed={0xc, 0x24, 0x0, 0x0, @u64=0x7}]}, 0xcc}, {&(0x7f0000001840)={0x20, 0x13, 0x20, 0x70bd29, 0x25dfdbfd, "", [@typed={0xd, 0x5b, 0x0, 0x0, @str='{]:+,!{/{'}]}, 0x20}], 0x3}, 0x44) [ 118.869087] device syz_tun entered promiscuous mode 15:02:31 executing program 6: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x6d030, 0xffffffffffffffff, 0x73b13000) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x400000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) [ 118.929012] device syz_tun left promiscuous mode [ 118.941038] device syz_tun entered promiscuous mode 15:02:31 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000011c0)={0x0, 0x2, 0x0, 0x2}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000014}, 0x20000080) [ 118.996833] device syz_tun left promiscuous mode 15:02:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000380)='./file1\x00', 0x2, 0x30) sendfile(r0, r0, 0x0, 0x100000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x40, 0x5, 0x32, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7, 0x7800, 0x10001}}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2080000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x6, 0x5, 0x1, 0x3f, 0x0, 0x3ff, 0x50000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x1, @perf_config_ext={0x1, 0x7fff}, 0xa8, 0x1, 0x20, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x4, 0x0, 0xdeb}, 0x0, 0x3, r3, 0x3) 15:02:31 executing program 6: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = syz_io_uring_setup(0xeaf, &(0x7f0000000200)={0x0, 0x40000000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x7fffdf003000, 0x0, 0x4002012, r1, 0x10000000) 15:02:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc020660b, &(0x7f0000000080)) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000000c0)={0x6, 0xffffffff}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000040)={&(0x7f0000000000)=""/35, 0x23, 0x0, 0x9}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)={{0x10b, 0x7f, 0x81, 0x9a, 0x12, 0x7, 0x2ae, 0x44e}, "750e52113bac342c9f1f3fe8a2214518450afa0703a067ede99cc7f387f0592d1f44de793c5341a6cc8f6797c623b445c47aeb2c69f3046513f5f2888bffb87ae61b8ed0c0a95f281fc96dd482b8299ecbf261868d883b3e558af152a1c2efe606151557e9f73a7e3e022bab5fec50a17b37e381693fcc2d8fc1b6e7cda801f85ac4e060fd91f5cf60375d1badec330d975dd6b146063d439f5507", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5bb) [ 119.089619] audit: type=1400 audit(1664722951.383:7): avc: denied { open } for pid=3911 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.091123] audit: type=1400 audit(1664722951.383:8): avc: denied { kernel } for pid=3911 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.106324] ------------[ cut here ]------------ [ 119.106345] [ 119.106348] ====================================================== [ 119.106352] WARNING: possible circular locking dependency detected [ 119.106356] 6.0.0-rc7-next-20220930 #1 Not tainted [ 119.106362] ------------------------------------------------------ [ 119.106366] syz-executor.5/3913 is trying to acquire lock: [ 119.106372] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 119.106416] [ 119.106416] but task is already holding lock: [ 119.106419] ffff88800dd9b020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.106446] [ 119.106446] which lock already depends on the new lock. [ 119.106446] [ 119.106449] [ 119.106449] the existing dependency chain (in reverse order) is: [ 119.106452] [ 119.106452] -> #3 (&ctx->lock){....}-{2:2}: [ 119.106466] _raw_spin_lock+0x2a/0x40 [ 119.106478] __perf_event_task_sched_out+0x53b/0x18d0 [ 119.106489] __schedule+0xedd/0x2470 [ 119.106503] schedule+0xda/0x1b0 [ 119.106516] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.106528] syscall_exit_to_user_mode+0x19/0x40 [ 119.106542] do_syscall_64+0x48/0x90 [ 119.106559] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.106572] [ 119.106572] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 119.106586] _raw_spin_lock_nested+0x30/0x40 [ 119.106596] raw_spin_rq_lock_nested+0x1e/0x30 [ 119.106610] task_fork_fair+0x63/0x4d0 [ 119.106626] sched_cgroup_fork+0x3d0/0x540 [ 119.106641] copy_process+0x4183/0x6e20 [ 119.106652] kernel_clone+0xe7/0x890 [ 119.106661] user_mode_thread+0xad/0xf0 [ 119.106671] rest_init+0x24/0x250 [ 119.106683] arch_call_rest_init+0xf/0x14 [ 119.106701] start_kernel+0x4c6/0x4eb [ 119.106716] secondary_startup_64_no_verify+0xe0/0xeb [ 119.106730] [ 119.106730] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 119.106744] _raw_spin_lock_irqsave+0x39/0x60 [ 119.106754] try_to_wake_up+0xab/0x1930 [ 119.106767] up+0x75/0xb0 [ 119.106781] __up_console_sem+0x6e/0x80 [ 119.106797] console_unlock+0x46a/0x590 [ 119.106816] do_con_write+0xc05/0x1d50 [ 119.106827] con_write+0x21/0x40 [ 119.106836] n_tty_write+0x4d4/0xfe0 [ 119.106848] file_tty_write.constprop.0+0x455/0x8a0 [ 119.106860] vfs_write+0x9c3/0xd90 [ 119.106876] ksys_write+0x127/0x250 [ 119.106891] do_syscall_64+0x3b/0x90 [ 119.106908] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.106920] [ 119.106920] -> #0 ((console_sem).lock){....}-{2:2}: [ 119.106934] __lock_acquire+0x2a02/0x5e70 [ 119.106951] lock_acquire+0x1a2/0x530 [ 119.106966] _raw_spin_lock_irqsave+0x39/0x60 [ 119.106977] down_trylock+0xe/0x70 [ 119.106991] __down_trylock_console_sem+0x3b/0xd0 [ 119.107007] vprintk_emit+0x16b/0x560 [ 119.107023] vprintk+0x84/0xa0 [ 119.107038] _printk+0xba/0xf1 [ 119.107050] report_bug.cold+0x72/0xab [ 119.107066] handle_bug+0x3c/0x70 [ 119.107082] exc_invalid_op+0x14/0x50 [ 119.107099] asm_exc_invalid_op+0x16/0x20 [ 119.107111] group_sched_out.part.0+0x2c7/0x460 [ 119.107129] ctx_sched_out+0x8f1/0xc10 [ 119.107145] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.107156] __schedule+0xedd/0x2470 [ 119.107169] schedule+0xda/0x1b0 [ 119.107182] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.107193] syscall_exit_to_user_mode+0x19/0x40 [ 119.107205] do_syscall_64+0x48/0x90 [ 119.107222] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.107234] [ 119.107234] other info that might help us debug this: [ 119.107234] [ 119.107237] Chain exists of: [ 119.107237] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 119.107237] [ 119.107252] Possible unsafe locking scenario: [ 119.107252] [ 119.107254] CPU0 CPU1 [ 119.107256] ---- ---- [ 119.107259] lock(&ctx->lock); [ 119.107264] lock(&rq->__lock); [ 119.107271] lock(&ctx->lock); [ 119.107277] lock((console_sem).lock); [ 119.107283] [ 119.107283] *** DEADLOCK *** [ 119.107283] [ 119.107285] 2 locks held by syz-executor.5/3913: [ 119.107291] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 119.107320] #1: ffff88800dd9b020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.107346] [ 119.107346] stack backtrace: [ 119.107349] CPU: 0 PID: 3913 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 119.107362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 119.107377] Call Trace: [ 119.107381] [ 119.107385] dump_stack_lvl+0x8b/0xb3 [ 119.107403] check_noncircular+0x263/0x2e0 [ 119.107420] ? format_decode+0x26c/0xb50 [ 119.107436] ? print_circular_bug+0x450/0x450 [ 119.107453] ? simple_strtoul+0x30/0x30 [ 119.107469] ? format_decode+0x26c/0xb50 [ 119.107486] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 119.107503] __lock_acquire+0x2a02/0x5e70 [ 119.107525] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 119.107547] lock_acquire+0x1a2/0x530 [ 119.107563] ? down_trylock+0xe/0x70 [ 119.107580] ? lock_release+0x750/0x750 [ 119.107601] ? vprintk+0x84/0xa0 [ 119.107618] _raw_spin_lock_irqsave+0x39/0x60 [ 119.107630] ? down_trylock+0xe/0x70 [ 119.107645] down_trylock+0xe/0x70 [ 119.107661] ? vprintk+0x84/0xa0 [ 119.107678] __down_trylock_console_sem+0x3b/0xd0 [ 119.107695] vprintk_emit+0x16b/0x560 [ 119.107713] vprintk+0x84/0xa0 [ 119.107731] _printk+0xba/0xf1 [ 119.107742] ? record_print_text.cold+0x16/0x16 [ 119.107758] ? report_bug.cold+0x66/0xab [ 119.107776] ? group_sched_out.part.0+0x2c7/0x460 [ 119.107794] report_bug.cold+0x72/0xab [ 119.107812] handle_bug+0x3c/0x70 [ 119.107829] exc_invalid_op+0x14/0x50 [ 119.107847] asm_exc_invalid_op+0x16/0x20 [ 119.107860] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.107881] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.107892] RSP: 0018:ffff8880409ffc48 EFLAGS: 00010006 [ 119.107901] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.107909] RDX: ffff8880189c8000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 119.107916] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 119.107924] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800dd9b000 [ 119.107931] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 119.107942] ? group_sched_out.part.0+0x2c7/0x460 [ 119.107962] ? group_sched_out.part.0+0x2c7/0x460 [ 119.107982] ctx_sched_out+0x8f1/0xc10 [ 119.108001] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.108015] ? lock_is_held_type+0xd7/0x130 [ 119.108029] ? __perf_cgroup_move+0x160/0x160 [ 119.108039] ? set_next_entity+0x304/0x550 [ 119.108057] ? update_curr+0x267/0x740 [ 119.108075] ? lock_is_held_type+0xd7/0x130 [ 119.108089] __schedule+0xedd/0x2470 [ 119.108106] ? io_schedule_timeout+0x150/0x150 [ 119.108122] ? rcu_read_lock_sched_held+0x3e/0x80 [ 119.108143] schedule+0xda/0x1b0 [ 119.108158] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.108170] syscall_exit_to_user_mode+0x19/0x40 [ 119.108184] do_syscall_64+0x48/0x90 [ 119.108201] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.108214] RIP: 0033:0x7fb8868ddb19 [ 119.108222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.108233] RSP: 002b:00007fb883e53218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.108244] RAX: 0000000000000001 RBX: 00007fb8869f0f68 RCX: 00007fb8868ddb19 [ 119.108251] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb8869f0f6c [ 119.108258] RBP: 00007fb8869f0f60 R08: 000000000000000e R09: 0000000000000000 [ 119.108265] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fb8869f0f6c [ 119.108272] R13: 00007ffd68766e2f R14: 00007fb883e53300 R15: 0000000000022000 [ 119.108285] [ 119.163949] WARNING: CPU: 0 PID: 3913 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 119.164633] Modules linked in: [ 119.164870] CPU: 0 PID: 3913 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 119.165463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 119.166283] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.166697] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.168033] RSP: 0018:ffff8880409ffc48 EFLAGS: 00010006 [ 119.168428] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.168952] RDX: ffff8880189c8000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 119.169474] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 119.169993] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800dd9b000 [ 119.170509] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 119.171031] FS: 00007fb883e53700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 119.171628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.172053] CR2: 00007fdfbe322f64 CR3: 0000000040940000 CR4: 0000000000350ef0 [ 119.172572] Call Trace: [ 119.172769] [ 119.172948] ctx_sched_out+0x8f1/0xc10 [ 119.173248] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.173637] ? lock_is_held_type+0xd7/0x130 [ 119.173962] ? __perf_cgroup_move+0x160/0x160 [ 119.174297] ? set_next_entity+0x304/0x550 [ 119.174617] ? update_curr+0x267/0x740 [ 119.174914] ? lock_is_held_type+0xd7/0x130 [ 119.175237] __schedule+0xedd/0x2470 [ 119.175535] ? io_schedule_timeout+0x150/0x150 [ 119.175880] ? rcu_read_lock_sched_held+0x3e/0x80 [ 119.176254] schedule+0xda/0x1b0 [ 119.176516] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.176886] syscall_exit_to_user_mode+0x19/0x40 [ 119.177241] do_syscall_64+0x48/0x90 [ 119.177527] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.177910] RIP: 0033:0x7fb8868ddb19 [ 119.178188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.179520] RSP: 002b:00007fb883e53218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.180074] RAX: 0000000000000001 RBX: 00007fb8869f0f68 RCX: 00007fb8868ddb19 [ 119.180594] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb8869f0f6c [ 119.181112] RBP: 00007fb8869f0f60 R08: 000000000000000e R09: 0000000000000000 [ 119.181630] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fb8869f0f6c [ 119.182155] R13: 00007ffd68766e2f R14: 00007fb883e53300 R15: 0000000000022000 [ 119.182679] [ 119.182855] irq event stamp: 938 [ 119.183100] hardirqs last enabled at (937): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 119.183800] hardirqs last disabled at (938): [] __schedule+0x1225/0x2470 [ 119.184408] softirqs last enabled at (384): [] __irq_exit_rcu+0x11b/0x180 [ 119.185035] softirqs last disabled at (265): [] __irq_exit_rcu+0x11b/0x180 [ 119.185663] ---[ end trace 0000000000000000 ]--- 15:02:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x1ff, 0x1, 0x1ff, 0x3ff}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r2, r4, 0x0, 0xffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @broadcast}, 0x10) syz_open_dev$vcsn(&(0x7f00000001c0), 0x7, 0x22280) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x81, 0x0, 0x54, @loopback, @ipv4={'\x00', '\xff\xff', @dev}, 0x40, 0x80, 0x7ff, 0x32ee}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fbdbdf25100000004400018008000300000700001400020076657468315f746f5f7465616d000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="2c00018014000200766c0000000000000014000200767863616e310000000000000000000000000000000093fd412817309e4aa1393efebba4da251a5c67e4bfab8fe607500244ed8f7352461df73b985ed82bb4e028ca597b8c2806e4b48b42bb5ae69051b60bd22125b025b05298c0a6479354f403354a212dab24993c819228e3e798663a5e03198a6d7bc5f49e978170bae22fca6c0f1f"], 0x84}, 0x1, 0x0, 0x0, 0x2000c011}, 0x20000015) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r6, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0xfffffffffffffffc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x0, 0x0, 0x200480c, &(0x7f0000000400)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, 0x0) 15:02:31 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000100)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000240)={0x0, 0x8, [0x1, 0xebb, 0x7fffffff, 0x6, 0x0, 0x3]}) io_setup(0x3ff, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7b, 0x1}, 0x7) io_submit(r2, 0x1, &(0x7f0000001340)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x200000}]) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESDEC, @ANYBLOB]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = getpgid(0xffffffffffffffff) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="0066696c65bd00"]) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x200, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x0, 0x7fffffff}, 0x802c, 0x5d4, 0xfffffff7, 0x7, 0x7, 0xa166, 0x1f49, 0x0, 0x101, 0x0, 0x2}, r5, 0xe, r6, 0x2) dup2(0xffffffffffffffff, r4) [ 119.279325] audit: type=1400 audit(1664722951.573:9): avc: denied { write } for pid=3926 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.333306] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 119.364537] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 119.368001] syz-executor.6 (3925) used greatest stack depth: 23704 bytes left VM DIAGNOSIS: 15:02:31 Registers: info registers vcpu 0 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff8880409ff690 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006f R11=0000000000000001 R12=000000000000006f R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb883e53700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdfbe322f64 CR3=0000000040940000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fb8869c47c0 00007fb8869c47c8 YMM02=0000000000000000 0000000000000000 00007fb8869c47e0 00007fb8869c47c0 YMM03=0000000000000000 0000000000000000 00007fb8869c47c8 00007fb8869c47c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88804067fae8 RCX=0000000000000000 RDX=1ffff11001011580 RSI=ffffffff84139707 RDI=ffff88800808ac00 RBP=00000000000002bf RSP=ffff88804067fa20 R8 =0000000000000007 R9 =0000000000001000 R10=ffff88800808ac02 R11=0000000000000001 R12=ffff88800808ac02 R13=ffff88804067fb00 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff84139721 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8dfafd1540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8dfb47f020 CR3=00000000103a0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffff00ffffffffff ffffffffffff00ff YMM02=0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000470035 YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000