Warning: Permanently added '[localhost]:6070' (ECDSA) to the list of known hosts. 2022/10/05 15:03:30 fuzzer started 2022/10/05 15:03:30 dialing manager at localhost:37193 syzkaller login: [ 44.257499] cgroup: Unknown subsys name 'net' [ 44.384451] cgroup: Unknown subsys name 'rlimit' 2022/10/05 15:03:44 syscalls: 2215 2022/10/05 15:03:44 code coverage: enabled 2022/10/05 15:03:44 comparison tracing: enabled 2022/10/05 15:03:44 extra coverage: enabled 2022/10/05 15:03:44 setuid sandbox: enabled 2022/10/05 15:03:44 namespace sandbox: enabled 2022/10/05 15:03:44 Android sandbox: enabled 2022/10/05 15:03:44 fault injection: enabled 2022/10/05 15:03:44 leak checking: enabled 2022/10/05 15:03:44 net packet injection: enabled 2022/10/05 15:03:44 net device setup: enabled 2022/10/05 15:03:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/05 15:03:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/05 15:03:44 USB emulation: enabled 2022/10/05 15:03:44 hci packet injection: enabled 2022/10/05 15:03:44 wifi device emulation: failed to parse kernel version (6.0.0-next-20221005) 2022/10/05 15:03:44 802.15.4 emulation: enabled 2022/10/05 15:03:44 fetching corpus: 50, signal 24192/25964 (executing program) 2022/10/05 15:03:44 fetching corpus: 100, signal 32511/35863 (executing program) 2022/10/05 15:03:44 fetching corpus: 150, signal 40261/45040 (executing program) 2022/10/05 15:03:44 fetching corpus: 200, signal 48894/54935 (executing program) 2022/10/05 15:03:45 fetching corpus: 250, signal 53171/60461 (executing program) 2022/10/05 15:03:45 fetching corpus: 300, signal 58581/66962 (executing program) 2022/10/05 15:03:45 fetching corpus: 350, signal 61545/71087 (executing program) 2022/10/05 15:03:45 fetching corpus: 400, signal 68625/78915 (executing program) 2022/10/05 15:03:45 fetching corpus: 450, signal 71950/83216 (executing program) 2022/10/05 15:03:45 fetching corpus: 500, signal 75369/87562 (executing program) 2022/10/05 15:03:45 fetching corpus: 550, signal 80192/93041 (executing program) 2022/10/05 15:03:45 fetching corpus: 600, signal 86238/99476 (executing program) 2022/10/05 15:03:45 fetching corpus: 650, signal 88478/102497 (executing program) 2022/10/05 15:03:46 fetching corpus: 700, signal 89700/104631 (executing program) 2022/10/05 15:03:46 fetching corpus: 750, signal 93102/108563 (executing program) 2022/10/05 15:03:46 fetching corpus: 800, signal 94398/110732 (executing program) 2022/10/05 15:03:46 fetching corpus: 850, signal 97315/114184 (executing program) 2022/10/05 15:03:46 fetching corpus: 900, signal 98895/116473 (executing program) 2022/10/05 15:03:46 fetching corpus: 950, signal 99989/118318 (executing program) 2022/10/05 15:03:46 fetching corpus: 1000, signal 102473/121230 (executing program) 2022/10/05 15:03:46 fetching corpus: 1050, signal 104253/123532 (executing program) 2022/10/05 15:03:46 fetching corpus: 1100, signal 105913/125715 (executing program) 2022/10/05 15:03:47 fetching corpus: 1150, signal 107626/127930 (executing program) 2022/10/05 15:03:47 fetching corpus: 1200, signal 108930/129775 (executing program) 2022/10/05 15:03:47 fetching corpus: 1250, signal 112592/133360 (executing program) 2022/10/05 15:03:47 fetching corpus: 1300, signal 114325/135490 (executing program) 2022/10/05 15:03:47 fetching corpus: 1350, signal 116332/137778 (executing program) 2022/10/05 15:03:47 fetching corpus: 1400, signal 118129/139818 (executing program) 2022/10/05 15:03:47 fetching corpus: 1450, signal 119422/141520 (executing program) 2022/10/05 15:03:47 fetching corpus: 1500, signal 120884/143305 (executing program) 2022/10/05 15:03:48 fetching corpus: 1550, signal 122230/144996 (executing program) 2022/10/05 15:03:48 fetching corpus: 1600, signal 125266/147852 (executing program) 2022/10/05 15:03:48 fetching corpus: 1650, signal 126530/149412 (executing program) 2022/10/05 15:03:48 fetching corpus: 1700, signal 128613/151463 (executing program) 2022/10/05 15:03:48 fetching corpus: 1750, signal 129487/152692 (executing program) 2022/10/05 15:03:48 fetching corpus: 1800, signal 130682/154096 (executing program) 2022/10/05 15:03:48 fetching corpus: 1850, signal 131603/155331 (executing program) 2022/10/05 15:03:48 fetching corpus: 1900, signal 133847/157355 (executing program) 2022/10/05 15:03:49 fetching corpus: 1950, signal 134753/158516 (executing program) 2022/10/05 15:03:49 fetching corpus: 2000, signal 136083/159860 (executing program) 2022/10/05 15:03:49 fetching corpus: 2050, signal 137373/161267 (executing program) 2022/10/05 15:03:49 fetching corpus: 2100, signal 138703/162649 (executing program) 2022/10/05 15:03:49 fetching corpus: 2150, signal 140178/164027 (executing program) 2022/10/05 15:03:49 fetching corpus: 2200, signal 140864/164977 (executing program) 2022/10/05 15:03:49 fetching corpus: 2250, signal 141334/165809 (executing program) 2022/10/05 15:03:49 fetching corpus: 2300, signal 142448/166961 (executing program) 2022/10/05 15:03:49 fetching corpus: 2350, signal 143171/167832 (executing program) 2022/10/05 15:03:49 fetching corpus: 2400, signal 143819/168663 (executing program) 2022/10/05 15:03:50 fetching corpus: 2450, signal 144523/169537 (executing program) 2022/10/05 15:03:50 fetching corpus: 2500, signal 145307/170472 (executing program) 2022/10/05 15:03:50 fetching corpus: 2550, signal 146409/171522 (executing program) 2022/10/05 15:03:50 fetching corpus: 2600, signal 148067/172794 (executing program) 2022/10/05 15:03:50 fetching corpus: 2650, signal 149066/173712 (executing program) 2022/10/05 15:03:50 fetching corpus: 2700, signal 149893/174529 (executing program) 2022/10/05 15:03:50 fetching corpus: 2750, signal 150611/175309 (executing program) 2022/10/05 15:03:50 fetching corpus: 2800, signal 151460/176134 (executing program) 2022/10/05 15:03:50 fetching corpus: 2850, signal 152073/176848 (executing program) 2022/10/05 15:03:51 fetching corpus: 2900, signal 152889/177642 (executing program) 2022/10/05 15:03:51 fetching corpus: 2950, signal 154493/178716 (executing program) 2022/10/05 15:03:51 fetching corpus: 3000, signal 154894/179270 (executing program) 2022/10/05 15:03:51 fetching corpus: 3050, signal 156073/180162 (executing program) 2022/10/05 15:03:51 fetching corpus: 3100, signal 157015/180926 (executing program) 2022/10/05 15:03:51 fetching corpus: 3150, signal 157545/181485 (executing program) 2022/10/05 15:03:51 fetching corpus: 3200, signal 158792/182267 (executing program) 2022/10/05 15:03:51 fetching corpus: 3250, signal 159647/182947 (executing program) 2022/10/05 15:03:51 fetching corpus: 3300, signal 160579/183619 (executing program) 2022/10/05 15:03:52 fetching corpus: 3350, signal 161696/184351 (executing program) 2022/10/05 15:03:52 fetching corpus: 3400, signal 162510/184944 (executing program) 2022/10/05 15:03:52 fetching corpus: 3450, signal 163834/185645 (executing program) 2022/10/05 15:03:52 fetching corpus: 3500, signal 164394/186148 (executing program) 2022/10/05 15:03:52 fetching corpus: 3550, signal 164926/186579 (executing program) 2022/10/05 15:03:52 fetching corpus: 3600, signal 166272/187245 (executing program) 2022/10/05 15:03:52 fetching corpus: 3650, signal 167758/187907 (executing program) 2022/10/05 15:03:52 fetching corpus: 3700, signal 168561/188365 (executing program) 2022/10/05 15:03:52 fetching corpus: 3750, signal 168935/188712 (executing program) 2022/10/05 15:03:52 fetching corpus: 3800, signal 169955/189181 (executing program) 2022/10/05 15:03:53 fetching corpus: 3850, signal 170438/189562 (executing program) 2022/10/05 15:03:53 fetching corpus: 3900, signal 171175/189988 (executing program) 2022/10/05 15:03:53 fetching corpus: 3950, signal 171879/190349 (executing program) 2022/10/05 15:03:53 fetching corpus: 4000, signal 172836/190881 (executing program) 2022/10/05 15:03:53 fetching corpus: 4050, signal 173349/191146 (executing program) 2022/10/05 15:03:53 fetching corpus: 4100, signal 174290/191455 (executing program) 2022/10/05 15:03:53 fetching corpus: 4150, signal 174977/191783 (executing program) 2022/10/05 15:03:53 fetching corpus: 4200, signal 175486/192038 (executing program) 2022/10/05 15:03:53 fetching corpus: 4250, signal 176087/192324 (executing program) 2022/10/05 15:03:53 fetching corpus: 4300, signal 176871/192602 (executing program) 2022/10/05 15:03:53 fetching corpus: 4350, signal 177388/192837 (executing program) 2022/10/05 15:03:54 fetching corpus: 4400, signal 177865/193083 (executing program) 2022/10/05 15:03:54 fetching corpus: 4450, signal 178645/193315 (executing program) 2022/10/05 15:03:54 fetching corpus: 4500, signal 179146/193505 (executing program) 2022/10/05 15:03:54 fetching corpus: 4550, signal 180444/193767 (executing program) 2022/10/05 15:03:54 fetching corpus: 4600, signal 181223/193940 (executing program) 2022/10/05 15:03:54 fetching corpus: 4650, signal 181758/194113 (executing program) 2022/10/05 15:03:54 fetching corpus: 4700, signal 182413/194344 (executing program) 2022/10/05 15:03:54 fetching corpus: 4750, signal 182683/194490 (executing program) 2022/10/05 15:03:54 fetching corpus: 4800, signal 184113/194622 (executing program) 2022/10/05 15:03:54 fetching corpus: 4850, signal 184934/194685 (executing program) 2022/10/05 15:03:55 fetching corpus: 4900, signal 185252/194690 (executing program) 2022/10/05 15:03:55 fetching corpus: 4904, signal 185315/194690 (executing program) 2022/10/05 15:03:55 fetching corpus: 4904, signal 185315/194690 (executing program) 2022/10/05 15:03:57 starting 8 fuzzer processes 15:03:57 executing program 1: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="248e6a7751624ff88a8cf0cb0ec6301a8a4bda8a3e5cd25cf1467e21b1e16e548dcc51420a67279b23d3cc9b0d267744e934e0a7e766474f8ed1a083d927bc9d18e869c0258e83c457df47ce7f7e", 0x4e}, {&(0x7f00000000c0)="b944fc0cadc7bdff403564f03c80f63d7a56d89980217d8efa6fa08397ec70a5e6929a5d4683d15d712ac6da6dd68bb7110654aa5a1360d195edf0829650cbb4aca9a5faab5c17e2c19ffd4b21648dc8b343fa1d0f8399d8fff6f79a569884c006cd21e8dc10eba214c09377e4b648f35dc577acda445cb1a1410f9509f0a1edb0c84caff21cbe6b58e24ebc2d4688e2921c262454c9e09d3f229d21a5fab5e2fb40dd3fa4fb5eb817ceceb2a34391fc5644c40f4466dad6dd4eac8fc59c5c9d07fbcab3e1e664", 0xc7}, {&(0x7f00000001c0)="9f5bd6abfc4b22ec2c", 0x9}, {&(0x7f0000000200)="27fc7f50a7c731d0c5b9f254739377fa4ee5188ac1c80e83cf747732d6a25d75e02287c6f0a52aebf7785d7e940e78528a53bcf15d2821f79ee1e68c42422f7f965bef3927f98f6f0c3678e6ae1d5281de3dc5d782a070bc5fc31104e0bd8e6369a5c1f01567161cbd5362", 0x6b}, {&(0x7f0000000280)="b64f4a6c43e4253cac7bdf8a60b335c1dec5fe16c0af0e1aadd15411ad57edbda4b0d257d08a34ef29ca2da69e4cdc82323afbdce81730f276e7d8c78f6ec6b6da754cfbc16e131322074c4895f6a0bd6ec61f2f36c334b9d501e4f950cc6b073c4e8fc7510c09651ba7f3e48a65bfce52b0fa28a459cd242b446f136b6a97a5da7605a8132983a995dd104039db83d964c7a2f011c1cd5cd58389968e86caf1b5c3fbdf44599047260009176835e18e459ec29bf03f1d7b8740675a85dd50023749e9a80ac16f721e781085e3d4d0f65e71dc1743", 0xd5}, {&(0x7f0000000380)="583b82eabc71ca9f148c70dcd910ea0968e4fcd888bbf11544eea4b10a60e5a917b5a693", 0x24}], 0x6, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x1, [{@empty, 0x401}]}, @rr={0x7, 0x13, 0x73, [@empty, @empty, @multicast2, @loopback]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x95, [@loopback]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x110}, 0x40000) r0 = openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x101042, 0x110) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000600)={@desc={0x1, 0x0, @desc3}, 0x10, 0x0, '\x00', @d}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0xc200, 0x0) sendmsg$sock(r1, &(0x7f0000000d80)={&(0x7f0000000940)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000009c0)="d4bc3ccb29f32ce6291dc57a5a49bce501780136eaf4281a2d93245132af77e3ce641b113a859ca75e292511a0ef621ff7b378741e30baa6da87b517a243efbd5f03a448107e883b5d801918f638866faa595c1c1608ba865502fc65b9cf7114a78ac70eee9d2544781cac27fdcf11199c6990dc4ebc27727476ef2a078e2b5d2df719f138cf2a2c4606458e2e81d6da1a3b26", 0x93}, {&(0x7f0000000a80)="9ab33bc63ca098f1e73632e916fe36e093e67f60b7a943f93c155269be071952fb8757b5e81ebce76e4a5db2470c4896dd34c06d6a1614c73684cbfb3237e21d042e2da82835", 0x46}, {&(0x7f0000000b00)="6fb933f07a60e7131fbb4f", 0xb}, {&(0x7f0000000b40)="ec7980b34e7eee40b95959ec152aa1dbf81c061ccd49bdc8fe1de34406240e8a9407d22fc5fc5946b1349341affa167d9292a68e0b3a71a8086c38a01067f448902053fa11ed1b3593c11e911a9af0b0b47bd2fcd1c3637e8614b67f6343a72de732936f696489f128332ece0139055ffb1677aaf09e27593abcf02b1325348a124a193e5a9c2a", 0x87}, {&(0x7f0000000c00)="68dd467a6c0a876bd658e98e3027e9603641ddfcdf98e7b0692a", 0x1a}, {&(0x7f0000000c40)="bd146999417f40eeb134856d4622ea17b6f349399d0aaa55c1622d2e191a9b07a89bce4fde719c", 0x27}], 0x6, &(0x7f0000000d00)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xffffffffffffff81) pread64(r1, &(0x7f0000000dc0)=""/6, 0x6, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000f00), &(0x7f0000000f40)=0xe, 0x81000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000f80)={0x6, 'gre0\x00', {0x6}, 0x36a}) pipe2$9p(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) readv(r5, &(0x7f0000001480)=[{&(0x7f0000001000)=""/194, 0xc2}, {&(0x7f0000001100)=""/222, 0xde}, {&(0x7f0000001200)}, {&(0x7f0000001240)=""/40, 0x28}, {&(0x7f0000001280)=""/127, 0x7f}, {&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/94, 0x5e}, {&(0x7f0000001440)=""/61, 0x3d}], 0x8) tee(r0, r2, 0xfffffffffffffff9, 0x8) r6 = openat(r3, &(0x7f0000001500)='./file0\x00', 0xa8240, 0x52) getsockname$packet(r6, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000015c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001b40)={'sit0\x00', &(0x7f0000001ac0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x0, 0x4, 0xa, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7800, 0x7800, 0x7fff, 0x81}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000001c00)={'syztnl2\x00', &(0x7f0000001b80)={'sit0\x00', 0x0, 0x2f, 0x7, 0x4, 0x10001, 0x26, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2, 0x10, 0x8, 0x3f, 0x100}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001c40)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000001d40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001d80)={{{@in, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000001e80)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000002a40)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002a00)={&(0x7f0000002240)={0x7ac, 0x0, 0x3, 0x70bd2a, 0x1, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa00}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x23}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x6, 0x3, 0x8}, {0x0, 0x81, 0x3, 0x8}, {0x9, 0x9, 0x8, 0x5}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000) 15:03:57 executing program 7: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x1, 0x0, 0xff, 0xb, 0xfaef, 0x5}, &(0x7f0000000040)=0x20) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x11, 0xffffffffffffffff, 0xca287000) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000140)={0xdb7, 0x1}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x5, 0x3f, 0x9, 0x0, 0x6, 0x10, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000180), 0x3}, 0x10, 0x1, 0x80, 0x7, 0xd1, 0xe7, 0x1, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) r2 = fsmount(r1, 0x1, 0x0) fallocate(r0, 0x323b1603b627cac2, 0xfffffffffffffff9, 0xb2a) r3 = fsmount(r1, 0x1, 0x0) r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x101000, 0x104) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x801) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)="31d36fb8395aa7c9ed82aa0f1e802df0ca40a2e1b664cfe2b336f6669bf71eded7951c2b3c4f075630257f845242b8a9f86a0320df5975d8e85c8850d84fda45248adf348a701679bc5a1cda26aac4669e5d83ef70808e4bd992b0e9676a04b4774b0b7c4fae21f2580749d6ed42e153d77ef8a476ed5296b0cc7879ad80d5aa28949b11349162", 0x87, r6}, 0x68) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xac, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x8d1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0/file0\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x805, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) pidfd_send_signal(r4, 0x1b, &(0x7f0000000800)={0x24, 0x4, 0x1000}, 0x0) signalfd4(r7, &(0x7f0000000880)={[0x68]}, 0x8, 0x800) 15:03:57 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40088c4}, 0x2000c040) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x84) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x300, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43b82f7a}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53af1c4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x837ee9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x562014d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36d9db9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42db060f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f89c11a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f276f61}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a4b7c91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b4c3172}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6049158d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x753b1ab4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ad5b0cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x335c85f8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eab0b57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a421a7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e785b69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d29aa83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x778daf0c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dfca3b4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1519a797}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37d59c4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28cacfaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4729f113}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bf0c6ec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1386beb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cc9d8f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a8b84ee}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4022400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040400) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, r10, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x19}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x19}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40090}, 0x4000) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r10, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1707741a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a19e132}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22e570db}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x8004) 15:03:57 executing program 2: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, 0x0, r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x24000810) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8d1a5b154ff7faff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc020001c}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040984}, 0x40c4) r4 = perf_event_open$cgroup(&(0x7f0000000400)={0x3, 0x80, 0x8, 0x7, 0x9, 0x3, 0x0, 0x4, 0x801, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x8000, 0x3}, 0x1063, 0xfff, 0x6, 0x3, 0x1, 0x8, 0xa36, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000480)) r5 = syz_io_uring_complete(0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000017c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001780)={&(0x7f0000000500)={0x1250, 0x14, 0x2, 0x70bd25, 0x25dfdbff, {0x26, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "0eccd6d697f766b703a37f32279b9af3e455d5d9e55bd68e0b4d7fa533d8df711c24fbd78a673716f80982e94781296f90a022909bb7d9a07ee11cb96e13c94b972499904ca19dad0fccbb9b40e4c7e0b4c8dfa53ad1aa8060b6a5a3aa8e94b0ef649c696269ac023181b4df2cc266c0fc8d5296543bf8cdfdaa1a2422e371bf51a1d8099a46dc454be9bf1396e0189752738b27de33f5"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "befa75cfd1eca92cd5fa3fbd40adee49a5e6e903d5be9a7e34578245c4f90e22dcab8dd04b8c89cc0be37c230d538f24515107442f4a06f36ecbdc34c5b31b4eeca801649c54f9c6029b8649334f81a30eb0"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "f1e23a36d2900936ab722dc7e9a3ca16687d4728baae758669b5440fb7a9072ad3140c979cf99e3550d46c798b49c195b5c4cd822989339a4ef02dea4a5d3e034567a2c318f99bd3dd"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "f761ee7cf27a71001c9995a35430de77b621f3c6f3c98609fa82b8c307e32b499008e5d74f89cffd9a6c3db7ac30583ddf578e853516dce8e729ce399144b506cbdf199dc2f5bdb859fbb1cae797f10633ab5c35f7a024f79cf78ea467189fc2524a7e0edcfe59947d8ec500b78bdca917c492d7f3ee3bc47d0304d266606dde1a487eef5906bcde4b321386f66095e2579726bf73cae3ad09cecb9c91774e43ab001027499f04978e3ec4a122f324bd2ed793340065fcbb61d63f2da6be574c2bf5d96e6867ae10be606ea8a44d159c1d82955219a4cf3f19fc0e5f72a3738b3f26d57122a094017ec4d8"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1250}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4044800) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x0, 0x826d2ccff72fe567, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000041}, 0x4000110) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001900), 0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000001a00)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001a40)='./file0/file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$9p_tcp(&(0x7f0000001940), &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x142020, &(0x7f0000001b00)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@access_any}], [{@euid_gt={'euid>', r6}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@euid_eq={'euid', 0x3d, r0}}, {@appraise}, {@fowner_lt={'fowner<', r0}}, {@fowner_lt={'fowner<', r7}}, {@smackfshat={'smackfshat', 0x3d, 'syz0\x00'}}, {@appraise_type}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}) r8 = syz_open_dev$mouse(&(0x7f0000001c00), 0xffffffffffff3781, 0x400041) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c67366738a4a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40004) r9 = syz_io_uring_complete(0x0) getpeername$unix(r9, &(0x7f0000001d40), &(0x7f0000001dc0)=0x6e) 15:03:57 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/232) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x3f, 0x1) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc800) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000000}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000400)=@gcm_256={{0x303}, "b9189d7ae5ab5f37", "25426f5ea4b1a54c844aa3d2233fc5527faec29fbafc6aceb2341fe951c120d9", "c02da65a", "aac402a902037bfe"}, 0x38) r4 = accept4$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14, 0x80800) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f00000004c0)={0x1, 0x1000}) r5 = dup(0xffffffffffffffff) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000500)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0x401, 0x0) clock_gettime(0x0, &(0x7f0000004180)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000004000)=[{{&(0x7f0000000580)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/234, 0xea}, {&(0x7f0000000800)=""/149, 0x95}], 0x4, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000a40)=""/221, 0xdd}, {&(0x7f0000000b40)=""/139, 0x8b}, {&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/255, 0xff}, {&(0x7f0000000d40)=""/242, 0xf2}], 0x5, &(0x7f0000000ec0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/242, 0xf2}], 0x2, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002140)=""/156, 0x9c}, {&(0x7f0000002200)}], 0x2, &(0x7f0000002280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f00000023c0), 0x6e, &(0x7f0000003800)=[{&(0x7f0000002440)=""/137, 0x89}, {&(0x7f0000002500)=""/162, 0xa2}, {&(0x7f00000025c0)=""/130, 0x82}, {&(0x7f0000002680)=""/227, 0xe3}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/67, 0x43}], 0x6}}, {{&(0x7f0000003880), 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003900)=""/100, 0x64}, {&(0x7f0000003980)=""/202, 0xca}, {&(0x7f0000003a80)=""/131, 0x83}, {&(0x7f0000003b40)=""/90, 0x5a}, {&(0x7f0000003bc0)=""/30, 0x1e}, {&(0x7f0000003c00)=""/209, 0xd1}, {&(0x7f0000003d00)=""/12, 0xc}, {&(0x7f0000003d40)=""/30, 0x1e}, {&(0x7f0000003d80)=""/111, 0x6f}], 0x9, &(0x7f0000003ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}], 0x6, 0x10060, &(0x7f00000041c0)={r7, r8+10000000}) dup2(r6, r9) syncfs(r11) ioctl$BTRFS_IOC_BALANCE_V2(r10, 0xc4009420, &(0x7f0000004200)={0x8, 0x0, {0x4, @usage=0x8000, 0x0, 0xe2a7, 0x43d, 0x2, 0xfffffffffffffff7, 0x4, 0xc4, @struct={0x6, 0x9}, 0x3, 0x3, [0x7, 0x6, 0x3, 0xfffffffffffffffc, 0x40, 0x7]}, {0x2, @struct={0x97e0, 0x7}, 0x0, 0xffffffffa5892049, 0x4, 0x94, 0x20, 0x1, 0x3, @usage=0x7fff, 0xffffffc2, 0x7, [0x7fffffff, 0x0, 0x4, 0xff, 0x8, 0x1]}, {0x5, @struct={0x8, 0xffff0001}, 0x0, 0x2, 0x10001, 0x1, 0x4, 0x8, 0x11, @struct={0x7, 0x1f}, 0x258f, 0x6, [0x200, 0x3f, 0x0, 0xd05, 0x800, 0x9]}, {0x8, 0x9, 0x1}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r11, 0xc400941d, &(0x7f0000004600)={r12, 0x7, 0x5, 0x1}) 15:03:57 executing program 4: shmdt(0x0) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmdt(r0) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x6000) r1 = shmget(0x1, 0x3000, 0x1040, &(0x7f0000001000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r1, &(0x7f0000003000/0x4000)=nil, 0x3000) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x2, 0x4e4, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x115100) r3 = shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x2000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xad05d5477c08d37e) syz_open_dev$mouse(&(0x7f00000001c0), 0x7a1f97cd, 0x10382) shmctl$SHM_LOCK(r1, 0xb) mremap(&(0x7f0000004000/0x12000)=nil, 0x12000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) shmdt(r3) mbind(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000200)=0xd50f, 0x6c, 0xa) r4 = shmget(0x3, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffa000/0x4000)=nil, 0x0) [ 70.932643] audit: type=1400 audit(1664982237.416:6): avc: denied { execmem } for pid=284 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:03:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x140) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20010004}, 0x4000) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x3f, 0x202) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x3, 0x401}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x24}}, 0x40000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf8, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsa#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x761}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[-(+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsa#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsa#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!\\&B\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\xc6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x96}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsa#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x49800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x40}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x84) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x810) r6 = accept(r5, 0x0, &(0x7f0000000a80)) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0xc080) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x4c, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r8 = syz_io_uring_setup(0x22a5, &(0x7f0000000d80)={0x0, 0xf0f6, 0x1, 0x1, 0x2a2, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)) close_range(r8, r3, 0x2) writev(r3, &(0x7f0000001080)=[{&(0x7f0000000e80)="f3535ed9eccc9ec38295d21a42c824916d967c77ec12a1fdfbb9a3189d0c66db5410ee1ecbadbf2a845b601fe5418d0c07db027347637f56bd0b6968f99414bb2d30d13ea71607fa4c791b5377718a0eaad3f78d34c22d4fcad0972f8de9f462ec4fb8524439554e72265493503a74056c465a3ec016557b2ed4b1e68f6929456670f8cb4b7422b7690f0d7613df74f43450576a5fba16cb0066ec58749a3bc81dcdba9ea2436f8bd37272423debf1671b4d4ff1a25cc354e2bbcb2358ddfe8d02dfa8fe85993e91d05797ef443c3d74865952ab4e142741bbc3585d13284a3ec081db07d282de771d499c9179d6f210613f427ea0324e9a1d", 0xf9}, {&(0x7f0000000f80)="f734f1625d6d887c6444d84d860c6b34f19240b8bf6dde2b32751393ef5450527bafcf4e2501da04826ef248833bf2bcb1b11ec31bddb4ceb13c99ef8e51d7100f205b2bfe6ca8b9e919ee53b81931710accbbce9e5c782bd13b7c607562f90383154e88e700ac33ed9e6129684ec4d62dc5834985ce92b953e60edb2bb38c5fb7305b517a980a3745efef609dab6b4c43210933d989bc88187273581e0e5928653c1e18ea82d4c111e5585c20adec6d3bcb9e6dcfa5aa25306a1223315fd0d041f4b73eaae6dd689ff904", 0xcb}], 0x2) 15:03:57 executing program 6: clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005d40)=[{{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/172, 0xac}, {&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000240)=""/48, 0x30}], 0x4, &(0x7f00000002c0)=""/136, 0x88}, 0x28000}, {{&(0x7f0000000380)=@phonet, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/215, 0xd7}, {&(0x7f00000006c0)=""/252, 0xfc}, {&(0x7f00000007c0)=""/137, 0x89}], 0x5, &(0x7f0000000900)=""/103, 0x67}, 0x7}, {{&(0x7f0000000980)=@nfc_llcp, 0x80, &(0x7f0000000a00)}, 0x8cb0}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/236, 0xec}, {&(0x7f0000000b40)=""/168, 0xa8}, {&(0x7f0000000c00)=""/92, 0x5c}], 0x3, &(0x7f0000000cc0)=""/200, 0xc8}, 0x3}, {{&(0x7f0000000dc0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1, &(0x7f0000001e80)=""/2, 0x2}, 0x82}, {{&(0x7f0000001ec0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003100)=[{&(0x7f0000001f40)=""/246, 0xf6}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/134, 0x86}], 0x3, &(0x7f0000003140)=""/86, 0x56}, 0x59f}, {{&(0x7f00000031c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000054c0)=[{&(0x7f0000003240)=""/30, 0x1e}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/106, 0x6a}, {&(0x7f0000004300)=""/185, 0xb9}, {&(0x7f00000043c0)=""/185, 0xb9}, {&(0x7f0000004480)=""/35, 0x23}, {&(0x7f00000044c0)=""/4096, 0x1000}], 0x7, &(0x7f0000005540)=""/38, 0x26}, 0x10000}, {{&(0x7f0000005580)=@generic, 0x80, &(0x7f0000005680)=[{&(0x7f0000005600)=""/120, 0x78}], 0x1, &(0x7f00000056c0)=""/90, 0x5a}, 0x100}, {{&(0x7f0000005740)=@phonet, 0x80, &(0x7f0000005bc0)=[{&(0x7f00000057c0)=""/13, 0xd}, {&(0x7f0000005800)=""/63, 0x3f}, {&(0x7f0000005840)=""/241, 0xf1}, {&(0x7f0000005940)=""/200, 0xc8}, {&(0x7f0000005a40)=""/118, 0x76}, {&(0x7f0000005ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/176, 0xb0}], 0x7, &(0x7f0000005c40)=""/233, 0xe9}, 0xffffff55}], 0x9, 0x20002003, &(0x7f0000005fc0)={r0, r1+10000000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000006000)=0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) recvmsg(r4, &(0x7f0000007300)={0x0, 0x0, &(0x7f0000007200)=[{&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/69, 0x45}, {&(0x7f00000070c0)=""/188, 0xbc}, {&(0x7f0000007180)=""/111, 0x6f}], 0x4, &(0x7f0000007240)=""/180, 0xb4}, 0x40000001) lsetxattr$trusted_overlay_origin(&(0x7f0000007340)='./file0\x00', &(0x7f0000007380), &(0x7f00000073c0), 0x2, 0x3) lsetxattr$security_evm(&(0x7f0000007400)='./file0\x00', &(0x7f0000007440), &(0x7f0000007480)=@ng={0x4, 0xb, "f01d"}, 0x4, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f00000074c0), &(0x7f0000007500)=0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000007540), 0x4) r5 = socket(0xf, 0x5, 0x700) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000007580), &(0x7f00000075c0)=0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007640), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x24, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x959e}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4000) lstat(&(0x7f0000007740)='./file0\x00', &(0x7f0000007780)) syz_io_uring_setup(0x5f28, &(0x7f0000007800)={0x0, 0x6660, 0x10, 0x3, 0x34}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000007880)=0x0, &(0x7f00000078c0)) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r9 = accept$inet6(r5, &(0x7f0000007900), &(0x7f0000007940)=0x1c) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000007980)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x80000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000079c0)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) [ 72.177218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.179282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.181054] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.182092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.184804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.185926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.191878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.195211] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.201242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.204769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.213771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.229135] Bluetooth: hci1: HCI_REQ-0x0c1a [ 72.255562] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.258594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.266189] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.269272] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.270949] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 72.272223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.276336] Bluetooth: hci6: HCI_REQ-0x0c1a [ 72.300563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.324662] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.325146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.328832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.331194] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.332409] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.334296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.354329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.368589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.369826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.373816] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.377248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.379387] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.397299] Bluetooth: hci2: HCI_REQ-0x0c1a [ 72.398291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.402652] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.405252] Bluetooth: hci5: HCI_REQ-0x0c1a [ 72.414264] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.416550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.424255] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.428210] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.432261] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.446096] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.263105] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 74.264521] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 74.327440] Bluetooth: hci1: command 0x0409 tx timeout [ 74.328358] Bluetooth: hci6: command 0x0409 tx timeout [ 74.391119] Bluetooth: hci0: command 0x0409 tx timeout [ 74.455139] Bluetooth: hci7: command 0x0409 tx timeout [ 74.455948] Bluetooth: hci2: command 0x0409 tx timeout [ 74.456713] Bluetooth: hci5: command 0x0409 tx timeout [ 76.375176] Bluetooth: hci6: command 0x041b tx timeout [ 76.375955] Bluetooth: hci1: command 0x041b tx timeout [ 76.470064] Bluetooth: hci0: command 0x041b tx timeout [ 76.503126] Bluetooth: hci5: command 0x041b tx timeout [ 76.503842] Bluetooth: hci2: command 0x041b tx timeout [ 76.504937] Bluetooth: hci7: command 0x041b tx timeout [ 77.471916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.476588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.480184] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.486268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.487653] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.488390] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.496026] Bluetooth: hci4: HCI_REQ-0x0c1a [ 78.423107] Bluetooth: hci1: command 0x040f tx timeout [ 78.423173] Bluetooth: hci6: command 0x040f tx timeout [ 78.487034] Bluetooth: hci0: command 0x040f tx timeout [ 78.551047] Bluetooth: hci7: command 0x040f tx timeout [ 78.551137] Bluetooth: hci2: command 0x040f tx timeout [ 78.551444] Bluetooth: hci5: command 0x040f tx timeout [ 79.256083] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 79.531591] Bluetooth: hci4: command 0x0409 tx timeout [ 80.471036] Bluetooth: hci1: command 0x0419 tx timeout [ 80.471480] Bluetooth: hci6: command 0x0419 tx timeout [ 80.535037] Bluetooth: hci0: command 0x0419 tx timeout [ 80.599087] Bluetooth: hci5: command 0x0419 tx timeout [ 80.599477] Bluetooth: hci2: command 0x0419 tx timeout [ 80.599821] Bluetooth: hci7: command 0x0419 tx timeout [ 81.559063] Bluetooth: hci4: command 0x041b tx timeout [ 83.607072] Bluetooth: hci4: command 0x040f tx timeout [ 83.799101] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 85.656028] Bluetooth: hci4: command 0x0419 tx timeout [ 88.535090] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 90.987620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.991143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.999235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.007150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.010595] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.012334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.016512] Bluetooth: hci3: HCI_REQ-0x0c1a [ 93.080097] Bluetooth: hci3: command 0x0409 tx timeout [ 95.127554] Bluetooth: hci3: command 0x041b tx timeout [ 97.175043] Bluetooth: hci3: command 0x040f tx timeout [ 99.223082] Bluetooth: hci3: command 0x0419 tx timeout 15:04:47 executing program 5: r0 = epoll_create(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x3, 0x800) r1 = epoll_create(0x3) dup2(r0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000040)='}\x00', &(0x7f0000000080)="a1", 0x1) fsync(r3) 15:04:47 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) read(0xffffffffffffffff, &(0x7f0000000140)=""/78, 0x4e) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@local, @remote}, &(0x7f0000000240)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000008c0)={@multicast2, @private}, &(0x7f0000000900)=0xc) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 15:04:47 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = gettid() r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x3, 0x2a, 0xca, 0x1, 0x0, 0xffff, 0x10420, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4949, 0x0, 0xfffff000, 0x6, 0x240, 0x20, 0x2, 0x0, 0x8, 0x0, 0xfffffffffffffe30}, r3, 0x1, r4, 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r6 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='}\x00', &(0x7f0000000080)="a1", 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000006c0)={0x40000000}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0xec00) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x43c, 0x3f4, 0x400, 0x70bd26, 0x25dfdbfe, {0x4, 0x0, 0x2e, [0x8, 0x9, 0x0, 0x7, 0x63fa, 0x2, 0x40, 0x5, 0x0, 0x1000, 0x3, 0x20, 0x3, 0x3a, 0x800, 0x1, 0x1, 0x7, 0xfffffd8a, 0x2, 0x0, 0x0, 0x2, 0x0, 0xc0e, 0x1ff, 0xfffff8a2, 0x5e31, 0x9f, 0x5, 0x7, 0x0, 0x4, 0x1ff, 0x9dee, 0x0, 0x101, 0xfffffff7, 0x4, 0xffffffff, 0x3, 0x8, 0xfffffffc, 0xedb, 0xfff, 0x1, 0x2, 0x7, 0x7ff, 0x8, 0x2, 0x1, 0x3, 0x0, 0x6, 0x4, 0x7fffffff, 0x8000, 0x1, 0x55c1, 0x8, 0x2, 0x6, 0x1], [0x1000, 0xf62d, 0x10001, 0x0, 0x6, 0x8, 0xffffff3f, 0x6, 0x9, 0x4, 0x7fffffff, 0x4a, 0x3, 0xd917, 0xffffffff, 0x1, 0xad5, 0x4, 0x1000, 0x5, 0x6, 0x1, 0x9, 0x0, 0x6, 0x4, 0xffff, 0x1262, 0x7, 0x9, 0x74, 0x81, 0x100, 0x2, 0xff, 0x1, 0x3, 0x9, 0x20, 0x9, 0x4, 0x6, 0x6, 0x2, 0xd6, 0x1, 0x2, 0x0, 0x7, 0x5f75, 0x80, 0x5, 0x1, 0x8, 0x7, 0xff, 0x80000000, 0x0, 0x2, 0x2, 0x8, 0xc8, 0x3, 0x2], [0x200, 0x5, 0x8, 0x400, 0x3f, 0x8, 0x0, 0x4, 0x6, 0x8, 0x4, 0x6, 0x3, 0x2e9, 0x948, 0x3, 0x4, 0x9, 0x7, 0x1, 0x8, 0x3ff, 0x2, 0x100, 0xac6d, 0x3, 0xfffffffe, 0x9, 0xaa, 0x4, 0xfffffff9, 0x4, 0x7, 0x80, 0x971a, 0xfffffffb, 0xffff, 0xfffffbff, 0x3, 0x3ff, 0x0, 0x5, 0x8, 0x6, 0x4, 0xffff0000, 0x5, 0x8001, 0x7fff, 0x9, 0x81, 0x1, 0x6fc, 0x6, 0x7b, 0x7, 0x0, 0x4, 0x2, 0x7fffffff, 0x8001, 0x5, 0x6, 0x8001], [0x2f2c, 0x5155, 0x80000001, 0x1, 0x1f, 0x101, 0xffffffff, 0x9, 0x1, 0x0, 0x1, 0x200, 0x7, 0xb5, 0x9, 0x5, 0xffffffe0, 0x1, 0x5, 0x7, 0x4, 0x4, 0xc0, 0x100, 0x6, 0x7, 0x1000, 0x0, 0x5, 0xfffffffb, 0x55, 0x0, 0x7, 0x6, 0xff, 0x6, 0x4, 0x2, 0x0, 0x4, 0x8, 0x7, 0x5, 0x8, 0x83, 0x1, 0x6, 0x200, 0x8001, 0x8, 0xff, 0x9, 0x22, 0x6, 0x4, 0x3f, 0xa000000, 0x4, 0x5554, 0x7, 0xde, 0x5, 0x83f, 0x8000], 0x19, ['\'\x00', '.!\x00', '\'$.]:\x00', '}\x00', '\x00', '\x00', '*/,\r:[\\@\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000014) [ 120.888476] audit: type=1400 audit(1664982287.372:7): avc: denied { open } for pid=3647 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.889891] audit: type=1400 audit(1664982287.372:8): avc: denied { kernel } for pid=3647 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.908406] ------------[ cut here ]------------ [ 120.908430] [ 120.908434] ====================================================== [ 120.908438] WARNING: possible circular locking dependency detected [ 120.908442] 6.0.0-next-20221005 #1 Not tainted [ 120.908449] ------------------------------------------------------ [ 120.908452] syz-executor.3/3650 is trying to acquire lock: [ 120.908459] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 120.908499] [ 120.908499] but task is already holding lock: [ 120.908502] ffff88800f35f820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.908530] [ 120.908530] which lock already depends on the new lock. [ 120.908530] [ 120.908533] [ 120.908533] the existing dependency chain (in reverse order) is: [ 120.908536] [ 120.908536] -> #3 (&ctx->lock){....}-{2:2}: [ 120.908550] _raw_spin_lock+0x2a/0x40 [ 120.908565] __perf_event_task_sched_out+0x53b/0x18d0 [ 120.908576] __schedule+0xedd/0x2470 [ 120.908591] schedule+0xda/0x1b0 [ 120.908605] futex_wait_queue+0xf5/0x1e0 [ 120.908618] futex_wait+0x28e/0x690 [ 120.908628] do_futex+0x2ff/0x380 [ 120.908637] __x64_sys_futex+0x1c6/0x4d0 [ 120.908648] do_syscall_64+0x3b/0x90 [ 120.908657] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.908671] [ 120.908671] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 120.908685] _raw_spin_lock_nested+0x30/0x40 [ 120.908696] raw_spin_rq_lock_nested+0x1e/0x30 [ 120.908709] task_fork_fair+0x63/0x4d0 [ 120.908726] sched_cgroup_fork+0x3d0/0x540 [ 120.908740] copy_process+0x4183/0x6e20 [ 120.908752] kernel_clone+0xe7/0x890 [ 120.908761] user_mode_thread+0xad/0xf0 [ 120.908772] rest_init+0x24/0x250 [ 120.908784] arch_call_rest_init+0xf/0x14 [ 120.908804] start_kernel+0x4c6/0x4eb [ 120.908821] secondary_startup_64_no_verify+0xe0/0xeb [ 120.908835] [ 120.908835] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 120.908849] _raw_spin_lock_irqsave+0x39/0x60 [ 120.908860] try_to_wake_up+0xab/0x1930 [ 120.908873] up+0x75/0xb0 [ 120.908888] __up_console_sem+0x6e/0x80 [ 120.908904] console_unlock+0x46a/0x590 [ 120.908920] vprintk_emit+0x1bd/0x560 [ 120.908936] vprintk+0x84/0xa0 [ 120.908952] _printk+0xba/0xf1 [ 120.908964] kauditd_hold_skb.cold+0x3f/0x4e [ 120.908982] kauditd_send_queue+0x233/0x290 [ 120.908997] kauditd_thread+0x5f9/0x9c0 [ 120.909011] kthread+0x2ed/0x3a0 [ 120.909026] ret_from_fork+0x22/0x30 [ 120.909038] [ 120.909038] -> #0 ((console_sem).lock){....}-{2:2}: [ 120.909051] __lock_acquire+0x2a02/0x5e70 [ 120.909068] lock_acquire+0x1a2/0x530 [ 120.909084] _raw_spin_lock_irqsave+0x39/0x60 [ 120.909096] down_trylock+0xe/0x70 [ 120.909111] __down_trylock_console_sem+0x3b/0xd0 [ 120.909127] vprintk_emit+0x16b/0x560 [ 120.909143] vprintk+0x84/0xa0 [ 120.909159] _printk+0xba/0xf1 [ 120.909170] report_bug.cold+0x72/0xab [ 120.909187] handle_bug+0x3c/0x70 [ 120.909196] exc_invalid_op+0x14/0x50 [ 120.909205] asm_exc_invalid_op+0x16/0x20 [ 120.909218] group_sched_out.part.0+0x2c7/0x460 [ 120.909236] ctx_sched_out+0x8f1/0xc10 [ 120.909253] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.909263] __schedule+0xedd/0x2470 [ 120.909278] schedule+0xda/0x1b0 [ 120.909292] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.909304] syscall_exit_to_user_mode+0x19/0x40 [ 120.909317] do_syscall_64+0x48/0x90 [ 120.909326] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.909340] [ 120.909340] other info that might help us debug this: [ 120.909340] [ 120.909342] Chain exists of: [ 120.909342] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 120.909342] [ 120.909357] Possible unsafe locking scenario: [ 120.909357] [ 120.909359] CPU0 CPU1 [ 120.909362] ---- ---- [ 120.909364] lock(&ctx->lock); [ 120.909370] lock(&rq->__lock); [ 120.909376] lock(&ctx->lock); [ 120.909382] lock((console_sem).lock); [ 120.909388] [ 120.909388] *** DEADLOCK *** [ 120.909388] [ 120.909390] 2 locks held by syz-executor.3/3650: [ 120.909397] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 120.909427] #1: ffff88800f35f820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.909453] [ 120.909453] stack backtrace: [ 120.909456] CPU: 1 PID: 3650 Comm: syz-executor.3 Not tainted 6.0.0-next-20221005 #1 [ 120.909469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.909475] Call Trace: [ 120.909479] [ 120.909483] dump_stack_lvl+0x8b/0xb3 [ 120.909503] check_noncircular+0x263/0x2e0 [ 120.909520] ? format_decode+0x26c/0xb50 [ 120.909538] ? print_circular_bug+0x450/0x450 [ 120.909555] ? simple_strtoul+0x30/0x30 [ 120.909572] ? format_decode+0x26c/0xb50 [ 120.909590] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 120.909609] __lock_acquire+0x2a02/0x5e70 [ 120.909630] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 120.909653] lock_acquire+0x1a2/0x530 [ 120.909670] ? down_trylock+0xe/0x70 [ 120.909688] ? lock_release+0x750/0x750 [ 120.909707] ? __lock_acquire+0x164d/0x5e70 [ 120.909726] ? vprintk+0x84/0xa0 [ 120.909744] _raw_spin_lock_irqsave+0x39/0x60 [ 120.909756] ? down_trylock+0xe/0x70 [ 120.909773] down_trylock+0xe/0x70 [ 120.909790] ? vprintk+0x84/0xa0 [ 120.909808] __down_trylock_console_sem+0x3b/0xd0 [ 120.909825] vprintk_emit+0x16b/0x560 [ 120.909844] vprintk+0x84/0xa0 [ 120.909862] _printk+0xba/0xf1 [ 120.909874] ? record_print_text.cold+0x16/0x16 [ 120.909891] ? report_bug.cold+0x66/0xab [ 120.909910] ? group_sched_out.part.0+0x2c7/0x460 [ 120.909929] report_bug.cold+0x72/0xab [ 120.909949] handle_bug+0x3c/0x70 [ 120.909959] exc_invalid_op+0x14/0x50 [ 120.909969] asm_exc_invalid_op+0x16/0x20 [ 120.909983] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.910004] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.910015] RSP: 0018:ffff8880404a7c48 EFLAGS: 00010006 [ 120.910025] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.910032] RDX: ffff888018359ac0 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 120.910040] RBP: ffff8880404b0000 R08: 0000000000000005 R09: 0000000000000001 [ 120.910047] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800f35f800 [ 120.910055] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 120.910066] ? group_sched_out.part.0+0x2c7/0x460 [ 120.910086] ? group_sched_out.part.0+0x2c7/0x460 [ 120.910106] ctx_sched_out+0x8f1/0xc10 [ 120.910126] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.910140] ? lock_is_held_type+0xd7/0x130 [ 120.910155] ? __perf_cgroup_move+0x160/0x160 [ 120.910166] ? set_next_entity+0x304/0x550 [ 120.910184] ? update_curr+0x267/0x740 [ 120.910202] ? lock_is_held_type+0xd7/0x130 [ 120.910217] __schedule+0xedd/0x2470 [ 120.910235] ? io_schedule_timeout+0x150/0x150 [ 120.910253] ? rcu_read_lock_sched_held+0x3e/0x80 [ 120.910274] schedule+0xda/0x1b0 [ 120.910290] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.910302] syscall_exit_to_user_mode+0x19/0x40 [ 120.910317] do_syscall_64+0x48/0x90 [ 120.910327] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.910341] RIP: 0033:0x7f54d43f6b19 [ 120.910349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.910360] RSP: 002b:00007f54d196c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.910371] RAX: 0000000000000001 RBX: 00007f54d4509f68 RCX: 00007f54d43f6b19 [ 120.910378] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f54d4509f6c [ 120.910386] RBP: 00007f54d4509f60 R08: 000000000000000e R09: 0000000000000000 [ 120.910393] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f54d4509f6c [ 120.910400] R13: 00007ffeb9eaf64f R14: 00007f54d196c300 R15: 0000000000022000 [ 120.910412] [ 120.966934] WARNING: CPU: 1 PID: 3650 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 120.967601] Modules linked in: [ 120.967849] CPU: 1 PID: 3650 Comm: syz-executor.3 Not tainted 6.0.0-next-20221005 #1 [ 120.968409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.969000] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.969403] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.970683] RSP: 0018:ffff8880404a7c48 EFLAGS: 00010006 [ 120.971068] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.971566] RDX: ffff888018359ac0 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 120.972104] RBP: ffff8880404b0000 R08: 0000000000000005 R09: 0000000000000001 [ 120.972617] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800f35f800 [ 120.973128] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 120.973623] FS: 00007f54d196c700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 120.974190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.974599] CR2: 0000000020003038 CR3: 0000000035efa000 CR4: 0000000000350ee0 [ 120.975107] Call Trace: [ 120.975301] [ 120.975474] ctx_sched_out+0x8f1/0xc10 [ 120.975788] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.976164] ? lock_is_held_type+0xd7/0x130 [ 120.976484] ? __perf_cgroup_move+0x160/0x160 [ 120.976814] ? set_next_entity+0x304/0x550 [ 120.977126] ? update_curr+0x267/0x740 [ 120.977421] ? lock_is_held_type+0xd7/0x130 [ 120.977735] __schedule+0xedd/0x2470 [ 120.978016] ? io_schedule_timeout+0x150/0x150 [ 120.978358] ? rcu_read_lock_sched_held+0x3e/0x80 [ 120.978711] schedule+0xda/0x1b0 [ 120.978963] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.979320] syscall_exit_to_user_mode+0x19/0x40 [ 120.979670] do_syscall_64+0x48/0x90 [ 120.979938] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.980313] RIP: 0033:0x7f54d43f6b19 [ 120.980580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.981869] RSP: 002b:00007f54d196c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.982410] RAX: 0000000000000001 RBX: 00007f54d4509f68 RCX: 00007f54d43f6b19 [ 120.982918] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f54d4509f6c [ 120.983422] RBP: 00007f54d4509f60 R08: 000000000000000e R09: 0000000000000000 [ 120.983945] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f54d4509f6c [ 120.984460] R13: 00007ffeb9eaf64f R14: 00007f54d196c300 R15: 0000000000022000 [ 120.984978] [ 120.985149] irq event stamp: 1022 [ 120.985396] hardirqs last enabled at (1021): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 120.986062] hardirqs last disabled at (1022): [] __schedule+0x1225/0x2470 [ 120.986655] softirqs last enabled at (884): [] __irq_exit_rcu+0x11b/0x180 [ 120.987260] softirqs last disabled at (513): [] __irq_exit_rcu+0x11b/0x180 [ 120.987869] ---[ end trace 0000000000000000 ]--- 15:04:47 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = gettid() r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x3, 0x2a, 0xca, 0x1, 0x0, 0xffff, 0x10420, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4949, 0x0, 0xfffff000, 0x6, 0x240, 0x20, 0x2, 0x0, 0x8, 0x0, 0xfffffffffffffe30}, r3, 0x1, r4, 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r6 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='}\x00', &(0x7f0000000080)="a1", 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000006c0)={0x40000000}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0xec00) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x43c, 0x3f4, 0x400, 0x70bd26, 0x25dfdbfe, {0x4, 0x0, 0x2e, [0x8, 0x9, 0x0, 0x7, 0x63fa, 0x2, 0x40, 0x5, 0x0, 0x1000, 0x3, 0x20, 0x3, 0x3a, 0x800, 0x1, 0x1, 0x7, 0xfffffd8a, 0x2, 0x0, 0x0, 0x2, 0x0, 0xc0e, 0x1ff, 0xfffff8a2, 0x5e31, 0x9f, 0x5, 0x7, 0x0, 0x4, 0x1ff, 0x9dee, 0x0, 0x101, 0xfffffff7, 0x4, 0xffffffff, 0x3, 0x8, 0xfffffffc, 0xedb, 0xfff, 0x1, 0x2, 0x7, 0x7ff, 0x8, 0x2, 0x1, 0x3, 0x0, 0x6, 0x4, 0x7fffffff, 0x8000, 0x1, 0x55c1, 0x8, 0x2, 0x6, 0x1], [0x1000, 0xf62d, 0x10001, 0x0, 0x6, 0x8, 0xffffff3f, 0x6, 0x9, 0x4, 0x7fffffff, 0x4a, 0x3, 0xd917, 0xffffffff, 0x1, 0xad5, 0x4, 0x1000, 0x5, 0x6, 0x1, 0x9, 0x0, 0x6, 0x4, 0xffff, 0x1262, 0x7, 0x9, 0x74, 0x81, 0x100, 0x2, 0xff, 0x1, 0x3, 0x9, 0x20, 0x9, 0x4, 0x6, 0x6, 0x2, 0xd6, 0x1, 0x2, 0x0, 0x7, 0x5f75, 0x80, 0x5, 0x1, 0x8, 0x7, 0xff, 0x80000000, 0x0, 0x2, 0x2, 0x8, 0xc8, 0x3, 0x2], [0x200, 0x5, 0x8, 0x400, 0x3f, 0x8, 0x0, 0x4, 0x6, 0x8, 0x4, 0x6, 0x3, 0x2e9, 0x948, 0x3, 0x4, 0x9, 0x7, 0x1, 0x8, 0x3ff, 0x2, 0x100, 0xac6d, 0x3, 0xfffffffe, 0x9, 0xaa, 0x4, 0xfffffff9, 0x4, 0x7, 0x80, 0x971a, 0xfffffffb, 0xffff, 0xfffffbff, 0x3, 0x3ff, 0x0, 0x5, 0x8, 0x6, 0x4, 0xffff0000, 0x5, 0x8001, 0x7fff, 0x9, 0x81, 0x1, 0x6fc, 0x6, 0x7b, 0x7, 0x0, 0x4, 0x2, 0x7fffffff, 0x8001, 0x5, 0x6, 0x8001], [0x2f2c, 0x5155, 0x80000001, 0x1, 0x1f, 0x101, 0xffffffff, 0x9, 0x1, 0x0, 0x1, 0x200, 0x7, 0xb5, 0x9, 0x5, 0xffffffe0, 0x1, 0x5, 0x7, 0x4, 0x4, 0xc0, 0x100, 0x6, 0x7, 0x1000, 0x0, 0x5, 0xfffffffb, 0x55, 0x0, 0x7, 0x6, 0xff, 0x6, 0x4, 0x2, 0x0, 0x4, 0x8, 0x7, 0x5, 0x8, 0x83, 0x1, 0x6, 0x200, 0x8001, 0x8, 0xff, 0x9, 0x22, 0x6, 0x4, 0x3f, 0xa000000, 0x4, 0x5554, 0x7, 0xde, 0x5, 0x83f, 0x8000], 0x19, ['\'\x00', '.!\x00', '\'$.]:\x00', '}\x00', '\x00', '\x00', '*/,\r:[\\@\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000014) 15:04:47 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x1, 0x4f92) socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) openat(r3, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x102) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) r4 = memfd_create(&(0x7f0000000200)='-%@,/.(\x00', 0x6) ftruncate(r0, 0x1) dup(r4) 15:04:47 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) read(0xffffffffffffffff, &(0x7f0000000140)=""/78, 0x4e) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@local, @remote}, &(0x7f0000000240)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000008c0)={@multicast2, @private}, &(0x7f0000000900)=0xc) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 15:04:47 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) read(0xffffffffffffffff, &(0x7f0000000140)=""/78, 0x4e) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@local, @remote}, &(0x7f0000000240)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000008c0)={@multicast2, @private}, &(0x7f0000000900)=0xc) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 15:04:48 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) read(0xffffffffffffffff, &(0x7f0000000140)=""/78, 0x4e) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@local, @remote}, &(0x7f0000000240)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000008c0)={@multicast2, @private}, &(0x7f0000000900)=0xc) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) VM DIAGNOSIS: 15:04:47 Registers: info registers vcpu 0 RAX=ffffffff817826a9 RBX=0000000000000001 RCX=ffff88800924f658 RDX=dffffc0000000000 RSI=ffff88800924f980 RDI=ffff88800924f980 RBP=ffff88800924f658 RSP=ffff88800924f580 R8 =ffffffff85ee109e R9 =ffffffff85ee10a2 R10=ffffed1001249ecd R11=ffff88800924f640 R12=ffff88800924f641 R13=ffff88800924f660 R14=ffff88800924f600 R15=ffffffff85ee10a3 RIP=ffffffff8111bbd7 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb436d3d8c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa792504028 CR3=000000000f04c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000000006c6175747269762f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055e26324b9a0000055e26321b270 XMM06=000055e263241f700000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bda91 RDI=ffffffff8765c9a0 RBP=ffffffff8765c960 RSP=ffff8880404a7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000035 R11=0000000000000001 R12=0000000000000035 R13=ffffffff8765c960 R14=0000000000000010 R15=ffffffff823bda80 RIP=ffffffff823bdae9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f54d196c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020003038 CR3=0000000035efa000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f54d44dd7c000007f54d44dd7c8 XMM02=00007f54d44dd7e000007f54d44dd7c0 XMM03=00007f54d44dd7c800007f54d44dd7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000