Warning: Permanently added '[localhost]:39668' (ECDSA) to the list of known hosts. 2022/09/15 03:53:31 fuzzer started 2022/09/15 03:53:31 dialing manager at localhost:33849 syzkaller login: [ 44.372914] cgroup: Unknown subsys name 'net' [ 44.556135] cgroup: Unknown subsys name 'rlimit' 2022/09/15 03:53:46 syscalls: 2215 2022/09/15 03:53:46 code coverage: enabled 2022/09/15 03:53:46 comparison tracing: enabled 2022/09/15 03:53:46 extra coverage: enabled 2022/09/15 03:53:46 setuid sandbox: enabled 2022/09/15 03:53:46 namespace sandbox: enabled 2022/09/15 03:53:46 Android sandbox: enabled 2022/09/15 03:53:46 fault injection: enabled 2022/09/15 03:53:46 leak checking: enabled 2022/09/15 03:53:46 net packet injection: enabled 2022/09/15 03:53:46 net device setup: enabled 2022/09/15 03:53:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/15 03:53:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/15 03:53:46 USB emulation: enabled 2022/09/15 03:53:46 hci packet injection: enabled 2022/09/15 03:53:46 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914) 2022/09/15 03:53:46 802.15.4 emulation: enabled 2022/09/15 03:53:46 fetching corpus: 50, signal 33734/35498 (executing program) 2022/09/15 03:53:46 fetching corpus: 100, signal 46400/49755 (executing program) 2022/09/15 03:53:47 fetching corpus: 150, signal 56397/61224 (executing program) 2022/09/15 03:53:47 fetching corpus: 200, signal 62585/68849 (executing program) 2022/09/15 03:53:47 fetching corpus: 250, signal 74888/82249 (executing program) 2022/09/15 03:53:47 fetching corpus: 300, signal 79312/87928 (executing program) 2022/09/15 03:53:47 fetching corpus: 350, signal 84992/94795 (executing program) 2022/09/15 03:53:47 fetching corpus: 400, signal 88873/99871 (executing program) 2022/09/15 03:53:47 fetching corpus: 450, signal 92515/104609 (executing program) 2022/09/15 03:53:47 fetching corpus: 500, signal 97540/110680 (executing program) 2022/09/15 03:53:48 fetching corpus: 550, signal 100925/115111 (executing program) 2022/09/15 03:53:48 fetching corpus: 600, signal 104556/119726 (executing program) 2022/09/15 03:53:48 fetching corpus: 650, signal 107605/123724 (executing program) 2022/09/15 03:53:48 fetching corpus: 700, signal 111223/128261 (executing program) 2022/09/15 03:53:48 fetching corpus: 750, signal 115757/133535 (executing program) 2022/09/15 03:53:48 fetching corpus: 800, signal 118146/136844 (executing program) 2022/09/15 03:53:48 fetching corpus: 850, signal 119826/139485 (executing program) 2022/09/15 03:53:48 fetching corpus: 900, signal 121947/142461 (executing program) 2022/09/15 03:53:49 fetching corpus: 950, signal 125112/146340 (executing program) 2022/09/15 03:53:49 fetching corpus: 1000, signal 126848/148967 (executing program) 2022/09/15 03:53:49 fetching corpus: 1050, signal 128728/151609 (executing program) 2022/09/15 03:53:49 fetching corpus: 1100, signal 130901/154521 (executing program) 2022/09/15 03:53:49 fetching corpus: 1150, signal 133504/157736 (executing program) 2022/09/15 03:53:49 fetching corpus: 1200, signal 136451/161183 (executing program) 2022/09/15 03:53:49 fetching corpus: 1250, signal 139072/164385 (executing program) 2022/09/15 03:53:50 fetching corpus: 1300, signal 141502/167386 (executing program) 2022/09/15 03:53:50 fetching corpus: 1350, signal 143642/170121 (executing program) 2022/09/15 03:53:50 fetching corpus: 1400, signal 145276/172381 (executing program) 2022/09/15 03:53:50 fetching corpus: 1450, signal 147194/174842 (executing program) 2022/09/15 03:53:50 fetching corpus: 1500, signal 148532/176832 (executing program) 2022/09/15 03:53:50 fetching corpus: 1550, signal 149577/178579 (executing program) 2022/09/15 03:53:50 fetching corpus: 1600, signal 151175/180739 (executing program) 2022/09/15 03:53:50 fetching corpus: 1650, signal 153486/183449 (executing program) 2022/09/15 03:53:51 fetching corpus: 1700, signal 154705/185253 (executing program) 2022/09/15 03:53:51 fetching corpus: 1750, signal 157273/188132 (executing program) 2022/09/15 03:53:51 fetching corpus: 1800, signal 158974/190302 (executing program) 2022/09/15 03:53:51 fetching corpus: 1850, signal 159944/191881 (executing program) 2022/09/15 03:53:51 fetching corpus: 1900, signal 161399/193842 (executing program) 2022/09/15 03:53:51 fetching corpus: 1950, signal 163014/195927 (executing program) 2022/09/15 03:53:51 fetching corpus: 2000, signal 164524/197871 (executing program) 2022/09/15 03:53:52 fetching corpus: 2050, signal 165763/199575 (executing program) 2022/09/15 03:53:52 fetching corpus: 2100, signal 167303/201493 (executing program) 2022/09/15 03:53:52 fetching corpus: 2150, signal 168582/203147 (executing program) 2022/09/15 03:53:52 fetching corpus: 2200, signal 169428/204529 (executing program) 2022/09/15 03:53:52 fetching corpus: 2250, signal 171172/206493 (executing program) 2022/09/15 03:53:52 fetching corpus: 2300, signal 173312/208698 (executing program) 2022/09/15 03:53:52 fetching corpus: 2350, signal 174990/210663 (executing program) 2022/09/15 03:53:53 fetching corpus: 2400, signal 176405/212338 (executing program) 2022/09/15 03:53:53 fetching corpus: 2450, signal 177418/213767 (executing program) 2022/09/15 03:53:53 fetching corpus: 2500, signal 178380/215121 (executing program) 2022/09/15 03:53:53 fetching corpus: 2550, signal 179460/216485 (executing program) 2022/09/15 03:53:53 fetching corpus: 2600, signal 180927/218112 (executing program) 2022/09/15 03:53:53 fetching corpus: 2650, signal 181845/219383 (executing program) 2022/09/15 03:53:53 fetching corpus: 2700, signal 182758/220637 (executing program) 2022/09/15 03:53:53 fetching corpus: 2750, signal 184423/222365 (executing program) 2022/09/15 03:53:54 fetching corpus: 2800, signal 185774/223886 (executing program) 2022/09/15 03:53:54 fetching corpus: 2850, signal 187487/225543 (executing program) 2022/09/15 03:53:54 fetching corpus: 2900, signal 188267/226635 (executing program) 2022/09/15 03:53:54 fetching corpus: 2950, signal 189337/227940 (executing program) 2022/09/15 03:53:54 fetching corpus: 3000, signal 190210/229101 (executing program) 2022/09/15 03:53:54 fetching corpus: 3050, signal 190907/230167 (executing program) 2022/09/15 03:53:54 fetching corpus: 3100, signal 191916/231423 (executing program) 2022/09/15 03:53:55 fetching corpus: 3150, signal 192905/232630 (executing program) 2022/09/15 03:53:55 fetching corpus: 3200, signal 193787/233753 (executing program) 2022/09/15 03:53:55 fetching corpus: 3250, signal 194744/234889 (executing program) 2022/09/15 03:53:55 fetching corpus: 3300, signal 195761/236100 (executing program) 2022/09/15 03:53:55 fetching corpus: 3350, signal 197117/237412 (executing program) 2022/09/15 03:53:55 fetching corpus: 3400, signal 198137/238620 (executing program) 2022/09/15 03:53:55 fetching corpus: 3450, signal 199446/239845 (executing program) 2022/09/15 03:53:56 fetching corpus: 3500, signal 200440/240918 (executing program) 2022/09/15 03:53:56 fetching corpus: 3550, signal 201833/242220 (executing program) 2022/09/15 03:53:56 fetching corpus: 3600, signal 202861/243311 (executing program) 2022/09/15 03:53:56 fetching corpus: 3650, signal 204063/244446 (executing program) 2022/09/15 03:53:56 fetching corpus: 3700, signal 205126/245487 (executing program) 2022/09/15 03:53:56 fetching corpus: 3750, signal 206222/246504 (executing program) 2022/09/15 03:53:56 fetching corpus: 3800, signal 207517/247703 (executing program) 2022/09/15 03:53:57 fetching corpus: 3850, signal 208044/248478 (executing program) 2022/09/15 03:53:57 fetching corpus: 3900, signal 209304/249600 (executing program) 2022/09/15 03:53:57 fetching corpus: 3950, signal 210002/250419 (executing program) 2022/09/15 03:53:57 fetching corpus: 4000, signal 210816/251288 (executing program) 2022/09/15 03:53:57 fetching corpus: 4050, signal 211605/252125 (executing program) 2022/09/15 03:53:57 fetching corpus: 4100, signal 212317/252925 (executing program) 2022/09/15 03:53:57 fetching corpus: 4150, signal 213539/253899 (executing program) 2022/09/15 03:53:57 fetching corpus: 4200, signal 214161/254638 (executing program) 2022/09/15 03:53:58 fetching corpus: 4250, signal 214931/255392 (executing program) 2022/09/15 03:53:58 fetching corpus: 4300, signal 216318/256367 (executing program) 2022/09/15 03:53:58 fetching corpus: 4350, signal 217071/257065 (executing program) 2022/09/15 03:53:58 fetching corpus: 4400, signal 217734/257777 (executing program) 2022/09/15 03:53:58 fetching corpus: 4450, signal 218449/258444 (executing program) 2022/09/15 03:53:58 fetching corpus: 4500, signal 219210/259141 (executing program) 2022/09/15 03:53:58 fetching corpus: 4550, signal 220060/259825 (executing program) 2022/09/15 03:53:59 fetching corpus: 4600, signal 220675/260466 (executing program) 2022/09/15 03:53:59 fetching corpus: 4650, signal 221302/261133 (executing program) 2022/09/15 03:53:59 fetching corpus: 4700, signal 221970/261767 (executing program) 2022/09/15 03:53:59 fetching corpus: 4750, signal 222630/262381 (executing program) 2022/09/15 03:53:59 fetching corpus: 4800, signal 223755/263087 (executing program) 2022/09/15 03:53:59 fetching corpus: 4850, signal 224581/263712 (executing program) 2022/09/15 03:53:59 fetching corpus: 4900, signal 225156/264287 (executing program) 2022/09/15 03:53:59 fetching corpus: 4950, signal 225470/264818 (executing program) 2022/09/15 03:54:00 fetching corpus: 5000, signal 226486/265459 (executing program) 2022/09/15 03:54:00 fetching corpus: 5050, signal 227069/266028 (executing program) 2022/09/15 03:54:00 fetching corpus: 5100, signal 227629/266601 (executing program) 2022/09/15 03:54:00 fetching corpus: 5150, signal 228393/267173 (executing program) 2022/09/15 03:54:00 fetching corpus: 5200, signal 229037/267754 (executing program) 2022/09/15 03:54:00 fetching corpus: 5250, signal 230039/268388 (executing program) 2022/09/15 03:54:00 fetching corpus: 5300, signal 230692/268874 (executing program) 2022/09/15 03:54:01 fetching corpus: 5350, signal 231192/269343 (executing program) 2022/09/15 03:54:01 fetching corpus: 5400, signal 232431/269936 (executing program) 2022/09/15 03:54:01 fetching corpus: 5450, signal 233185/270430 (executing program) 2022/09/15 03:54:01 fetching corpus: 5500, signal 233861/270948 (executing program) 2022/09/15 03:54:01 fetching corpus: 5550, signal 234499/271404 (executing program) 2022/09/15 03:54:01 fetching corpus: 5600, signal 234998/271833 (executing program) 2022/09/15 03:54:01 fetching corpus: 5650, signal 235719/272304 (executing program) 2022/09/15 03:54:02 fetching corpus: 5700, signal 236381/272703 (executing program) 2022/09/15 03:54:02 fetching corpus: 5750, signal 236702/273071 (executing program) 2022/09/15 03:54:02 fetching corpus: 5800, signal 237141/273448 (executing program) 2022/09/15 03:54:02 fetching corpus: 5850, signal 237731/273806 (executing program) 2022/09/15 03:54:02 fetching corpus: 5900, signal 238085/274179 (executing program) 2022/09/15 03:54:02 fetching corpus: 5950, signal 238694/274630 (executing program) 2022/09/15 03:54:02 fetching corpus: 6000, signal 239244/275011 (executing program) 2022/09/15 03:54:03 fetching corpus: 6050, signal 239997/275368 (executing program) 2022/09/15 03:54:03 fetching corpus: 6100, signal 240884/275718 (executing program) 2022/09/15 03:54:03 fetching corpus: 6150, signal 241481/276232 (executing program) 2022/09/15 03:54:03 fetching corpus: 6200, signal 241868/276579 (executing program) 2022/09/15 03:54:03 fetching corpus: 6250, signal 242204/276939 (executing program) 2022/09/15 03:54:03 fetching corpus: 6300, signal 242710/277281 (executing program) 2022/09/15 03:54:03 fetching corpus: 6350, signal 243846/277617 (executing program) 2022/09/15 03:54:03 fetching corpus: 6400, signal 244218/277914 (executing program) 2022/09/15 03:54:03 fetching corpus: 6450, signal 244895/278239 (executing program) 2022/09/15 03:54:04 fetching corpus: 6500, signal 245488/278517 (executing program) 2022/09/15 03:54:04 fetching corpus: 6550, signal 245809/278786 (executing program) 2022/09/15 03:54:04 fetching corpus: 6600, signal 246639/279080 (executing program) 2022/09/15 03:54:04 fetching corpus: 6650, signal 247452/279341 (executing program) 2022/09/15 03:54:04 fetching corpus: 6700, signal 247901/279538 (executing program) 2022/09/15 03:54:04 fetching corpus: 6750, signal 248455/279552 (executing program) 2022/09/15 03:54:05 fetching corpus: 6800, signal 248939/279554 (executing program) 2022/09/15 03:54:05 fetching corpus: 6850, signal 249937/279564 (executing program) 2022/09/15 03:54:05 fetching corpus: 6900, signal 250424/279584 (executing program) 2022/09/15 03:54:05 fetching corpus: 6950, signal 251261/279658 (executing program) 2022/09/15 03:54:05 fetching corpus: 7000, signal 251908/279667 (executing program) 2022/09/15 03:54:05 fetching corpus: 7050, signal 252300/279717 (executing program) 2022/09/15 03:54:05 fetching corpus: 7100, signal 252702/279718 (executing program) 2022/09/15 03:54:05 fetching corpus: 7150, signal 253090/279718 (executing program) 2022/09/15 03:54:06 fetching corpus: 7200, signal 253381/279719 (executing program) 2022/09/15 03:54:06 fetching corpus: 7250, signal 253910/279740 (executing program) 2022/09/15 03:54:06 fetching corpus: 7300, signal 254396/279751 (executing program) 2022/09/15 03:54:06 fetching corpus: 7350, signal 255064/279821 (executing program) 2022/09/15 03:54:06 fetching corpus: 7400, signal 255441/279821 (executing program) 2022/09/15 03:54:06 fetching corpus: 7450, signal 255977/279822 (executing program) 2022/09/15 03:54:06 fetching corpus: 7500, signal 256392/279823 (executing program) 2022/09/15 03:54:07 fetching corpus: 7550, signal 256737/279835 (executing program) 2022/09/15 03:54:07 fetching corpus: 7600, signal 257283/279864 (executing program) 2022/09/15 03:54:07 fetching corpus: 7650, signal 257924/279871 (executing program) 2022/09/15 03:54:07 fetching corpus: 7700, signal 258338/279871 (executing program) 2022/09/15 03:54:07 fetching corpus: 7750, signal 258762/279884 (executing program) 2022/09/15 03:54:07 fetching corpus: 7800, signal 259080/279884 (executing program) 2022/09/15 03:54:08 fetching corpus: 7850, signal 259598/279893 (executing program) 2022/09/15 03:54:08 fetching corpus: 7900, signal 260029/279895 (executing program) 2022/09/15 03:54:08 fetching corpus: 7950, signal 260366/279942 (executing program) 2022/09/15 03:54:08 fetching corpus: 8000, signal 260914/279946 (executing program) 2022/09/15 03:54:08 fetching corpus: 8050, signal 261214/279947 (executing program) 2022/09/15 03:54:08 fetching corpus: 8100, signal 261685/280003 (executing program) 2022/09/15 03:54:08 fetching corpus: 8150, signal 262185/280011 (executing program) 2022/09/15 03:54:08 fetching corpus: 8200, signal 262603/280026 (executing program) 2022/09/15 03:54:09 fetching corpus: 8250, signal 263070/280028 (executing program) 2022/09/15 03:54:09 fetching corpus: 8300, signal 263670/280029 (executing program) 2022/09/15 03:54:09 fetching corpus: 8338, signal 263938/280035 (executing program) 2022/09/15 03:54:09 fetching corpus: 8338, signal 263938/280035 (executing program) 2022/09/15 03:54:11 starting 8 fuzzer processes 03:54:11 executing program 0: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x5a, 0x6, 0x100}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x7, 0x4, 0x7fffffff, 0x64, @dev={0xfe, 0x80, '\x00', 0x1a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7, 0x0, 0xfffffff8}}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r1, 0x29, 0x5, 0xff, 0x80000001, 0x29, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x0, 0xffff, 0x100}}) r3 = accept$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x5}, {0xa, 0x4e23, 0x6, @mcast1, 0x1ff}, 0x6, [0x0, 0x3f, 0x20, 0x9, 0x8, 0xc47f236, 0xa3]}, 0x5c) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8081) preadv(r4, &(0x7f0000002480)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/62, 0x3e}, {&(0x7f0000001380)=""/209, 0xd1}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x4, 0x80, 0xfffffffa) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000024c0), 0x440, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000002500)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x1) syz_open_dev$vcsn(&(0x7f0000002540), 0x4e73, 0x428040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r2) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000002a00)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000029c0)={&(0x7f0000002600)={0x3a4, r6, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x58}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x138, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x48, 0x2, "07c2a53155da52b7956984852c415414c8c97e6ece229204465de579ba2476844df5f2c214d679b8fc6fc4326f8943c6ca729eb70b26bac649b4cff5d44cd05ec2bd8449"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6c, 0x3, "d67f32f2e62565f9ae7eafada4c0bc10a01f4a66a741932715b192570703ec50a6a85d8aef34513e46a6c4804558bb58772e303473f10bed1d4c0adb5fc0cae0e78f0a0cb69e86e3193ea85710ea2f62aef87d6e6d7ae08ce0fe59edd90ae8367e3c3885096f0359"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1b, 0x3, "6efcb2ffc2b794820be97330150f18e05cc2ec0f145a7b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x52, 0x3, "d3d4bf0aff8c66d931711257b3367fcf58c6bb5d9526de6dba22a32e1c790e8ccb15422dbd418b4ae8897a5d4ba970bae25ab2bbae94315680ec782d31a847b236b586d970143d956a621ae8c75a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x241, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f}, @device_b, @device_a, @initial, {0x9, 0x9}}, 0x5a, @random, 0x2000, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x1b}, {0x6}, {0x10, 0x1}, {0xc, 0x1}, {0x3}]}, @void, @void, @val={0x6, 0x2, 0xc429}, @val={0x5, 0x1c, {0x0, 0x9a, 0x3, "34a41f5ce6b6073fa2c87b2c51e3cff7ef318a2d8e0c8b476f"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x41}}, @void, [{0xdd, 0xc6, "18b292af9185aab651b9d0659fd4230903b6b1f6bbe9e3ebb31fda6a09c7870e50aa2afc75a2bbae14aadb05ca342ec828898f76d22be7cc4746634bacddcef1e5bfa38bcb36f258322117cfd717318fb1348b4723cd7db0b219f3eb5d646886d32bc2ee482264069652a6a83f5bce2a5e0fe003bc794a2ccc7abf939ad6bfa79a17c363bea5169ca7ee4ee21753eb39ca26cbb425d4e96d4b6162d6a85382b1b291deb07cd260d8448e4ebe95ae85ae0f435bb931e229e4c83b73630c49c4cd78b6c80110c4"}, {0xdd, 0xc6, "b23c4fefdd8ee90ff0ec6f6287c8b94d74c020a157a504d0ffe403154a8dbbdcd9e4126b7bb339b397b1a1bff5a200edde3de12460c61d4d7ccfb766ca4a36e5b248882f5aa349e4342ca03b5d9aece30efa5cb0885d9d674e6021b19e4395a762b30bc089b3003c815272afab58428884bf189a349748b0efe34ddbca385053c8212d4f20241f4a87805b2dd784964f0f289f735ce5a339e54a43d6342ee5f4b29e34462a5ffee70621f6dbd4a30a9b3e37621ce20dd46ddff049d6b147d892a7626af30278"}, {0xdd, 0x45, "44414af01d726bc2f7703e5a33c20255c54fe4b1202cbfcee8470d3c40870fa72b8266d5c3f3c2dd2d8943586553fbece9247005a8a0b70c30a1c529f4a63f9e2fc8532c26"}]}}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x8090}, 0xc090) r7 = openat$incfs(r4, &(0x7f0000002a40)='.log\x00', 0x2602, 0x200) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000002a80)=@hopopts={0x3b, 0xd, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x20, {0x3, 0x6, 0x91, 0x2a6, [0x3, 0xed2, 0x9]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x1, 0x101, [0x9, 0x5, 0x8]}}, @hao={0xc9, 0x10, @empty}]}, 0x70) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002b80)={'sit0\x00', &(0x7f0000002b00)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x1, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8, 0x0, 0x3}}) tee(0xffffffffffffffff, r2, 0x4000000000000000, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002c00)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002bc0)="db850a1d9fdfa311626599925dad45ec5dcc091d75e32e", 0x17}, 0x68) 03:54:11 executing program 1: ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) r0 = syz_io_uring_setup(0x4a94, &(0x7f0000000000)={0x0, 0x5a3, 0x8, 0x3, 0x25e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10001, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x1f) r3 = syz_io_uring_setup(0x2b89, &(0x7f0000000180)={0x0, 0x3571, 0x8, 0x1, 0x3be, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r0, 0x5, {0x0, r0}, 0x80000001, 0x8, 0x1, {0x0, r5, r0}}, 0x9f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x30, r3, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x80, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x20010, r3, 0x0) io_uring_enter(r3, 0x6318, 0xdd1b, 0x0, &(0x7f0000000300)={[0x6]}, 0x8) r6 = syz_open_dev$vcsu(&(0x7f0000000340), 0x800, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000a, 0x40010, r6, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x100, 0x0) syz_io_uring_setup(0x7235, &(0x7f00000006c0)={0x0, 0xe527, 0x0, 0x0, 0xfc, 0x0, r7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000007c0)={0x80000001}) r8 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x4999, &(0x7f0000000800)={0x0, 0x5088, 0x8, 0x3, 0x3ff, 0x0, r8}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) syz_io_uring_setup(0x1381, &(0x7f0000000900)={0x0, 0x815, 0x0, 0x3, 0x369, 0x0, r6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000980), &(0x7f00000009c0)) r9 = fcntl$dupfd(r7, 0x406, r7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r9, 0x0) 03:54:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) socketpair(0x1d, 0x2, 0x81, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x1, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000800) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x74}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000380)={'veth1_vlan\x00', @ifru_flags}) r7 = pidfd_getfd(r4, r1, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r8, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x8}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x30}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) io_uring_setup(0x2afb, &(0x7f0000000540)={0x0, 0x401c, 0x4, 0x0, 0x32e, 0x0, r9}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x200200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000840) 03:54:11 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x18000000}}, './file0\x00'}) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x10080) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000240)={r4, r5/1000+60000}, 0x10) r6 = dup2(r1, r1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xfd, 0x4, 0x80, 0x1, 0x0, 0x4, 0x100, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000280), 0xa}, 0x800, 0x57, 0x5, 0x0, 0x10000, 0x5, 0xfff, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x8, r6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip6_tables_targets\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="57e1f9a99507"}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x200c}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xb8}}, 0x4) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000500)) clock_gettime(0x1, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) bind$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 03:54:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xf3171c42f6e8fcad, 0x73) r1 = inotify_init() r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000040)=0x100000001) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x800) inotify_rm_watch(r3, r4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xffff) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000180)={0xffff, 0x20, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x20}) lseek(r0, 0x0, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x28, 0x1}, @timestamp, @window={0x3, 0x20, 0x449e}, @window={0x3, 0x8000, 0x8}, @mss={0x2, 0x80}], 0x5) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000280)={{r2}, 0x0, 0x8, @unused=[0x4, 0x64f800000000000, 0x8000, 0x7f], @devid}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000001280)=0x9, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000001300)={{r0}, {@void, @max}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000014c0)={&(0x7f00000013c0)=""/239, 0xef}) 03:54:11 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000100)="fa73ed0f8aa57657a279585e651e5335eda7256399fb9896a574c30d77c9c1346818f6b00a943ff078faf17472272f859c637321f9ea9aa7b2965d9f64ef94f130eaf7efd1004230853dd1e6803f9d9f3ec18fa7bdf7ab2f72f6eaac2bc2549ee2166c5c260961720e0fcb860f", 0x6d}, {&(0x7f0000000180)="198c3d9f32ff013fb0db21000021725f6c4d5d05de3f9bfd79115dd0d1943e92bb9c75f07aa71469edbd41148838062dd8525657f7aa97b8c3fbd4a50ffbe8fa9edcce18b2c0e921807efa4a3a16d48872d11bbca1917cb0398a8e90ca2455ae4ae336784071b2bee7489b034ad30004346a0d5c06d3d15f55b62633b951c9f152172c61a3c5418cc47bde327dd72d00f778ae474ccf5fd09dcf5cb656e8018d88c6d3bb9e2911a172ff21fec65d4c9b9c56a91d664b46002383a65185c773652e54589023903dfb8b1b4dfebfe1701b7be1a3225f3176a4868773412a2674699a86e540215d45f7ca3f0278", 0xec}], 0x2, 0x7, 0xffff8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffbd, 0x16}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_FILS_KEK={0x30, 0xf2, "92812f300c55d2d4c7f3a84d77161560acbeaab603eb009c5f61d9c06bcfa0e9f0aa9cce964b797a3a1b419d"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe4, r5, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfe, 0x16}}}}, [@NL80211_ATTR_VENDOR_DATA={0xac, 0xc5, "6f797aa51b1f0130da90936fdd88966fe597b4e870239d6797b4738e8781c42e31d4479d1c4ad5cafcacb43f6083d97d6e1574ac9aa12812f6d1ce88e782ac2897593d1798ae6ef17122de3ca8e13709b229ef4b73ee8d41c62f97a68ae62f2a3edad25595785f832aa0ac6bc33343462446930411d501eb8def433beac44bf291836ee0e776d3d5e86608bac5731b3eec59a8301449d06ef39f6c7c0744906398bf06bc548d8e02"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000800}, 0xc000) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000680)={r1}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x82, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, r5, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x1, 0x80, 0x6f32]}, @NL80211_ATTR_FRAME={0x2e, 0x33, @reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @broadcast, @from_mac, {0x8, 0x20}}, 0x30, 0x8, @device_b, {0x0, 0x6, @default_ibss_ssid}, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22048055}, 0x22000001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r7) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x74, r8, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x68}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r9 = creat(&(0x7f0000000a80)='./file0\x00', 0x4) fallocate(r9, 0x40, 0x9, 0x6) [ 83.875075] audit: type=1400 audit(1663214051.486:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:54:11 executing program 6: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "60460c6b177c7637", "bd6d65c6c7341120d6cee3fc6e9c98ca78fa0e2a4a39589e35075dfa16e65be8", "e83bb733", "a8a668384914320e"}, 0x38) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x8, 0x7, 0x75f8f9d5, 0xb7c4, 0x6]}, &(0x7f00000000c0)=0x54) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='vxcan1\x00', 0x10) r0 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xb59, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="fc25e2aba55e06e4a8939547b8c8d1f559a2397c4dec736d2760f3dfe79b64720b805ebe7579fd17b3bd8d2bbb293f7ebeabaf894ad1241c6e0abcbef730c574bb93e0b52149458b99d0c0d75cc9bc7025ffe43bf54dcda18ddee7db7ca678746a6c27371cfcdc39c5845cbe1a53e1878485ba3d647a7d8ff970e617df948c89b2ae553972a6359adbd0b6223281ec98097e708cc1", 0x95, 0x4}, {&(0x7f0000000280)="bd758447ddd901627d99afce8fcbafb06328bea4855cc32697b33d111c7abfd1d7842562e3a1bd8bab167f09994fa1ca52cdc7027ebd08d3c790cbec0d9a77d146a74541ba0fdb1c39e664a57014bad8550a2f26a556648f61a5646ff60efd8674fc435e771041d67505d8e3f0ae339ed3091af97e7009c0e7676cfec21e0d7d4ded9dd8c7eb985fac9cd70274567c0f7ab7a58d13c4d61929958eb73ad320", 0x9f, 0x5}, {&(0x7f0000000340)="a264a2a6b607cf6dfdfd87988dbb6eb4a334cf49bbb9222b71e6538d7b77acf32b241f3f49f219607fd5119f5daabcbe55c3ff79779dc11913a79331b5ff3dba680984cd852bea8e2146706aa3a35984fe79af3af1aba65a246519f11030", 0x5e, 0x8}], 0x101010, &(0x7f0000000440)={[{@dots}, {@fat=@dos1xfloppy}, {@dots}], [{@obj_user={'obj_user', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '!{'}}]}) r1 = socket$inet6(0xa, 0xe, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000004c0)={"0c4ab9d2b0dd9f7f3e0411aea8642e03", 0x0, 0x0, {0xa5, 0xfff}, {0x5, 0x7}, 0x4, [0x6, 0x7, 0x55f, 0x5, 0x7f, 0xfffffffffffffff8, 0x9, 0x400, 0x0, 0x9b, 0x4, 0x1, 0x3, 0x100000000, 0x1f, 0x4]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000005c0)={{r1}, r2, 0x12, @unused=[0x3, 0xfffffffffffffff9, 0x6, 0xffffffff7fffffff], @name="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"}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000015c0)={@private0}, 0x14) r3 = openat$incfs(r0, &(0x7f0000001600)='.log\x00', 0x2000, 0x4) r4 = perf_event_open(&(0x7f0000001640)={0x4, 0x80, 0x5, 0x2, 0x74, 0x2, 0x0, 0x8000, 0x30110, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x81, 0x8}, 0x161, 0x9, 0x1ff, 0x0, 0x422f2e93, 0x2, 0x401, 0x0, 0x6, 0x0, 0x25}, 0x0, 0x7, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001740)={{r4}, r2, 0x4, @inherit={0x70, &(0x7f00000016c0)={0x1, 0x5, 0x7a, 0xff, {0x6, 0x1d, 0x0, 0x9, 0x8}, [0x3, 0x800, 0x1, 0x4, 0xf9d]}}, @name="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"}) r5 = perf_event_open(&(0x7f0000002740)={0x0, 0x80, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, 0x90000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x8}, 0x40600, 0x101, 0x40, 0x4, 0xfff, 0x9, 0x4, 0x0, 0x9, 0x0, 0x335}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000027c0)='/sys/bus/hid', 0x300, 0x10) r7 = accept$inet(r6, &(0x7f0000002800)={0x2, 0x0, @loopback}, &(0x7f0000002840)=0x10) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FIONCLEX(r8, 0x5450) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002900)={0x0}, &(0x7f0000002940)=0xc) perf_event_open(&(0x7f0000002880)={0x1, 0x80, 0x1, 0x7, 0x80, 0x11, 0x0, 0x8, 0x0, 0xc1f20134ebf3fc70, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x2, 0x7}, 0x18121, 0x5, 0x1, 0x8, 0x1, 0x8, 0xe0eb, 0x0, 0x6, 0x0, 0x5}, r9, 0x5, r4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000002980)={0x0, 0x3, r5, 0x3, 0x80000}) getpeername(r7, &(0x7f00000029c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000002a40)=0x80) 03:54:11 executing program 7: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a4, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe113}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff0000}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6e}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4001}, 0x880) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000440)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x85, 0x8, 0x9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8000, 0x700, 0x8, 0xffffffc0}}) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x250, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x234, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x2, 0xbc, 0x6}, {0x1, 0x2, 0x1, 0xfff}, {0x6, 0x5, 0x7f, 0xfffff800}, {0x6, 0x7f, 0x20, 0x8}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9b1}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x20040090}, 0x40) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000900)={r4, 0x1, 0x6, @multicast}, 0x10) setresuid(r3, r3, r3) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000940), 0x80c00, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r8, 0x89f4, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x2, 0xe448, 0x49, @local, @private0, 0x7, 0x7, 0x94a, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', r6, 0x29, 0x6, 0x7, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x7, 0x8, 0x7, 0x101}}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000e80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b40)={0x2f0, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r12 = fcntl$dupfd(r9, 0x406, r5) ioctl$sock_inet6_udp_SIOCINQ(r12, 0x541b, &(0x7f0000000fc0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000001080)={'ip6gre0\x00', &(0x7f0000001000)={'syztnl2\x00', r2, 0x29, 0x80, 0x66, 0x7, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x80, 0x3, 0x1}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000010c0)={r13, 0x1, 0x6}, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x64, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x48000) [ 85.144592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.147154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.148360] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.152327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.155194] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.156397] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.159495] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.161345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.168135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.169460] Bluetooth: hci1: HCI_REQ-0x0c1a [ 85.170741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.174575] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.181711] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.182404] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.185602] Bluetooth: hci2: HCI_REQ-0x0c1a [ 85.188752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.198834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.206889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.208557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.210426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.210433] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.212562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.213724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.219216] Bluetooth: hci0: HCI_REQ-0x0c1a [ 85.259891] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.261950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.263087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.264283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.266819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.267927] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.269305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.270551] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.271852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.273958] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.275376] Bluetooth: hci4: HCI_REQ-0x0c1a [ 85.309713] Bluetooth: hci3: HCI_REQ-0x0c1a [ 85.310493] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.340416] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.341425] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.346293] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.347254] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.357909] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.359180] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.372854] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.374357] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.421860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.423447] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.448665] Bluetooth: hci6: HCI_REQ-0x0c1a [ 85.449109] Bluetooth: hci7: HCI_REQ-0x0c1a [ 87.224389] Bluetooth: hci2: command 0x0409 tx timeout [ 87.224390] Bluetooth: hci1: command 0x0409 tx timeout [ 87.287670] Bluetooth: hci0: command 0x0409 tx timeout [ 87.288678] Bluetooth: hci4: command 0x0409 tx timeout [ 87.290204] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 87.352684] Bluetooth: hci3: command 0x0409 tx timeout [ 87.479671] Bluetooth: hci7: command 0x0409 tx timeout [ 87.480164] Bluetooth: hci6: command 0x0409 tx timeout [ 89.271679] Bluetooth: hci1: command 0x041b tx timeout [ 89.271693] Bluetooth: hci2: command 0x041b tx timeout [ 89.335729] Bluetooth: hci4: command 0x041b tx timeout [ 89.336575] Bluetooth: hci0: command 0x041b tx timeout [ 89.399694] Bluetooth: hci3: command 0x041b tx timeout [ 89.527848] Bluetooth: hci6: command 0x041b tx timeout [ 89.528612] Bluetooth: hci7: command 0x041b tx timeout [ 91.319826] Bluetooth: hci2: command 0x040f tx timeout [ 91.320752] Bluetooth: hci1: command 0x040f tx timeout [ 91.383709] Bluetooth: hci0: command 0x040f tx timeout [ 91.384587] Bluetooth: hci4: command 0x040f tx timeout [ 91.447799] Bluetooth: hci3: command 0x040f tx timeout [ 91.575831] Bluetooth: hci7: command 0x040f tx timeout [ 91.578352] Bluetooth: hci6: command 0x040f tx timeout [ 92.728670] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 93.368684] Bluetooth: hci1: command 0x0419 tx timeout [ 93.369175] Bluetooth: hci2: command 0x0419 tx timeout [ 93.431743] Bluetooth: hci4: command 0x0419 tx timeout [ 93.432215] Bluetooth: hci0: command 0x0419 tx timeout [ 93.497138] Bluetooth: hci3: command 0x0419 tx timeout [ 93.624777] Bluetooth: hci6: command 0x0419 tx timeout [ 93.625240] Bluetooth: hci7: command 0x0419 tx timeout [ 95.357515] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.358703] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.360699] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.363047] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.365194] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.369818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.378134] Bluetooth: hci5: HCI_REQ-0x0c1a [ 97.399681] Bluetooth: hci5: command 0x0409 tx timeout [ 99.447675] Bluetooth: hci5: command 0x041b tx timeout [ 101.495674] Bluetooth: hci5: command 0x040f tx timeout [ 103.543733] Bluetooth: hci5: command 0x0419 tx timeout [ 137.164493] loop6: detected capacity change from 0 to 5 [ 137.190769] audit: type=1400 audit(1663214104.802:7): avc: denied { open } for pid=3463 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.203130] loop6: detected capacity change from 0 to 5 03:55:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x35c2423b3d3436a6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000900)=""/192, 0xc0}], 0x8, 0x9, 0x0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x4000, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80000001) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) r3 = getpid() pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x4, 0x2, 0x20, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x800, 0x2, 0x6, 0x9, 0x3, 0x40, 0x3, 0x0, 0x800, 0x0, 0x8}, r3, 0x9, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x28e4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) [ 137.317004] audit: type=1400 audit(1663214104.929:8): avc: denied { kernel } for pid=3477 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.342965] ------------[ cut here ]------------ [ 137.342988] [ 137.342991] ====================================================== [ 137.342995] WARNING: possible circular locking dependency detected [ 137.342999] 6.0.0-rc5-next-20220914 #1 Not tainted [ 137.343006] ------------------------------------------------------ [ 137.343009] syz-executor.6/3478 is trying to acquire lock: [ 137.343016] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 137.343055] [ 137.343055] but task is already holding lock: [ 137.343058] ffff88800d1e8020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.343086] [ 137.343086] which lock already depends on the new lock. [ 137.343086] [ 137.343089] [ 137.343089] the existing dependency chain (in reverse order) is: [ 137.343093] [ 137.343093] -> #3 (&ctx->lock){....}-{2:2}: [ 137.343107] _raw_spin_lock+0x2a/0x40 [ 137.343124] __perf_event_task_sched_out+0x53b/0x18d0 [ 137.343137] __schedule+0xedd/0x2470 [ 137.343148] schedule+0xda/0x1b0 [ 137.343157] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.343177] syscall_exit_to_user_mode+0x19/0x40 [ 137.343195] do_syscall_64+0x48/0x90 [ 137.343208] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.343226] [ 137.343226] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 137.343239] _raw_spin_lock_nested+0x30/0x40 [ 137.343254] raw_spin_rq_lock_nested+0x1e/0x30 [ 137.343267] task_fork_fair+0x63/0x4d0 [ 137.343284] sched_cgroup_fork+0x3d0/0x540 [ 137.343298] copy_process+0x4183/0x6e20 [ 137.343308] kernel_clone+0xe7/0x890 [ 137.343317] user_mode_thread+0xad/0xf0 [ 137.343328] rest_init+0x24/0x250 [ 137.343343] arch_call_rest_init+0xf/0x14 [ 137.343356] start_kernel+0x4c1/0x4e6 [ 137.343365] secondary_startup_64_no_verify+0xe0/0xeb [ 137.343380] [ 137.343380] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 137.343393] _raw_spin_lock_irqsave+0x39/0x60 [ 137.343408] try_to_wake_up+0xab/0x1920 [ 137.343421] up+0x75/0xb0 [ 137.343432] __up_console_sem+0x6e/0x80 [ 137.343451] console_unlock+0x46a/0x590 [ 137.343466] vprintk_emit+0x1bd/0x560 [ 137.343482] vprintk+0x84/0xa0 [ 137.343498] _printk+0xba/0xf1 [ 137.343516] kauditd_hold_skb.cold+0x3f/0x4e [ 137.343530] kauditd_send_queue+0x233/0x290 [ 137.343544] kauditd_thread+0x5da/0x9a0 [ 137.343558] kthread+0x2ed/0x3a0 [ 137.343572] ret_from_fork+0x22/0x30 [ 137.343585] [ 137.343585] -> #0 ((console_sem).lock){....}-{2:2}: [ 137.343598] __lock_acquire+0x2a02/0x5e70 [ 137.343615] lock_acquire+0x1a2/0x530 [ 137.343630] _raw_spin_lock_irqsave+0x39/0x60 [ 137.343644] down_trylock+0xe/0x70 [ 137.343656] __down_trylock_console_sem+0x3b/0xd0 [ 137.343672] vprintk_emit+0x16b/0x560 [ 137.343688] vprintk+0x84/0xa0 [ 137.343703] _printk+0xba/0xf1 [ 137.343719] report_bug.cold+0x72/0xab [ 137.343731] handle_bug+0x3c/0x70 [ 137.343744] exc_invalid_op+0x14/0x50 [ 137.343757] asm_exc_invalid_op+0x16/0x20 [ 137.343773] group_sched_out.part.0+0x2c7/0x460 [ 137.343784] ctx_sched_out+0x8f1/0xc10 [ 137.343793] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.343805] __schedule+0xedd/0x2470 [ 137.343815] schedule+0xda/0x1b0 [ 137.343824] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.343842] syscall_exit_to_user_mode+0x19/0x40 [ 137.343859] do_syscall_64+0x48/0x90 [ 137.343872] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.343888] [ 137.343888] other info that might help us debug this: [ 137.343888] [ 137.343891] Chain exists of: [ 137.343891] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 137.343891] [ 137.343906] Possible unsafe locking scenario: [ 137.343906] [ 137.343909] CPU0 CPU1 [ 137.343911] ---- ---- [ 137.343913] lock(&ctx->lock); [ 137.343919] lock(&rq->__lock); [ 137.343926] lock(&ctx->lock); [ 137.343932] lock((console_sem).lock); [ 137.343938] [ 137.343938] *** DEADLOCK *** [ 137.343938] [ 137.343940] 2 locks held by syz-executor.6/3478: [ 137.343947] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 137.343972] #1: ffff88800d1e8020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.344000] [ 137.344000] stack backtrace: [ 137.344003] CPU: 1 PID: 3478 Comm: syz-executor.6 Not tainted 6.0.0-rc5-next-20220914 #1 [ 137.344016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.344024] Call Trace: [ 137.344028] [ 137.344032] dump_stack_lvl+0x8b/0xb3 [ 137.344047] check_noncircular+0x263/0x2e0 [ 137.344063] ? format_decode+0x26c/0xb50 [ 137.344078] ? print_circular_bug+0x450/0x450 [ 137.344095] ? enable_ptr_key_workfn+0x20/0x20 [ 137.344110] ? format_decode+0x26c/0xb50 [ 137.344125] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 137.344142] __lock_acquire+0x2a02/0x5e70 [ 137.344163] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 137.344186] lock_acquire+0x1a2/0x530 [ 137.344202] ? down_trylock+0xe/0x70 [ 137.344216] ? rcu_read_unlock+0x40/0x40 [ 137.344237] ? vprintk+0x84/0xa0 [ 137.344254] _raw_spin_lock_irqsave+0x39/0x60 [ 137.344270] ? down_trylock+0xe/0x70 [ 137.344283] down_trylock+0xe/0x70 [ 137.344296] ? vprintk+0x84/0xa0 [ 137.344312] __down_trylock_console_sem+0x3b/0xd0 [ 137.344329] vprintk_emit+0x16b/0x560 [ 137.344348] vprintk+0x84/0xa0 [ 137.344365] _printk+0xba/0xf1 [ 137.344382] ? record_print_text.cold+0x16/0x16 [ 137.344404] ? report_bug.cold+0x66/0xab [ 137.344418] ? group_sched_out.part.0+0x2c7/0x460 [ 137.344429] report_bug.cold+0x72/0xab [ 137.344444] handle_bug+0x3c/0x70 [ 137.344457] exc_invalid_op+0x14/0x50 [ 137.344472] asm_exc_invalid_op+0x16/0x20 [ 137.344489] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.344502] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.344519] RSP: 0018:ffff88803a487c48 EFLAGS: 00010006 [ 137.344529] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.344536] RDX: ffff888020148000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 137.344544] RBP: ffff88801b6e0000 R08: 0000000000000005 R09: 0000000000000001 [ 137.344551] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88800d1e8000 [ 137.344560] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 137.344570] ? group_sched_out.part.0+0x2c7/0x460 [ 137.344583] ? group_sched_out.part.0+0x2c7/0x460 [ 137.344596] ctx_sched_out+0x8f1/0xc10 [ 137.344609] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.344624] ? lock_is_held_type+0xd7/0x130 [ 137.344642] ? __perf_cgroup_move+0x160/0x160 [ 137.344654] ? set_next_entity+0x304/0x550 [ 137.344671] ? update_curr+0x267/0x740 [ 137.344689] ? lock_is_held_type+0xd7/0x130 [ 137.344707] __schedule+0xedd/0x2470 [ 137.344721] ? io_schedule_timeout+0x150/0x150 [ 137.344733] ? rcu_read_lock_sched_held+0x3e/0x80 [ 137.344754] schedule+0xda/0x1b0 [ 137.344765] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.344785] syscall_exit_to_user_mode+0x19/0x40 [ 137.344803] do_syscall_64+0x48/0x90 [ 137.344817] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.344834] RIP: 0033:0x7f49830d9b19 [ 137.344842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.344853] RSP: 002b:00007f498064f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.344864] RAX: 0000000000000001 RBX: 00007f49831ecf68 RCX: 00007f49830d9b19 [ 137.344872] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49831ecf6c [ 137.344879] RBP: 00007f49831ecf60 R08: 000000000000000e R09: 0000000000000000 [ 137.344886] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f49831ecf6c [ 137.344893] R13: 00007ffde352613f R14: 00007f498064f300 R15: 0000000000022000 [ 137.344906] [ 137.401427] WARNING: CPU: 1 PID: 3478 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 137.402108] Modules linked in: [ 137.402343] CPU: 1 PID: 3478 Comm: syz-executor.6 Not tainted 6.0.0-rc5-next-20220914 #1 [ 137.402939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.403750] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.404158] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.405492] RSP: 0018:ffff88803a487c48 EFLAGS: 00010006 [ 137.405880] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.406399] RDX: ffff888020148000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 137.406933] RBP: ffff88801b6e0000 R08: 0000000000000005 R09: 0000000000000001 [ 137.407448] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88800d1e8000 [ 137.407961] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 137.408476] FS: 00007f498064f700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 137.409067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.409492] CR2: 00007f4841763ae0 CR3: 0000000041660000 CR4: 0000000000350ee0 [ 137.410011] Call Trace: [ 137.410203] [ 137.410383] ctx_sched_out+0x8f1/0xc10 [ 137.410684] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.411068] ? lock_is_held_type+0xd7/0x130 [ 137.411402] ? __perf_cgroup_move+0x160/0x160 [ 137.411741] ? set_next_entity+0x304/0x550 [ 137.412062] ? update_curr+0x267/0x740 [ 137.412364] ? lock_is_held_type+0xd7/0x130 [ 137.412696] __schedule+0xedd/0x2470 [ 137.412981] ? io_schedule_timeout+0x150/0x150 [ 137.413322] ? rcu_read_lock_sched_held+0x3e/0x80 [ 137.413697] schedule+0xda/0x1b0 [ 137.413955] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.414334] syscall_exit_to_user_mode+0x19/0x40 [ 137.414700] do_syscall_64+0x48/0x90 [ 137.414990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.415384] RIP: 0033:0x7f49830d9b19 [ 137.415679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.417019] RSP: 002b:00007f498064f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.417587] RAX: 0000000000000001 RBX: 00007f49831ecf68 RCX: 00007f49830d9b19 [ 137.418119] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49831ecf6c [ 137.418648] RBP: 00007f49831ecf60 R08: 000000000000000e R09: 0000000000000000 [ 137.419180] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f49831ecf6c [ 137.419718] R13: 00007ffde352613f R14: 00007f498064f300 R15: 0000000000022000 [ 137.420245] [ 137.420425] irq event stamp: 544 [ 137.420691] hardirqs last enabled at (543): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 137.421398] hardirqs last disabled at (544): [] __schedule+0x1225/0x2470 [ 137.422000] softirqs last enabled at (532): [] __irq_exit_rcu+0x11b/0x180 [ 137.422593] softirqs last disabled at (527): [] __irq_exit_rcu+0x11b/0x180 [ 137.423183] ---[ end trace 0000000000000000 ]--- 03:55:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x35c2423b3d3436a6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000900)=""/192, 0xc0}], 0x8, 0x9, 0x0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x4000, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80000001) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) r3 = getpid() pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x4, 0x2, 0x20, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x800, 0x2, 0x6, 0x9, 0x3, 0x40, 0x3, 0x0, 0x800, 0x0, 0x8}, r3, 0x9, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x28e4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) 03:55:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x35c2423b3d3436a6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000900)=""/192, 0xc0}], 0x8, 0x9, 0x0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x4000, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80000001) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) r3 = getpid() pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x4, 0x2, 0x20, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x800, 0x2, 0x6, 0x9, 0x3, 0x40, 0x3, 0x0, 0x800, 0x0, 0x8}, r3, 0x9, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x28e4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) 03:55:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x35c2423b3d3436a6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000900)=""/192, 0xc0}], 0x8, 0x9, 0x0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x4000, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80000001) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) r3 = getpid() pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x4, 0x2, 0x20, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x800, 0x2, 0x6, 0x9, 0x3, 0x40, 0x3, 0x0, 0x800, 0x0, 0x8}, r3, 0x9, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x28e4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) 03:55:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x35c2423b3d3436a6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000900)=""/192, 0xc0}], 0x8, 0x9, 0x0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x4000, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80000001) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) r3 = getpid() pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x4, 0x2, 0x20, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x800, 0x2, 0x6, 0x9, 0x3, 0x40, 0x3, 0x0, 0x800, 0x0, 0x8}, r3, 0x9, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x28e4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) 03:55:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x35c2423b3d3436a6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000900)=""/192, 0xc0}], 0x8, 0x9, 0x0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x4000, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80000001) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) r3 = getpid() pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x4, 0x2, 0x20, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x800, 0x2, 0x6, 0x9, 0x3, 0x40, 0x3, 0x0, 0x800, 0x0, 0x8}, r3, 0x9, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x28e4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) 03:55:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x35c2423b3d3436a6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000900)=""/192, 0xc0}], 0x8, 0x9, 0x0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x4000, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80000001) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) r3 = getpid() pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x4, 0x2, 0x20, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x800, 0x2, 0x6, 0x9, 0x3, 0x40, 0x3, 0x0, 0x800, 0x0, 0x8}, r3, 0x9, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x28e4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) 03:55:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x35c2423b3d3436a6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000900)=""/192, 0xc0}], 0x8, 0x9, 0x0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x4000, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80000001) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) r3 = getpid() pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x4, 0x2, 0x20, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x800, 0x2, 0x6, 0x9, 0x3, 0x40, 0x3, 0x0, 0x800, 0x0, 0x8}, r3, 0x9, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x28e4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) VM DIAGNOSIS: 03:55:05 Registers: info registers vcpu 0 RAX=ffff88800f84d040 RBX=ffffc90006b2fee8 RCX=ffffffff811da5f7 RDX=1ffff1100120b780 RSI=0000000000000008 RDI=ffff88800905bc00 RBP=dffffc0000000000 RSP=ffff88800fc3fda0 R8 =0000000000000000 R9 =ffff88800905bc07 R10=ffffed100120b780 R11=0000000000000001 R12=ffffc90006b2fff9 R13=ffff88800f84d040 R14=0000000000000000 R15=0000000000000092 RIP=ffffffff81785c40 RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbd2d0b96f4 CR3=0000000005226000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fbd2d0c8470 00007fbd2d0c7f20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff88803a487698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0 RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f498064f700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4841763ae0 CR3=0000000041660000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f49831c07c0 00007f49831c07c8 YMM02=0000000000000000 0000000000000000 00007f49831c07e0 00007f49831c07c0 YMM03=0000000000000000 0000000000000000 00007f49831c07c8 00007f49831c07c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000