Warning: Permanently added '[localhost]:13454' (ECDSA) to the list of known hosts. 2022/09/17 08:08:44 fuzzer started 2022/09/17 08:08:45 dialing manager at localhost:36051 syzkaller login: [ 39.834593] cgroup: Unknown subsys name 'net' [ 39.930626] cgroup: Unknown subsys name 'rlimit' 2022/09/17 08:09:00 syscalls: 2215 2022/09/17 08:09:00 code coverage: enabled 2022/09/17 08:09:00 comparison tracing: enabled 2022/09/17 08:09:00 extra coverage: enabled 2022/09/17 08:09:00 setuid sandbox: enabled 2022/09/17 08:09:00 namespace sandbox: enabled 2022/09/17 08:09:00 Android sandbox: enabled 2022/09/17 08:09:00 fault injection: enabled 2022/09/17 08:09:00 leak checking: enabled 2022/09/17 08:09:00 net packet injection: enabled 2022/09/17 08:09:00 net device setup: enabled 2022/09/17 08:09:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/17 08:09:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/17 08:09:00 USB emulation: enabled 2022/09/17 08:09:00 hci packet injection: enabled 2022/09/17 08:09:00 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220916) 2022/09/17 08:09:00 802.15.4 emulation: enabled 2022/09/17 08:09:00 fetching corpus: 50, signal 28253/30038 (executing program) 2022/09/17 08:09:00 fetching corpus: 100, signal 41463/44833 (executing program) 2022/09/17 08:09:00 fetching corpus: 150, signal 55239/59958 (executing program) 2022/09/17 08:09:00 fetching corpus: 200, signal 63156/69188 (executing program) 2022/09/17 08:09:00 fetching corpus: 250, signal 67892/75278 (executing program) 2022/09/17 08:09:00 fetching corpus: 300, signal 73015/81670 (executing program) 2022/09/17 08:09:01 fetching corpus: 350, signal 79253/89037 (executing program) 2022/09/17 08:09:01 fetching corpus: 400, signal 82761/93724 (executing program) 2022/09/17 08:09:01 fetching corpus: 450, signal 85582/97748 (executing program) 2022/09/17 08:09:01 fetching corpus: 500, signal 88622/101851 (executing program) 2022/09/17 08:09:01 fetching corpus: 550, signal 93720/107885 (executing program) 2022/09/17 08:09:01 fetching corpus: 600, signal 96654/111829 (executing program) 2022/09/17 08:09:01 fetching corpus: 650, signal 100282/116370 (executing program) 2022/09/17 08:09:02 fetching corpus: 700, signal 105955/122691 (executing program) 2022/09/17 08:09:02 fetching corpus: 750, signal 108967/126584 (executing program) 2022/09/17 08:09:02 fetching corpus: 800, signal 110843/129390 (executing program) 2022/09/17 08:09:02 fetching corpus: 850, signal 114471/133717 (executing program) 2022/09/17 08:09:02 fetching corpus: 900, signal 117132/137175 (executing program) 2022/09/17 08:09:02 fetching corpus: 950, signal 119146/140051 (executing program) 2022/09/17 08:09:02 fetching corpus: 1000, signal 120613/142407 (executing program) 2022/09/17 08:09:03 fetching corpus: 1050, signal 123021/145489 (executing program) 2022/09/17 08:09:03 fetching corpus: 1100, signal 124670/147982 (executing program) 2022/09/17 08:09:03 fetching corpus: 1150, signal 127247/151226 (executing program) 2022/09/17 08:09:03 fetching corpus: 1200, signal 129199/153903 (executing program) 2022/09/17 08:09:03 fetching corpus: 1250, signal 131145/156544 (executing program) 2022/09/17 08:09:03 fetching corpus: 1300, signal 132940/159012 (executing program) 2022/09/17 08:09:03 fetching corpus: 1350, signal 135146/161786 (executing program) 2022/09/17 08:09:03 fetching corpus: 1400, signal 137496/164636 (executing program) 2022/09/17 08:09:04 fetching corpus: 1450, signal 139277/166997 (executing program) 2022/09/17 08:09:04 fetching corpus: 1500, signal 141561/169752 (executing program) 2022/09/17 08:09:04 fetching corpus: 1550, signal 143109/171920 (executing program) 2022/09/17 08:09:04 fetching corpus: 1600, signal 145312/174542 (executing program) 2022/09/17 08:09:04 fetching corpus: 1650, signal 146735/176514 (executing program) 2022/09/17 08:09:04 fetching corpus: 1700, signal 148600/178803 (executing program) 2022/09/17 08:09:04 fetching corpus: 1750, signal 150624/181187 (executing program) 2022/09/17 08:09:05 fetching corpus: 1800, signal 151772/182876 (executing program) 2022/09/17 08:09:05 fetching corpus: 1850, signal 152790/184535 (executing program) 2022/09/17 08:09:05 fetching corpus: 1900, signal 154478/186640 (executing program) 2022/09/17 08:09:05 fetching corpus: 1950, signal 155441/188149 (executing program) 2022/09/17 08:09:05 fetching corpus: 2000, signal 156662/189833 (executing program) 2022/09/17 08:09:05 fetching corpus: 2050, signal 157896/191519 (executing program) 2022/09/17 08:09:05 fetching corpus: 2100, signal 159828/193665 (executing program) 2022/09/17 08:09:06 fetching corpus: 2150, signal 162070/195953 (executing program) 2022/09/17 08:09:06 fetching corpus: 2200, signal 164664/198419 (executing program) 2022/09/17 08:09:06 fetching corpus: 2250, signal 166158/200227 (executing program) 2022/09/17 08:09:06 fetching corpus: 2300, signal 167566/201914 (executing program) 2022/09/17 08:09:06 fetching corpus: 2350, signal 168780/203386 (executing program) 2022/09/17 08:09:06 fetching corpus: 2400, signal 170606/205254 (executing program) 2022/09/17 08:09:06 fetching corpus: 2450, signal 171448/206522 (executing program) 2022/09/17 08:09:06 fetching corpus: 2500, signal 172689/207982 (executing program) 2022/09/17 08:09:06 fetching corpus: 2550, signal 173866/209392 (executing program) 2022/09/17 08:09:07 fetching corpus: 2600, signal 174857/210685 (executing program) 2022/09/17 08:09:07 fetching corpus: 2650, signal 175782/211920 (executing program) 2022/09/17 08:09:07 fetching corpus: 2700, signal 177715/213730 (executing program) 2022/09/17 08:09:07 fetching corpus: 2750, signal 179270/215332 (executing program) 2022/09/17 08:09:07 fetching corpus: 2800, signal 180554/216757 (executing program) 2022/09/17 08:09:07 fetching corpus: 2850, signal 181527/217935 (executing program) 2022/09/17 08:09:08 fetching corpus: 2900, signal 182472/219167 (executing program) 2022/09/17 08:09:08 fetching corpus: 2950, signal 183132/220189 (executing program) 2022/09/17 08:09:08 fetching corpus: 3000, signal 183784/221140 (executing program) 2022/09/17 08:09:08 fetching corpus: 3050, signal 184382/222127 (executing program) 2022/09/17 08:09:08 fetching corpus: 3100, signal 185472/223263 (executing program) 2022/09/17 08:09:08 fetching corpus: 3150, signal 187078/224719 (executing program) 2022/09/17 08:09:08 fetching corpus: 3200, signal 188270/225973 (executing program) 2022/09/17 08:09:09 fetching corpus: 3250, signal 189248/227044 (executing program) 2022/09/17 08:09:09 fetching corpus: 3300, signal 189813/227919 (executing program) 2022/09/17 08:09:09 fetching corpus: 3350, signal 190511/228851 (executing program) 2022/09/17 08:09:09 fetching corpus: 3400, signal 190989/229665 (executing program) 2022/09/17 08:09:09 fetching corpus: 3450, signal 191615/230501 (executing program) 2022/09/17 08:09:09 fetching corpus: 3500, signal 192155/231297 (executing program) 2022/09/17 08:09:09 fetching corpus: 3550, signal 193738/232623 (executing program) 2022/09/17 08:09:09 fetching corpus: 3600, signal 195592/233987 (executing program) 2022/09/17 08:09:10 fetching corpus: 3650, signal 196779/235035 (executing program) 2022/09/17 08:09:10 fetching corpus: 3700, signal 197485/235891 (executing program) 2022/09/17 08:09:10 fetching corpus: 3750, signal 198290/236715 (executing program) 2022/09/17 08:09:10 fetching corpus: 3800, signal 199629/237812 (executing program) 2022/09/17 08:09:10 fetching corpus: 3850, signal 200164/238534 (executing program) 2022/09/17 08:09:10 fetching corpus: 3900, signal 200808/239247 (executing program) 2022/09/17 08:09:10 fetching corpus: 3950, signal 201620/240036 (executing program) 2022/09/17 08:09:10 fetching corpus: 4000, signal 202445/240866 (executing program) 2022/09/17 08:09:11 fetching corpus: 4050, signal 203611/241729 (executing program) 2022/09/17 08:09:11 fetching corpus: 4100, signal 204394/242534 (executing program) 2022/09/17 08:09:11 fetching corpus: 4150, signal 205034/243239 (executing program) 2022/09/17 08:09:11 fetching corpus: 4200, signal 205823/244020 (executing program) 2022/09/17 08:09:11 fetching corpus: 4250, signal 206708/244743 (executing program) 2022/09/17 08:09:11 fetching corpus: 4300, signal 207820/245637 (executing program) 2022/09/17 08:09:11 fetching corpus: 4350, signal 208599/246347 (executing program) 2022/09/17 08:09:12 fetching corpus: 4400, signal 209185/246959 (executing program) 2022/09/17 08:09:12 fetching corpus: 4450, signal 209803/247531 (executing program) 2022/09/17 08:09:12 fetching corpus: 4500, signal 210873/248288 (executing program) 2022/09/17 08:09:12 fetching corpus: 4550, signal 211544/248925 (executing program) 2022/09/17 08:09:12 fetching corpus: 4600, signal 212099/249497 (executing program) 2022/09/17 08:09:12 fetching corpus: 4650, signal 213140/250230 (executing program) 2022/09/17 08:09:12 fetching corpus: 4700, signal 213871/250823 (executing program) 2022/09/17 08:09:13 fetching corpus: 4750, signal 214560/251414 (executing program) 2022/09/17 08:09:13 fetching corpus: 4800, signal 215483/252046 (executing program) 2022/09/17 08:09:13 fetching corpus: 4850, signal 216419/252691 (executing program) 2022/09/17 08:09:13 fetching corpus: 4900, signal 217210/253405 (executing program) 2022/09/17 08:09:13 fetching corpus: 4950, signal 217984/253959 (executing program) 2022/09/17 08:09:13 fetching corpus: 5000, signal 218478/254486 (executing program) 2022/09/17 08:09:13 fetching corpus: 5050, signal 219055/255022 (executing program) 2022/09/17 08:09:14 fetching corpus: 5100, signal 220124/255642 (executing program) 2022/09/17 08:09:14 fetching corpus: 5150, signal 220822/256139 (executing program) 2022/09/17 08:09:14 fetching corpus: 5200, signal 221744/256617 (executing program) 2022/09/17 08:09:14 fetching corpus: 5250, signal 222419/257085 (executing program) 2022/09/17 08:09:14 fetching corpus: 5300, signal 223109/257551 (executing program) 2022/09/17 08:09:14 fetching corpus: 5350, signal 223568/257984 (executing program) 2022/09/17 08:09:14 fetching corpus: 5400, signal 224358/258480 (executing program) 2022/09/17 08:09:15 fetching corpus: 5450, signal 225363/259027 (executing program) 2022/09/17 08:09:15 fetching corpus: 5500, signal 226033/259613 (executing program) 2022/09/17 08:09:15 fetching corpus: 5550, signal 226451/259998 (executing program) 2022/09/17 08:09:15 fetching corpus: 5600, signal 226917/260350 (executing program) 2022/09/17 08:09:15 fetching corpus: 5650, signal 227548/260782 (executing program) 2022/09/17 08:09:15 fetching corpus: 5700, signal 228223/261180 (executing program) 2022/09/17 08:09:15 fetching corpus: 5750, signal 228781/261527 (executing program) 2022/09/17 08:09:15 fetching corpus: 5800, signal 229113/261887 (executing program) 2022/09/17 08:09:15 fetching corpus: 5850, signal 229573/262220 (executing program) 2022/09/17 08:09:16 fetching corpus: 5900, signal 230219/262607 (executing program) 2022/09/17 08:09:16 fetching corpus: 5950, signal 230933/262942 (executing program) 2022/09/17 08:09:16 fetching corpus: 6000, signal 231652/263269 (executing program) 2022/09/17 08:09:16 fetching corpus: 6050, signal 232277/263583 (executing program) 2022/09/17 08:09:16 fetching corpus: 6100, signal 233153/263901 (executing program) 2022/09/17 08:09:16 fetching corpus: 6150, signal 233594/264163 (executing program) 2022/09/17 08:09:16 fetching corpus: 6200, signal 234286/264471 (executing program) 2022/09/17 08:09:16 fetching corpus: 6250, signal 234874/264724 (executing program) 2022/09/17 08:09:17 fetching corpus: 6300, signal 235744/264999 (executing program) 2022/09/17 08:09:17 fetching corpus: 6350, signal 236255/265239 (executing program) 2022/09/17 08:09:17 fetching corpus: 6400, signal 236829/265457 (executing program) 2022/09/17 08:09:17 fetching corpus: 6450, signal 237449/265703 (executing program) 2022/09/17 08:09:17 fetching corpus: 6500, signal 237889/265911 (executing program) 2022/09/17 08:09:17 fetching corpus: 6550, signal 238283/265919 (executing program) 2022/09/17 08:09:17 fetching corpus: 6600, signal 238780/265919 (executing program) 2022/09/17 08:09:18 fetching corpus: 6650, signal 239213/265932 (executing program) 2022/09/17 08:09:18 fetching corpus: 6700, signal 239915/265935 (executing program) 2022/09/17 08:09:18 fetching corpus: 6750, signal 240508/265935 (executing program) 2022/09/17 08:09:18 fetching corpus: 6800, signal 240935/265944 (executing program) 2022/09/17 08:09:18 fetching corpus: 6850, signal 241492/265949 (executing program) 2022/09/17 08:09:18 fetching corpus: 6900, signal 242114/265954 (executing program) 2022/09/17 08:09:18 fetching corpus: 6950, signal 242659/266117 (executing program) 2022/09/17 08:09:18 fetching corpus: 7000, signal 243245/266117 (executing program) 2022/09/17 08:09:19 fetching corpus: 7048, signal 243756/266124 (executing program) 2022/09/17 08:09:19 fetching corpus: 7048, signal 243756/266124 (executing program) 2022/09/17 08:09:21 starting 8 fuzzer processes 08:09:21 executing program 0: r0 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x1, r0, 0x2, 0x80000}) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000180)={0x4, 0xfffffffb}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x8e, 0x401}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_submit(0x0, 0x5, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x8, r0, 0xfffffffffffffffd, 0x0, 0xff, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000240)="c8951ee263acccb7b0801f007764019e9046021d1b06a5ef5dadcfab0b8ca426e632a16bd23539189b5ddd3dfc302c4b3098bbf7bd1a9ee7a74a2554aebb17c41dc3fdb78d0791bab3641365b75fc8b86507f7341587b7be38d0bb42339ba22a4c493f6c0051ac8a9e0fc56d9ac6aebce204", 0x72, 0x20, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000300)="b0d321d56265df582eebb33e2d29681ea3add8cf7a7b09e94d1bbd2053ceff7ec40cafa85a56e3eb7cbe0d7bc04d9a1f779240a92b5fc6196d525b8e83e55980d17f3e6f95de18c632e4ca382adb64188c05d7beea6fcd13efd9f86d2b1e4627edf768c20d6c365bbdb179e1eeff11fdf19dda87556a604fb7b853fd7315f2a521e2d739", 0x84, 0x417f, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x6, r1, &(0x7f0000000400)="3abe1ea1f77b166d238bbdd93e915ea6ce2cb43cf2f005f1a03a4778b7525a723b80b1b85a9cbdc445640547307fa40c979fb27dedf1fd4a90d0086ca5568db568", 0x41, 0xfe8, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x1f, r0, &(0x7f00000004c0)="6d382e29de3d0f5a4b20af2acef07a2c70687a07d4945c06794999a4bd3a1b86c0985d07e8aaa5509d6acd4ebaf0338a48b7e394d9b441d77523fe9d6bf80a34d60ac5b3efc3d60e5daef6d91dd37641dc7104d0ba95d788022e2e02013b94f2bde1aa8537b94d2578c6f41f19c05702391c4bb580927f6943878984e0249ec24ad18ed58fead95ad5561abbb980b7871e40cec439b0c564819b9768fe3c5f2a6e14f402b635", 0xa6, 0x3, 0x0, 0x3}]) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000640)=""/234) r4 = memfd_secret(0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000740)=0x3ff) perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x6, 0xf7, 0x5, 0x8, 0x0, 0x9, 0x268c0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x4}, 0x10, 0xff, 0x8, 0x1, 0x7, 0x3, 0x400, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x7, r3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000840)=""/121) ioctl$FITHAW(r0, 0xc0045878) r6 = perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x0, 0x95, 0x2, 0x2, 0x0, 0xffff, 0x8002, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x7, 0x5e7}, 0x18008, 0x8001, 0x8, 0x1, 0x9, 0x10001, 0x4, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xf, r4, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fallocate(r7, 0x4f, 0x71e3, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000980)) copy_file_range(r0, &(0x7f00000009c0)=0x6, r6, &(0x7f0000000a00)=0x10001, 0x3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000a40)={0x3, 0x0, 0x4, 0x81, 0x2, [{0x5, 0x0, 0x9}, {0x1000, 0xffffffffffff7fff, 0x400, '\x00', 0x88}]}) 08:09:21 executing program 1: syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x1d5, &(0x7f0000000040)={@remote, @random="355bcd610120", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x3, 0x6, "32e98c", 0x19b, 0x2c, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x3a, 0x4, 0x1, 0x1f, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}]}, @hopopts={0x8, 0x8, '\x00', [@ra={0x5, 0x2, 0x428}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xfffb}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0xdf, 0x6, [0x9, 0x80]}}]}, @hopopts={0x5e, 0x3, '\x00', [@ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x6}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, @dstopts={0x3c, 0xb, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x1, 0xe, 0x84, 0x4, [0x1, 0x8, 0x80000000, 0x1000, 0x8, 0x7, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x29}, @pad1, @jumbo={0xc2, 0x4, 0xc25}]}, @dstopts={0x2, 0x6, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x9e, 0x861, [0x9, 0x7, 0x5, 0x8]}}, @jumbo={0xc2, 0x4, 0x80000001}, @enc_lim={0x4, 0x1, 0xfb}, @enc_lim={0x4, 0x1, 0x8}]}, @srh={0x3a, 0x4, 0x4, 0x2, 0x7f, 0x20, 0x5, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], "4d07101e8faabdc47c0fdd903dc55909494ccd3a4fb0c38df759a2326223985477f06d42c8fc076ad09af2"}}}}}, &(0x7f0000000240)={0x1, 0x3, [0xb31, 0xf8e, 0xb94, 0x78b]}) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/62, 0x3e, 0x40010041, &(0x7f00000002c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'xcbc-aes-ce\x00'}, 0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x0, 'ip6_vti0\x00', {0x4}, 0x9}) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@void, @void, @ipv6=@gre_packet={0x3, 0x6, '_Ne', 0x385, 0x2f, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@routing={0x3b, 0x4, 0x2, 0x81, 0x0, [@private2, @mcast2]}, @fragment={0x87, 0x0, 0x81, 0x0, 0x0, 0x3, 0x64}, @routing={0x2f, 0x4, 0x2, 0xfe, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}, @routing={0x62, 0xe, 0x0, 0xff, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x41}, @private0]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x19, 0x2, [], "37ebcd4f9588c8231907c2cdabd3efde56839f129bf0aaa48e"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x2, 0x2], "5b55cb38a9a9b1f13f6e56fc21ce6e47b2aad481eafa7d62fc80b95cdd74ee9c7e0e391a8f6bf0af3f43472f43e37cd63e1a817ef0beff29e80d4af777714d01ee0b5518170d1cbbabc94f0213ae604e9fb4b3da513af080a85318610f25845874bf6fc80c365d693912763df641f56f6ee2ab4539d08d6b9a6923048d4093f7fa1e84b3e80bc85852cdf60dc930905501381f3b071618d6da3ab63d7aeb02042a2282dd118a0bd041d2780bab0130e606895094525656323350b4df445b6e2eaae82bb0abcb364a2c1b4c45"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x1, 0xc3b, 0x9], "bfd416a48ad1ee3f3f4a30c1284c7aeffcef62ca8500ffdf9b3422747eb15a7162813c2aef078c14ee1c95521e2e8b2cbb8227b2952a73ac43f5e572cfa0a8fe573498d317a9498d2bbf9ded967db6909aad6ff6a6b1245c8d13035aacd9542bf9409a1589d3afa93cd0197838945f4553a63c06a328a8c9dfc96f95e387a5f8f5e6ec3aadafd30dd5267db08fae0e4a4bc3a8d2172d58f377dd96e406fbbb4651b06c8c093c8e53843ce72a6dd6ade927c032688a410c75190bfa93597d47793333b8c7003c78cd3a864b4a8889f8"}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x1f, 0x3, 0x1, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0x3, {{0x3, 0x2, 0x7, 0x2, 0x0, 0x2, 0x1, 0x1}, 0x2, {0x401, 0x9, 0x0, 0x1d, 0x0, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "8a46d8ce8d9bc094933fc7df655e70198f6ba21e9e6770df9fe752e6810ab7a7ea5b66211583b94efc29b4d946d191644002d56ad488b9bce8ed9d40162defd2f53d8e2e3f7f1031aed7e435dcbfcc1346b3bdc3fd6e7a1492a76a9259a3d53625affcd62081073ef4e7c753fc7b3bac95a88858b8103bbfac41d971e4b4839aff354138be44c44b3e7c1d2faee57686aad8d0601a25186ef41ba6caf4a1ec9ec38f8464b23007bcd8c4137694c0c65e35f703"}}}}}, 0x3ad) syz_emit_ethernet(0x22, &(0x7f0000000740)={@random="0412ddbc45d0", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x3, 0x1}}, {@can={0xc, {{0x2, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "ae4719db88a659de"}}}}, &(0x7f0000000780)={0x0, 0x3, [0x669, 0xd7, 0xc87, 0x666]}) syz_emit_ethernet(0x4d, &(0x7f00000007c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "f4", "422abd", 0x6005, "347b785639ddc4a9b008d4b137e8df03e1a58b8e749366c00ecd81675721736292e44bf9ea0ad5711d3fb559b414b4e032cdfb883dec23"}}}}}, &(0x7f0000000840)={0x1, 0x3, [0x5e8, 0xbcc, 0x6d6, 0x151]}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000880)={[0x80000001]}, 0x8, 0x80400) accept$unix(r0, &(0x7f00000008c0)=@abs, &(0x7f0000000940)=0x6e) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000980)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000009c0), 0x400000, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000a00)) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000b00)={&(0x7f0000000a80)=""/103, 0x67}) listen(r0, 0x0) syz_emit_ethernet(0x3d3, &(0x7f0000000b40)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @val={@val={0x9100, 0x6, 0x0, 0x2}, {0x8100, 0x5}}, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}, {0x73}], @ipv6=@icmpv6={0x0, 0x6, "e11110", 0x38d, 0x3a, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@hopopts={0x8, 0x5, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}}, @jumbo={0xc2, 0x4, 0x7f}, @hao={0xc9, 0x10, @empty}]}, @srh={0x73, 0xc, 0x4, 0x6, 0x5, 0x10, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @local, @dev={0xfe, 0x80, '\x00', 0x21}]}, @routing={0x2c, 0x2, 0x2, 0x6f, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}]}, @dstopts={0x1d, 0x19, '\x00', [@enc_lim, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x140}, @calipso={0x7, 0x10, {0x0, 0x2, 0xfe, 0x7, [0x0]}}, @generic={0x8, 0x51, "a9eeb477d0687926a1ce24614b12a0af9b6f568e2f79cb12fa8f996bd9543cc093f6f9ce94092d82630304cc0faa0ba003bc2177f78c35a5edf3e83f6f3456cc2e1a79c1a7202e455b6f15f8ee99c8050c"}, @generic={0xbf, 0x56, "f90e7ab4a7dc1ae834502e4f6cbca9a5f02b30b6a9e7bb709f1e9b50945bdf0c7bbf0c010766dbe3970dee91f6c3c5b0164368ff15159fbe9e35e185843aac302eac8d263f5f45d455498d7e9398a9fafd066672e490"}, @jumbo={0xc2, 0x4, 0x80000000}]}, @fragment={0x2, 0x0, 0xef, 0x1, 0x0, 0x5, 0x64}, @srh={0x88, 0xa, 0x4, 0x5, 0x1, 0x10, 0x3f, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @mcast1, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast1]}], @dest_unreach={0x1, 0x6, 0x0, 0x0, '\x00', {0xb, 0x6, "cbca0d", 0x200, 0x89, 0xff, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@routing={0x0, 0xe, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @empty, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}, @fragment={0x0, 0x0, 0x4, 0x1, 0x0, 0x6, 0x67}, @routing={0x67, 0x8, 0x2, 0x1, 0x0, [@private2, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], "b390441be63e3b1d2872cce84fd44c669ee1eeeceb7e70fea3e0fe06b337ff3fbbc41da0d5b24adbc3f76ec5bbacf9a15cf725f919b228af9ea6fedd26161264eff8a2ed0c2706a2aa4054ad566fb6983d9b71f244d790c265f2258efe648a0813fc23b6346a7b05ca8ad579d152d31b16b4be0e81a5b9e283123f02fe8e06481ccf1c91129715f00d1d14923bcbd266bef0dd24b4e31d1580fb85ffa1796373c8c3e992f7"}}}}}}}}, &(0x7f0000000f40)={0x0, 0x2, [0xdc5, 0x99, 0x7a1, 0x42a]}) r3 = pidfd_getfd(r1, r0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000f80)) r4 = pidfd_getfd(r1, r2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000001000)={0x10, 0x0, &(0x7f0000000fc0)=[r0, r2]}, 0x2) 08:09:21 executing program 2: ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@remote, @empty, 0x0}, &(0x7f0000000040)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz0', "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"}, 0x1004) r3 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002980)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002b00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x90, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4080004) write$binfmt_misc(r2, &(0x7f0000002c40)={'syz0', "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"}, 0x1004) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000003c80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$inet(r4, &(0x7f0000003cc0)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003d00)={0x0, @loopback, @multicast2}, &(0x7f0000003d40)=0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000003d80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) connect$inet(r2, &(0x7f0000003dc0)={0x2, 0x4e22, @broadcast}, 0x10) sendmmsg$inet6(r2, &(0x7f0000004340)=[{{&(0x7f0000003e00)={0xa, 0x4e22, 0xbb, @empty, 0x8000}, 0x1c, &(0x7f0000003e80)=[{&(0x7f0000003e40)="b61730cf9f58c0457684", 0xa}], 0x1, &(0x7f0000003ec0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2, r5}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hopopts={{0x78, 0x29, 0x36, {0x33, 0xb, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x8, 0x9, [0x20, 0x1, 0x3, 0x7, 0x301a, 0x7, 0x101]}}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x3}]}}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x2, 0x11, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x1, 0x10, 0xdb, 0x87, [0xfff, 0x2, 0x5, 0x7, 0x3, 0x0, 0x83, 0x4]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x0, [0x9, 0x7f, 0x2, 0x5, 0x0]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r5}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hopopts={{0x168, 0x29, 0x36, {0x32, 0x29, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0xe6, 0x5900, [0x9, 0x4000000000000, 0x3, 0xc3d7, 0x8, 0x0, 0x1, 0x3b]}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x8000}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim, @generic={0x3f, 0xef, "79893bdd2a3d1192ded4c75c6693dcd0df4c5190335354c5dd9259c042e02f54a7853d3cb56b66c81b2e2286e196d449c47a94568541ff2512736645519d580e8c66eba1c06680e1d377bda7d55cdddd62d2ce0676f8ea6db5f131f3dadf587cfd8c4b5585b76b8b5bd711db1056956dc107c260856d04274086f14fabe96a3146a135655b5b820783d218cde59d4680e7e9adae23a7422142f5f5edcc343b6f1ec38729e12de94b9e896a46ef2eb54b1d74d53eeae8503009f172af7acd02b845937c48c406b1f156bde9469ce5e9e1f853b038e5184f23576076b2cbc8bb863dcd9fc0f2198d0ba48ef00d2efa73"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dstopts={{0x110, 0x29, 0x37, {0x88, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @generic={0x2c, 0xdf, "9c60e2ee443e7fd5b4f803b8a0f518cf6363bcb1f68d9b4e33ad06f3020bdd7c4a120e3df04f4b945fc04c2e34b0eeeef06861faf8ba0d4b695d831bb17b87d1fb7cc0c7b3016d9737490e620dfab8aaefdced40e8a1ff5650c68442cc50bc9d4bafc3a51889da7ddb59f607054ffffeeb98d38c32b0363bb08ee35522de4566c17c88e05d5bfb398368bbcfed9d126f62a17df8587559092d4cae31d64ea4bb602c781b140266e5f510243e2e972b07ca2e3de2af4ba5ac7edbcda4b91df1a36fdaf704b731f5649708afe34e834935915e5678490c7de472d23b4aa2a3c4"}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x80}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x101}]}}}], 0x448}}], 0x1, 0x4004000) r6 = openat(r4, &(0x7f0000004380)='./file1\x00', 0x100, 0x5) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f00000043c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004400)={0x0, @private, @multicast2}, &(0x7f0000004440)=0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000004480), r2) 08:09:21 executing program 3: r0 = shmget(0x2, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0xb000) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) r2 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x2000) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/142) r3 = shmget(0x1, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) shmget(0x2, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ff9000/0x7000)=nil, 0x3000) r5 = shmget(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x3000) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f00000000c0)=""/169) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000180)=""/50) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x0) 08:09:21 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000080)=0x80) r0 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@private, @rand_addr, 0x0}, &(0x7f0000000180)=0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000001c0)={{0x1d, @private=0xa010102, 0x4e22, 0x4, 'sh\x00', 0x31, 0x4, 0x5}, {@loopback, 0x4e21, 0x2000, 0x7, 0x8, 0x3}}, 0x44) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240), 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000280)) r2 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x43b482, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000300), 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r3) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x133}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffff000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x7, 0x20, 0x5, 0x1, 0x0, 0xfffffffffffff31c, 0xc0220, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xaa33, 0x4, @perf_config_ext={0xffffffff, 0x1}, 0x204, 0x7ff, 0x81, 0x1, 0x6, 0x8, 0x8, 0x0, 0x9, 0x0, 0x80}, 0x0, 0x7, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e24, 0x12, @local, 0x30e0}}, 0x0, 0x0, 0xc, 0x0, "3082ccfb901b3cab98b12c4dc2b7faa918c1ae6a25821d68601bfcecae3866a2cf889e369b33bdc877742618b284244a27adc10daff24c81de92e807f26364883caa77ac096b2ae0ff1655fc5380917e"}, 0xd8) r5 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), r3) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001a80)={@loopback, @local, 0x0}, &(0x7f0000001ac0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001d80)={'batadv0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000001dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001e00)=0x14) getpeername$packet(r3, &(0x7f0000001e40)={0x11, 0x0, 0x0}, &(0x7f0000001e80)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000001ec0)={@empty, 0x0}, &(0x7f0000001f00)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002480)={&(0x7f0000000680), 0xc, &(0x7f0000002440)={&(0x7f0000002000)={0x428, r5, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x1d8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xca7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x800, 0x0, 0x96, 0x9}, {0x9, 0x90, 0x7f, 0xbb2}, {0x3, 0x7, 0x7}, {0x0, 0x7f, 0xc0, 0x3}, {0x978a, 0xff, 0x3f, 0x245}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x6, 0x5, 0x8001}, {0x800, 0x5, 0xc5, 0x6}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x428}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) 08:09:21 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) r2 = geteuid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000840)=0x0) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x4000, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) getgroups(0x3, &(0x7f0000000e40)=[0xffffffffffffffff, 0x0, 0xee00]) r7 = getpgid(0x0) r8 = getuid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8205890}, 0xc, &(0x7f0000000800)=[{&(0x7f00000000c0)={0x3a0, 0x31, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x4, 0x62}, @typed={0x8, 0x72, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0xda, 0x3c, 0x0, 0x1, [@generic="11856372cbb3903c2da34bfe14b884bddb0b54d3cb12d75a59b49aeef86101236b5160cd7bb0409a32a88f5bfb3451fe4c8b86a7e13cabbdb019cf1a2338a0112bf0aa2c8369abbbeb44778b4720ac8ed350d7001f739d62eb545c2472ffad652a86e957f75ef4a8e188acd0bfcac5ab0cb88deca127276800d63c1b06612d4e7870607a03c181fe6a1e43ff43777cd4066d5ee12c0bb02df4fbb87afe6a98f8fff7ec259e0ca4eec029f69373e5a3cfa71f14b36fdae51716d58be226a8bf37887d743327ab0925f048e0d83c5bf4a29f7b1fcd90ef"]}, @generic="1b920616a29fb6d61c31431b3df2cfaa11b089479f5c1663aae294555466411ad08f1d894121a54b28d856b332d4545ec37fb3cbcdb100f294b00db0d5db25ec9819d9e505a6c8cc6d66d07843b451cb4f2c67ad7048c0c5971b14f9827fffec6278be9b89fb9e3362ed86b6af5e7b310893c388dd9b0060bb1e8ff9bbc6f6d79e17f9993b301aa4", @generic="3e2d1ae528b8457ddd7be925de206de4a1173cc23d0d369f3d4152de41128d0cec543be8f258ea5d8eecd86eb427263c11f89ed1cb0a414a8c42bcd366707d1b6a32579ec3339bebf01b04542c7d86fb520cc73a5124e365ffee65836dc5e0cdd086fdbe2ca774392678066582cbe62e60a59fab1c9162bcd10e8edb473e40f95999ea9ce7b34d2bda9e5d04", @nested={0x191, 0x2e, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @pid=r0}, @generic="21cbf0649256ae11ebf66a203c03fcc98d6c6a3addf99aadc5ac280d161e88adac96e6e23dd136bdd157e93d3d6a498c46b611bd38b9c2bc27249491483ea04541c3", @generic="6a5e47ecdd7e3b69d40e410ecb134b5bbd9c06c4", @generic="d5d4a59004e5b60eede5f3c809de8ab968e82edcb6a18f6008164aa698be725f35ec", @generic="bf7dbe4abc0623560b2bf8fc887e9704f21ed3e227556f2918ecb6cf1edd1abdf3da0de007bf8f7b11c3e1011676045c4c8b712edddab998f91ce98f72b87b522595ec49cda6c319c48ed5c3b297d88068444de4987ee99fee930e37c23f6c6f0853ee6ded5551649a514b452ad18b82a2450ba3f6335f08fa7ce6a4dc19a4aaa4e9e5ff062bbb7f977f3a31d4dc75764876f98a839e8ee928525ec3dc7f1b961e5bd4a9d2194835e03f2f24b8bd3e84c9c829fe7ac30567e2077384ddc660eff098a6128d1f04d6f7b3b11b895f4691699bc108473fb2a5af5d310637860e33a27b20fb3199c1f35c236a08db7b6d5c714c8786309a449358", @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}]}]}, 0x3a0}, {&(0x7f00000005c0)={0x20c, 0x15, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@remote}, @generic="30bb27d0c496bd65b2a1d99d088fb672afeb63af8a058da88f805edc3650b5aa2fde9a797f13d3df866e59a044f31498353d3c612f26b80029415db0be6db02ddee2e693429d126f85b7b68603eae8270cb960a9da41f7412ea45a2f2349ab7b8b0e30d16a5a63d55e552e42bcb52fe92e6a09c215c277ea7efe3266ef4a9caab73c6e14d4fa6fefd988fc422a91db50f1ff101bcc801182ce2e17b7582ba810d099350300", @nested={0x124, 0x95, 0x0, 0x1, [@generic="6a39889088270442548958bded6c9b7d96485bb06578a6b30bf55d1c", @generic="278d7e6e9a04282a66b1c16fd241075fd39a09c38e1c324a0a0c6c6a69a4b256d7eb06baf59b54dc7402734c3fd62b8341ecbe29ed5ab73d72ddc1865eecb25a680465a7ef98be553b23fd5edfc15f9be16aac74e2468ff7ab7b72a8b44c6069a161fefd77933c06aded6675192fbf", @generic="3754b2658b724372571e37695667cc166d549e0f94c2a75cce845c4a1dae76fccf6bf8825baa3b8f133dd918c2383f89c2d1703eda63b6c3cc428393214f81347495db4e9865bcf522f465c5f74519915b1987b97e9e59d4d88e28fea9295a8a23d4ed9142c9877b58b2b6464253fb6f9476b41e9732d67385", @typed={0x7, 0x2b, 0x0, 0x0, @str='+}\x00'}, @typed={0x8, 0x7d, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0xfffffffa}, @generic="a140499d"]}, @typed={0x8, 0x84, 0x0, 0x0, @uid=r1}, @generic="374b1ca97fad9098fe248e55931a023f97f7796116be"]}, 0x20c}], 0x2, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xffffffffffffffff}}}], 0xe0, 0x4000}, 0x20000001) lsetxattr$security_evm(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), &(0x7f0000001040)=@sha1={0x1, "405e18eeb11f459e7b629ab479b3ca836a5d663a"}, 0x15, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000001080)={0x2, 0x1, 0x5, 0x3f, r7}) pipe(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r10, 0xc0189373, &(0x7f0000001100)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001180)='./file0\x00', 0x6, 0x4, &(0x7f0000001500)=[{&(0x7f00000011c0)="00fd2f2dd6d88a081d72a8152dec87e2fa0ad643c585f5bb80ab64a13cd4936fce661a9bd08c8abfa8509b369c457b7f33bd12243a50744a0ae51c8b3c093a423b925016fdf0e8734af294e7a9afc05ecd047ee3500ad8c4130b6aafa198383046a1db10a4bb7239305d6e245b0a388f31e1ae319fa06d03ed92bf047feaad799161fae6e878bad9181a557f5f573856f8cbf7d75417187a94b9a7f5b7a32e29671bcdeec3d790ef62374b787d8fa1480007a51052774e32a56db57109e7a2c2d734fdb016513bc3", 0xc8, 0x7}, {&(0x7f00000012c0)="3c81e218d67abf4a462085cd5def20377eeef984de18f39e72746412c7dd4c57d0ac078376099b6674c3bba548fcb446d05b33b19b030b1186d21c39578e0998bf61ff22be8369f28d47b469227743aac2b2e6926ea403d6fe14c8bbfba2cffd2ef68070670922bc17d3e2c433f58338d6986b7267728358a0fe9082545f9c05d2ca79d06a4acaea5dbd805e22d4a93f", 0x90, 0x4}, {&(0x7f0000001380)="0f128001fbdeda6f05a04e6add2b94b6755b5e4dcaf49b03c4be4ea3b77333a538fb01406572d7f50fd175084f550cb466dee9a37ae79146286e69e398a606dd9c11a66a417cf6a9610d330781adfe4543211b04ff34618c8c0f615559ad1899", 0x60, 0x1000}, {&(0x7f0000001400)="a8a23663f7cc96967e8a61902101701c375f6ba6ee266dd7aa3b60f72e371e18bed5289ec53c30e15091ba038e2a7701d083768aedd370d581261802379c1b9b60a7ea39ae6e86ba23764670cb31a7b1d2cf69984b750362be51f61fa2a3372d030746613538504c3273d77a6f44f83a11cf3827140855e9ef18345b0ff537ac18f0d9918172fe3f3d8d38750c3f8e6505cffaa7a642d5d207d065958c0f5c8c3a2a977148fad71b8fbde5a238b36ddfd3076905aeb81f751dabf984673a1683f87b61c7f1c4a7ef43e01ecba27b11384a63c61e4d46f428b1d17e8b239752a4f572e8c7e9b1df", 0xe7, 0x5}], 0x1, &(0x7f0000001580)={[{@nonumtail}, {@rodir}, {@shortname_winnt}, {@uni_xlateno}], [{@fowner_gt={'fowner>', r4}}, {@appraise}, {@seclabel}, {@fowner_lt={'fowner<', r8}}, {@hash}, {@pcr={'pcr', 0x3d, 0x2b}}]}) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f00000016c0)=0x0) perf_event_open(&(0x7f0000001640)={0x5, 0x80, 0x5, 0x3f, 0x0, 0x4, 0x0, 0xfffffffffffffff7, 0x60, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0xe4a1}, 0x0, 0x0, 0x0, 0x9, 0x8c08, 0x3, 0x9, 0x0, 0xffffff25, 0x0, 0x1}, r13, 0xa, r10, 0x0) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f00000017c0)=@buf={0x8b, &(0x7f0000001700)="449b5060aa0a27547c9b14cacebe6c4c5da34081a086f0f1c5adf518725f9daff28550e31b46a7fb58ca93c1abc6aa1d2f9d3e2d2e72f3b410dbdc2b45fcbd268582f13e6799034a07d1e8253e41c26b0e7b8bd864b9634f7d5b8022b0988cddf4f66f3b38b55ad626496fb1b9a486b3fd6bda733fea38224bc7bbb0bb59119bfc953e5781644faf085450"}) ioctl$BLKTRACESETUP(r12, 0xc0481273, &(0x7f0000001840)={'\x00', 0x7ff, 0xbe64, 0xfffff001, 0x2a64, 0x3}) [ 75.890544] audit: type=1400 audit(1663402161.406:6): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:09:21 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd29, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xf, 0x34, @random="18e8bd3902019dd51da0f7"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20000020) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3b}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4040010) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3e}, @NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeb5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x24b}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x96) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x30080, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x3, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x25}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa09}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x67f}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32d}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r4 = openat$cgroup_freezer_state(r2, &(0x7f00000007c0), 0x2, 0x0) signalfd(r4, &(0x7f0000000800)={[0x7]}, 0x8) r5 = syz_open_dev$loop(&(0x7f0000000840), 0x5, 0x101000) fcntl$setflags(r5, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}}, 0x4) syz_io_uring_setup(0x46f1, &(0x7f0000000a00)={0x0, 0x4ae, 0x8, 0x0, 0x354}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000b00)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x7fffffff) 08:09:21 executing program 7: r0 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setsig(r0, 0xa, 0x32) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x9, 0x100}) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000000c0)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x7f, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000500)) ioctl$KIOCSOUND(r2, 0x4b2f, 0xfb) r3 = openat(r2, &(0x7f0000000540)='./file0\x00', 0x410800, 0x8) r4 = gettid() sendmsg$nl_netfilter(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x1, 0x5, 0x201, 0x70bd27, 0x25dfdbff, {0x3, 0x0, 0x7}, [@nested={0x24, 0x7c, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x22, 0x0, 0x0, @pid=r4}, @typed={0xe, 0x2c, 0x0, 0x0, @str='/dev/vcs#\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004845}, 0x20004811) r5 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000680), 0x2, 0x0) r6 = perf_event_open$cgroup(&(0x7f00000006c0)={0x0, 0x80, 0x0, 0x2, 0x5, 0xc7, 0x0, 0xffffffffffffffff, 0x60001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x6, 0x101}, 0x61, 0x1, 0x1, 0x9, 0x101, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0x4}, r3, 0x6, r3, 0x1) tee(r5, r6, 0xdc98, 0x6) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000740)) process_vm_writev(r4, &(0x7f0000000880)=[{&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000007c0)=""/174, 0xae}], 0x2, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/139, 0x8b}, {&(0x7f0000000980)=""/156, 0x9c}], 0x2, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000a80)=""/148, &(0x7f0000000b40)=0x94) [ 77.137035] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.138132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.138904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.140108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.141509] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.142376] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.143037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.146047] Bluetooth: hci1: HCI_REQ-0x0c1a [ 77.157962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.161063] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.164613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.166148] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.168890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.175346] Bluetooth: hci0: HCI_REQ-0x0c1a [ 77.204160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.211036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.223073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.223752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.224626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.225506] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.226115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.228791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.229913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.230595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.232124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.233520] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.234127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.235774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.237850] Bluetooth: hci2: HCI_REQ-0x0c1a [ 77.254007] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.254654] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.255543] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 77.267561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.269600] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.271835] Bluetooth: hci4: HCI_REQ-0x0c1a [ 77.280873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.294066] Bluetooth: hci3: HCI_REQ-0x0c1a [ 77.313129] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 77.313144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.316629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.316645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 77.323648] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 77.324383] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.330532] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 77.331096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.332149] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 77.333316] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.336594] Bluetooth: hci5: HCI_REQ-0x0c1a [ 77.340478] Bluetooth: hci7: HCI_REQ-0x0c1a [ 77.462816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 77.468503] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 77.470876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 77.486864] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 77.495395] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 77.499899] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 77.516015] Bluetooth: hci6: HCI_REQ-0x0c1a [ 79.158952] Bluetooth: hci1: command 0x0409 tx timeout [ 79.222500] Bluetooth: hci0: command 0x0409 tx timeout [ 79.298139] Bluetooth: hci4: command 0x0409 tx timeout [ 79.299205] Bluetooth: hci2: command 0x0409 tx timeout [ 79.350483] Bluetooth: hci3: command 0x0409 tx timeout [ 79.351015] Bluetooth: hci5: command 0x0409 tx timeout [ 79.415453] Bluetooth: hci7: command 0x0409 tx timeout [ 79.559103] Bluetooth: hci6: command 0x0409 tx timeout [ 81.206778] Bluetooth: hci1: command 0x041b tx timeout [ 81.270514] Bluetooth: hci0: command 0x041b tx timeout [ 81.336126] Bluetooth: hci2: command 0x041b tx timeout [ 81.336563] Bluetooth: hci4: command 0x041b tx timeout [ 81.398463] Bluetooth: hci3: command 0x041b tx timeout [ 81.399468] Bluetooth: hci5: command 0x041b tx timeout [ 81.463447] Bluetooth: hci7: command 0x041b tx timeout [ 81.591451] Bluetooth: hci6: command 0x041b tx timeout [ 83.255506] Bluetooth: hci1: command 0x040f tx timeout [ 83.319923] Bluetooth: hci0: command 0x040f tx timeout [ 83.383450] Bluetooth: hci4: command 0x040f tx timeout [ 83.383917] Bluetooth: hci2: command 0x040f tx timeout [ 83.447450] Bluetooth: hci5: command 0x040f tx timeout [ 83.447916] Bluetooth: hci3: command 0x040f tx timeout [ 83.511753] Bluetooth: hci7: command 0x040f tx timeout [ 83.639530] Bluetooth: hci6: command 0x040f tx timeout [ 85.303458] Bluetooth: hci1: command 0x0419 tx timeout [ 85.366523] Bluetooth: hci0: command 0x0419 tx timeout [ 85.430497] Bluetooth: hci2: command 0x0419 tx timeout [ 85.430917] Bluetooth: hci4: command 0x0419 tx timeout [ 85.495545] Bluetooth: hci3: command 0x0419 tx timeout [ 85.495966] Bluetooth: hci5: command 0x0419 tx timeout [ 85.558454] Bluetooth: hci7: command 0x0419 tx timeout [ 85.687498] Bluetooth: hci6: command 0x0419 tx timeout 08:10:14 executing program 3: r0 = shmget(0x2, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0xb000) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) r2 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x2000) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/142) r3 = shmget(0x1, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) shmget(0x2, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ff9000/0x7000)=nil, 0x3000) r5 = shmget(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x3000) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f00000000c0)=""/169) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000180)=""/50) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x0) 08:10:14 executing program 3: r0 = shmget(0x2, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0xb000) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) r2 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x2000) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/142) r3 = shmget(0x1, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) shmget(0x2, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ff9000/0x7000)=nil, 0x3000) r5 = shmget(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x3000) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f00000000c0)=""/169) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000180)=""/50) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x0) 08:10:15 executing program 3: r0 = shmget(0x2, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0xb000) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) r2 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x2000) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/142) r3 = shmget(0x1, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) shmget(0x2, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ff9000/0x7000)=nil, 0x3000) r5 = shmget(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x3000) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f00000000c0)=""/169) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000180)=""/50) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x0) 08:10:15 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0) syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000006c0)=@IORING_OP_SENDMSG={0x9, 0x2bb64ebd7e4dd765, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r7, &(0x7f0000000040), 0x4) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 08:10:15 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x121682, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x10004) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37303334343838373800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000004fe17b6ecf5c42eb82d5ba1095ba954b010000000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d0f4655fd0f4655fd0f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f00000000000004000200000000000000050000001500"/64, 0x40, 0x1600}, {&(0x7f0000010f00)="200000008cb1c9158cb1c91500000000d0f4655f00"/32, 0x20, 0x1680}, {&(0x7f0000011000)="c0410000002c0000d0f4655fd0f4655fd0f4655f0000000000000200160000000000000000000000160000001700000018000000190000001a0000001b0000001c0000001d0000001e0000001f00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2800}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2a00}, {&(0x7f0000011200)="ed8100001a040000d1f4655fd1f4655fd1f4655f000000000000010004000000000000000100000021000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099aa5620000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011300)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3730333434383837382f66696c65302f66696c653000000000000000000000000000000000000000000000927823d7000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2e00}, {&(0x7f0000011400)="ed8100000a000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d3d99ad000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3000}, {&(0x7f0000011500)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d1f4655fd1f4655fd1f4655f0000000000000200120000000000000001000000230000002400000025000000260000002700000028000000290000002a0000002b0000000000000000000000000000000000000000000000000000004e2ca332000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xc0, 0x31e0}, {&(0x7f0000011600)="ed81000064000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cfef66502000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x3400}, {&(0x7f0000011700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x35c0}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x5400}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x5800}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x6400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x6800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x6c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x7000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x7400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x7800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x7c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x8000}, {&(0x7f0000012400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8400}], 0x0, &(0x7f0000012900)) 08:10:15 executing program 3: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) dup(0xffffffffffffffff) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000300)=0x1) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000001c0), &(0x7f0000000340)=ANY=[@ANYBLOB], 0x106, 0x1) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000180)={0x80000000}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="fbffffff000000002e2f66696c653100"]) ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f0000000280)={@msf={0x1}, 0x2, 0x6, &(0x7f0000000240)=""/6}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x4000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = gettid() fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r7, &(0x7f0000000080)="01", 0x41030) [ 130.385925] audit: type=1400 audit(1663402215.902:7): avc: denied { open } for pid=3877 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.388040] audit: type=1400 audit(1663402215.902:8): avc: denied { kernel } for pid=3877 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.424858] ------------[ cut here ]------------ [ 130.424892] [ 130.424897] ====================================================== [ 130.424903] WARNING: possible circular locking dependency detected [ 130.424910] 6.0.0-rc5-next-20220916 #1 Not tainted [ 130.424921] ------------------------------------------------------ [ 130.424927] syz-executor.3/3880 is trying to acquire lock: [ 130.424938] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 130.424999] [ 130.424999] but task is already holding lock: [ 130.425004] ffff88800f1e5420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.425052] [ 130.425052] which lock already depends on the new lock. [ 130.425052] [ 130.425057] [ 130.425057] the existing dependency chain (in reverse order) is: [ 130.425063] [ 130.425063] -> #3 (&ctx->lock){....}-{2:2}: [ 130.425088] _raw_spin_lock+0x2a/0x40 [ 130.425119] __perf_event_task_sched_out+0x53b/0x18d0 [ 130.425142] __schedule+0xedd/0x2470 [ 130.425161] preempt_schedule_common+0x45/0xc0 [ 130.425182] __cond_resched+0x17/0x30 [ 130.425202] __mutex_lock+0xa3/0x14d0 [ 130.425223] __do_sys_perf_event_open+0x1eec/0x32c0 [ 130.425247] do_syscall_64+0x3b/0x90 [ 130.425273] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.425306] [ 130.425306] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 130.425331] _raw_spin_lock_nested+0x30/0x40 [ 130.425360] raw_spin_rq_lock_nested+0x1e/0x30 [ 130.425383] task_fork_fair+0x63/0x4d0 [ 130.425414] sched_cgroup_fork+0x3d0/0x540 [ 130.425440] copy_process+0x4183/0x6e20 [ 130.425459] kernel_clone+0xe7/0x890 [ 130.425476] user_mode_thread+0xad/0xf0 [ 130.425495] rest_init+0x24/0x250 [ 130.425526] arch_call_rest_init+0xf/0x14 [ 130.425547] start_kernel+0x4c1/0x4e6 [ 130.425565] secondary_startup_64_no_verify+0xe0/0xeb [ 130.425584] loop2: detected capacity change from 0 to 512 [ 130.425590] [ 130.425590] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 130.425617] _raw_spin_lock_irqsave+0x39/0x60 [ 130.425646] try_to_wake_up+0xab/0x1920 [ 130.425670] up+0x75/0xb0 [ 130.425691] __up_console_sem+0x6e/0x80 [ 130.425721] console_unlock+0x46a/0x590 [ 130.425750] vt_ioctl+0x2822/0x2ca0 [ 130.425773] tty_ioctl+0x7c4/0x1700 [ 130.425793] __x64_sys_ioctl+0x19a/0x210 [ 130.425821] do_syscall_64+0x3b/0x90 [ 130.425846] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.425879] [ 130.425879] -> #0 ((console_sem).lock){....}-{2:2}: [ 130.425904] __lock_acquire+0x2a02/0x5e70 [ 130.425935] lock_acquire+0x1a2/0x530 [ 130.425964] _raw_spin_lock_irqsave+0x39/0x60 [ 130.425993] down_trylock+0xe/0x70 [ 130.426016] __down_trylock_console_sem+0x3b/0xd0 [ 130.426047] vprintk_emit+0x16b/0x560 [ 130.426078] vprintk+0x84/0xa0 [ 130.426109] _printk+0xba/0xf1 [ 130.426142] report_bug.cold+0x72/0xab [ 130.426166] handle_bug+0x3c/0x70 [ 130.426191] exc_invalid_op+0x14/0x50 [ 130.426216] asm_exc_invalid_op+0x16/0x20 [ 130.426248] group_sched_out.part.0+0x2c7/0x460 [ 130.426267] ctx_sched_out+0x8f1/0xc10 [ 130.426285] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.426308] __schedule+0xedd/0x2470 [ 130.426327] preempt_schedule_common+0x45/0xc0 [ 130.426348] __cond_resched+0x17/0x30 [ 130.426367] __mutex_lock+0xa3/0x14d0 [ 130.426389] __do_sys_perf_event_open+0x1eec/0x32c0 [ 130.426412] do_syscall_64+0x3b/0x90 [ 130.426437] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.426470] [ 130.426470] other info that might help us debug this: [ 130.426470] [ 130.426475] Chain exists of: [ 130.426475] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 130.426475] [ 130.426502] Possible unsafe locking scenario: [ 130.426502] [ 130.426506] CPU0 CPU1 [ 130.426510] ---- ---- [ 130.426514] lock(&ctx->lock); [ 130.426524] lock(&rq->__lock); [ 130.426535] lock(&ctx->lock); [ 130.426547] lock((console_sem).lock); [ 130.426558] [ 130.426558] *** DEADLOCK *** [ 130.426558] [ 130.426561] 2 locks held by syz-executor.3/3880: [ 130.426573] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 130.426621] #1: ffff88800f1e5420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.426672] [ 130.426672] stack backtrace: [ 130.426677] CPU: 0 PID: 3880 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220916 #1 [ 130.426700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.426714] Call Trace: [ 130.426719] [ 130.426726] dump_stack_lvl+0x8b/0xb3 [ 130.426754] check_noncircular+0x263/0x2e0 [ 130.426785] ? format_decode+0x26c/0xb50 [ 130.426813] ? print_circular_bug+0x450/0x450 [ 130.426845] ? enable_ptr_key_workfn+0x20/0x20 [ 130.426873] ? lock_release+0x547/0x750 [ 130.426905] ? format_decode+0x26c/0xb50 [ 130.426935] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 130.426968] __lock_acquire+0x2a02/0x5e70 [ 130.427009] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 130.427052] lock_acquire+0x1a2/0x530 [ 130.427083] ? down_trylock+0xe/0x70 [ 130.427111] ? rcu_read_unlock+0x40/0x40 [ 130.427150] ? vprintk+0x84/0xa0 [ 130.427184] _raw_spin_lock_irqsave+0x39/0x60 [ 130.427214] ? down_trylock+0xe/0x70 [ 130.427240] down_trylock+0xe/0x70 [ 130.427265] ? vprintk+0x84/0xa0 [ 130.427297] __down_trylock_console_sem+0x3b/0xd0 [ 130.427330] vprintk_emit+0x16b/0x560 [ 130.427366] vprintk+0x84/0xa0 [ 130.427399] _printk+0xba/0xf1 [ 130.427433] ? record_print_text.cold+0x16/0x16 [ 130.427476] ? report_bug.cold+0x66/0xab [ 130.427503] ? group_sched_out.part.0+0x2c7/0x460 [ 130.427525] report_bug.cold+0x72/0xab [ 130.427554] handle_bug+0x3c/0x70 [ 130.427581] exc_invalid_op+0x14/0x50 [ 130.427609] asm_exc_invalid_op+0x16/0x20 [ 130.427642] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.427666] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.427687] RSP: 0018:ffff88803f597978 EFLAGS: 00010006 [ 130.427704] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.427717] RDX: ffff88801db71ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 130.427732] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 130.427745] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800f1e5400 [ 130.427759] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 130.427779] ? group_sched_out.part.0+0x2c7/0x460 [ 130.427804] ? group_sched_out.part.0+0x2c7/0x460 [ 130.427827] ctx_sched_out+0x8f1/0xc10 [ 130.427851] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.427879] ? lock_is_held_type+0xd7/0x130 [ 130.427915] ? __perf_cgroup_move+0x160/0x160 [ 130.427937] ? set_next_entity+0x304/0x550 [ 130.427970] ? update_curr+0x267/0x740 [ 130.428006] ? lock_is_held_type+0xd7/0x130 [ 130.428042] __schedule+0xedd/0x2470 [ 130.428067] ? io_schedule_timeout+0x150/0x150 [ 130.428089] ? find_held_lock+0x2c/0x110 [ 130.428120] ? lock_is_held_type+0xd7/0x130 [ 130.428154] ? __cond_resched+0x17/0x30 [ 130.428176] preempt_schedule_common+0x45/0xc0 [ 130.428200] __cond_resched+0x17/0x30 [ 130.428221] __mutex_lock+0xa3/0x14d0 [ 130.428246] ? lock_is_held_type+0xd7/0x130 [ 130.428279] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 130.428307] ? mutex_lock_io_nested+0x1310/0x1310 [ 130.428332] ? lock_release+0x3b2/0x750 [ 130.428365] ? __up_read+0x192/0x730 [ 130.428392] ? up_write+0x480/0x480 [ 130.428419] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 130.428455] __do_sys_perf_event_open+0x1eec/0x32c0 [ 130.428487] ? perf_compat_ioctl+0x130/0x130 [ 130.428510] ? xfd_validate_state+0x59/0x180 [ 130.428552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 130.428588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 130.428628] do_syscall_64+0x3b/0x90 [ 130.428655] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.428689] RIP: 0033:0x7f6726027b19 [ 130.428716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.428736] RSP: 002b:00007f672359d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 130.428756] RAX: ffffffffffffffda RBX: 00007f672613af60 RCX: 00007f6726027b19 [ 130.428771] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 130.428784] RBP: 00007f6726081f6d R08: 0000000000000000 R09: 0000000000000000 [ 130.428798] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 130.428811] R13: 00007fff3866f2bf R14: 00007f672359d300 R15: 0000000000022000 [ 130.428835] [ 130.535534] WARNING: CPU: 0 PID: 3880 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 130.536797] Modules linked in: [ 130.537256] CPU: 0 PID: 3880 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220916 #1 [ 130.538343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.539853] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.540603] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.543091] RSP: 0018:ffff88803f597978 EFLAGS: 00010006 [ 130.543819] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.544788] RDX: ffff88801db71ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 130.545743] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 130.546708] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800f1e5400 [ 130.547760] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 130.548737] FS: 00007f672359d700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 130.549839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.550659] CR2: 00005575547f2080 CR3: 000000003ea38000 CR4: 0000000000350ef0 [ 130.551623] Call Trace: [ 130.551978] [ 130.552293] ctx_sched_out+0x8f1/0xc10 [ 130.552855] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.553591] ? lock_is_held_type+0xd7/0x130 [ 130.554203] ? __perf_cgroup_move+0x160/0x160 [ 130.554837] ? set_next_entity+0x304/0x550 [ 130.555452] ? update_curr+0x267/0x740 [ 130.556010] ? lock_is_held_type+0xd7/0x130 [ 130.556619] __schedule+0xedd/0x2470 [ 130.557156] ? io_schedule_timeout+0x150/0x150 [ 130.557793] ? find_held_lock+0x2c/0x110 [ 130.558413] ? lock_is_held_type+0xd7/0x130 [ 130.559070] ? __cond_resched+0x17/0x30 [ 130.559656] preempt_schedule_common+0x45/0xc0 [ 130.560318] __cond_resched+0x17/0x30 [ 130.560881] __mutex_lock+0xa3/0x14d0 [ 130.561414] ? lock_is_held_type+0xd7/0x130 [ 130.562045] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 130.562823] ? mutex_lock_io_nested+0x1310/0x1310 [ 130.563556] ? lock_release+0x3b2/0x750 [ 130.564168] ? __up_read+0x192/0x730 [ 130.564755] ? up_write+0x480/0x480 [ 130.565313] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 130.566084] __do_sys_perf_event_open+0x1eec/0x32c0 [ 130.566843] ? perf_compat_ioctl+0x130/0x130 [ 130.567525] ? xfd_validate_state+0x59/0x180 [ 130.568228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 130.568992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 130.569729] do_syscall_64+0x3b/0x90 [ 130.570259] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.571031] RIP: 0033:0x7f6726027b19 [ 130.571558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.574241] RSP: 002b:00007f672359d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 130.575366] RAX: ffffffffffffffda RBX: 00007f672613af60 RCX: 00007f6726027b19 [ 130.576432] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 130.577463] RBP: 00007f6726081f6d R08: 0000000000000000 R09: 0000000000000000 [ 130.578484] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 130.579515] R13: 00007fff3866f2bf R14: 00007f672359d300 R15: 0000000000022000 [ 130.580580] [ 130.580938] irq event stamp: 742 [ 130.581411] hardirqs last enabled at (741): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 130.582808] hardirqs last disabled at (742): [] __schedule+0x1225/0x2470 [ 130.584008] softirqs last enabled at (738): [] __irq_exit_rcu+0x11b/0x180 [ 130.585241] softirqs last disabled at (733): [] __irq_exit_rcu+0x11b/0x180 [ 130.586488] ---[ end trace 0000000000000000 ]--- [ 130.590625] audit: type=1400 audit(1663402216.107:9): avc: denied { write } for pid=3877 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.596045] audit: type=1400 audit(1663402216.112:10): avc: denied { setattr } for pid=3877 comm="syz-executor.3" name="oom_adj" dev="proc" ino=13823 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 [ 130.639353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.710393] EXT4-fs (loop2): unmounting filesystem. 08:10:16 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x28, r0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2000000000000078, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x9}]}) sched_setattr(0x0, &(0x7f0000000140)={0x38}, 0x0) 08:10:16 executing program 2: sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000580001"], 0x28}], 0x1}, 0x0) [ 130.913056] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 131.553939] loop5: detected capacity change from 0 to 16 [ 131.559919] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 131.572367] loop5: detected capacity change from 0 to 16 [ 131.573950] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value VM DIAGNOSIS: 08:10:16 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822b31cc RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88803f597370 R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ec83c3 R15=dffffc0000000000 RIP=ffffffff822b3221 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f672359d700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005575547f2080 CR3=000000003ea38000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000559cad6499d0 RCX=00007ff3f10634e8 RDX=0000000000000065 RSI=00007ff3f1063180 RDI=0000559cad648161 RBP=00007ffda48a5f50 RSP=00007ffda48a5d70 R8 =00007ff3f1032b18 R9 =0000000000000001 R10=00007ff3f0c487f0 R11=00007ff3f1031a20 R12=0000559cad648161 R13=00007ffda48a5ed8 R14=0000559cad6474b0 R15=00007ff3f1063180 RIP=00007ff3f1041bda RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff3f0b27540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff3f0d12620 CR3=000000000e1ae000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 00000000ff000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000ffffff YMM02=0000000000000000 0000000000000000 00362e322e325f43 42494c4700352e32 YMM03=0000000000000000 0000000000000000 0000000000000000 0000004700352e32 YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000