Warning: Permanently added '[localhost]:44373' (ECDSA) to the list of known hosts. 2022/09/18 20:12:46 fuzzer started 2022/09/18 20:12:46 dialing manager at localhost:36051 syzkaller login: [ 36.090442] cgroup: Unknown subsys name 'net' [ 36.207090] cgroup: Unknown subsys name 'rlimit' 2022/09/18 20:13:01 syscalls: 2215 2022/09/18 20:13:01 code coverage: enabled 2022/09/18 20:13:01 comparison tracing: enabled 2022/09/18 20:13:01 extra coverage: enabled 2022/09/18 20:13:01 setuid sandbox: enabled 2022/09/18 20:13:01 namespace sandbox: enabled 2022/09/18 20:13:01 Android sandbox: enabled 2022/09/18 20:13:01 fault injection: enabled 2022/09/18 20:13:01 leak checking: enabled 2022/09/18 20:13:01 net packet injection: enabled 2022/09/18 20:13:01 net device setup: enabled 2022/09/18 20:13:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/18 20:13:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/18 20:13:01 USB emulation: enabled 2022/09/18 20:13:01 hci packet injection: enabled 2022/09/18 20:13:01 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220916) 2022/09/18 20:13:01 802.15.4 emulation: enabled 2022/09/18 20:13:01 fetching corpus: 50, signal 34502/36250 (executing program) 2022/09/18 20:13:01 fetching corpus: 100, signal 49559/52842 (executing program) 2022/09/18 20:13:02 fetching corpus: 150, signal 59695/64396 (executing program) 2022/09/18 20:13:02 fetching corpus: 200, signal 68935/74971 (executing program) 2022/09/18 20:13:02 fetching corpus: 250, signal 75822/83113 (executing program) 2022/09/18 20:13:02 fetching corpus: 300, signal 80067/88655 (executing program) 2022/09/18 20:13:02 fetching corpus: 350, signal 82981/92880 (executing program) 2022/09/18 20:13:02 fetching corpus: 400, signal 86048/97189 (executing program) 2022/09/18 20:13:02 fetching corpus: 450, signal 89402/101743 (executing program) 2022/09/18 20:13:03 fetching corpus: 500, signal 91822/105379 (executing program) 2022/09/18 20:13:03 fetching corpus: 550, signal 94937/109591 (executing program) 2022/09/18 20:13:03 fetching corpus: 600, signal 97609/113384 (executing program) 2022/09/18 20:13:03 fetching corpus: 650, signal 101141/117907 (executing program) 2022/09/18 20:13:03 fetching corpus: 700, signal 103549/121369 (executing program) 2022/09/18 20:13:03 fetching corpus: 750, signal 106788/125494 (executing program) 2022/09/18 20:13:03 fetching corpus: 800, signal 108167/127973 (executing program) 2022/09/18 20:13:04 fetching corpus: 850, signal 110670/131412 (executing program) 2022/09/18 20:13:04 fetching corpus: 900, signal 112063/133843 (executing program) 2022/09/18 20:13:04 fetching corpus: 950, signal 116197/138642 (executing program) 2022/09/18 20:13:04 fetching corpus: 1000, signal 119275/142508 (executing program) 2022/09/18 20:13:04 fetching corpus: 1050, signal 122101/146058 (executing program) 2022/09/18 20:13:04 fetching corpus: 1100, signal 125109/149695 (executing program) 2022/09/18 20:13:04 fetching corpus: 1150, signal 127015/152423 (executing program) 2022/09/18 20:13:05 fetching corpus: 1200, signal 129575/155625 (executing program) 2022/09/18 20:13:05 fetching corpus: 1250, signal 131718/158466 (executing program) 2022/09/18 20:13:05 fetching corpus: 1300, signal 133663/161137 (executing program) 2022/09/18 20:13:05 fetching corpus: 1350, signal 136089/164172 (executing program) 2022/09/18 20:13:05 fetching corpus: 1400, signal 136964/165939 (executing program) 2022/09/18 20:13:05 fetching corpus: 1450, signal 139490/168938 (executing program) 2022/09/18 20:13:05 fetching corpus: 1500, signal 141104/171276 (executing program) 2022/09/18 20:13:06 fetching corpus: 1550, signal 142809/173681 (executing program) 2022/09/18 20:13:06 fetching corpus: 1600, signal 144593/176106 (executing program) 2022/09/18 20:13:06 fetching corpus: 1650, signal 146372/178451 (executing program) 2022/09/18 20:13:06 fetching corpus: 1700, signal 147513/180249 (executing program) 2022/09/18 20:13:06 fetching corpus: 1750, signal 148837/182206 (executing program) 2022/09/18 20:13:06 fetching corpus: 1800, signal 150142/184107 (executing program) 2022/09/18 20:13:06 fetching corpus: 1850, signal 152404/186655 (executing program) 2022/09/18 20:13:06 fetching corpus: 1900, signal 154089/188794 (executing program) 2022/09/18 20:13:07 fetching corpus: 1950, signal 155299/190607 (executing program) 2022/09/18 20:13:07 fetching corpus: 2000, signal 156489/192333 (executing program) 2022/09/18 20:13:07 fetching corpus: 2050, signal 157715/194099 (executing program) 2022/09/18 20:13:07 fetching corpus: 2100, signal 158985/195816 (executing program) 2022/09/18 20:13:07 fetching corpus: 2150, signal 160383/197682 (executing program) 2022/09/18 20:13:07 fetching corpus: 2200, signal 161659/199445 (executing program) 2022/09/18 20:13:07 fetching corpus: 2250, signal 162765/201029 (executing program) 2022/09/18 20:13:07 fetching corpus: 2300, signal 164570/203074 (executing program) 2022/09/18 20:13:07 fetching corpus: 2350, signal 166181/204966 (executing program) 2022/09/18 20:13:08 fetching corpus: 2400, signal 167005/206338 (executing program) 2022/09/18 20:13:08 fetching corpus: 2450, signal 168292/208004 (executing program) 2022/09/18 20:13:08 fetching corpus: 2500, signal 169608/209658 (executing program) 2022/09/18 20:13:08 fetching corpus: 2550, signal 170570/211068 (executing program) 2022/09/18 20:13:08 fetching corpus: 2600, signal 172187/212905 (executing program) 2022/09/18 20:13:08 fetching corpus: 2650, signal 173550/214530 (executing program) 2022/09/18 20:13:08 fetching corpus: 2700, signal 174405/215834 (executing program) 2022/09/18 20:13:09 fetching corpus: 2750, signal 175231/217088 (executing program) 2022/09/18 20:13:09 fetching corpus: 2800, signal 176638/218733 (executing program) 2022/09/18 20:13:09 fetching corpus: 2850, signal 177524/220033 (executing program) 2022/09/18 20:13:09 fetching corpus: 2900, signal 178403/221344 (executing program) 2022/09/18 20:13:09 fetching corpus: 2950, signal 179265/222603 (executing program) 2022/09/18 20:13:09 fetching corpus: 3000, signal 180229/223858 (executing program) 2022/09/18 20:13:09 fetching corpus: 3050, signal 181404/225208 (executing program) 2022/09/18 20:13:09 fetching corpus: 3100, signal 182503/226525 (executing program) 2022/09/18 20:13:10 fetching corpus: 3150, signal 183358/227733 (executing program) 2022/09/18 20:13:10 fetching corpus: 3200, signal 185059/229405 (executing program) 2022/09/18 20:13:10 fetching corpus: 3250, signal 186045/230618 (executing program) 2022/09/18 20:13:10 fetching corpus: 3300, signal 186932/231771 (executing program) 2022/09/18 20:13:10 fetching corpus: 3350, signal 188610/233382 (executing program) 2022/09/18 20:13:10 fetching corpus: 3400, signal 189325/234422 (executing program) 2022/09/18 20:13:10 fetching corpus: 3450, signal 190231/235558 (executing program) 2022/09/18 20:13:11 fetching corpus: 3500, signal 191177/236747 (executing program) 2022/09/18 20:13:11 fetching corpus: 3550, signal 192095/237848 (executing program) 2022/09/18 20:13:11 fetching corpus: 3600, signal 192990/238961 (executing program) 2022/09/18 20:13:11 fetching corpus: 3650, signal 194339/240264 (executing program) 2022/09/18 20:13:11 fetching corpus: 3700, signal 195294/241371 (executing program) 2022/09/18 20:13:11 fetching corpus: 3750, signal 196225/242432 (executing program) 2022/09/18 20:13:11 fetching corpus: 3800, signal 197530/243622 (executing program) 2022/09/18 20:13:12 fetching corpus: 3850, signal 198744/244877 (executing program) 2022/09/18 20:13:12 fetching corpus: 3900, signal 199474/245850 (executing program) 2022/09/18 20:13:12 fetching corpus: 3950, signal 200037/246780 (executing program) 2022/09/18 20:13:12 fetching corpus: 4000, signal 200693/247654 (executing program) 2022/09/18 20:13:12 fetching corpus: 4050, signal 201455/248563 (executing program) 2022/09/18 20:13:12 fetching corpus: 4100, signal 202158/249422 (executing program) 2022/09/18 20:13:12 fetching corpus: 4150, signal 202574/250156 (executing program) 2022/09/18 20:13:12 fetching corpus: 4200, signal 203472/251092 (executing program) 2022/09/18 20:13:12 fetching corpus: 4250, signal 204570/252104 (executing program) 2022/09/18 20:13:13 fetching corpus: 4300, signal 204985/252830 (executing program) 2022/09/18 20:13:13 fetching corpus: 4350, signal 205778/253717 (executing program) 2022/09/18 20:13:13 fetching corpus: 4400, signal 206161/254403 (executing program) 2022/09/18 20:13:13 fetching corpus: 4450, signal 206625/255134 (executing program) 2022/09/18 20:13:13 fetching corpus: 4500, signal 207262/255891 (executing program) 2022/09/18 20:13:13 fetching corpus: 4550, signal 208001/256717 (executing program) 2022/09/18 20:13:13 fetching corpus: 4600, signal 208995/257597 (executing program) 2022/09/18 20:13:13 fetching corpus: 4650, signal 209639/258349 (executing program) 2022/09/18 20:13:14 fetching corpus: 4700, signal 210207/259081 (executing program) 2022/09/18 20:13:14 fetching corpus: 4750, signal 210896/259800 (executing program) 2022/09/18 20:13:14 fetching corpus: 4800, signal 211678/260615 (executing program) 2022/09/18 20:13:14 fetching corpus: 4850, signal 212237/261320 (executing program) 2022/09/18 20:13:14 fetching corpus: 4900, signal 212827/262017 (executing program) 2022/09/18 20:13:14 fetching corpus: 4950, signal 213384/262704 (executing program) 2022/09/18 20:13:14 fetching corpus: 5000, signal 214544/263677 (executing program) 2022/09/18 20:13:15 fetching corpus: 5050, signal 215267/264383 (executing program) 2022/09/18 20:13:15 fetching corpus: 5100, signal 215683/264970 (executing program) 2022/09/18 20:13:15 fetching corpus: 5150, signal 216399/265610 (executing program) 2022/09/18 20:13:15 fetching corpus: 5200, signal 217056/266287 (executing program) 2022/09/18 20:13:15 fetching corpus: 5250, signal 217898/267041 (executing program) 2022/09/18 20:13:15 fetching corpus: 5300, signal 218409/267648 (executing program) 2022/09/18 20:13:15 fetching corpus: 5350, signal 219217/268274 (executing program) 2022/09/18 20:13:16 fetching corpus: 5400, signal 219790/268837 (executing program) 2022/09/18 20:13:16 fetching corpus: 5450, signal 220139/269375 (executing program) 2022/09/18 20:13:16 fetching corpus: 5500, signal 220481/269873 (executing program) 2022/09/18 20:13:16 fetching corpus: 5550, signal 220916/270420 (executing program) 2022/09/18 20:13:16 fetching corpus: 5600, signal 221774/271047 (executing program) 2022/09/18 20:13:16 fetching corpus: 5650, signal 222418/271599 (executing program) 2022/09/18 20:13:16 fetching corpus: 5700, signal 222769/272117 (executing program) 2022/09/18 20:13:16 fetching corpus: 5750, signal 223286/272650 (executing program) 2022/09/18 20:13:16 fetching corpus: 5800, signal 223666/273134 (executing program) 2022/09/18 20:13:17 fetching corpus: 5850, signal 224239/273649 (executing program) 2022/09/18 20:13:17 fetching corpus: 5900, signal 224866/274194 (executing program) 2022/09/18 20:13:17 fetching corpus: 5950, signal 225311/274715 (executing program) 2022/09/18 20:13:17 fetching corpus: 6000, signal 226039/275232 (executing program) 2022/09/18 20:13:17 fetching corpus: 6050, signal 226740/275760 (executing program) 2022/09/18 20:13:17 fetching corpus: 6100, signal 227381/276243 (executing program) 2022/09/18 20:13:17 fetching corpus: 6150, signal 227740/276697 (executing program) 2022/09/18 20:13:17 fetching corpus: 6200, signal 228395/277269 (executing program) 2022/09/18 20:13:18 fetching corpus: 6250, signal 228966/277703 (executing program) 2022/09/18 20:13:18 fetching corpus: 6300, signal 229742/278168 (executing program) 2022/09/18 20:13:18 fetching corpus: 6350, signal 230155/278614 (executing program) 2022/09/18 20:13:18 fetching corpus: 6400, signal 230903/279068 (executing program) 2022/09/18 20:13:18 fetching corpus: 6450, signal 231540/279609 (executing program) 2022/09/18 20:13:18 fetching corpus: 6500, signal 232024/280042 (executing program) 2022/09/18 20:13:18 fetching corpus: 6550, signal 232489/280430 (executing program) 2022/09/18 20:13:18 fetching corpus: 6600, signal 232981/280834 (executing program) 2022/09/18 20:13:19 fetching corpus: 6650, signal 233256/281226 (executing program) 2022/09/18 20:13:19 fetching corpus: 6700, signal 233676/281609 (executing program) 2022/09/18 20:13:19 fetching corpus: 6750, signal 234061/281974 (executing program) 2022/09/18 20:13:19 fetching corpus: 6800, signal 234357/282340 (executing program) 2022/09/18 20:13:19 fetching corpus: 6850, signal 234735/282687 (executing program) 2022/09/18 20:13:19 fetching corpus: 6900, signal 235159/283061 (executing program) 2022/09/18 20:13:19 fetching corpus: 6950, signal 235666/283390 (executing program) 2022/09/18 20:13:20 fetching corpus: 7000, signal 236060/283554 (executing program) 2022/09/18 20:13:20 fetching corpus: 7050, signal 236552/283565 (executing program) 2022/09/18 20:13:20 fetching corpus: 7100, signal 237083/283600 (executing program) 2022/09/18 20:13:20 fetching corpus: 7150, signal 237536/283653 (executing program) 2022/09/18 20:13:20 fetching corpus: 7200, signal 238060/283653 (executing program) 2022/09/18 20:13:20 fetching corpus: 7250, signal 238594/283665 (executing program) 2022/09/18 20:13:20 fetching corpus: 7300, signal 239702/283782 (executing program) 2022/09/18 20:13:20 fetching corpus: 7350, signal 240573/283782 (executing program) 2022/09/18 20:13:20 fetching corpus: 7400, signal 241072/283782 (executing program) 2022/09/18 20:13:21 fetching corpus: 7450, signal 241461/283793 (executing program) 2022/09/18 20:13:21 fetching corpus: 7500, signal 242010/283805 (executing program) 2022/09/18 20:13:21 fetching corpus: 7550, signal 242732/283939 (executing program) 2022/09/18 20:13:21 fetching corpus: 7600, signal 243580/284154 (executing program) 2022/09/18 20:13:21 fetching corpus: 7650, signal 244041/284193 (executing program) 2022/09/18 20:13:21 fetching corpus: 7700, signal 244350/284195 (executing program) 2022/09/18 20:13:21 fetching corpus: 7750, signal 244852/284221 (executing program) 2022/09/18 20:13:21 fetching corpus: 7800, signal 245165/284223 (executing program) 2022/09/18 20:13:21 fetching corpus: 7850, signal 245573/284227 (executing program) 2022/09/18 20:13:22 fetching corpus: 7873, signal 245950/284229 (executing program) 2022/09/18 20:13:22 fetching corpus: 7873, signal 245950/284229 (executing program) 2022/09/18 20:13:24 starting 8 fuzzer processes 20:13:24 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x40, 0xef, 0x1f, 0x81, 0x0, 0x5, 0x39ca6, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x18010, 0x4b1acab2, 0xffff, 0x5, 0x1, 0x5, 0xd7, 0x0, 0x6, 0x0, 0x5100000000000000}, 0xffffffffffffffff, 0x8, r0, 0x0) r3 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x10800, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x7c, 0x3, 0x9, 0x7, 0x0, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240)}, 0x200, 0x6, 0x5, 0x1, 0x1, 0x7, 0x63, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xb) r5 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xfc, 0x0, 0x1, 0xc1, 0x0, 0x2, 0x80000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x5104, 0xf1, 0xfffffff7, 0x0, 0x3, 0x9, 0x20, 0x0, 0x324, 0x0, 0xffffffffffffff01}, 0x0, 0x8, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0\x00'}) r7 = openat$cgroup_procs(r6, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000380)=@OVL_FILEID_V0={0xf9, 0xfb, {0x0, 0xfb, 0xf9, 0x1, 0xaf, "8b0ba4ae4b942dbb3ec4c1354e3730e6", "c0473fe9da885023bd0aed1b2f91fffb08203cc91aacfd98e5ddd279ff3c8bcc5d751d944c27febcf4997595eba7dcacc439a0472a7ba9724074d62a5ae110a71a6df106a1fcb8f3717839590128493b9f7ace0361d2e860fcca920bebe36798facf9fee79815b39ea21ed1245c038efdd2feb621faad48ef42adfe8bb717cf19930261f9da29ccdc3c0e8463994570ed9a2b569582b18bb69bdcc36a272e57306d7cb5becfb83d5ac0bc42633aaf1ede54098c103606e0ff05b77e12ea3e2ad22c3c7ba7df0b105407e2d01900365aa00e99f43507401fa9a39372f514ce9091323cb66"}}, 0x80000) r8 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x8a, 0xb4, 0xff, 0x7f, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x64a, 0x473e}, 0x100, 0x9, 0x7, 0x8, 0x0, 0x25, 0x9, 0x0, 0x1000, 0x0, 0x7f}, r8, 0x10, r4, 0x3) pwritev(r3, &(0x7f0000000680)=[{&(0x7f0000000540)="5cd5a46178ba315edb8404100b27570b679a8b1b", 0x14}, {&(0x7f0000000580)="3b4e68f3bbcc7da867c959207956d365a24727aa5a24eaf08647f3a3dea45f3ba16b679ef5790492d710f8a8403a6bef0204626a7d4f480fe2e66c95f9b4148134ab9d2dcc6a4c32e280f464326e08388b19b19ca5697a65d447c3c1a3348928a89768f97f0ba426e2edb6ea06b25c1d1415eeb604ed300d58acfa72ebf870df60b1923f5ffbd348a6ad6bce5f1804d20fe6832c33a2d928eeb1d0362bd0e96ba1657e2e32241f243bd7755fe99c127e26a1fdfc5ff12253c1481e5eb6ccf662e5c4db0230d3b059", 0xc8}], 0x2, 0x4000, 0x0) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x5, 0x9, 0xf8, 0x9, 0x0, 0x100000000, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffff7, 0x4, @perf_bp={&(0x7f00000006c0), 0x10}, 0x5404, 0x401, 0x8, 0x4, 0x8, 0x1, 0xab, 0x0, 0x1, 0x0, 0x8}, r8, 0x1, r2, 0xa) r9 = syz_open_dev$mouse(&(0x7f0000000780), 0x0, 0x280800) r10 = openat(r9, &(0x7f00000007c0)='./file0/file0\x00', 0x1, 0x52) r11 = accept$inet6(r1, &(0x7f0000000800)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000840)=0x1c) pwritev(r11, &(0x7f0000001b00)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="a84f48d2f84cd9ea1d2598bf3801e5c60aaa6549addf6c8c36481f00c39d6a1fed260467e731e1f65822fa087404bb30285c974256195748c5a7806e5dc4c84951a7b164cc2b74519a51c12393f8048fdb0f281844af7d3c1d7ca6557b2681", 0x5f}, {&(0x7f0000001900)="d8a41a994a1c34a598de", 0xa}, {&(0x7f0000001940)="072418d20f395d4b41a8b48eff24232ba66356e25d996139bea73da04e9cb6bc4a17d11c61b370fa530459b0ab7277182e7b2405c773e149ec7ca9cf531f105ad3ddedec90fbbb58030836234335db9bc9a7a4f74e738f9cb086a4e0608f3de008ff3fe4e0af3c9ddae07c6a1b8c75a2accd40507641809d20b8d7fa909a53c30d64e9c0494ea47d28b4df61d993b72129d6d814d7d5de231bbb9fe6d5ac1ec297", 0xa1}, {&(0x7f0000001a00)="bd7992486c31ac5121a41cd81f1f620b493479081f307ad9c245bcc8af6d4733ca58bb2adb3bd3187804ccb78028587ae90dd79f04eea3e9e5eb4eb578561fad353e5d510ee8a940c03fc218bba42ebcbda86ac36fe76262c20f66ec2b8738f292fe41cf632027ef6021ffc741ec050444eeea3ee44ca545c7bac242ea9a625b95a0491d820067da2ad7f35dd6cb1c67a5d2c7fb4bcd5bb617ca23f4b1d3b631e08ccde1e35a25520d583d6f3c7d1b9f", 0xb0}, {&(0x7f0000001ac0)="c1", 0x1}], 0x6, 0x6, 0x9) syncfs(r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000001b80)={0x10002000}) sendfile(r4, r10, &(0x7f0000001bc0)=0x39a, 0x8) 20:13:24 executing program 1: sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x70bd27, 0x20, {{}, {}, {0x18, 0x17, {0x15, 0x6, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x28}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r2, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x39, 0x5b, "fafd66c4d6f0f681e814e2922583f450b5425da0cdcbbb40741563242ed7fc516ee18ae2b88b33f789fad95b53c32723671c42d8f7"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x54}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x4040) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7f, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000780)={0xffffffffffffffff, 0x36, 0x0, 0x9}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd0, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x10000}, @NL80211_ATTR_VENDOR_DATA={0xe, 0xc5, "05bd5372dfb1e418cb85"}, @NL80211_ATTR_VENDOR_DATA={0x9c, 0xc5, "6ffeb4093ec569c9266d2854828df14cdb5171f5ae6ad1ed25d49ab98f7a00ce57a716b6dc3aca5b7f2fba6c9dc4cf42c1732961094f61db4a7c94f00d9aab1babf34b0e8f097c2e9ffe8f99507c17e38f49a8952b63fcf55388b34c7c878bc73aacbd9aed6f8c5580096d75a873617c8fb2b085e53ff0d35550c16d2a6d032eedad7e40844ed65e680d479290d1be06ffb3e4e8559031f6"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048055}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r4) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xfc, r6, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x97, 0xac, "c9e3f1648d4dccef38234a5e51a3c9d699386bff405ba09bee783df3746cec76d8f3792603469dd8fad2b6beb7f4858918b28c674aa28c0ae926e5ccc7a80d85b36db77759d998709463437d871f5315986f654541a6be97a07a1f3c52e8c4cfb6a2919a2734578da9516e88a5ad0b00bac862e45c0152fb5768a67795944eb04bb55bfdfa773e5a9bd8b83bcc6fe488834c56"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x186}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x6, 0x3, 0x3432]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfffe}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x76d}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3d8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x400, 0x80, 0x702]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000080}, 0x48001) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000020c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002080)={&(0x7f0000000f40)={0x1128, 0x0, 0x122, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x77}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_DATA={0xe0, 0xc5, "81529d9ca10c41e87fb0513c0e669a339e8301a3b862b45ef28af4aefaba7a852fbafc753c16180785412bae3f234b4857a50e180aa5bdff86e7d3d87718c028455485d2e7c1c6d0c86c76ecc75e909ab31588d074c2b1c5a4804b03d3a7df046fdc61f595e4bbe2276f33e85c050f00d7ea31549815a62388d9343a6713df225bd4455f90152e24edbae6903f91250b0cb10c53478ddc915da22bbb0f7168c3c124bb035b8234371ce22afdd10035ee30589bbfcf3ec984fe16f73cddda8358db32c9b1e87dbb4d4ade94cf46fe1caafaf3c5701ed8e4cedb69e93a"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0x1128}, 0x1, 0x0, 0x0, 0x4041}, 0x40) 20:13:24 executing program 2: r0 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x42bd, @loopback, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x2}, @acquire_done={0x40106309, 0x1}], 0x43, 0x0, &(0x7f0000000080)="7e4603ac5222b945da777ebb89f0746e718bb16560a1a4920b8774fb432e9f452a3db102c11149b19f487ad39f341e95f811d2913ba57c629e7cffd66708a62614eae0"}) r1 = dup2(r0, r0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000140)=""/223) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x40840, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x9, @private2, 0x642}, 0x1c) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, r2, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x6) r4 = openat$incfs(r0, &(0x7f0000000300)='.pending_reads\x00', 0x141, 0x120) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000340)=""/250) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000440)=""/236) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x39}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x40}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000640)={0x401, {0x10, 0xbc0, 0x466, 0x8, 0xfffffffffffffffd}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x7) r6 = dup(0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000680)={0x0, 0x0}) fcntl$setown(r6, 0x8, r7) syz_io_uring_setup(0xae1, &(0x7f0000000700)={0x0, 0x870f, 0x0, 0x1, 0x2e3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 20:13:24 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x28, 0xc5, "f8fdddc2f424f8042c17811bf8061271991cdff8edb0f55254b01585ca4f99ff50bcc45c"}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x684001, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x250, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x48}, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x61b, 0x80}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000}, @NL80211_ATTR_VENDOR_DATA={0x102, 0xc5, "eaad5f685a5321e15e2f98ed8b37c40220fbb47d676ca5b307943a104944a0fca4532fec913731355aa3ef537cd44cfdf44e1bc7cbf459cde2bda3c1de018fabfb5c9eeeef15e7854dcff9ebbd18756c570da9d59f24648fa64515244cd43daadaf7808349003d27414bb1a6a19060678d7e58472c410a8c87efd905880e9e93fe5b5e411418e37fd368744b22d6dc40277cef1bf63e1b770a868be6d39dfc36d9e1c5e82ba8f8f789aad1252ea83713acb495cd6afce9b20b73a855fdd2270de5a33c3d5705a03cf2419df411e615018b955f8ba38d02e414651b9db59fc46dd38e5b6e909a5c27a8f061cea11cdba19928226acc1277abadb6da70b690"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6b73}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffffc0}, @NL80211_ATTR_VENDOR_DATA={0x3e, 0xc5, "b15e81dcdc24c2676eeca37812e91f440b9f0bf9eaae55a99ed9720120f9cde0460605b0a334bff726c4dbc5cd12d660809c34a6e3b2f7577cde"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x10000}, @NL80211_ATTR_VENDOR_DATA={0xbc, 0xc5, "033539e9231f9840d61295babb519771cda8bdf01a5685c324d9edeb216ac9acff774ba6d419c9d1f35a5e48de427f944ed213298b6f060747cfda1ee9711413fb6a32f9267e91f945361815d2ce75de7dfda80d0f7521bf2df8f4d7095507f17bdb9ec080290813adc54f16d837415a1c3194637eeb922f31f4b8f275e01ef85644aef72a55a9ac7e09ebb5a713e22daa40933de2aca61f7d95ec9e9ec74adf2d5a905b09d683b68c03ba43420c75b3f77c509af30107d9"}]}, 0x250}}, 0x4044040) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x6200003}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x30, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x0, 0x4e}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf0, r2, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd87}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x10b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xca6f, 0x1, 0x8, 0x0, 0x2]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0xffffff9e]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3ff, 0xffff0000]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x48}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10001}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40800}, 0x4000004) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x210, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x28010) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0\x00'}) r6 = openat(r5, &(0x7f0000000ac0)='./file0\x00', 0x420000, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000b80), r5) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001f00)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000002000)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002040)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000002140)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000002200)={'syztnl2\x00', &(0x7f0000002180)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x7f, 0x1, 0x20, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x40, 0x1, 0x7f, 0x80000001}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002440)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@empty}}, &(0x7f0000002540)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000033c0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003380)={&(0x7f0000002a40)={0x91c, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb85}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1d0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x0, 0x9, 0x8}, {0xd76, 0x2, 0x4, 0x2}, {0x39f, 0x80, 0x8, 0x5d9}, {0xfffd, 0x2d, 0x4, 0x7}, {0xff, 0x1f, 0x8, 0x25}, {0x400, 0x4, 0x8, 0x1}, {0xffff, 0x8, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x91c}, 0x1, 0x0, 0x0, 0x4010}, 0x8804) 20:13:24 executing program 4: r0 = socket$packet(0x11, 0x6, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x204000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000140)={'veth0_to_bond\x00', {0x2, 0x0, @remote}}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x6}, 0x4) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000, 0x1a000, 0x0, 0x0) sync_file_range(r0, 0x4, 0x6, 0x1) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000011c0)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001200)={'veth0_to_batadv\x00'}) r2 = accept(r1, 0x0, &(0x7f0000002540)) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000002580)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000002600), 0x800) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000002640), 0x20040, 0x0) connect(r4, &(0x7f0000002680)=@rc={0x1f, @none, 0xb6}, 0x80) accept(r3, &(0x7f0000002700)=@qipcrtr, &(0x7f0000002780)=0x80) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r5, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000027c0)="6cac6f9f4b5578f7f73e469651a3c825b43ccdd89621794cd9a1f64c4a575be9c6fcb786721fff8efda1ad43828efdb658c3ae6ff8b12653f7efc3ba9b14fddc6bc8bac97f69c68bc8726e86eb079dcb22154bedd9214ce628fa58254248415480", 0x61}], 0x1, &(0x7f0000002880)=[@mark={{0x14, 0x1, 0x24, 0x14}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x245313be}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}], 0x78}, 0x8800) readlink(&(0x7f0000002940)='./file0\x00', &(0x7f0000002980)=""/123, 0x7b) setsockopt(r3, 0x10001, 0x5, &(0x7f0000002a00)="8f3d0c9a5f9c7370e33b28b8bc2d233bbabd8d26430c527326720e52502db473456f9c48926a624f5138c69f79a4ae64f17751de21058c4aa053b40c00", 0x3d) [ 73.802699] audit: type=1400 audit(1663532004.619:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:13:24 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x2f, 0xff, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbb, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x108, 0x1, 0xffff33c3, 0x9, 0x100, 0x2, 0xfff, 0x0, 0x9184, 0x0, 0x23}, 0x0, 0x2, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) ftruncate(r1, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='))\x97/*\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = memfd_secret(0x0) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000001c0)={0x10001, 0x8000, 0x1, 0x80, 0x3, [{0x0, 0x89e3, 0x6, '\x00', 0x2000}, {0x8, 0x3f, 0x7fff, '\x00', 0xa08}, {0x9, 0x7ff, 0x1}]}) r5 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xf8, 0x7, 0xf, 0x4, 0x0, 0xfffffffffffffffb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x8110, 0x8, 0xfffffff7, 0x8, 0x4, 0x7, 0x100, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x9) lgetxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=""/154, 0x9a) r6 = socket$packet(0x11, 0x3, 0x300) writev(r6, &(0x7f0000000800)=[{&(0x7f00000004c0)="6fff667dafe2873f932fe8510fb7c95e90994780b459148a1e13b849367be5765718c621c845cad8bc2893a9541eab2eb6c93449304afa693966cb4dfcce48d12e1801f08f476b1411d512d141a4b047843a530c317fcea504b338960749b79b7d7d0dc0e9e8eed097120978c284658d45d3065c58f00a1e493fd693f0", 0x7d}, {&(0x7f0000000540)="f9349e2126e6fb2058de16e3e8039d3d5123a8a88a6e391447defcad5701a28e5440fd6d18586f2afcbc759c971ff619caafb7daa98fc5a0ac740d7424ae735367b40ecf4f6815de34ee824c9a8e1515716f7d8c53ab51b7a2927ff7d7c7037c1220d62bc8f2d635fd0c1247339310f405487b6ed44a4d25dedaa5e459294d28eb495c375276748ed7f071d4989600b1", 0x90}, {&(0x7f0000000600)="1e81abc950af0dc400e8030590482779e62ae4b3432136dba5561537b4bcc1b92cc760cbb68715d4ef99ac3e8d7ce944261a9706020135831e4468", 0x3b}, {&(0x7f0000000640)="dc9217e6fff7e1d5728c3becee9c8d4ab3cd6890554a9d1f9b97ae0b3e640dd0dea3d973e029b56ef307dd8d0259a1581a046ece1020b2cf94b02a5ee2be4b9141373496bbf6d1deaaff233bc7a477667455a0d6667ec96563f156411e8d66671c2d048fccc5e5baa4abe229a5ca0b048a684e1ebb50f819e23de67308e1dfcd75acdc13531a2d133eb978b1206f41f74c8d6fa065a3d5f60c5d6d290bc5f79c2e933643863f", 0xa6}, {&(0x7f0000000700)="aae03befb79d4d1b775c0f9b9a372683e6f4c9f67c29a0dc5e7151d363204c5496728a3a0167f2427075696fdc3ddfb95a9a1fcbd864afd69cca308ea6cdde1deceddf5b10500cb259de60cc49264055d996f98c474c2c276186dfaf2a96cfa00ed24685e6f3670c5941f96d3e8b10bec39bf2b64d2c26923382c1a4df68b0d7e4cd29f1b5bc2596ff6c1e3db9e6de019d5cfc3831106b8d6434b9c87959189ae1adf9a6b4ed649231c77c01cf08a7f17c41c8eb0e28b2b980871fa40b827c9ef9f8a0f8b90ae374dc16ed7d9d5cf7c31c6d678f330fde0b", 0xd8}], 0x5) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) close_range(r7, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x5, &(0x7f0000000d80)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f00000008c0)="9a9bab8fb2b13bfbff7542003209814d05f520ebd53b46ac34f70ba23d49e3ddaeacaeda66b1970ecea03001a04f73d76fcfc321bb267f", 0x37, 0x11, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x6, 0x0, r6, &(0x7f0000000940)="2800e63a33c046b43396895fb3fc533d02864075a7694737e7d0a32adbedc2beed98d5bfac9ff84695539f795e6774e8009f8c7d3ae360a6727ddfc3c7cceaf341fbb2f136083ac6adf9afb37eccbfcb7b8f9cb825167d0e5acaf6a917c674e3a47b342c6830647959dc802111dc6a412a1e144c0537050689e8874d4ff717330b50ffa1a970c1308b2ae379b5d15edba92ee91bd310c8ef291b4ba02d8ebae0521d0b4c5c691fc6c435bb40cb7e5ca3df4ea449fbd3fb320136649e2a7854976bdfa6e29ee7ca3d0d0cb65313dc3ccd5528ea1b6b13831c1659898bbf02f494c4d5c847525071e247bf65df6f29c4901d8b", 0xf2, 0x18000000, 0x0, 0x3}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000ac0)="c9009ea7f36fde77785cf66cf06aaaed0d42c61e8c795c96f4b1b224d6be249415103397d549ebc35087f2d55b35922df7559a1b9e6fffabfc7076662338a38505fff3633fd01f1e7d90", 0x4a, 0x0, 0x0, 0x0, r3}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x5, 0x435, r5, &(0x7f0000000b80)="7e4bb8f4431096147ac5b553bc4c131d2f5dc28843994c15487848797db642606f89df1f7d479de9f48d061575137b8ba815", 0x32, 0x4, 0x0, 0x1}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x8, 0x3, r7, &(0x7f0000000c40)="19badba32730d0060409924da4f27d4173204c04bca3d51738f78258f84cb4a031de8699f9043a4f7148d1fd5825d002bf62e17c6e5527b1b2b01cb684acfa4ce70a4a3b4505e7d2863e111ad109093178831d7c340e32e66bf9dbdb9145d946e2e3411991ff256543f298c922eb70186512e43f666e6a579ebd727e7f3dc5d69d5e3e0be4afbf5580f2f9c4fe2563d8a84eca4bcc0ee4f149c64890fc36ac91891f7f4a6564da9112023ebc70027c79c1d124fa9fc71fcab1b4fd34ca4dd4eefa17ef9dc26373a2db20028ed0a6840a5ea605ff", 0xd4, 0x9, 0x0, 0x1, r4}]) 20:13:24 executing program 6: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) ioctl$int_out(r0, 0x5462, &(0x7f00000000c0)) r1 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x5, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="2b06289089ffa37975c40ac6f7a541b9681522804574d6941bf7710c04d406f5f52b7a7137ea18f960f45965bdfc0c49ba5dda51c68f7bf5998fc97c7e3b7d0184c379325aac3f9f8e25a3cc3eddc11b70720744792a8c0f1c89709e6cf9fb1c1cd3c29184b51e815c7bb425a25397e32ffc7fdd4d7b42658d8599140756ccb6bae7fa471ad6e4d394666a21cbe9b4094d898cf0fa9427bc501a9e65037b0ee915b2a56b3f5387e478f556ad83f1b6fa9026530c0203a0bcafafab7df5", 0xbd, 0x3}], 0x800000, &(0x7f0000000280)={[{@utf8no}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, '+-'}}, {@audit}, {@context={'context', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'staff_u'}}]}) r2 = openat2(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x37, 0x4}, 0x18) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffff70e}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048001}, 0x8881) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x742a39f8a8ff8f8f}, 0x20002000) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000700)={0xec9, 0x1, 0x0, 0x1, 0x7f, 0xffffffa6}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x19c, 0x3, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_NAT_SRC={0x88, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1c4e000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}]}, @CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc041}, 0x4010005) recvmsg(r2, &(0x7f0000001cc0)={&(0x7f0000000a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/223, 0xdf}], 0x2, &(0x7f0000001bc0)=""/200, 0xc8}, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000001d00)) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e00)={0xa0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x80, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e3b60deb337bbb682755a26d53e3a37a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "57008d62b5e18279a98a68d908264484"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x200488c1) statfs(0xfffffffffffffffc, &(0x7f0000001f40)=""/42) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x74, 0x1, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20044000}, 0x8020) 20:13:24 executing program 7: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = accept$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) getsockname$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0xfc}}, 0x14008040) r2 = epoll_create(0x3) close_range(r2, r0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000440), 0x8, 0x202000) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x4, 0x7f, 0x8b, 0x8, 0x18, @mcast2, @empty, 0x7800, 0x7888, 0x7, 0x7}}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/binder-control\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000580)={r2, r5, 0x1}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000005c0)=0x6) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000600)={0x2b, 0x19, 0x11, 0x1a, 0x8, 0x9, 0x5, 0x77, 0x1}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x242040, 0x0) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000680)={@loopback, r4}, 0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000006c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe6e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d2}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x9, 0x5, 0xa30e, 0x3f]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x60}}, 0x40000) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000a00)={&(0x7f0000000880), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x47}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x2f, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0xf9, 0x28, @broadcast, 0x6cf, "", 0xffffffff, 0x3, @broadcast, 0xad2}}, @supported_rates={0x1, 0x8, [{0x6c}, {0x24, 0x1}, {0xb}, {0x4}, {0x30, 0x1}, {0x9, 0x1}, {0x33, 0x1}, {0xc, 0x1}]}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x6c}}, 0x8000) [ 75.019151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.021712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.023071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.026901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.029377] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.031368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.037104] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.094130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.097292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.099868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.105575] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.110882] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.112993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.131538] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.192654] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.194757] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.196205] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.197734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.199330] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.200623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.203099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.205531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.206798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.208664] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.210011] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.212108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.213700] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.216017] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.217346] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.218871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.220498] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.222201] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.225590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.228831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.230990] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.232154] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.232454] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.234829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.236560] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.238308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.240958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.242117] Bluetooth: hci3: HCI_REQ-0x0c1a [ 75.258795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.260332] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.261549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.263007] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.268312] Bluetooth: hci5: HCI_REQ-0x0c1a [ 75.270214] Bluetooth: hci4: HCI_REQ-0x0c1a [ 75.278904] Bluetooth: hci6: HCI_REQ-0x0c1a [ 77.106025] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 77.107679] Bluetooth: hci0: command 0x0409 tx timeout [ 77.170495] Bluetooth: hci2: command 0x0409 tx timeout [ 77.297552] Bluetooth: hci4: command 0x0409 tx timeout [ 77.297755] Bluetooth: hci7: command 0x0409 tx timeout [ 77.298209] Bluetooth: hci6: command 0x0409 tx timeout [ 77.299226] Bluetooth: hci3: command 0x0409 tx timeout [ 77.299730] Bluetooth: hci5: command 0x0409 tx timeout [ 79.153507] Bluetooth: hci0: command 0x041b tx timeout [ 79.217516] Bluetooth: hci2: command 0x041b tx timeout [ 79.346528] Bluetooth: hci5: command 0x041b tx timeout [ 79.347067] Bluetooth: hci6: command 0x041b tx timeout [ 79.355444] Bluetooth: hci3: command 0x041b tx timeout [ 79.356237] Bluetooth: hci7: command 0x041b tx timeout [ 79.368639] Bluetooth: hci4: command 0x041b tx timeout [ 80.638759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.640239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.649046] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.652350] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.654307] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.655124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.661675] Bluetooth: hci1: HCI_REQ-0x0c1a [ 81.202471] Bluetooth: hci0: command 0x040f tx timeout [ 81.265460] Bluetooth: hci2: command 0x040f tx timeout [ 81.393481] Bluetooth: hci4: command 0x040f tx timeout [ 81.393907] Bluetooth: hci7: command 0x040f tx timeout [ 81.394289] Bluetooth: hci3: command 0x040f tx timeout [ 81.394719] Bluetooth: hci6: command 0x040f tx timeout [ 81.395110] Bluetooth: hci5: command 0x040f tx timeout [ 82.674519] Bluetooth: hci1: command 0x0409 tx timeout [ 83.250560] Bluetooth: hci0: command 0x0419 tx timeout [ 83.316224] Bluetooth: hci2: command 0x0419 tx timeout [ 83.441616] Bluetooth: hci5: command 0x0419 tx timeout [ 83.443644] Bluetooth: hci6: command 0x0419 tx timeout [ 83.444399] Bluetooth: hci3: command 0x0419 tx timeout [ 83.446588] Bluetooth: hci7: command 0x0419 tx timeout [ 83.447329] Bluetooth: hci4: command 0x0419 tx timeout [ 84.721493] Bluetooth: hci1: command 0x041b tx timeout [ 86.769461] Bluetooth: hci1: command 0x040f tx timeout [ 88.817524] Bluetooth: hci1: command 0x0419 tx timeout 20:14:18 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x8, 0x81, 0x0, 0xff, 0x0, 0x8000000000000006, 0x2004, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x40a4e, 0x0, 0x6, 0x4, 0x1da, 0x80000001, 0x5, 0x0, 0xb3ee, 0x0, 0x7fff}, 0x0, 0x9, r0, 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0xc000000000}, 0x0, 0xd1e8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = getpid() pidfd_open(r3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/clocksource', 0x80000, 0x20) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x9, 0x9, 0x0, 0x80, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000240), 0xb}, 0xa2, 0x7, 0x1f, 0x5, 0x4, 0xd25c, 0x101, 0x0, 0x39ea}, r3, 0xffffffffffffffff, r4, 0x2) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) write(r5, &(0x7f0000000100)="16b3d5dafff0d10c37bb32687cd0fbb0600470b6dd7ba0d83dcb1fc076a0c0d15c0d31aee8747f60392d0903df4477ae763ef8aa18e9c943e46c1c974192cf3abf335a3797f0d9fe608f9c2e9d8bfca7713d86139955c0a0cb029393f4330e5331b281e98e1e462fa095d9b5d6ad0a1bfd1acc5d7adbfdd94c340b3638bce984", 0x80) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003280)={0x0, 0x0, "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", "bc814f1e421304699c87988d578a0a83e359f4c0be15077dc7547e05d8d3e86fd0a544b052031ab5435bfa1d3cb761dcf3cc5ed23c524ee1c3178c0b78972b97712343f0c489b8dc22aebc61c82ede5b06d0e78af78d2c0971f7ddbc5f5698fb66c6bd36db6289222aee97a1cc0492740d3d84eadcfeb2c8965cbeaae9f381cfc6c2849b0371e0ee8119179cf7cd82c855e1ccac83bec9af15fadec7884bf4458259dfc82682c66b53620ff2f6d83326671102337965af980249343ed01173744daff6b3c705225d7faf6c85bf102f18aca5d8e229fd8179954945de7f1ab059a15f9786b194654c5bf732f9fb83e1f985654347ca65022de65f67320a0fb2281737a3ddf710c645ac69a8453c3b70d560ef653514dbc0eb06b73b4f633188a7ab2f36d7e3bbfb71f498dcd599e9fd4e6f73a8e06d625a58bbd0c63cdf50ce7d5064c21e75b92f44506d720b89550cdc8227f32f25510ed8d4e441b132d9f7157acf293ee3c0d44d072b5e81c4c39e2fab668f3f30bf3035931c93df026b41f33c15cb08b55c00ff2d6ef5171a481b0ee2282dc2306971d73c1cbc21bf01b23ca4936e4f4518207e0e94c2973e709b24d13b63657f4d1689f7a4f779640aab3a4e7a6e3b6e4040a71078569f33fdbc35c23e8b030cd07eabbf542244241463937f1189c328a6d0967c65ff5307ba71311ed83289d2a24db12b38ba399932cf0d921bdc2d4ca64bcae4c28622cb69509089aea132e1237f33da2e7ba216cd610a8dfdac60c089260ae5e5e827d133e72deeadccf2dc14bcdaf270aa9d9072b2098ce65738896a1d908e2d6cf42f90216e5e5dc2d48b458d3bf901fa68d4f4bcc95dd145354329baaa5f6d72983b3c5cdb6e6e90e754ea3d9ca286313655ad326ed5f017e1424b7573918e3acf96644835c09be7085b043ec416b97a6eae45df8d312519f14ce8469386f97e85509d5cb90d8b1d66dc72219176ec5022edd76c02ea8e723ec7086f40788f45c37df77eb877d2654b3a2009d603cf223f93b5cd83f846da8e75ecbfffc4d6f11a11a7ddb8744cbd0c82f156e5915a2c879efb00f48afda0580b980ea0143a2bb111cd59371e954e5593fb3f4d14190056333fde9e40806269380381fee347b43bb345e50eb065dfd65e4202bb532bc36742828d898d86337d87416018d2246aa621726b376fcf2d229d8c9703f0f6607703e1b939a5023bbae5528a3aa4a24736a444ca1cb8c3075a110414c1629bbcd5c9c4e4080aa44674a34f5c31347e5bca2052fba2e27ed084449da3314358cb192065e1999982b95cc18a488e3189c404c3ba2262b424553e425ac01a78c7aab15e48b2d78837ca0127b1bf28bdd46e14e58c0717687acea3fef73e035c0b6f482fbfeabace42db1aa83a1f3644f9e63c87afc3afab26090af7e7c4fb1b81f8b01bc4e4814be39b0325a270657954f26af83a20d130ed6220a5212205440bb48fbbbc07a7b18cd0bd96d3a250c66bb93454f074a1ddcb836e3ab6af4153058cd94f16d9641f3929087c2ed87e20527eca22b3b3ac62c00f0620d5f28c518c5d03d8f180fe524bfc79c8e8577cc576192ce0547242e747351cde648664691f455e03064f57196524c8e3370efaa64ac28e09b1f2d2b6d69723885f294ea2df1cec3dd25c87883ab65aee612d325eb04cfaaa41d340f65c5745a14fc541902bf299f97f848034fa5a9968fd052087eb5fe6eebb232146191f1fec644d61aeee0ac3c218fbdc077f5c11ee746bcf9197db06ac78f5aa56b64a361ee6ff35efbf679482673cf5d5c51755f33d7a4af59a06484e787df20d684a78754634e651ca76e042643c0b60a22c2a2815619a958ace318639757e7a16d80add9fa9a61fe8ab4de921736de7b75af95bf9b57417451f9d812ccf4db0dd46acfad3136ad94dda1cc622a83daa02181a9f2e7607c77c3d6fd032289f93a1a18f7508366b96c6cd4d6bbff2b3c249b16d205f6369ac1d5af8a4e81400bdf93c820ae6f3622569b20410973a7f58ea541f64e977fb730c853d5fa809cc57b65c54e786641d28be2750dc637a794332163c972c896ae4d86296ddc39c3d433b546b9d7dbe67bb43c129aad2c32dc68d8dc26e489682e00ab92a16bdbbdd5ad803a0ae91a5af285db0fb6b8d118f2d0f120cc1667530bfb4c32b4fa4caf1192a035aafb458f311a04b6491014f0629d86a712a356ff2bac0df5b6c497ba5852e452b226718bea604d2fef071f443c055318045fcd5eea0062432fcadd11f93f0c152e01ff5d1f510f63b6266ae1b314ce06b4f6a388dbeccb7d257e6f3d82b0c23be3bc134bb127b0bf82bd7dada2c645e37621858fdd650fb213ddf61d07e46b8eb24cfa0b66f38f7a90f7d4d3439e701b8b0e36514b5a333d4b8c3439c3f67f074f45776c888d00f5e2fdfa65c175330253d3e032a9442ea08a54fa661c1784ff4a01d90f28a2936659d2d1bb6a2670438a3ac7864b17ed1cada9ca479045db0162297973861fdf6f6fc724543181133f201dcc4035f75585b3d3fce08eb8454b45b87a8055cb14ebcabd324feeb73c46c57b5d4e0de70863920b422952049f756d578971ee1c583a17467258324e13f349f8d36aa55820a7e76e51c4afa0b8c4f664432c5ad089aa79a39a2a6e4ab46b48f5b69ea6cfc5944b3e058bc837bc556b28351895734acfa3693f1537b58374bd39c5cca45e1ad9232a15554f1046f3cd60cbf78e5819de443b14d4887d83f14e5d944b8fb8fd678d6decafe117f93fc8cc44d3f6190c0f9f66100ee9f58818fa36b5e3e45c53fdf90587f3afeb9e3a62e74a999f1628f55c8980268ab73e66f5403873d0fe421da4eb22dd9afdfea0e1e960f9dcd6383e262151cfd63587d15009a930a44e63b559f063f9cfa75661a7866faedc287c534beb7b9113a01c0ece0e4f18cddbe482b7f4810683a3fdf61ea161c8f24a099310ce3e2e822ae0b659e6bfa78289bef995e2f45805c2881eec6453c5f07067d760c8774495a0c184eb6db75f17a7033ea4b652abbd1e806f668e84f7b8ab761ea4502e78294eeecef8b22760c4936901943b2387682c08459b2ec5a02ce17df9d0327e516aa2284b438acfb5f7e0ab4999114d1e039492a2034dbab39c8f1ca39de84f9fb4bf2ebe267c4510b0b196317e0ea392cfbc216bc51d82671ba50be6bb66a32ab9e5df046be877180e9ec84cd35296881af635f0a3ff4b9f675068e31579be666c0b1989af184aac44101383ca5a6b25c6554cd716c76631bda53456a35466256f02a9aa4587b918e2fad906b8464197b8989f6600a71d77bb51424e5589bfeb3d03e78820e627ace0ef66b74cdb15de646d2c42dfd36a45c751f92ec0ca4735e928f1a83ca8a489cd45f61bab6da8f5fcdafc174d55ee1d1a3c82ddfbe7063162f95545dab3dc82deb11f1819e679707cb8c44c268234057d1cdd8048169355d57c1f524e7e997b085d99655831f72df213772eaf96b71a86719b14fd334bab58b80feba7b9ec5173621367d1937407d7710489d66b84da940b8139aabd13eb484320eea59ada26b5267e3f10d0bbe24af0d99c7527dff570287d1c77e8272ef5aef7745e483acb5854c7f650f229af8e653ad245f3fc30b5401fb2f9da69451b4e6e470dccbb4a8e01a32d5c2b481610fd3d0c918021582f1be03590387cdc4ee70f94a6492afe660d7ee72978574ad92ba4c97181dff483291d8cd89eaaec13ec3e7c4c89040e843b17531f24b406dd3f8aa93e9c5770b2499941f7270ebca618e9ca258c7ebbf90ecf4ad27cfd89e560ef73f74c8cdedce8542fe658050bab5d7f2e32e639c69f2c1663634c6ea9186d9afbb6924489fb60250a2dcf769ccec3a8528c66f5dec199b04fdb4fdef8b9d917667a3ca1950cf970b7b8000bad56b6300d4c0dcc497e0d0d1574ce447c075098cc1d7b4b070833105e718f322694634c2d2734ddd7e61b62163db4f63ab39840fab2090bd75a750855ee9091ee5ead23614e8b04bcf25b718db19d6d38f14cba33548033d6ef99f86e940f55f1fbe001a8f508a82ff6f758b39826b087c274e7b383f1e8825edef09450d7eec345f2b553e1bc3e2404a6acd7d743b4713150c35543b2bab1b3c881baa7855a230986e9c030e7b54a6b8b50419848beb755458efa6142f43a1d3b4d14c482683a9dcce9105a1ee96dbe339f910afc267968d7a05f019d2bf128884ad73dba7257c21a15d7a45b1c11dfe18bd077c6c57377baeae5b87a74101b4467bc26d18131f21f2ef22a46cf80461c118aae318078561af2668f700339665b8d552c182419f816a2d73ab6e64354a198688078ad244a0b91fbc3de5f645971306f4979605ee2c373f8a49e6a8f397ddcd9e952a8695f5326f9ccd365a8b873851c4ad578b57c223b6fde3ea6e8fd5dc9093f5fe190f2d58c76d0d4fe18486403c0abcf55b626c9f935fbcebd30e716d541868a777d3880c4fb47edfcf364246996a24088dfcfafa7c1220efd38c356e5ede5ef9b6b2046937b50523fe4565bb0e08a0514fdae54da25338c316a379c12669d2bdd416632965aa23a137c86cbb0682fa5e84a659753ecd8059bb03c3fdb69fbf1b15f875cb34463fbdbde6b6933730776837b9c5175107227367d1eda9f4a39146b6692e183163ea7159c68aa3bf7d2b33d2bd5d549254cb946a2657cbef0919ab14c87931269698f40d1b389abb63807056bf7e25e1e52b9bd110e09c10baf28722a380a29ee3556236778aa3594d9f4ffff2f9f5072f7891cd3a5c58909ea8f41701604ee58eb1935bf1c0dbc3a98617686043ef2a3abbeacd433ba7a4185a1fa195e77b4ab3f07a617b5ef6cb3d22868c62a5be213765c9aef4ee5a22b241f798a2c89e2fc5155d5ecc2cbb589ed3be1974b21ff8874088236dbaf1f49174a8ce77286086e171c1e80493820734e8bff23341b868816d05e1813239397abe41729ab28eca7af82c75f78bdfa82ef5614cad6612ce43c29364759bbbacbcbb62dd8b11b5be653766143a86bef63dc914f09338bf1dd352804c3cff83b36f4092c960376244ac278aa6f2ab043fcab03e283569d6ac6b485a110c33f6a238cfd7a7d26e2c81698d6c9c86575b5e7ed305a643966fc5424f4d679839a34d3d65a7d561a11f5dfe30ac2732f331aa5120e994996c8ec290fd16c9a50b4763ca33595b081963ab6820b1306556419c3baf600ecdcc27069499986df8592c956168a81b8294155bee6dbf55352d401fcf0acc4f5ac67e9b12af83ec34a8bd4f4d9dedce46cc798c06d7210da9aef6fcb186d00a3a16bbc043cd45d05a72e79b6fdb5f927a3f906ce6603d3c23c7cba45d834c3e6d942ea0ea69ccb9ab65e9be0627ab1351"}) [ 127.911175] audit: type=1400 audit(1663532058.727:7): avc: denied { open } for pid=3804 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.914062] audit: type=1400 audit(1663532058.727:8): avc: denied { kernel } for pid=3804 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.932826] ------------[ cut here ]------------ [ 127.932847] [ 127.932851] ====================================================== [ 127.932854] WARNING: possible circular locking dependency detected [ 127.932859] 6.0.0-rc5-next-20220916 #1 Not tainted [ 127.932865] ------------------------------------------------------ [ 127.932868] syz-executor.2/3805 is trying to acquire lock: [ 127.932874] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 127.932910] [ 127.932910] but task is already holding lock: [ 127.932912] ffff88800e25a820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 127.932939] [ 127.932939] which lock already depends on the new lock. [ 127.932939] [ 127.932942] [ 127.932942] the existing dependency chain (in reverse order) is: [ 127.932945] [ 127.932945] -> #3 (&ctx->lock){....}-{2:2}: [ 127.932958] _raw_spin_lock+0x2a/0x40 [ 127.932975] __perf_event_task_sched_out+0x53b/0x18d0 [ 127.932987] __schedule+0xedd/0x2470 [ 127.932998] schedule+0xda/0x1b0 [ 127.933008] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.933027] syscall_exit_to_user_mode+0x19/0x40 [ 127.933044] do_syscall_64+0x48/0x90 [ 127.933058] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.933075] [ 127.933075] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 127.933089] _raw_spin_lock_nested+0x30/0x40 [ 127.933104] raw_spin_rq_lock_nested+0x1e/0x30 [ 127.933116] task_fork_fair+0x63/0x4d0 [ 127.933132] sched_cgroup_fork+0x3d0/0x540 [ 127.933146] copy_process+0x4183/0x6e20 [ 127.933156] kernel_clone+0xe7/0x890 [ 127.933165] user_mode_thread+0xad/0xf0 [ 127.933175] rest_init+0x24/0x250 [ 127.933191] arch_call_rest_init+0xf/0x14 [ 127.933203] start_kernel+0x4c1/0x4e6 [ 127.933213] secondary_startup_64_no_verify+0xe0/0xeb [ 127.933226] [ 127.933226] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 127.933240] _raw_spin_lock_irqsave+0x39/0x60 [ 127.933255] try_to_wake_up+0xab/0x1920 [ 127.933268] up+0x75/0xb0 [ 127.933279] __up_console_sem+0x6e/0x80 [ 127.933294] console_unlock+0x46a/0x590 [ 127.933309] vt_ioctl+0x2822/0x2ca0 [ 127.933321] tty_ioctl+0x7c4/0x1700 [ 127.933332] __x64_sys_ioctl+0x19a/0x210 [ 127.933347] do_syscall_64+0x3b/0x90 [ 127.933360] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.933377] [ 127.933377] -> #0 ((console_sem).lock){....}-{2:2}: [ 127.933391] __lock_acquire+0x2a02/0x5e70 [ 127.933409] lock_acquire+0x1a2/0x530 [ 127.933425] _raw_spin_lock_irqsave+0x39/0x60 [ 127.933440] down_trylock+0xe/0x70 [ 127.933452] __down_trylock_console_sem+0x3b/0xd0 [ 127.933467] vprintk_emit+0x16b/0x560 [ 127.933483] vprintk+0x84/0xa0 [ 127.933498] _printk+0xba/0xf1 [ 127.933516] report_bug.cold+0x72/0xab [ 127.933528] handle_bug+0x3c/0x70 [ 127.933541] exc_invalid_op+0x14/0x50 [ 127.933554] asm_exc_invalid_op+0x16/0x20 [ 127.933570] group_sched_out.part.0+0x2c7/0x460 [ 127.933581] ctx_sched_out+0x8f1/0xc10 [ 127.933590] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.933602] __schedule+0xedd/0x2470 [ 127.933612] schedule+0xda/0x1b0 [ 127.933622] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.933640] syscall_exit_to_user_mode+0x19/0x40 [ 127.933657] do_syscall_64+0x48/0x90 [ 127.933670] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.933687] [ 127.933687] other info that might help us debug this: [ 127.933687] [ 127.933689] Chain exists of: [ 127.933689] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 127.933689] [ 127.933704] Possible unsafe locking scenario: [ 127.933704] [ 127.933706] CPU0 CPU1 [ 127.933708] ---- ---- [ 127.933711] lock(&ctx->lock); [ 127.933716] lock(&rq->__lock); [ 127.933722] lock(&ctx->lock); [ 127.933728] lock((console_sem).lock); [ 127.933734] [ 127.933734] *** DEADLOCK *** [ 127.933734] [ 127.933736] 2 locks held by syz-executor.2/3805: [ 127.933743] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 127.933769] #1: ffff88800e25a820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 127.933796] [ 127.933796] stack backtrace: [ 127.933799] CPU: 0 PID: 3805 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220916 #1 [ 127.933811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 127.933819] Call Trace: [ 127.933822] [ 127.933827] dump_stack_lvl+0x8b/0xb3 [ 127.933841] check_noncircular+0x263/0x2e0 [ 127.933858] ? format_decode+0x26c/0xb50 [ 127.933881] ? print_circular_bug+0x450/0x450 [ 127.933897] ? enable_ptr_key_workfn+0x20/0x20 [ 127.933912] ? format_decode+0x26c/0xb50 [ 127.933928] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 127.933945] __lock_acquire+0x2a02/0x5e70 [ 127.933966] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 127.933988] lock_acquire+0x1a2/0x530 [ 127.934005] ? down_trylock+0xe/0x70 [ 127.934019] ? rcu_read_unlock+0x40/0x40 [ 127.934039] ? vprintk+0x84/0xa0 [ 127.934057] _raw_spin_lock_irqsave+0x39/0x60 [ 127.934072] ? down_trylock+0xe/0x70 [ 127.934085] down_trylock+0xe/0x70 [ 127.934098] ? vprintk+0x84/0xa0 [ 127.934115] __down_trylock_console_sem+0x3b/0xd0 [ 127.934132] vprintk_emit+0x16b/0x560 [ 127.934150] vprintk+0x84/0xa0 [ 127.934167] _printk+0xba/0xf1 [ 127.934185] ? record_print_text.cold+0x16/0x16 [ 127.934206] ? report_bug.cold+0x66/0xab [ 127.934221] ? group_sched_out.part.0+0x2c7/0x460 [ 127.934232] report_bug.cold+0x72/0xab [ 127.934247] handle_bug+0x3c/0x70 [ 127.934261] exc_invalid_op+0x14/0x50 [ 127.934276] asm_exc_invalid_op+0x16/0x20 [ 127.934293] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 127.934306] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 127.934318] RSP: 0018:ffff88801ad37c48 EFLAGS: 00010006 [ 127.934327] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 127.934334] RDX: ffff888015f30000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 127.934342] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 127.934349] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800e25a800 [ 127.934357] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 127.934368] ? group_sched_out.part.0+0x2c7/0x460 [ 127.934381] ? group_sched_out.part.0+0x2c7/0x460 [ 127.934393] ctx_sched_out+0x8f1/0xc10 [ 127.934406] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.934421] ? lock_is_held_type+0xd7/0x130 [ 127.934439] ? __perf_cgroup_move+0x160/0x160 [ 127.934451] ? set_next_entity+0x304/0x550 [ 127.934468] ? update_curr+0x267/0x740 [ 127.934486] ? lock_is_held_type+0xd7/0x130 [ 127.934505] __schedule+0xedd/0x2470 [ 127.934518] ? io_schedule_timeout+0x150/0x150 [ 127.934531] ? rcu_read_lock_sched_held+0x3e/0x80 [ 127.934551] schedule+0xda/0x1b0 [ 127.934562] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.934582] syscall_exit_to_user_mode+0x19/0x40 [ 127.934600] do_syscall_64+0x48/0x90 [ 127.934614] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.934632] RIP: 0033:0x7f03154adb19 [ 127.934640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.934651] RSP: 002b:00007f0312a23218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.934662] RAX: 0000000000000001 RBX: 00007f03155c0f68 RCX: 00007f03154adb19 [ 127.934669] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f03155c0f6c [ 127.934676] RBP: 00007f03155c0f60 R08: 000000000000000e R09: 0000000000000000 [ 127.934683] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f03155c0f6c [ 127.934691] R13: 00007ffe3de6475f R14: 00007f0312a23300 R15: 0000000000022000 [ 127.934703] [ 127.992036] WARNING: CPU: 0 PID: 3805 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 127.992748] Modules linked in: [ 127.993001] CPU: 0 PID: 3805 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220916 #1 [ 127.993620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 127.994495] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 127.994919] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 127.996315] RSP: 0018:ffff88801ad37c48 EFLAGS: 00010006 [ 127.996733] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 127.997281] RDX: ffff888015f30000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 127.997825] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 127.998383] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800e25a800 [ 127.998927] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 127.999476] FS: 00007f0312a23700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.000082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.000534] CR2: 00007f397f0106f4 CR3: 0000000017c98000 CR4: 0000000000350ef0 [ 128.001073] Call Trace: [ 128.001276] [ 128.001459] ctx_sched_out+0x8f1/0xc10 [ 128.001769] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.002179] ? lock_is_held_type+0xd7/0x130 [ 128.002523] ? __perf_cgroup_move+0x160/0x160 [ 128.002879] ? set_next_entity+0x304/0x550 [ 128.003207] ? update_curr+0x267/0x740 [ 128.003514] ? lock_is_held_type+0xd7/0x130 [ 128.003853] __schedule+0xedd/0x2470 [ 128.004138] ? io_schedule_timeout+0x150/0x150 [ 128.004487] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.004856] schedule+0xda/0x1b0 [ 128.005114] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.005492] syscall_exit_to_user_mode+0x19/0x40 [ 128.005858] do_syscall_64+0x48/0x90 [ 128.006161] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.006558] RIP: 0033:0x7f03154adb19 [ 128.006839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.008186] RSP: 002b:00007f0312a23218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.008753] RAX: 0000000000000001 RBX: 00007f03155c0f68 RCX: 00007f03154adb19 [ 128.009282] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f03155c0f6c [ 128.009806] RBP: 00007f03155c0f60 R08: 000000000000000e R09: 0000000000000000 [ 128.010349] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f03155c0f6c [ 128.010879] R13: 00007ffe3de6475f R14: 00007f0312a23300 R15: 0000000000022000 [ 128.011416] [ 128.011595] irq event stamp: 714 [ 128.011844] hardirqs last enabled at (713): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 128.012544] hardirqs last disabled at (714): [] __schedule+0x1225/0x2470 [ 128.013154] softirqs last enabled at (466): [] __irq_exit_rcu+0x11b/0x180 [ 128.013783] softirqs last disabled at (371): [] __irq_exit_rcu+0x11b/0x180 [ 128.014428] ---[ end trace 0000000000000000 ]--- 20:14:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x1f, 0x9, 0x7, 0x5, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x85f, 0x1}, 0x388, 0x1f, 0x4, 0x0, 0x7, 0x473e0632, 0x387, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x1) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f000000000000040040", 0x1d, 0x2080}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}, {0x0}], 0x0, &(0x7f0000012f00)) r2 = open_tree(r1, &(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x6, 0x20, 0x9, 0x81, 0x0, 0x400, 0x18000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x541, 0x7712, 0x4, 0x5, 0x93b, 0x4, 0xfff, 0x0, 0x7fff, 0x0, 0x4}, r1, 0xa, r2, 0x2) [ 128.478773] loop1: detected capacity change from 0 to 2048 [ 128.678540] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.697328] ext4 filesystem being mounted at /syzkaller-testdir990339895/syzkaller.MUxduJ/1/file0 supports timestamps until 2038 (0x7fffffff) [ 128.791460] EXT4-fs (loop1): unmounting filesystem. [ 128.917564] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 128.984520] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 VM DIAGNOSIS: 20:14:19 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b3251 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88801ad37698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000032 R11=0000000000000001 R12=0000000000000032 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b3240 RIP=ffffffff822b32a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0312a23700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f397f0106f4 CR3=0000000017c98000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f03155947c0 00007f03155947c8 YMM02=0000000000000000 0000000000000000 00007f03155947e0 00007f03155947c0 YMM03=0000000000000000 0000000000000000 00007f03155947c8 00007f03155947c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=0000000000000001 RCX=1ffffffff0e0b0e0 RDX=0000000000000000 RSI=ffffffff81154d97 RDI=0000000000000001 RBP=ffff888017e573d8 RSP=ffff888017e572e8 R8 =ffffffff85e422fa R9 =ffffffff85e422fe R10=ffffed1002fcae7d R11=ffff888017e573c0 R12=ffff888017e57448 R13=0000000000000000 R14=ffff888017e57380 R15=0000000000000cc0 RIP=ffffffff8120521a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0b4e1338c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faeabaaf620 CR3=000000000db48000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ff00ffffffffffff 0000000000000000 YMM01=0000000000000000 0000000000000000 0100010001000000 ffffffffffffffff YMM02=0000000000000000 0000000000000000 0500050005000000 455441564952505f YMM03=0000000000000000 0000000000000000 0000000000000000 000000564952505f YMM04=0000000000000000 0000000000000000 0003000500050005 0005000000455441 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000