Warning: Permanently added '[localhost]:8470' (ECDSA) to the list of known hosts. 2022/09/19 13:40:01 fuzzer started 2022/09/19 13:40:02 dialing manager at localhost:42121 syzkaller login: [ 41.267296] cgroup: Unknown subsys name 'net' [ 41.365702] cgroup: Unknown subsys name 'rlimit' 2022/09/19 13:40:16 syscalls: 2215 2022/09/19 13:40:16 code coverage: enabled 2022/09/19 13:40:16 comparison tracing: enabled 2022/09/19 13:40:16 extra coverage: enabled 2022/09/19 13:40:16 setuid sandbox: enabled 2022/09/19 13:40:16 namespace sandbox: enabled 2022/09/19 13:40:16 Android sandbox: enabled 2022/09/19 13:40:16 fault injection: enabled 2022/09/19 13:40:16 leak checking: enabled 2022/09/19 13:40:16 net packet injection: enabled 2022/09/19 13:40:16 net device setup: enabled 2022/09/19 13:40:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/19 13:40:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/19 13:40:16 USB emulation: enabled 2022/09/19 13:40:16 hci packet injection: enabled 2022/09/19 13:40:16 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220919) 2022/09/19 13:40:16 802.15.4 emulation: enabled 2022/09/19 13:40:16 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/19 13:40:16 fetching corpus: 50, signal 33155/36370 (executing program) 2022/09/19 13:40:17 fetching corpus: 100, signal 40967/45481 (executing program) 2022/09/19 13:40:17 fetching corpus: 150, signal 51589/57113 (executing program) 2022/09/19 13:40:17 fetching corpus: 200, signal 57582/64100 (executing program) 2022/09/19 13:40:17 fetching corpus: 250, signal 65153/72449 (executing program) 2022/09/19 13:40:17 fetching corpus: 300, signal 73107/80963 (executing program) 2022/09/19 13:40:17 fetching corpus: 350, signal 77021/85624 (executing program) 2022/09/19 13:40:17 fetching corpus: 400, signal 80697/90007 (executing program) 2022/09/19 13:40:18 fetching corpus: 450, signal 84307/94267 (executing program) 2022/09/19 13:40:18 fetching corpus: 500, signal 87712/98258 (executing program) 2022/09/19 13:40:18 fetching corpus: 550, signal 90025/101207 (executing program) 2022/09/19 13:40:18 fetching corpus: 600, signal 93403/104965 (executing program) 2022/09/19 13:40:18 fetching corpus: 650, signal 97111/108946 (executing program) 2022/09/19 13:40:18 fetching corpus: 700, signal 98752/111121 (executing program) 2022/09/19 13:40:19 fetching corpus: 750, signal 100977/113707 (executing program) 2022/09/19 13:40:19 fetching corpus: 800, signal 103515/116555 (executing program) 2022/09/19 13:40:19 fetching corpus: 850, signal 104778/118291 (executing program) 2022/09/19 13:40:19 fetching corpus: 900, signal 107684/121310 (executing program) 2022/09/19 13:40:19 fetching corpus: 950, signal 109405/123375 (executing program) 2022/09/19 13:40:19 fetching corpus: 1000, signal 113452/127144 (executing program) 2022/09/19 13:40:19 fetching corpus: 1050, signal 114569/128637 (executing program) 2022/09/19 13:40:20 fetching corpus: 1100, signal 117138/131176 (executing program) 2022/09/19 13:40:20 fetching corpus: 1150, signal 118518/132776 (executing program) 2022/09/19 13:40:20 fetching corpus: 1200, signal 120447/134723 (executing program) 2022/09/19 13:40:20 fetching corpus: 1250, signal 122737/136915 (executing program) 2022/09/19 13:40:20 fetching corpus: 1300, signal 124706/138813 (executing program) 2022/09/19 13:40:20 fetching corpus: 1350, signal 125808/140140 (executing program) 2022/09/19 13:40:20 fetching corpus: 1400, signal 128031/142153 (executing program) 2022/09/19 13:40:20 fetching corpus: 1450, signal 129356/143426 (executing program) 2022/09/19 13:40:21 fetching corpus: 1500, signal 130186/144408 (executing program) 2022/09/19 13:40:21 fetching corpus: 1550, signal 130925/145345 (executing program) 2022/09/19 13:40:21 fetching corpus: 1600, signal 133957/147873 (executing program) 2022/09/19 13:40:21 fetching corpus: 1650, signal 135100/149012 (executing program) 2022/09/19 13:40:21 fetching corpus: 1700, signal 136073/149956 (executing program) 2022/09/19 13:40:21 fetching corpus: 1750, signal 137671/151285 (executing program) 2022/09/19 13:40:21 fetching corpus: 1800, signal 138607/152144 (executing program) 2022/09/19 13:40:21 fetching corpus: 1850, signal 139728/153097 (executing program) 2022/09/19 13:40:22 fetching corpus: 1900, signal 141082/154210 (executing program) 2022/09/19 13:40:22 fetching corpus: 1950, signal 141711/154845 (executing program) 2022/09/19 13:40:22 fetching corpus: 2000, signal 143663/156132 (executing program) 2022/09/19 13:40:22 fetching corpus: 2050, signal 144714/156968 (executing program) 2022/09/19 13:40:22 fetching corpus: 2100, signal 146591/158223 (executing program) 2022/09/19 13:40:22 fetching corpus: 2150, signal 148054/159187 (executing program) 2022/09/19 13:40:22 fetching corpus: 2200, signal 149273/159983 (executing program) 2022/09/19 13:40:23 fetching corpus: 2250, signal 150248/160667 (executing program) 2022/09/19 13:40:23 fetching corpus: 2300, signal 151282/161347 (executing program) 2022/09/19 13:40:23 fetching corpus: 2350, signal 152845/162557 (executing program) 2022/09/19 13:40:23 fetching corpus: 2400, signal 154248/163342 (executing program) 2022/09/19 13:40:23 fetching corpus: 2450, signal 155160/163914 (executing program) 2022/09/19 13:40:23 fetching corpus: 2500, signal 157257/164981 (executing program) 2022/09/19 13:40:23 fetching corpus: 2550, signal 158044/165434 (executing program) 2022/09/19 13:40:23 fetching corpus: 2600, signal 158678/165817 (executing program) 2022/09/19 13:40:24 fetching corpus: 2650, signal 159441/166216 (executing program) 2022/09/19 13:40:24 fetching corpus: 2700, signal 160792/166788 (executing program) 2022/09/19 13:40:24 fetching corpus: 2750, signal 161871/167299 (executing program) 2022/09/19 13:40:24 fetching corpus: 2800, signal 162797/167700 (executing program) 2022/09/19 13:40:24 fetching corpus: 2850, signal 163917/168154 (executing program) 2022/09/19 13:40:24 fetching corpus: 2900, signal 164904/168524 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/168710 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/168758 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/168808 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/168861 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/168909 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/168960 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/169026 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/169093 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/169155 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/169198 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/169255 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/169322 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/169372 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/169434 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/169491 (executing program) 2022/09/19 13:40:24 fetching corpus: 2926, signal 165359/169561 (executing program) 2022/09/19 13:40:25 fetching corpus: 2926, signal 165359/169610 (executing program) 2022/09/19 13:40:25 fetching corpus: 2926, signal 165359/169666 (executing program) 2022/09/19 13:40:25 fetching corpus: 2926, signal 165359/169730 (executing program) 2022/09/19 13:40:25 fetching corpus: 2926, signal 165359/169792 (executing program) 2022/09/19 13:40:25 fetching corpus: 2926, signal 165359/169854 (executing program) 2022/09/19 13:40:25 fetching corpus: 2926, signal 165359/169917 (executing program) 2022/09/19 13:40:25 fetching corpus: 2926, signal 165359/169959 (executing program) 2022/09/19 13:40:25 fetching corpus: 2926, signal 165359/170017 (executing program) 2022/09/19 13:40:25 fetching corpus: 2926, signal 165359/170030 (executing program) 2022/09/19 13:40:25 fetching corpus: 2926, signal 165359/170030 (executing program) 2022/09/19 13:40:27 starting 8 fuzzer processes 13:40:27 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000)={0x800}, 0x10) 13:40:27 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000ac0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000640)={0x420}, 0x420}}, 0x0) 13:40:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xb, 0x0, 0x0) [ 65.929467] audit: type=1400 audit(1663594828.021:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:40:28 executing program 3: syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') 13:40:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, r1, 0x301, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 13:40:28 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x541b, 0x0) 13:40:28 executing program 7: syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) 13:40:28 executing program 6: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) [ 67.240830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.242664] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.243942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.246474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.247840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.250683] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.251876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.253239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.254877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.260297] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.261730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.269813] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.271539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.285516] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.286260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.301330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.303402] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.305670] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.306871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.308640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.311973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.313124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.315568] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.315645] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.317965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.318021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.336721] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.337833] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.354414] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.356845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.358230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.361161] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.362994] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.364563] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.369240] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.393020] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.395273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.399071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.404674] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.417060] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.425462] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.435889] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.310502] Bluetooth: hci0: command 0x0409 tx timeout [ 69.311738] Bluetooth: hci1: command 0x0409 tx timeout [ 69.374097] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 69.374119] Bluetooth: hci2: command 0x0409 tx timeout [ 69.375424] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 69.375454] Bluetooth: hci3: command 0x0409 tx timeout [ 69.437843] Bluetooth: hci6: command 0x0409 tx timeout [ 69.501855] Bluetooth: hci5: command 0x0409 tx timeout [ 71.357954] Bluetooth: hci1: command 0x041b tx timeout [ 71.358821] Bluetooth: hci0: command 0x041b tx timeout [ 71.421842] Bluetooth: hci3: command 0x041b tx timeout [ 71.422398] Bluetooth: hci2: command 0x041b tx timeout [ 71.485835] Bluetooth: hci6: command 0x041b tx timeout [ 71.549803] Bluetooth: hci5: command 0x041b tx timeout [ 72.538392] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.540875] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.543385] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.548374] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.553011] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.555502] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.560032] Bluetooth: hci7: HCI_REQ-0x0c1a [ 73.405863] Bluetooth: hci0: command 0x040f tx timeout [ 73.406374] Bluetooth: hci1: command 0x040f tx timeout [ 73.469826] Bluetooth: hci2: command 0x040f tx timeout [ 73.470301] Bluetooth: hci3: command 0x040f tx timeout [ 73.533858] Bluetooth: hci6: command 0x040f tx timeout [ 73.597873] Bluetooth: hci5: command 0x040f tx timeout [ 74.493877] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 74.622129] Bluetooth: hci7: command 0x0409 tx timeout [ 75.453957] Bluetooth: hci1: command 0x0419 tx timeout [ 75.454743] Bluetooth: hci0: command 0x0419 tx timeout [ 75.518003] Bluetooth: hci3: command 0x0419 tx timeout [ 75.518736] Bluetooth: hci2: command 0x0419 tx timeout [ 75.581904] Bluetooth: hci6: command 0x0419 tx timeout [ 75.645839] Bluetooth: hci5: command 0x0419 tx timeout [ 76.669829] Bluetooth: hci7: command 0x041b tx timeout [ 78.717862] Bluetooth: hci7: command 0x040f tx timeout [ 79.229858] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 80.765856] Bluetooth: hci7: command 0x0419 tx timeout [ 83.837846] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 88.701934] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 91.202176] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.204570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.206319] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.209527] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.211435] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.213151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.218249] Bluetooth: hci4: HCI_REQ-0x0c1a [ 93.245827] Bluetooth: hci4: command 0x0409 tx timeout [ 95.293890] Bluetooth: hci4: command 0x041b tx timeout [ 97.341953] Bluetooth: hci4: command 0x040f tx timeout [ 99.389813] Bluetooth: hci4: command 0x0419 tx timeout [ 120.142617] audit: type=1400 audit(1663594882.235:7): avc: denied { open } for pid=3707 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.144206] audit: type=1400 audit(1663594882.235:8): avc: denied { kernel } for pid=3707 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.159033] ------------[ cut here ]------------ [ 120.159055] [ 120.159059] ====================================================== [ 120.159063] WARNING: possible circular locking dependency detected [ 120.159067] 6.0.0-rc6-next-20220919 #1 Not tainted [ 120.159074] ------------------------------------------------------ [ 120.159077] syz-executor.3/3708 is trying to acquire lock: [ 120.159084] ffffffff853fa838 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 120.159121] [ 120.159121] but task is already holding lock: [ 120.159124] ffff88800fbbdc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.159151] [ 120.159151] which lock already depends on the new lock. [ 120.159151] [ 120.159154] [ 120.159154] the existing dependency chain (in reverse order) is: [ 120.159158] [ 120.159158] -> #3 (&ctx->lock){....}-{2:2}: [ 120.159172] _raw_spin_lock+0x2a/0x40 [ 120.159189] __perf_event_task_sched_out+0x53b/0x18d0 [ 120.159201] __schedule+0xedd/0x2470 [ 120.159212] schedule+0xda/0x1b0 [ 120.159223] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.159243] syscall_exit_to_user_mode+0x19/0x40 [ 120.159260] do_syscall_64+0x48/0x90 [ 120.159274] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.159292] [ 120.159292] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 120.159305] _raw_spin_lock_nested+0x30/0x40 [ 120.159320] raw_spin_rq_lock_nested+0x1e/0x30 [ 120.159333] task_fork_fair+0x63/0x4d0 [ 120.159350] sched_cgroup_fork+0x3d0/0x540 [ 120.159363] copy_process+0x4183/0x6e20 [ 120.159374] kernel_clone+0xe7/0x890 [ 120.159383] user_mode_thread+0xad/0xf0 [ 120.159393] rest_init+0x24/0x250 [ 120.159409] arch_call_rest_init+0xf/0x14 [ 120.159421] start_kernel+0x4c1/0x4e6 [ 120.159431] secondary_startup_64_no_verify+0xe0/0xeb [ 120.159445] [ 120.159445] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 120.159458] _raw_spin_lock_irqsave+0x39/0x60 [ 120.159473] try_to_wake_up+0xab/0x1920 [ 120.159486] up+0x75/0xb0 [ 120.159497] __up_console_sem+0x6e/0x80 [ 120.159513] console_unlock+0x46a/0x590 [ 120.159528] do_con_write+0xc05/0x1d50 [ 120.159539] con_write+0x21/0x40 [ 120.159549] n_tty_write+0x4d4/0xfe0 [ 120.159562] file_tty_write.constprop.0+0x49c/0x8f0 [ 120.159574] vfs_write+0x9c3/0xd90 [ 120.159591] ksys_write+0x127/0x250 [ 120.159608] do_syscall_64+0x3b/0x90 [ 120.159620] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.159637] [ 120.159637] -> #0 ((console_sem).lock){....}-{2:2}: [ 120.159651] __lock_acquire+0x2a02/0x5e70 [ 120.159666] lock_acquire+0x1a2/0x530 [ 120.159682] _raw_spin_lock_irqsave+0x39/0x60 [ 120.159696] down_trylock+0xe/0x70 [ 120.159708] __down_trylock_console_sem+0x3b/0xd0 [ 120.159724] vprintk_emit+0x16b/0x560 [ 120.159740] vprintk+0x84/0xa0 [ 120.159755] _printk+0xba/0xf1 [ 120.159776] report_bug.cold+0x72/0xab [ 120.159788] handle_bug+0x3c/0x70 [ 120.159800] exc_invalid_op+0x14/0x50 [ 120.159814] asm_exc_invalid_op+0x16/0x20 [ 120.159829] group_sched_out.part.0+0x2c7/0x460 [ 120.159840] ctx_sched_out+0x8f1/0xc10 [ 120.159849] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.159861] __schedule+0xedd/0x2470 [ 120.159871] schedule+0xda/0x1b0 [ 120.159880] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.159898] syscall_exit_to_user_mode+0x19/0x40 [ 120.159915] do_syscall_64+0x48/0x90 [ 120.159927] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.159944] [ 120.159944] other info that might help us debug this: [ 120.159944] [ 120.159947] Chain exists of: [ 120.159947] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 120.159947] [ 120.159962] Possible unsafe locking scenario: [ 120.159962] [ 120.159964] CPU0 CPU1 [ 120.159966] ---- ---- [ 120.159968] lock(&ctx->lock); [ 120.159974] lock(&rq->__lock); [ 120.159980] lock(&ctx->lock); [ 120.159987] lock((console_sem).lock); [ 120.159992] [ 120.159992] *** DEADLOCK *** [ 120.159992] [ 120.159994] 2 locks held by syz-executor.3/3708: [ 120.160001] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 120.160027] #1: ffff88800fbbdc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.160054] [ 120.160054] stack backtrace: [ 120.160057] CPU: 0 PID: 3708 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220919 #1 [ 120.160069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 120.160077] Call Trace: [ 120.160081] [ 120.160085] dump_stack_lvl+0x8b/0xb3 [ 120.160100] check_noncircular+0x263/0x2e0 [ 120.160116] ? format_decode+0x26c/0xb50 [ 120.160131] ? print_circular_bug+0x450/0x450 [ 120.160147] ? enable_ptr_key_workfn+0x20/0x20 [ 120.160162] ? format_decode+0x26c/0xb50 [ 120.160178] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 120.160195] __lock_acquire+0x2a02/0x5e70 [ 120.160216] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 120.160238] lock_acquire+0x1a2/0x530 [ 120.160254] ? down_trylock+0xe/0x70 [ 120.160268] ? lock_release+0x750/0x750 [ 120.160288] ? vprintk+0x84/0xa0 [ 120.160305] _raw_spin_lock_irqsave+0x39/0x60 [ 120.160321] ? down_trylock+0xe/0x70 [ 120.160334] down_trylock+0xe/0x70 [ 120.160347] ? vprintk+0x84/0xa0 [ 120.160363] __down_trylock_console_sem+0x3b/0xd0 [ 120.160380] vprintk_emit+0x16b/0x560 [ 120.160399] vprintk+0x84/0xa0 [ 120.160415] _printk+0xba/0xf1 [ 120.160433] ? record_print_text.cold+0x16/0x16 [ 120.160454] ? report_bug.cold+0x66/0xab [ 120.160468] ? group_sched_out.part.0+0x2c7/0x460 [ 120.160479] report_bug.cold+0x72/0xab [ 120.160494] handle_bug+0x3c/0x70 [ 120.160508] exc_invalid_op+0x14/0x50 [ 120.160522] asm_exc_invalid_op+0x16/0x20 [ 120.160539] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.160551] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.160564] RSP: 0018:ffff88803fde7c48 EFLAGS: 00010006 [ 120.160573] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.160581] RDX: ffff88800d0b9ac0 RSI: ffffffff81566077 RDI: 0000000000000005 [ 120.160589] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 120.160602] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800fbbdc00 [ 120.160610] R13: ffff88806ce3d140 R14: ffffffff8547c620 R15: 0000000000000002 [ 120.160621] ? group_sched_out.part.0+0x2c7/0x460 [ 120.160634] ? group_sched_out.part.0+0x2c7/0x460 [ 120.160647] ctx_sched_out+0x8f1/0xc10 [ 120.160660] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.160675] ? lock_is_held_type+0xd7/0x130 [ 120.160693] ? __perf_cgroup_move+0x160/0x160 [ 120.160704] ? set_next_entity+0x304/0x550 [ 120.160722] ? update_curr+0x267/0x740 [ 120.160739] ? lock_is_held_type+0xd7/0x130 [ 120.160758] __schedule+0xedd/0x2470 [ 120.160771] ? io_schedule_timeout+0x150/0x150 [ 120.160784] ? rcu_read_lock_sched_held+0x3e/0x80 [ 120.160804] schedule+0xda/0x1b0 [ 120.160815] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.160835] syscall_exit_to_user_mode+0x19/0x40 [ 120.160853] do_syscall_64+0x48/0x90 [ 120.160867] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.160884] RIP: 0033:0x7f7f41035b19 [ 120.160893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.160904] RSP: 002b:00007f7f3e5ab218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.160915] RAX: 0000000000000001 RBX: 00007f7f41148f68 RCX: 00007f7f41035b19 [ 120.160922] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7f41148f6c [ 120.160930] RBP: 00007f7f41148f60 R08: 000000000000000e R09: 0000000000000000 [ 120.160937] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7f41148f6c [ 120.160944] R13: 00007ffd48459a5f R14: 00007f7f3e5ab300 R15: 0000000000022000 [ 120.160957] [ 120.219138] WARNING: CPU: 0 PID: 3708 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 120.219843] Modules linked in: [ 120.220093] CPU: 0 PID: 3708 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220919 #1 [ 120.220717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 120.221566] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.221973] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.223361] RSP: 0018:ffff88803fde7c48 EFLAGS: 00010006 [ 120.223782] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.224343] RDX: ffff88800d0b9ac0 RSI: ffffffff81566077 RDI: 0000000000000005 [ 120.224889] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 120.225452] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800fbbdc00 [ 120.226019] R13: ffff88806ce3d140 R14: ffffffff8547c620 R15: 0000000000000002 [ 120.226570] FS: 00007f7f3e5ab700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 120.227194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.227661] CR2: 00007fb297270a20 CR3: 000000003f870000 CR4: 0000000000350ef0 [ 120.228205] Call Trace: [ 120.228408] [ 120.228594] ctx_sched_out+0x8f1/0xc10 [ 120.228925] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.229334] ? lock_is_held_type+0xd7/0x130 [ 120.229690] ? __perf_cgroup_move+0x160/0x160 [ 120.230044] ? set_next_entity+0x304/0x550 [ 120.230387] ? update_curr+0x267/0x740 [ 120.230704] ? lock_is_held_type+0xd7/0x130 [ 120.231048] __schedule+0xedd/0x2470 [ 120.231350] ? io_schedule_timeout+0x150/0x150 [ 120.231709] ? rcu_read_lock_sched_held+0x3e/0x80 [ 120.232092] schedule+0xda/0x1b0 [ 120.232366] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.232773] syscall_exit_to_user_mode+0x19/0x40 [ 120.233156] do_syscall_64+0x48/0x90 [ 120.233462] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.233871] RIP: 0033:0x7f7f41035b19 [ 120.234168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.235596] RSP: 002b:00007f7f3e5ab218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.236191] RAX: 0000000000000001 RBX: 00007f7f41148f68 RCX: 00007f7f41035b19 [ 120.236750] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7f41148f6c [ 120.237310] RBP: 00007f7f41148f60 R08: 000000000000000e R09: 0000000000000000 [ 120.237859] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7f41148f6c [ 120.238416] R13: 00007ffd48459a5f R14: 00007f7f3e5ab300 R15: 0000000000022000 [ 120.238974] [ 120.239161] irq event stamp: 754 [ 120.239418] hardirqs last enabled at (753): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 120.240148] hardirqs last disabled at (754): [] __schedule+0x1225/0x2470 [ 120.240794] softirqs last enabled at (422): [] __irq_exit_rcu+0x11b/0x180 [ 120.241460] softirqs last disabled at (413): [] __irq_exit_rcu+0x11b/0x180 [ 120.242124] ---[ end trace 0000000000000000 ]--- 13:41:29 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000)={0x800}, 0x10) 13:41:29 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 13:41:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 13:41:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xb, 0x0, 0x0) 13:41:29 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x541b, 0x0) 13:41:29 executing program 3: syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') 13:41:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, r1, 0x301, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 13:41:29 executing program 6: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 13:41:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xb, 0x0, 0x0) 13:41:29 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 13:41:29 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000)={0x800}, 0x10) 13:41:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 13:41:29 executing program 6: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 13:41:29 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x541b, 0x0) 13:41:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, r1, 0x301, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 127.269780] hrtimer: interrupt took 16160 ns 13:41:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xb, 0x0, 0x0) 13:41:29 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000)={0x800}, 0x10) 13:41:29 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 13:41:29 executing program 6: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 13:41:29 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x541b, 0x0) 13:41:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 13:41:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, r1, 0x301, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 13:41:29 executing program 3: syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') 13:41:29 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 13:41:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 13:41:29 executing program 2: syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') 13:41:29 executing program 0: syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') 13:41:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 13:41:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 13:41:29 executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) 13:41:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000280)="0baa393e9602ceffb01bc6f1c0cc09875f1cf61d20086a4d0ce2c351d701424bcd059130161f9ffee2", 0x29}], 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)) 13:41:30 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 13:41:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 13:41:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @empty}, 0xf, 0x0, 0x0, &(0x7f0000001340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x18}}], 0x2, 0x0) 13:41:30 executing program 3: syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') 13:41:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000280)="0baa393e9602ceffb01bc6f1c0cc09875f1cf61d20086a4d0ce2c351d701424bcd059130161f9ffee2", 0x29}], 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)) 13:41:30 executing program 0: syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') 13:41:30 executing program 2: syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') 13:41:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 13:41:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000280)="0baa393e9602ceffb01bc6f1c0cc09875f1cf61d20086a4d0ce2c351d701424bcd059130161f9ffee2", 0x29}], 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)) 13:41:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @empty}, 0xf, 0x0, 0x0, &(0x7f0000001340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x18}}], 0x2, 0x0) 13:41:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 13:41:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 13:41:30 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 13:41:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x1c, 0x5f, 0x1, 0x0, 0x0, "", [@generic="000200000000000000"]}, 0x1c}], 0x1}, 0x0) 13:41:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000280)="0baa393e9602ceffb01bc6f1c0cc09875f1cf61d20086a4d0ce2c351d701424bcd059130161f9ffee2", 0x29}], 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)) 13:41:31 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 13:41:31 executing program 0: syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') 13:41:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x204000, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x3e, 0x1, 0x1, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x10, 0x1000, 0x9}}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40860}, 0x1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000001340), 0x8, 0x0) dup2(r3, r0) 13:41:31 executing program 2: syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') 13:41:31 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @empty}, 0xf, 0x0, 0x0, &(0x7f0000001340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x18}}], 0x2, 0x0) 13:41:31 executing program 3: semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) 13:41:31 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @empty}, 0xf, 0x0, 0x0, &(0x7f0000001340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x18}}], 0x2, 0x0) 13:41:31 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 13:41:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x1c, 0x5f, 0x1, 0x0, 0x0, "", [@generic="000200000000000000"]}, 0x1c}], 0x1}, 0x0) 13:41:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000000200)={0x77359400}, 0x10) 13:41:31 executing program 7: getpriority(0x2, 0x0) 13:41:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x204000, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x3e, 0x1, 0x1, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x10, 0x1000, 0x9}}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40860}, 0x1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000001340), 0x8, 0x0) dup2(r3, r0) 13:41:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x1c, 0x5f, 0x1, 0x0, 0x0, "", [@generic="000200000000000000"]}, 0x1c}], 0x1}, 0x0) 13:41:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) nanosleep(&(0x7f00000002c0), 0x0) 13:41:31 executing program 7: getpriority(0x2, 0x0) 13:41:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000000200)={0x77359400}, 0x10) 13:41:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x1c, 0x5f, 0x1, 0x0, 0x0, "", [@generic="000200000000000000"]}, 0x1c}], 0x1}, 0x0) 13:41:31 executing program 2: creat(&(0x7f0000001a00)='./file0\x00', 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) 13:41:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x204000, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x3e, 0x1, 0x1, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x10, 0x1000, 0x9}}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40860}, 0x1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000001340), 0x8, 0x0) dup2(r3, r0) 13:41:31 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@nr_blocks={'nr_blocks', 0x3d, [0x65]}}]}) 13:41:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) nanosleep(&(0x7f00000002c0), 0x0) 13:41:31 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDRT(r0, 0x8911, &(0x7f0000000180)={0x0, @isdn, @ethernet, @l2={0x1f, 0x0, @none}}) 13:41:31 executing program 2: creat(&(0x7f0000001a00)='./file0\x00', 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) 13:41:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000000200)={0x77359400}, 0x10) 13:41:31 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDRT(r0, 0x8911, &(0x7f0000000180)={0x0, @isdn, @ethernet, @l2={0x1f, 0x0, @none}}) 13:41:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) nanosleep(&(0x7f00000002c0), 0x0) 13:41:31 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@nr_blocks={'nr_blocks', 0x3d, [0x65]}}]}) 13:41:31 executing program 7: getpriority(0x2, 0x0) 13:41:31 executing program 2: creat(&(0x7f0000001a00)='./file0\x00', 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) 13:41:31 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mbind(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3, &(0x7f0000000040)=0x10001, 0x7fff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 13:41:31 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDRT(r0, 0x8911, &(0x7f0000000180)={0x0, @isdn, @ethernet, @l2={0x1f, 0x0, @none}}) 13:41:31 executing program 2: creat(&(0x7f0000001a00)='./file0\x00', 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) 13:41:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000000200)={0x77359400}, 0x10) 13:41:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x204000, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x3e, 0x1, 0x1, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x10, 0x1000, 0x9}}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40860}, 0x1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000001340), 0x8, 0x0) dup2(r3, r0) 13:41:31 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@nr_blocks={'nr_blocks', 0x3d, [0x65]}}]}) 13:41:31 executing program 7: getpriority(0x2, 0x0) 13:41:31 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mbind(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3, &(0x7f0000000040)=0x10001, 0x7fff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 13:41:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) nanosleep(&(0x7f00000002c0), 0x0) 13:41:31 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDRT(r0, 0x8911, &(0x7f0000000180)={0x0, @isdn, @ethernet, @l2={0x1f, 0x0, @none}}) 13:41:31 executing program 3: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mbind(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3, &(0x7f0000000040)=0x10001, 0x7fff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 13:41:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x35, 0x4) 13:41:32 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@nr_blocks={'nr_blocks', 0x3d, [0x65]}}]}) 13:41:32 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=unix,', {[{@version_L, 0x22}]}}) 13:41:32 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mbind(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3, &(0x7f0000000040)=0x10001, 0x7fff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 13:41:32 executing program 3: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mbind(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3, &(0x7f0000000040)=0x10001, 0x7fff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 13:41:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002600)=[{{&(0x7f0000000100)={0x2, 0x4e27, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x1c, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x30}}], 0x1, 0x0) [ 130.014419] 9pnet: Unknown protocol version 9p2000.L" 13:41:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x44, 0x4) 13:41:32 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) 13:41:32 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xf) connect$inet6(r0, &(0x7f00000015c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb"], 0x28}}], 0x1, 0x0) 13:41:32 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mbind(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3, &(0x7f0000000040)=0x10001, 0x7fff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) VM DIAGNOSIS: 13:41:22 Registers: info registers vcpu 0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b2e71 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88803fde7698 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002e R11=0000000000000001 R12=000000000000002e R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b2e60 RIP=ffffffff822b2ec9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7f3e5ab700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb297270a20 CR3=000000003f870000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=00000000000204cc RBX=0000000000000001 RCX=00000000000204cc RDX=00000000000204df RSI=000000000000786b RDI=0000000000060e64 RBP=ffff88803fe573d8 RSP=ffff88803fe57300 R8 =ffffffff85eda8ac R9 =ffffffff85e7aaae R10=ffffed1007fcae7d R11=000000000003603d R12=ffff88803fe573c1 R13=ffff88803fe573e0 R14=ffff88803fe57380 R15=ffffffff81786b2d RIP=ffffffff8111b554 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055dd670fb080 CR3=000000003e670000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000