Warning: Permanently added '[localhost]:2966' (ECDSA) to the list of known hosts.
2022/09/30 13:46:37 fuzzer started
2022/09/30 13:46:37 dialing manager at localhost:40535
syzkaller login: [   36.268534] cgroup: Unknown subsys name 'net'
[   36.370311] cgroup: Unknown subsys name 'rlimit'
2022/09/30 13:46:52 syscalls: 2215
2022/09/30 13:46:52 code coverage: enabled
2022/09/30 13:46:52 comparison tracing: enabled
2022/09/30 13:46:52 extra coverage: enabled
2022/09/30 13:46:52 setuid sandbox: enabled
2022/09/30 13:46:52 namespace sandbox: enabled
2022/09/30 13:46:52 Android sandbox: enabled
2022/09/30 13:46:52 fault injection: enabled
2022/09/30 13:46:52 leak checking: enabled
2022/09/30 13:46:52 net packet injection: enabled
2022/09/30 13:46:52 net device setup: enabled
2022/09/30 13:46:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/30 13:46:52 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/30 13:46:52 USB emulation: enabled
2022/09/30 13:46:52 hci packet injection: enabled
2022/09/30 13:46:52 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929                                          )
2022/09/30 13:46:52 802.15.4 emulation: enabled
2022/09/30 13:46:52 fetching corpus: 50, signal 25266/27063 (executing program)
2022/09/30 13:46:52 fetching corpus: 100, signal 39590/42917 (executing program)
2022/09/30 13:46:52 fetching corpus: 150, signal 47812/52578 (executing program)
2022/09/30 13:46:52 fetching corpus: 200, signal 53497/59623 (executing program)
2022/09/30 13:46:52 fetching corpus: 250, signal 57330/64807 (executing program)
2022/09/30 13:46:52 fetching corpus: 300, signal 61785/70483 (executing program)
2022/09/30 13:46:53 fetching corpus: 350, signal 67909/77724 (executing program)
2022/09/30 13:46:53 fetching corpus: 400, signal 71403/82428 (executing program)
2022/09/30 13:46:53 fetching corpus: 450, signal 77597/89540 (executing program)
2022/09/30 13:46:53 fetching corpus: 500, signal 79480/92587 (executing program)
2022/09/30 13:46:53 fetching corpus: 550, signal 83164/97246 (executing program)
2022/09/30 13:46:53 fetching corpus: 600, signal 87067/101994 (executing program)
2022/09/30 13:46:53 fetching corpus: 650, signal 90947/106714 (executing program)
2022/09/30 13:46:53 fetching corpus: 700, signal 93039/109753 (executing program)
2022/09/30 13:46:54 fetching corpus: 750, signal 97577/114921 (executing program)
2022/09/30 13:46:54 fetching corpus: 800, signal 99368/117600 (executing program)
2022/09/30 13:46:54 fetching corpus: 850, signal 101211/120296 (executing program)
2022/09/30 13:46:54 fetching corpus: 900, signal 103866/123682 (executing program)
2022/09/30 13:46:54 fetching corpus: 950, signal 106880/127320 (executing program)
2022/09/30 13:46:54 fetching corpus: 1000, signal 108496/129726 (executing program)
2022/09/30 13:46:54 fetching corpus: 1050, signal 109666/131793 (executing program)
2022/09/30 13:46:54 fetching corpus: 1100, signal 112311/134927 (executing program)
2022/09/30 13:46:55 fetching corpus: 1150, signal 114148/137458 (executing program)
2022/09/30 13:46:55 fetching corpus: 1200, signal 115723/139712 (executing program)
2022/09/30 13:46:55 fetching corpus: 1250, signal 118106/142547 (executing program)
2022/09/30 13:46:55 fetching corpus: 1300, signal 119258/144413 (executing program)
2022/09/30 13:46:55 fetching corpus: 1350, signal 120564/146327 (executing program)
2022/09/30 13:46:55 fetching corpus: 1400, signal 122546/148837 (executing program)
2022/09/30 13:46:55 fetching corpus: 1450, signal 124520/151256 (executing program)
2022/09/30 13:46:55 fetching corpus: 1500, signal 125577/152947 (executing program)
2022/09/30 13:46:55 fetching corpus: 1550, signal 127514/155258 (executing program)
2022/09/30 13:46:56 fetching corpus: 1600, signal 128483/156870 (executing program)
2022/09/30 13:46:56 fetching corpus: 1650, signal 129691/158622 (executing program)
2022/09/30 13:46:56 fetching corpus: 1700, signal 130974/160384 (executing program)
2022/09/30 13:46:56 fetching corpus: 1750, signal 132169/162073 (executing program)
2022/09/30 13:46:56 fetching corpus: 1800, signal 133167/163596 (executing program)
2022/09/30 13:46:56 fetching corpus: 1850, signal 134863/165627 (executing program)
2022/09/30 13:46:56 fetching corpus: 1900, signal 136817/167704 (executing program)
2022/09/30 13:46:56 fetching corpus: 1950, signal 137710/169100 (executing program)
2022/09/30 13:46:57 fetching corpus: 2000, signal 138913/170662 (executing program)
2022/09/30 13:46:57 fetching corpus: 2050, signal 139785/172034 (executing program)
2022/09/30 13:46:57 fetching corpus: 2100, signal 141110/173679 (executing program)
2022/09/30 13:46:57 fetching corpus: 2150, signal 142162/175113 (executing program)
2022/09/30 13:46:57 fetching corpus: 2200, signal 143668/176797 (executing program)
2022/09/30 13:46:57 fetching corpus: 2250, signal 144563/178105 (executing program)
2022/09/30 13:46:57 fetching corpus: 2300, signal 145763/179523 (executing program)
2022/09/30 13:46:57 fetching corpus: 2350, signal 146278/180560 (executing program)
2022/09/30 13:46:57 fetching corpus: 2400, signal 147549/182054 (executing program)
2022/09/30 13:46:58 fetching corpus: 2450, signal 148729/183421 (executing program)
2022/09/30 13:46:58 fetching corpus: 2500, signal 149972/184833 (executing program)
2022/09/30 13:46:58 fetching corpus: 2550, signal 150805/185972 (executing program)
2022/09/30 13:46:58 fetching corpus: 2600, signal 152102/187405 (executing program)
2022/09/30 13:46:58 fetching corpus: 2650, signal 153558/188859 (executing program)
2022/09/30 13:46:58 fetching corpus: 2700, signal 154603/190110 (executing program)
2022/09/30 13:46:58 fetching corpus: 2750, signal 155115/191061 (executing program)
2022/09/30 13:46:58 fetching corpus: 2800, signal 155739/192081 (executing program)
2022/09/30 13:46:58 fetching corpus: 2850, signal 156663/193198 (executing program)
2022/09/30 13:46:59 fetching corpus: 2900, signal 157208/194123 (executing program)
2022/09/30 13:46:59 fetching corpus: 2950, signal 158301/195304 (executing program)
2022/09/30 13:46:59 fetching corpus: 3000, signal 159551/196511 (executing program)
2022/09/30 13:46:59 fetching corpus: 3050, signal 161149/197924 (executing program)
2022/09/30 13:46:59 fetching corpus: 3100, signal 161833/198896 (executing program)
2022/09/30 13:46:59 fetching corpus: 3150, signal 162821/199988 (executing program)
2022/09/30 13:46:59 fetching corpus: 3200, signal 163780/200971 (executing program)
2022/09/30 13:46:59 fetching corpus: 3250, signal 164383/201814 (executing program)
2022/09/30 13:47:00 fetching corpus: 3300, signal 165559/202886 (executing program)
2022/09/30 13:47:00 fetching corpus: 3350, signal 166246/203775 (executing program)
2022/09/30 13:47:00 fetching corpus: 3400, signal 166963/204609 (executing program)
2022/09/30 13:47:00 fetching corpus: 3450, signal 167436/205381 (executing program)
2022/09/30 13:47:00 fetching corpus: 3500, signal 168764/206457 (executing program)
2022/09/30 13:47:00 fetching corpus: 3550, signal 170381/207728 (executing program)
2022/09/30 13:47:00 fetching corpus: 3600, signal 171216/208707 (executing program)
2022/09/30 13:47:00 fetching corpus: 3650, signal 171458/209326 (executing program)
2022/09/30 13:47:00 fetching corpus: 3700, signal 172674/210262 (executing program)
2022/09/30 13:47:01 fetching corpus: 3750, signal 173409/210992 (executing program)
2022/09/30 13:47:01 fetching corpus: 3800, signal 174168/211756 (executing program)
2022/09/30 13:47:01 fetching corpus: 3850, signal 174842/212443 (executing program)
2022/09/30 13:47:01 fetching corpus: 3900, signal 175607/213147 (executing program)
2022/09/30 13:47:01 fetching corpus: 3950, signal 176147/213829 (executing program)
2022/09/30 13:47:01 fetching corpus: 4000, signal 177073/214590 (executing program)
2022/09/30 13:47:01 fetching corpus: 4050, signal 177926/215306 (executing program)
2022/09/30 13:47:01 fetching corpus: 4100, signal 178696/215978 (executing program)
2022/09/30 13:47:02 fetching corpus: 4150, signal 179383/216615 (executing program)
2022/09/30 13:47:02 fetching corpus: 4200, signal 179805/217228 (executing program)
2022/09/30 13:47:02 fetching corpus: 4250, signal 180794/217945 (executing program)
2022/09/30 13:47:02 fetching corpus: 4300, signal 181580/218811 (executing program)
2022/09/30 13:47:02 fetching corpus: 4350, signal 182459/219700 (executing program)
2022/09/30 13:47:02 fetching corpus: 4400, signal 183563/220405 (executing program)
2022/09/30 13:47:02 fetching corpus: 4450, signal 184497/221043 (executing program)
2022/09/30 13:47:02 fetching corpus: 4500, signal 185259/221613 (executing program)
2022/09/30 13:47:03 fetching corpus: 4550, signal 186208/222247 (executing program)
2022/09/30 13:47:03 fetching corpus: 4600, signal 186716/222752 (executing program)
2022/09/30 13:47:03 fetching corpus: 4650, signal 187965/223353 (executing program)
2022/09/30 13:47:03 fetching corpus: 4700, signal 188712/223877 (executing program)
2022/09/30 13:47:03 fetching corpus: 4750, signal 189427/224410 (executing program)
2022/09/30 13:47:03 fetching corpus: 4800, signal 189922/224851 (executing program)
2022/09/30 13:47:03 fetching corpus: 4850, signal 190384/225294 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/225723 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/226103 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/226447 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/226818 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/227179 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/227515 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/227858 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/228209 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/228555 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/228941 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/229262 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/229643 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/230006 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/230357 (executing program)
2022/09/30 13:47:03 fetching corpus: 4872, signal 190746/230705 (executing program)
2022/09/30 13:47:04 fetching corpus: 4872, signal 190746/231055 (executing program)
2022/09/30 13:47:04 fetching corpus: 4872, signal 190746/231335 (executing program)
2022/09/30 13:47:04 fetching corpus: 4872, signal 190746/231335 (executing program)
2022/09/30 13:47:06 starting 8 fuzzer processes
13:47:06 executing program 0:
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x9, 0x0, [0x588a, 0x33, 0x6, 0x2], [0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfff, 0x800, 0x3, 0x5, 0x8, 0x1, 0x68c, 0xff, 0x80, 0x3, 0x200, 0x6, 0x401, 0x3df000, 0x800, 0x6, 0x8, 0x9, 0x6, 0xbec5, 0x4, 0x7, 0x40, 0x0, 0x401, 0x7, 0x4, 0x5, 0x5, 0xeafd, 0x40, 0x6, 0x2, 0x5, 0x80, 0xfff, 0xd2, 0xfffffffffffffff7, 0x8, 0xffff, 0x9, 0x5, 0x9dc, 0x9, 0xf5, 0xfff, 0x7f, 0x9, 0x80000000, 0x7, 0xa9c7, 0x9, 0x7, 0x400, 0x70cf, 0xffff, 0x401, 0xe7, 0x9, 0x22, 0x2, 0x5, 0xfffffffffffffff8, 0x6, 0x80, 0x20, 0x74, 0x9, 0x80000000, 0x4, 0x401, 0x9d82, 0x80, 0x101, 0x0, 0x800, 0x9, 0x2, 0x3, 0x8, 0x1, 0x3, 0xffff, 0x4, 0x0, 0x52, 0x3f, 0x1000, 0x8d4eec, 0x40, 0x0, 0xfffffffffffffffe, 0x7ff, 0x1, 0x7c6, 0x5, 0x5, 0x4, 0x3, 0x5, 0x40, 0x80000001, 0x1, 0x2, 0x6a6, 0x80, 0x80000000, 0x800, 0xd7f, 0x1, 0x0, 0x1ff8000, 0x8, 0x4, 0xffffffff, 0x40, 0x8000]})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/rng_core', 0x200, 0xc1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r1=>r0, {0x8, 0x2}}, './file0\x00'})
r2 = creat(&(0x7f00000004c0)='./file0\x00', 0x8)
ioctl$CDROMREADCOOKED(r2, 0x5315, &(0x7f0000000500))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000f80)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r0}}, './file0\x00'})
r5 = openat$cgroup(r3, &(0x7f0000000fc0)='syz1\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000001000)={{0x1, 0x1, 0x18, r5, {r4}}, './file0\x00'})
signalfd4(r0, &(0x7f0000001040)={[0x7f]}, 0x8, 0x800)
ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000001080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x5})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'})
execveat(r1, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001c80)=[&(0x7f0000001b80)='}]-\x00', &(0x7f0000001bc0)='syz1\x00', &(0x7f0000001c00)='\x00', &(0x7f0000001c40)='(/)@\xb3^\x00'], &(0x7f0000001f00)=[&(0x7f0000001cc0)='\x00', &(0x7f0000001d00)='\x00', &(0x7f0000001d40)='syz1\x00', &(0x7f0000001d80)='[/*}**}\xea\\\x00', &(0x7f0000001dc0)=':#)\x00', &(0x7f0000001e00)='\x00', &(0x7f0000001e40)='syz1\x00', &(0x7f0000001e80)='%\x00', &(0x7f0000001ec0)='\x00'], 0x100)
r6 = io_uring_setup(0x4977, &(0x7f0000001f80)={0x0, 0x918e, 0x1, 0x0, 0xd1})
r7 = accept4$inet6(r4, &(0x7f0000002000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000002040)=0x1c, 0x80800)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000002080)={{r7}, 0x7, 0x8, 0x80})
r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000020c0), 0x60180, 0x0)
io_uring_setup(0x686c, &(0x7f0000002100)={0x0, 0xaefd, 0x1, 0x1, 0x264, 0x0, r8})
signalfd4(r8, &(0x7f0000002180)={[0x100000000]}, 0x8, 0x80800)
openat$cdrom(0xffffffffffffff9c, &(0x7f00000021c0), 0x20201, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000002200)={0x0, 'erspan0\x00', {}, 0x8})

13:47:06 executing program 1:
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x11, 0x2f, 0x6, 0x18, 0xb, 0x401, 0x6, 0x2b, 0xffffffffffffffff})
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'})
ioctl$RTC_WIE_OFF(r0, 0x7010)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x4)
r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x753, 0x450001)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000100)="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")
waitid$P_PIDFD(0x3, r1, &(0x7f0000000200), 0x8, &(0x7f0000000280))
recvmmsg$unix(r1, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/33, 0x21}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/223, 0xdf}, {&(0x7f0000002580)=""/125, 0x7d}, {&(0x7f0000002600)=""/237, 0xed}], 0x8, &(0x7f0000002780)=[@cred={{0x1c, 0x1, 0x2, {<r2=>0x0, <r3=>0x0}}}], 0x20}}, {{&(0x7f00000027c0), 0x6e, &(0x7f0000002940)=[{&(0x7f0000002840)=""/205, 0xcd}], 0x1, &(0x7f0000002980)=[@cred={{0x1c, 0x1, 0x2, {<r4=>0x0, <r5=>0x0}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000029c0)=""/114, 0x72}, {&(0x7f0000002a40)=""/135, 0x87}, {&(0x7f0000002b00)=""/26, 0x1a}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/4, 0x4}], 0x5, &(0x7f0000003c00)=[@rights={{0x18, 0x1, 0x1, [<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r13=>0x0, 0x0, <r14=>0x0}}}], 0x60}}, {{&(0x7f0000003c80), 0x6e, &(0x7f00000053c0)=[{&(0x7f0000003d00)=""/248, 0xf8}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/154, 0x9a}, {&(0x7f0000004ec0)=""/163, 0xa3}, {&(0x7f0000004f80)=""/43, 0x2b}, {&(0x7f0000004fc0)=""/149, 0x95}, {&(0x7f0000005080)=""/18, 0x12}, {&(0x7f00000050c0)=""/250, 0xfa}, {&(0x7f00000051c0)=""/241, 0xf1}, {&(0x7f00000052c0)=""/216, 0xd8}], 0xa, &(0x7f0000005480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r15=>0x0}}}, @rights={{0x14, 0x1, 0x1, [<r16=>0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000054c0), 0x6e, &(0x7f00000069c0)=[{&(0x7f0000005540)=""/88, 0x58}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/135, 0x87}, {&(0x7f0000006680)=""/209, 0xd1}, {&(0x7f0000006780)=""/174, 0xae}, {&(0x7f0000006840)=""/238, 0xee}, {&(0x7f0000006940)=""/125, 0x7d}], 0x7, &(0x7f0000006a40)=[@rights={{0x24, 0x1, 0x1, [<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000006a80), 0x6e, &(0x7f0000006e00)=[{&(0x7f0000006b00)=""/112, 0x70}, {&(0x7f0000006b80)=""/129, 0x81}, {&(0x7f0000006c40)=""/5, 0x5}, {&(0x7f0000006c80)=""/212, 0xd4}, {&(0x7f0000006d80)=""/82, 0x52}], 0x5}}], 0x6, 0x2, &(0x7f0000007000))
ioctl$RTC_ALM_READ(r19, 0x80247008, &(0x7f0000007040))
r22 = fspick(0xffffffffffffff9c, &(0x7f0000007300)='./file0\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r20, 0xc018937b, &(0x7f0000007340)={{0x1, 0x1, 0x18, <r23=>r10, {r3, r14}}, './file0\x00'})
r24 = dup3(r8, r21, 0x80000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000007380)={<r25=>0xffffffffffffffff})
r26 = accept4$unix(r9, &(0x7f00000073c0)=@abs, &(0x7f0000007440)=0x6e, 0x40800)
getresgid(&(0x7f0000007480), &(0x7f00000074c0), &(0x7f0000007500)=<r27=>0x0)
sendmsg$unix(r8, &(0x7f0000007680)={&(0x7f0000007080)=@file={0x1, '.\x00'}, 0x6e, &(0x7f00000072c0)=[{&(0x7f0000007100)="1b64ebc70a1f2c200d53d8f30e8677af9aecc89379300513fae53f9e0946136cba6d97ca6e2722cfa1ebd9864bf41576930e76a5c617f2f429995583dc41967cefd91d3874ae12481ab317a892a0edc1402bef69bb32d727c1449682e76ed84c6fe77e2cc1fcbd1ca3e25ccf267f13ec31", 0x71}, {&(0x7f0000007180)="cd3250bd2b1b0ceb47c7f6efa44b6ca5c9d4e571869fc6f64a7c9d73508ff20c95c190bad9ce558069cc81c8268f4f323a078fe754f1680ec11ec345ad2d282698ae56505e2aa699d35eb8b0cfa0a3cea79825e137fa2c1c98f1c0b509cde5dc869a7f17d2aa66c70cde45b0babfe15b0b2e52179a7fe892c94309d3a65412d43b69bf4e5592b3eea9bd5efca53081f353d0e6b4267d", 0x96}, {&(0x7f0000007240)="ccba73256710be950c5d5c092eda8b4c1ae0f64150bc0b257eb226c9b4c4b7bb1e5a3db94a19cbf8cf229542d9bcc4038867e93ca0c0d46c298b63edd64e2047b40f2af34d4e70b13a42d33e31bf0f70f503d715cec58d203800013f0421", 0x5e}], 0x3, &(0x7f0000007540)=[@rights={{0x2c, 0x1, 0x1, [r8, r12, r18, r22, r16, r23, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r11, r7, r6, r24, r25, r19]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r12, r8, r26, r9, r12]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {r13, r3, r15}}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r27}}}], 0x108, 0x24000000}, 0x30040001)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r17, 0x4018f50b, &(0x7f00000076c0)={0x1, 0x8, 0x6})
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000007700)={0x6, 0x2b, 0x12, 0x12, 0x6, 0x4, 0x2, 0xb3})

13:47:06 executing program 2:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000080)=""/153, 0xfffffffffffffff9})
r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0xffffffffffff7fff, 0x84221)
epoll_pwait(r2, &(0x7f00000001c0)=[{}, {}], 0x2, 0x8000, &(0x7f0000000200)={[0x1]}, 0x8)
r3 = signalfd(r2, &(0x7f0000000240)={[0x100000001]}, 0x8)
ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000280)=0xffffffffffffffff)
r4 = gettid()
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = fcntl$dupfd(r2, 0x406, r2)
kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r5, &(0x7f00000002c0)={r6, r1, 0x5})
fcntl$setlease(r3, 0x400, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3ea2118258330ce6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x44}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008054}, 0x40)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000000480)={0x0, 0x3, [0xea77, 0x4, 0x6, 0x2, 0x3]})
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40c0)
timer_create(0x6, &(0x7f0000000700)={0x0, 0x3b, 0x4, @thr={&(0x7f0000000600)="1b6603ea65c377df5a65728e18eff2deb85ded59b18f00d772b05eec3bf89970a5b3ba6724c57a3afe09129a092bf3c571cfb7438ff266967618e3046b3484dc3fa31e2963b6f085521dd69d4681fb1a7dba46d8105d7bf9740d1466beb3d799853b314652a954229092ac684dcf38081d6d3c09debced1f6ff3e5d602d2f89e3df2247a42788b9dc4b0bef4e7b30bc3ba2eaf47915d47f05ae44caee532348d82c386b8719ac63fee209b16b0d26932b90adca620185b803f02649793035148", &(0x7f00000006c0)="8cf5f6b7cf0f38554505fc382cba6ca20823843a40101306d66557b68993c3e9714e92086ed2"}}, &(0x7f0000000740))
syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r8, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x8004)

13:47:06 executing program 3:
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
fallocate(0xffffffffffffffff, 0x42, 0x100000001, 0x2)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x301481, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x40, {{0xa, 0x4e21, 0x2ed, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80000000}}, {{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}}}, 0x108)
flistxattr(r1, &(0x7f0000000180)=""/12, 0xc)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xfe, 0x3, 0x9, 0x3f, 0x0, 0xc3d, 0x404c0, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0xc}, 0x40010, 0x6, 0x7, 0x6, 0xfffffffffffffff8, 0x2, 0x6, 0x0, 0x1874c22b, 0x0, 0x7fffffff}, r0, 0xb, r1, 0x2)
r2 = signalfd4(r1, &(0x7f0000000280)={[0xa7]}, 0x8, 0x80800)
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x145401, 0x4, 0x8}, 0x18)
r5 = dup3(r3, r4, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFQA_PAYLOAD={0x62, 0xa, "a7f57f658e536fbaebdb78e177511480b132ddcbb01fe20e8914ad97360338409bee10963de6aa48b7c362b4f85ca252c2917233eb1a40f539729ef2167f8904e1f74af134ea3e4b74e22c4ef9f0a56eaea51d4f0e250f35d18f48482bc5"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000001)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x858, 0xc}}}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3f}, @device_b, @device_b, @random="6aa104c1886a", {0xa, 0x40}}, @sp_mp_open={0xf, 0x1, {0x2080, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x8000, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x6, 0x7, 0x2}}}}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x1)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xbc, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x48, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2e}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1f}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x28, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x49}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9709}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x44010}, 0x40)
r10 = fsmount(r1, 0x0, 0x7f)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r10, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x1c0, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x8}}, @NL80211_ATTR_IE={0x16d, 0x2a, [@fast_bss_trans={0x37, 0xe9, {0x4, 0x7, "5eef7467fc7a894616032adecaec2828", "79fc1443903e25178dbbcae339cb75892879dbdaab43ac94a9eb290a8559ed17", "aed6f592e27d25bd2ae1c6adedca04f2980f1dd8ae8e8183935898e482a9762c", [{0x1, 0x4, '+~<l'}, {0x2, 0x1d, "2097fc023a60afa1cee86d8958725edd28f2968bb15677affed3b30b1b"}, {0x1, 0x17, "cd60d952ebab040e9c5d15fe53541776f31199caab9653"}, {0x4, 0x1a, "2fdc9bc781dacec493d226875f5f836b5b4dc03f3a75506e6922"}, {0x3, 0xc, "eda713618c31a7fd501bfcf9"}, {0x1, 0x1d, "678059400fe66980b06d6f4d1dfa04720b004dc757626dc963760b9045"}, {0x4, 0xe, "57d1f55114cad55358f2d1c61b88"}]}}, @channel_switch={0x25, 0x3, {0x1, 0x3c, 0x1f}}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x2, 0x0, {0xa848, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x4, 0x40}}, @perr={0x84, 0x5b, {0x20, 0x5, [@ext={{}, @device_a, 0x1, @broadcast, 0x40}, @ext={{}, @device_b, 0x200, @device_b, 0x26}, @ext={{}, @device_a, 0x7fffffff, @broadcast, 0x37}, @not_ext={{}, @device_b, 0x4, "", 0xb}, @ext={{}, @device_b, 0x5018f4bc, @device_a, 0x24}]}}]}, @NL80211_ATTR_IE={0x2b, 0x2a, [@preq={0x82, 0x25, @not_ext={{}, 0x81, 0x4, 0xcb31, @device_b, 0x2, "", 0x7, 0x3509f720, 0x1, [{{}, @broadcast, 0xa7e}]}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x1}, 0x14040090)

[   65.468146] audit: type=1400 audit(1664545626.801:6): avc:  denied  { execmem } for  pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:47:06 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x124, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
fchown(r0, 0xee01, 0xee01)
pipe2(&(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x4000)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000280))
r2 = accept(r1, &(0x7f00000002c0)=@rc={0x1f, @fixed}, &(0x7f0000000340)=0x80)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_SECRET={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4094}, 0x8000000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r2)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x4004)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000881}, 0x24000000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000740)={'erspan0\x00', <r4=>0x0, 0x10, 0x8, 0x7, 0xf5, {{0x21, 0x4, 0x2, 0x38, 0x84, 0x67, 0x0, 0xf5, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@ssrr={0x89, 0x23, 0x6f, [@remote, @loopback, @broadcast, @loopback, @loopback, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3d}]}, @generic={0x83, 0xc, "608806f4743682f39868"}, @noop, @noop, @noop, @generic={0x94, 0x5, "1fc3f7"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x32, 0x3, 0x0, [{@multicast2, 0xa33a}, {@broadcast, 0x3}]}, @timestamp={0x44, 0x10, 0x2e, 0x0, 0x5, [0x5, 0x1f, 0xfffffffc]}, @generic={0x82, 0xe, "5daf3e88bf017785833502dd"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', <r5=>r4, 0x2f, 0x9, 0x7, 0x7fff, 0x4, @private1, @local, 0x10, 0x7, 0x1, 0x20}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000900)={'syztnl1\x00', r5, 0x8, 0x700, 0x81, 0x400000, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x66, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@end]}}}}})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x40000)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x4094)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, r7, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x40}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x1046}, 0x4080)
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x81)
ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000d40)={{}, 0x0, 0x0, 0x2})

13:47:06 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x5}}, './file0\x00'})
r2 = openat$cgroup_pressure(r1, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000000c0))
lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.metadata\x00', &(0x7f0000000180)=""/48, 0x30)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x40040, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0xa8, 0x23, 0x8, @private1, @ipv4={'\x00', '\xff\xff', @empty}, 0x40, 0x7827, 0x14b6a000, 0x80000000}})
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000340)={@empty, @private1, @local, 0x4, 0x4, 0x14a, 0x100, 0x871c, 0x20000, r5})
r6 = dup3(r3, r2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffc00, 0x0, 0x0, 0x500, 0xffffffffffffff7f, 0x400002})
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0)
sendto$packet(r7, &(0x7f0000000480)="9bcfdb679e9a98ee2021794a8496e5f9493cc3536807bc0367f8e3bcb1a321ab77c12f4f8c989ecc7bed5a2dfbec3d", 0x2f, 0x8810, &(0x7f00000004c0)={0x11, 0x0, r5, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r8=>r6, {0x3ff}}, './file0\x00'})
close(r8)
r9 = accept(r8, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f00000005c0)=0x80)
sendmsg$FOU_CMD_DEL(r9, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}}, 0x0)
openat$cgroup_int(r8, &(0x7f0000000700)='pids.max\x00', 0x2, 0x0)

13:47:06 executing program 6:
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000, 0x4, &(0x7f0000001000)={0xa, 0x4e24, 0x0, @private2, 0x9}, 0x1c)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000001040), &(0x7f0000001080)=0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect(r1, &(0x7f00000010c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001140)={0x0, 0x200})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000002140)={0x1, [0x0]})
pivot_root(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)='./file0\x00')
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002200)={'wg0\x00', <r2=>0x0})
ioctl$sock_ifreq(r1, 0x8929, &(0x7f0000002240)={'veth0_to_batadv\x00', @ifru_addrs=@sco={0x1f, @fixed}})
bind$bt_sco(0xffffffffffffffff, &(0x7f0000002280), 0x8)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000022c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'})
accept$packet(0xffffffffffffffff, &(0x7f0000002340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002380)=0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000002600)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000025c0)={&(0x7f00000023c0)={0x1d0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000026c0)={'ip6gre0\x00', &(0x7f0000002640)={'sit0\x00', <r5=>r2, 0x4, 0xf8, 0x6, 0x8000, 0x1, @mcast1, @loopback, 0x40, 0x7800, 0x7bc4, 0x10000}})
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000002700)=r5)
setxattr$security_ima(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780), &(0x7f00000027c0)=@ng={0x4, 0x11, "1acfb6cdb3031c378d723227"}, 0xe, 0x2)
r6 = syz_open_dev$vcsu(&(0x7f0000002800), 0x6, 0xaa000)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0xa8, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x2, 0x0, {0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3}, 0x1, 0xfffff940, 0x1}}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xa5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x10000}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x20}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x100}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7f}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xc8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000002d40)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002a00)={0x2e8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfe, {0x3, 0xff, 0x9, 0x7, {0x4e24, 0x4e21, [0x400, 0x6382, 0x9, 0x10000], [0xfd8, 0x4, 0xffffffff, 0x600], r5, [0x3, 0x101]}, 0x8000, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "6a24083b31a6e8655a255e4633a458f917ab783f9ef3c6a643b61fdc29b1aac59bdc286b63c8be19dd8edf0dd7fb9962d55520bd8df36f908b8e9d73c4ac4ee858aad596a420021f3def"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "9d39adef8f061a850b86bd8c09c894c7e8285deaea8968fbf08d37892f8bbe9dfd8b1f61d7605a28cd56816f0524f3b5c47168971f4668f31ce9c0c311e7b8a942b1554c81e572ece94eacfb534a6892e25b2ce217864227c801e46eef8eb91a8773d6d1bf79e29d038928b9bf9322c2f68060d318db12c436706344eaefb39e4e6eca4c411188ec4270f8ee5fe3fd14fda1c604132b19a4ac751c8cc7b3a8ec2c9e78916e18e6458d647110c9a0d5e93c3c635a"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "5ac637f87e164ff222c3e994c532afe3afba642c3e7c3c6798d2724392d0e1657c22a3597d2de92db529b0feee2157e3ab6fbf6ca5bd4b3cc90bdfdfa080423be00a3fc41db20c5f6f74e3e8c8dd03c5eebea130b18ddfe4"}, @INET_DIAG_REQ_BYTECODE={0x15, 0x1, "530ddc36096356ca6dd43224cd613bc0ad"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "bdb959b2fc549500c5fc7d347e8bee9a1aa3e225ab6bd729aa2ea5d63ab01d2448bf1196e94dfb05fe5bf8d2709f3b501c9f00d3fce6633fedbb596244a78aaa8a49"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "da7120a14928cb7d93586884d6853e44f768c2f5d9c96d7430256e24a3b68f97e9e7"}, @INET_DIAG_REQ_BYTECODE={0xae, 0x1, "449082ff2e08deeee0488edc69aa00c2035d114cdc97c43afea01073f539b4ea35284158320cda4122aa08fc86d02f7b689dcde1b5dc058790d9e40a272b9f66d737932927c90f658f156f39e9b0ed950e82b3001527b01a3be0d63e2a0b1ae8de007f5712148f15e9a0cf89765bbd0f87d6149ba11acc4e2202610c2262fa29c9395824750266168ec873ea06e8b429f2a6953f95ed8c7a184f8c27e25bf6b71713da163ff0c3268b54"}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)

13:47:06 executing program 7:
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000000))
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0xa20c1)
splice(0xffffffffffffffff, &(0x7f0000000040)=0x7ff, r0, &(0x7f00000000c0)=0x5, 0x800, 0x4)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000100))
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000140)={{0xfa, 0x9}, {0x100000000, 0x591e}, 0x8})
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x2, 0x2, 0x80})
r1 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x100)
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000240))
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000280)=0x4)
r2 = inotify_init()
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x5, 0x0, 0x4})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000340)=0x2)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000380))
mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x8000, 0x80000000)
ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000400))
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000580)=0xe8)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x114, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000780)=0x50)

[   66.844086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.846181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.849612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.857531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.862456] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   66.865469] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.894949] Bluetooth: hci0: HCI_REQ-0x0c1a
[   66.903976] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   66.914791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   66.917383] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   66.924323] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   66.926475] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   66.927985] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   66.950387] Bluetooth: hci5: HCI_REQ-0x0c1a
[   66.955986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.957687] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.959540] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   66.961391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.962420] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.963617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   66.965062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.966078] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.969157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   66.971419] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.974173] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.975334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   66.985500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   66.987049] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   66.989621] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   66.990972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.992030] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   66.994389] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   66.999550] Bluetooth: hci3: HCI_REQ-0x0c1a
[   66.999573] Bluetooth: hci2: HCI_REQ-0x0c1a
[   67.007092] Bluetooth: hci4: HCI_REQ-0x0c1a
[   68.922175] Bluetooth: hci0: command 0x0409 tx timeout
[   68.922383] Bluetooth: hci1: Opcode 0x c03 failed: -110
[   68.985366] Bluetooth: hci7: Opcode 0x c03 failed: -110
[   68.985397] Bluetooth: hci5: command 0x0409 tx timeout
[   68.986638] Bluetooth: hci6: Opcode 0x c03 failed: -110
[   69.050507] Bluetooth: hci4: command 0x0409 tx timeout
[   69.051320] Bluetooth: hci2: command 0x0409 tx timeout
[   69.051987] Bluetooth: hci3: command 0x0409 tx timeout
[   70.969789] Bluetooth: hci0: command 0x041b tx timeout
[   71.033367] Bluetooth: hci5: command 0x041b tx timeout
[   71.097484] Bluetooth: hci3: command 0x041b tx timeout
[   71.097946] Bluetooth: hci2: command 0x041b tx timeout
[   71.098389] Bluetooth: hci4: command 0x041b tx timeout
[   72.656079] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   72.662893] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   72.664210] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   72.673500] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   72.675143] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   72.678755] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   72.687312] Bluetooth: hci7: HCI_REQ-0x0c1a
[   73.017346] Bluetooth: hci0: command 0x040f tx timeout
[   73.081316] Bluetooth: hci5: command 0x040f tx timeout
[   73.145432] Bluetooth: hci4: command 0x040f tx timeout
[   73.146017] Bluetooth: hci2: command 0x040f tx timeout
[   73.146560] Bluetooth: hci3: command 0x040f tx timeout
[   74.297667] Bluetooth: hci1: Opcode 0x c03 failed: -110
[   74.617355] Bluetooth: hci6: Opcode 0x c03 failed: -110
[   74.746374] Bluetooth: hci7: command 0x0409 tx timeout
[   75.066321] Bluetooth: hci0: command 0x0419 tx timeout
[   75.130327] Bluetooth: hci5: command 0x0419 tx timeout
[   75.193573] Bluetooth: hci3: command 0x0419 tx timeout
[   75.194209] Bluetooth: hci2: command 0x0419 tx timeout
[   75.194786] Bluetooth: hci4: command 0x0419 tx timeout
[   76.793372] Bluetooth: hci7: command 0x041b tx timeout
[   77.252605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   77.258615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   77.262777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   77.268664] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   77.272440] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   77.273936] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   77.277994] Bluetooth: hci6: HCI_REQ-0x0c1a
[   78.841368] Bluetooth: hci7: command 0x040f tx timeout
[   79.033400] Bluetooth: hci1: Opcode 0x c03 failed: -110
[   79.291310] Bluetooth: hci6: command 0x0409 tx timeout
[   80.889364] Bluetooth: hci7: command 0x0419 tx timeout
[   81.337857] Bluetooth: hci6: command 0x041b tx timeout
[   83.385342] Bluetooth: hci6: command 0x040f tx timeout
[   83.641385] Bluetooth: hci1: Opcode 0x c03 failed: -110
[   85.433858] Bluetooth: hci6: command 0x0419 tx timeout
[   88.185396] Bluetooth: hci1: Opcode 0x c03 failed: -110
[   90.943743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.950377] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.956454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.963463] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.964974] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   90.967392] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.983438] Bluetooth: hci1: HCI_REQ-0x0c1a
[   93.049340] Bluetooth: hci1: command 0x0409 tx timeout
[   95.097476] Bluetooth: hci1: command 0x041b tx timeout
[   97.145423] Bluetooth: hci1: command 0x040f tx timeout
[   99.193504] Bluetooth: hci1: command 0x0419 tx timeout
[  120.186406] audit: type=1400 audit(1664545681.520:7): avc:  denied  { open } for  pid=3661 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
13:48:23 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x48800, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r3, 0x5323, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={<r4=>0x0, <r5=>0x0})
utimensat(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000500)={{0x77359400}, {r4, r5/1000+60000}}, 0x100)
getitimer(0x0, &(0x7f0000000000))
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes128, 0x10, '\x00', @b})
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x8, 0x9, 0xb4, 0x0, 0xcf4, 0x81005, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x800, 0x2}, 0x40004, 0x2, 0x4, 0x1, 0x8000, 0x3cc0, 0x59, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340))

13:48:23 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6)
ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000000)="ce9e39d1e8331e266d7cfd46d42760dbfd2e6197756a2a21fb64238fad9b40107b89bf10c72e8ee07f3559be0e9398693163b1ccee4618c03077ef08b11875")
ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000001c0)="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")

13:48:23 executing program 7:
unshare(0x8040080)
r0 = semget$private(0x0, 0x1, 0x0)
r1 = semget$private(0x0, 0x4, 0x3fd)
semop(r1, &(0x7f0000000180)=[{0x2, 0x7, 0x800}], 0x1)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x3000}, {0x0, 0x7}], 0x2)
r2 = semget(0x1, 0x0, 0x0)
semctl$GETPID(r2, 0x0, 0xb, 0x0)
r3 = semget(0x1, 0x0, 0x0)
semctl$GETPID(r3, 0x0, 0xb, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x20, 0x7])
semtimedop(r2, &(0x7f00000000c0)=[{0x0, 0x20, 0x1800}, {0x1, 0x5cd, 0x1000}], 0x2, &(0x7f0000000100))
unshare(0x8020080)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x1000}, {0x1, 0x3, 0x2800}, {0x4, 0x81, 0x800}, {0x4, 0x3ff, 0x1000}, {0x4, 0x1ff, 0x400}, {0x1, 0x1, 0x800}, {0x2, 0x1000, 0x1000}, {0x7e20d86efe9e89eb, 0x0, 0x1000}, {0x3, 0xf242, 0x800}], 0x9, &(0x7f0000000080))

13:48:23 executing program 6:
socketpair(0x23, 0x2, 0x20000000, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000200)={{0x2}})
fcntl$dupfd(r0, 0x0, r1)

13:48:23 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xd1, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0xfe, 0x6, "15", "38f0905df1ef67ed5d8b5b870c5d4fc0a5cafa914c7379da511b0023db4057355ed2de937bba4b3f2522982ad906ef55b24ebbe5c77b2d6aefb689fc69c563bb9beb890897aaebce4002737bcb793ae357c965cf786c5e0694b7327d6c43e0f3d4033656377c8bb6ab84762a63d48af13ebf0f12cd10011916b62ea0166099e4ff097bf76708f77fedddb328df04174c0304eaa5cbfa516ab7ec696482a78d13dd3fcdc52d23021cf11e2525e0933a912d2c140acd1348198af0efdd"}}}}}, &(0x7f0000000040)={0x1, 0x2, [0x83f, 0xf0c, 0xa55, 0xd6c]})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x48800, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r1, 0x5323, 0x0)
syz_emit_ethernet(0x26, &(0x7f00000000c0)={@empty, @multicast, @val={@val={0x9100, 0x0, 0x0, 0x2}, {0x8100, 0x2, 0x1, 0x4}}, {@can={0xc, {{0x4, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "d392aeaebb961945"}}}}, 0x0)
ioctl$CDROMREADMODE1(r1, 0x530d, &(0x7f00000002c0)={0x1, 0xc, 0x2, 0xca, 0x9, 0xbc})
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x38, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}]}, 0x38}}, 0x0)
recvfrom(r0, &(0x7f0000000100)=""/156, 0x9c, 0x0, 0x0, 0x0)

13:48:23 executing program 5:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="b72ae8fb5a4c316e545238e0ab2072648cb4112885ba4fbb2708b78f54536ca6a32a2225055b327cc4c2bd11ea44f619596882f5ff586443d91b21882e117fa45cc66fefc714c91b092c18"])
r1 = dup(r0)
ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000300)=0x9)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0))
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={r2, 0xb58a, 0x100000001, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
socket$unix(0x1, 0x5, 0x0)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x8)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0xc020662a, &(0x7f0000000140))

13:48:23 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'})
openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x64aa01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000059480bbcda5b4eebd0b0fb8cac7c2060000000000000035e06cd16e7af157ed601e04607870477e2e6b6e03444ed0adf608574fb1f6479cd02af9fba6a5e609b8a729e6390fba5a57028c6697b91940b2a340466df2129457f7127a09e21c402cd8e6bb65dd3c367c7b6a3e23e7ed1eb3a06850d0265129f4eef9b0f7da222369c04f24844a60fbda538c0632f7b37a888e15aef38ecc057e605f2b36a766421ef2601983071aecede18e15acda685aebcd9046a5814f7e383a2e38cc9d3517b69b3100db48dd5ebcba6701adabb44b744123dfd2d20785dd8034", @ANYRESHEX, @ANYBLOB="00800000000000002e2f66696c653000"])
signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x6]}, 0x8, 0x80800)
open_by_handle_at(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1}})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)

13:48:23 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
dup2(r1, r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000100)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0)

13:48:23 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde})
syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1)
r3 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4)
openat(r3, &(0x7f0000000380)='./file1\x00', 0x18001, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00')
creat(&(0x7f00000003c0)='./file1\x00', 0x9)
read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9)
read(0xffffffffffffffff, &(0x7f0000000300)=""/5, 0x5)
creat(&(0x7f0000000400)='./file1\x00', 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
write$binfmt_aout(r5, &(0x7f00000005c0)={{0x0, 0x7f, 0x3, 0x3da, 0xd4, 0xff, 0x19e, 0x7}, "6efcb8fc9ee95561b37e5b60ecf6a3be2d7867506e2f4b80ea7a4acc2ffd62599f85f2d31cfeb500ec931e9021c715ee74301b83240335fd81ae159bb87c32c2e15c2aa0a3e77a9516b8c8588c15f6037f4d496a08e38966845c59492649ca430ea8b4bc8588dad5a70c8ca6bcc69bb3b94c513e0843ed1318fe99c945fadb9a030c65011b17014c77645b8e9f390efabcb47ab19c63b34c05f5d428c735b513027aef3e8e84d85a3394", ['\x00', '\x00', '\x00', '\x00']}, 0x4ca)

[  142.576230] audit: type=1400 audit(1664545703.909:8): avc:  denied  { kernel } for  pid=3989 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  142.585036] ------------[ cut here ]------------
[  142.585059] 
[  142.585063] ======================================================
[  142.585066] WARNING: possible circular locking dependency detected
[  142.585071] 6.0.0-rc7-next-20220929 #1 Not tainted
[  142.585077] ------------------------------------------------------
[  142.585081] syz-executor.5/3996 is trying to acquire lock:
[  142.585087] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  142.585131] 
[  142.585131] but task is already holding lock:
[  142.585134] ffff88800ed40c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  142.585165] 
[  142.585165] which lock already depends on the new lock.
[  142.585165] 
[  142.585168] 
[  142.585168] the existing dependency chain (in reverse order) is:
[  142.585171] 
[  142.585171] -> #3 (&ctx->lock){....}-{2:2}:
[  142.585185]        _raw_spin_lock+0x2a/0x40
[  142.585196]        __perf_event_task_sched_out+0x53b/0x18d0
[  142.585208]        __schedule+0xedd/0x2470
[  142.585222]        schedule+0xda/0x1b0
[  142.585235]        futex_wait_queue+0xf5/0x1e0
[  142.585249]        futex_wait+0x28e/0x690
[  142.585259]        do_futex+0x2ff/0x380
[  142.585268]        __x64_sys_futex+0x1c6/0x4d0
[  142.585279]        do_syscall_64+0x3b/0x90
[  142.585300]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  142.585313] 
[  142.585313] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  142.585326]        _raw_spin_lock_nested+0x30/0x40
[  142.585337]        raw_spin_rq_lock_nested+0x1e/0x30
[  142.585350]        task_fork_fair+0x63/0x4d0
[  142.585367]        sched_cgroup_fork+0x3d0/0x540
[  142.585381]        copy_process+0x4183/0x6e20
[  142.585393]        kernel_clone+0xe7/0x890
[  142.585402]        user_mode_thread+0xad/0xf0
[  142.585413]        rest_init+0x24/0x250
[  142.585424]        arch_call_rest_init+0xf/0x14
[  142.585441]        start_kernel+0x4c6/0x4eb
[  142.585456]        secondary_startup_64_no_verify+0xe0/0xeb
[  142.585470] 
[  142.585470] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  142.585483]        _raw_spin_lock_irqsave+0x39/0x60
[  142.585494]        try_to_wake_up+0xab/0x1930
[  142.585507]        up+0x75/0xb0
[  142.585521]        __up_console_sem+0x6e/0x80
[  142.585537]        console_unlock+0x46a/0x590
[  142.585553]        do_con_write+0xc05/0x1d50
[  142.585565]        con_write+0x21/0x40
[  142.585573]        n_tty_write+0x4d4/0xfe0
[  142.585586]        file_tty_write.constprop.0+0x455/0x8a0
[  142.585598]        vfs_write+0x9c3/0xd90
[  142.585615]        ksys_write+0x127/0x250
[  142.585630]        do_syscall_64+0x3b/0x90
[  142.585647]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  142.585659] 
[  142.585659] -> #0 ((console_sem).lock){....}-{2:2}:
[  142.585673]        __lock_acquire+0x2a02/0x5e70
[  142.585690]        lock_acquire+0x1a2/0x530
[  142.585706]        _raw_spin_lock_irqsave+0x39/0x60
[  142.585716]        down_trylock+0xe/0x70
[  142.585731]        __down_trylock_console_sem+0x3b/0xd0
[  142.585747]        vprintk_emit+0x16b/0x560
[  142.585763]        vprintk+0x84/0xa0
[  142.585779]        _printk+0xba/0xf1
[  142.585791]        report_bug.cold+0x72/0xab
[  142.585807]        handle_bug+0x3c/0x70
[  142.585823]        exc_invalid_op+0x14/0x50
[  142.585839]        asm_exc_invalid_op+0x16/0x20
[  142.585851]        group_sched_out.part.0+0x2c7/0x460
[  142.585869]        ctx_sched_out+0x8f1/0xc10
[  142.585886]        __perf_event_task_sched_out+0x6d0/0x18d0
[  142.585897]        __schedule+0xedd/0x2470
[  142.585910]        schedule+0xda/0x1b0
[  142.585923]        futex_wait_queue+0xf5/0x1e0
[  142.585934]        futex_wait+0x28e/0x690
[  142.585944]        do_futex+0x2ff/0x380
[  142.585954]        __x64_sys_futex+0x1c6/0x4d0
[  142.585964]        do_syscall_64+0x3b/0x90
[  142.585980]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  142.585993] 
[  142.585993] other info that might help us debug this:
[  142.585993] 
[  142.585996] Chain exists of:
[  142.585996]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  142.585996] 
[  142.586011]  Possible unsafe locking scenario:
[  142.586011] 
[  142.586013]        CPU0                    CPU1
[  142.586016]        ----                    ----
[  142.586018]   lock(&ctx->lock);
[  142.586024]                                lock(&rq->__lock);
[  142.586031]                                lock(&ctx->lock);
[  142.586037]   lock((console_sem).lock);
[  142.586042] 
[  142.586042]  *** DEADLOCK ***
[  142.586042] 
[  142.586045] 2 locks held by syz-executor.5/3996:
[  142.586051]  #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  142.586080]  #1: ffff88800ed40c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  142.586107] 
[  142.586107] stack backtrace:
[  142.586110] CPU: 1 PID: 3996 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220929 #1
[  142.586123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  142.586131] Call Trace:
[  142.586134]  <TASK>
[  142.586139]  dump_stack_lvl+0x8b/0xb3
[  142.586157]  check_noncircular+0x263/0x2e0
[  142.586174]  ? format_decode+0x26c/0xb50
[  142.586190]  ? print_circular_bug+0x450/0x450
[  142.586207]  ? enable_ptr_key_workfn+0x20/0x20
[  142.586224]  ? format_decode+0x26c/0xb50
[  142.586241]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  142.586259]  __lock_acquire+0x2a02/0x5e70
[  142.586280]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  142.586303]  lock_acquire+0x1a2/0x530
[  142.586319]  ? down_trylock+0xe/0x70
[  142.586336]  ? lock_release+0x750/0x750
[  142.586356]  ? vprintk+0x84/0xa0
[  142.586374]  _raw_spin_lock_irqsave+0x39/0x60
[  142.586385]  ? down_trylock+0xe/0x70
[  142.586401]  down_trylock+0xe/0x70
[  142.586422]  ? vprintk+0x84/0xa0
[  142.586439]  __down_trylock_console_sem+0x3b/0xd0
[  142.586456]  vprintk_emit+0x16b/0x560
[  142.586475]  vprintk+0x84/0xa0
[  142.586492]  _printk+0xba/0xf1
[  142.586504]  ? record_print_text.cold+0x16/0x16
[  142.586520]  ? report_bug.cold+0x66/0xab
[  142.586537]  ? group_sched_out.part.0+0x2c7/0x460
[  142.586556]  report_bug.cold+0x72/0xab
[  142.586574]  handle_bug+0x3c/0x70
[  142.586591]  exc_invalid_op+0x14/0x50
[  142.586609]  asm_exc_invalid_op+0x16/0x20
[  142.586622] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  142.586643] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  142.586654] RSP: 0018:ffff888040a1f8f8 EFLAGS: 00010006
[  142.586664] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  142.586671] RDX: ffff88801b29b580 RSI: ffffffff81565e67 RDI: 0000000000000005
[  142.586679] RBP: ffff888040c60000 R08: 0000000000000005 R09: 0000000000000001
[  142.586686] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800ed40c00
[  142.586694] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002
[  142.586705]  ? group_sched_out.part.0+0x2c7/0x460
[  142.586725]  ? group_sched_out.part.0+0x2c7/0x460
[  142.586745]  ctx_sched_out+0x8f1/0xc10
[  142.586764]  __perf_event_task_sched_out+0x6d0/0x18d0
[  142.586778]  ? lock_is_held_type+0xd7/0x130
[  142.586792]  ? __perf_cgroup_move+0x160/0x160
[  142.586803]  ? set_next_entity+0x304/0x550
[  142.586823]  ? lock_is_held_type+0xd7/0x130
[  142.586837]  __schedule+0xedd/0x2470
[  142.586854]  ? io_schedule_timeout+0x150/0x150
[  142.586869]  ? futex_wait_setup+0x166/0x230
[  142.586884]  schedule+0xda/0x1b0
[  142.586899]  futex_wait_queue+0xf5/0x1e0
[  142.586911]  futex_wait+0x28e/0x690
[  142.586924]  ? futex_wait_setup+0x230/0x230
[  142.586937]  ? wake_up_q+0x8b/0xf0
[  142.586950]  ? do_raw_spin_unlock+0x4f/0x220
[  142.586969]  ? futex_wake+0x158/0x490
[  142.586986]  ? fd_install+0x1f9/0x640
[  142.587001]  do_futex+0x2ff/0x380
[  142.587012]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  142.587029]  __x64_sys_futex+0x1c6/0x4d0
[  142.587041]  ? __x64_sys_futex_time32+0x480/0x480
[  142.587055]  ? syscall_enter_from_user_mode+0x1d/0x50
[  142.587068]  ? syscall_enter_from_user_mode+0x1d/0x50
[  142.587084]  do_syscall_64+0x3b/0x90
[  142.587102]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  142.587115] RIP: 0033:0x7f47b1008b19
[  142.587123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  142.587134] RSP: 002b:00007f47ae57e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  142.587145] RAX: ffffffffffffffda RBX: 00007f47b111bf68 RCX: 00007f47b1008b19
[  142.587153] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f47b111bf68
[  142.587160] RBP: 00007f47b111bf60 R08: 0000000000000000 R09: 0000000000000000
[  142.587167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47b111bf6c
[  142.587174] R13: 00007ffcae9a830f R14: 00007f47ae57e300 R15: 0000000000022000
[  142.587187]  </TASK>
[  142.607307] hrtimer: interrupt took 31640 ns
[  142.607432] WARNING: CPU: 1 PID: 3996 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  142.645907] Modules linked in:
[  142.646127] CPU: 1 PID: 3996 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220929 #1
[  142.646661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  142.647384] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  142.647748] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  142.648919] RSP: 0018:ffff888040a1f8f8 EFLAGS: 00010006
[  142.649268] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  142.649734] RDX: ffff88801b29b580 RSI: ffffffff81565e67 RDI: 0000000000000005
[  142.650203] RBP: ffff888040c60000 R08: 0000000000000005 R09: 0000000000000001
[  142.650682] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800ed40c00
[  142.651148] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002
[  142.651617] FS:  00007f47ae57e700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  142.652137] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  142.652521] CR2: 0000001b2d621000 CR3: 000000003db98000 CR4: 0000000000350ee0
[  142.652988] Call Trace:
[  142.653161]  <TASK>
[  142.653321]  ctx_sched_out+0x8f1/0xc10
[  142.653596]  __perf_event_task_sched_out+0x6d0/0x18d0
[  142.653939]  ? lock_is_held_type+0xd7/0x130
[  142.654235]  ? __perf_cgroup_move+0x160/0x160
[  142.654542]  ? set_next_entity+0x304/0x550
[  142.654835]  ? lock_is_held_type+0xd7/0x130
[  142.655126]  __schedule+0xedd/0x2470
[  142.655384]  ? io_schedule_timeout+0x150/0x150
[  142.655694]  ? futex_wait_setup+0x166/0x230
[  142.655986]  schedule+0xda/0x1b0
[  142.656220]  futex_wait_queue+0xf5/0x1e0
[  142.656498]  futex_wait+0x28e/0x690
[  142.656746]  ? futex_wait_setup+0x230/0x230
[  142.657036]  ? wake_up_q+0x8b/0xf0
[  142.657281]  ? do_raw_spin_unlock+0x4f/0x220
[  142.657586]  ? futex_wake+0x158/0x490
[  142.657850]  ? fd_install+0x1f9/0x640
[  142.658111]  do_futex+0x2ff/0x380
[  142.658348]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  142.658745]  __x64_sys_futex+0x1c6/0x4d0
[  142.659021]  ? __x64_sys_futex_time32+0x480/0x480
[  142.659344]  ? syscall_enter_from_user_mode+0x1d/0x50
[  142.659690]  ? syscall_enter_from_user_mode+0x1d/0x50
[  142.660035]  do_syscall_64+0x3b/0x90
[  142.660293]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  142.660638] RIP: 0033:0x7f47b1008b19
[  142.660886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  142.662058] RSP: 002b:00007f47ae57e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  142.662562] RAX: ffffffffffffffda RBX: 00007f47b111bf68 RCX: 00007f47b1008b19
[  142.663025] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f47b111bf68
[  142.663488] RBP: 00007f47b111bf60 R08: 0000000000000000 R09: 0000000000000000
[  142.663950] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47b111bf6c
[  142.664414] R13: 00007ffcae9a830f R14: 00007f47ae57e300 R15: 0000000000022000
[  142.664880]  </TASK>
[  142.665039] irq event stamp: 722
[  142.665261] hardirqs last  enabled at (721): [<ffffffff8425167d>] syscall_enter_from_user_mode+0x1d/0x50
[  142.665878] hardirqs last disabled at (722): [<ffffffff8425a985>] __schedule+0x1225/0x2470
[  142.666434] softirqs last  enabled at (344): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  142.666989] softirqs last disabled at (181): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  142.667541] ---[ end trace 0000000000000000 ]---
[  142.676138] audit: type=1400 audit(1664545704.010:9): avc:  denied  { write } for  pid=3989 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  142.725124] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
13:48:24 executing program 5:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="b72ae8fb5a4c316e545238e0ab2072648cb4112885ba4fbb2708b78f54536ca6a32a2225055b327cc4c2bd11ea44f619596882f5ff586443d91b21882e117fa45cc66fefc714c91b092c18"])
r1 = dup(r0)
ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000300)=0x9)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0))
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={r2, 0xb58a, 0x100000001, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
socket$unix(0x1, 0x5, 0x0)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x8)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0xc020662a, &(0x7f0000000140))

[  143.465956] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.

VM DIAGNOSIS:
13:48:24  Registers:
info registers vcpu 0
RAX=ffff88800c917442 RBX=ffffffff852f3d80 RCX=0000000000000000 RDX=1ffffffff0a5e7b9
RSI=ffffffff8410f637 RDI=0000000000000001 RBP=ffff88801b922102 RSP=ffff888040b0f990
R8 =0000000000000001 R9 =0000000000000000 R10=000000000000000e R11=0000000000000001
R12=0000000000000000 R13=dffffc0000000000 R14=1ffffffff0a5e7b8 R15=000000000000000e
RIP=ffffffff81460cd0 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555555980400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555555981c18 CR3=000000001a69c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007fd172be17c0 00007fd172be17c8
YMM02=0000000000000000 0000000000000000 00007fd172be17e0 00007fd172be17c0
YMM03=0000000000000000 0000000000000000 00007fd172be17c8 00007fd172be17c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff888040a1f340
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001
R12=0000000000000038 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0
RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f47ae57e700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d621000 CR3=000000003db98000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f47b10ef7c0 00007f47b10ef7c8
YMM02=0000000000000000 0000000000000000 00007f47b10ef7e0 00007f47b10ef7c0
YMM03=0000000000000000 0000000000000000 00007f47b10ef7c8 00007f47b10ef7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000