Warning: Permanently added '[localhost]:25790' (ECDSA) to the list of known hosts. 2022/09/30 16:40:48 fuzzer started 2022/09/30 16:40:48 dialing manager at localhost:40535 syzkaller login: [ 41.411983] cgroup: Unknown subsys name 'net' [ 41.476124] cgroup: Unknown subsys name 'rlimit' 2022/09/30 16:41:04 syscalls: 2215 2022/09/30 16:41:04 code coverage: enabled 2022/09/30 16:41:04 comparison tracing: enabled 2022/09/30 16:41:04 extra coverage: enabled 2022/09/30 16:41:04 setuid sandbox: enabled 2022/09/30 16:41:04 namespace sandbox: enabled 2022/09/30 16:41:04 Android sandbox: enabled 2022/09/30 16:41:04 fault injection: enabled 2022/09/30 16:41:04 leak checking: enabled 2022/09/30 16:41:04 net packet injection: enabled 2022/09/30 16:41:04 net device setup: enabled 2022/09/30 16:41:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 16:41:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 16:41:04 USB emulation: enabled 2022/09/30 16:41:04 hci packet injection: enabled 2022/09/30 16:41:04 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 16:41:04 802.15.4 emulation: enabled 2022/09/30 16:41:04 fetching corpus: 50, signal 21849/23660 (executing program) 2022/09/30 16:41:04 fetching corpus: 100, signal 37338/40722 (executing program) 2022/09/30 16:41:04 fetching corpus: 150, signal 46137/50978 (executing program) 2022/09/30 16:41:05 fetching corpus: 200, signal 52851/58996 (executing program) 2022/09/30 16:41:05 fetching corpus: 250, signal 59170/66595 (executing program) 2022/09/30 16:41:05 fetching corpus: 300, signal 63024/71746 (executing program) 2022/09/30 16:41:05 fetching corpus: 350, signal 66588/76590 (executing program) 2022/09/30 16:41:05 fetching corpus: 400, signal 70200/81385 (executing program) 2022/09/30 16:41:05 fetching corpus: 450, signal 72813/85209 (executing program) 2022/09/30 16:41:05 fetching corpus: 500, signal 75506/89039 (executing program) 2022/09/30 16:41:05 fetching corpus: 550, signal 79324/93865 (executing program) 2022/09/30 16:41:06 fetching corpus: 600, signal 85567/100836 (executing program) 2022/09/30 16:41:06 fetching corpus: 650, signal 87306/103682 (executing program) 2022/09/30 16:41:06 fetching corpus: 700, signal 90693/107962 (executing program) 2022/09/30 16:41:06 fetching corpus: 750, signal 92442/110686 (executing program) 2022/09/30 16:41:06 fetching corpus: 800, signal 95408/114490 (executing program) 2022/09/30 16:41:06 fetching corpus: 850, signal 97865/117812 (executing program) 2022/09/30 16:41:06 fetching corpus: 900, signal 100385/121150 (executing program) 2022/09/30 16:41:06 fetching corpus: 950, signal 102122/123725 (executing program) 2022/09/30 16:41:07 fetching corpus: 1000, signal 104224/126642 (executing program) 2022/09/30 16:41:07 fetching corpus: 1050, signal 105834/129040 (executing program) 2022/09/30 16:41:07 fetching corpus: 1100, signal 108607/132442 (executing program) 2022/09/30 16:41:07 fetching corpus: 1150, signal 110788/135273 (executing program) 2022/09/30 16:41:07 fetching corpus: 1200, signal 112689/137837 (executing program) 2022/09/30 16:41:07 fetching corpus: 1250, signal 114269/140152 (executing program) 2022/09/30 16:41:07 fetching corpus: 1300, signal 116853/143213 (executing program) 2022/09/30 16:41:07 fetching corpus: 1350, signal 118483/145461 (executing program) 2022/09/30 16:41:08 fetching corpus: 1400, signal 120277/147881 (executing program) 2022/09/30 16:41:08 fetching corpus: 1450, signal 122190/150319 (executing program) 2022/09/30 16:41:08 fetching corpus: 1500, signal 123820/152549 (executing program) 2022/09/30 16:41:08 fetching corpus: 1550, signal 125100/154448 (executing program) 2022/09/30 16:41:08 fetching corpus: 1600, signal 126765/156585 (executing program) 2022/09/30 16:41:08 fetching corpus: 1650, signal 127693/158184 (executing program) 2022/09/30 16:41:08 fetching corpus: 1700, signal 130107/160846 (executing program) 2022/09/30 16:41:08 fetching corpus: 1750, signal 132244/163220 (executing program) 2022/09/30 16:41:08 fetching corpus: 1800, signal 133284/164871 (executing program) 2022/09/30 16:41:09 fetching corpus: 1850, signal 134555/166624 (executing program) 2022/09/30 16:41:09 fetching corpus: 1900, signal 135555/168209 (executing program) 2022/09/30 16:41:09 fetching corpus: 1950, signal 136913/169919 (executing program) 2022/09/30 16:41:09 fetching corpus: 2000, signal 138397/171787 (executing program) 2022/09/30 16:41:09 fetching corpus: 2050, signal 139534/173371 (executing program) 2022/09/30 16:41:09 fetching corpus: 2100, signal 140298/174712 (executing program) 2022/09/30 16:41:09 fetching corpus: 2150, signal 140918/175954 (executing program) 2022/09/30 16:41:09 fetching corpus: 2200, signal 143330/178254 (executing program) 2022/09/30 16:41:10 fetching corpus: 2250, signal 145139/180327 (executing program) 2022/09/30 16:41:10 fetching corpus: 2300, signal 146184/181746 (executing program) 2022/09/30 16:41:10 fetching corpus: 2350, signal 146617/182758 (executing program) 2022/09/30 16:41:10 fetching corpus: 2400, signal 148261/184483 (executing program) 2022/09/30 16:41:10 fetching corpus: 2450, signal 149375/185867 (executing program) 2022/09/30 16:41:10 fetching corpus: 2500, signal 150237/187109 (executing program) 2022/09/30 16:41:10 fetching corpus: 2550, signal 151255/188447 (executing program) 2022/09/30 16:41:10 fetching corpus: 2600, signal 152494/189879 (executing program) 2022/09/30 16:41:11 fetching corpus: 2650, signal 153439/191106 (executing program) 2022/09/30 16:41:11 fetching corpus: 2700, signal 154724/192518 (executing program) 2022/09/30 16:41:11 fetching corpus: 2750, signal 155697/193712 (executing program) 2022/09/30 16:41:11 fetching corpus: 2800, signal 156516/194900 (executing program) 2022/09/30 16:41:11 fetching corpus: 2850, signal 157497/196065 (executing program) 2022/09/30 16:41:11 fetching corpus: 2900, signal 158503/197262 (executing program) 2022/09/30 16:41:11 fetching corpus: 2950, signal 159848/198801 (executing program) 2022/09/30 16:41:11 fetching corpus: 3000, signal 160381/199715 (executing program) 2022/09/30 16:41:11 fetching corpus: 3050, signal 163068/201843 (executing program) 2022/09/30 16:41:12 fetching corpus: 3100, signal 164731/203253 (executing program) 2022/09/30 16:41:12 fetching corpus: 3150, signal 165905/204433 (executing program) 2022/09/30 16:41:12 fetching corpus: 3200, signal 166744/205467 (executing program) 2022/09/30 16:41:12 fetching corpus: 3250, signal 167902/206682 (executing program) 2022/09/30 16:41:12 fetching corpus: 3300, signal 169203/207863 (executing program) 2022/09/30 16:41:12 fetching corpus: 3350, signal 169982/208810 (executing program) 2022/09/30 16:41:12 fetching corpus: 3400, signal 170820/209781 (executing program) 2022/09/30 16:41:13 fetching corpus: 3450, signal 171815/210793 (executing program) 2022/09/30 16:41:13 fetching corpus: 3500, signal 172344/211541 (executing program) 2022/09/30 16:41:13 fetching corpus: 3550, signal 173009/212369 (executing program) 2022/09/30 16:41:13 fetching corpus: 3600, signal 173425/213101 (executing program) 2022/09/30 16:41:13 fetching corpus: 3650, signal 174344/214045 (executing program) 2022/09/30 16:41:13 fetching corpus: 3700, signal 175183/214921 (executing program) 2022/09/30 16:41:13 fetching corpus: 3750, signal 176027/215794 (executing program) 2022/09/30 16:41:13 fetching corpus: 3800, signal 176689/216593 (executing program) 2022/09/30 16:41:13 fetching corpus: 3850, signal 177328/217332 (executing program) 2022/09/30 16:41:13 fetching corpus: 3900, signal 178346/218292 (executing program) 2022/09/30 16:41:14 fetching corpus: 3950, signal 178773/218960 (executing program) 2022/09/30 16:41:14 fetching corpus: 4000, signal 179343/219689 (executing program) 2022/09/30 16:41:14 fetching corpus: 4050, signal 180023/220412 (executing program) 2022/09/30 16:41:14 fetching corpus: 4100, signal 180934/221254 (executing program) 2022/09/30 16:41:14 fetching corpus: 4150, signal 181707/221981 (executing program) 2022/09/30 16:41:14 fetching corpus: 4200, signal 182863/222813 (executing program) 2022/09/30 16:41:14 fetching corpus: 4250, signal 183374/223463 (executing program) 2022/09/30 16:41:14 fetching corpus: 4300, signal 184422/224308 (executing program) 2022/09/30 16:41:14 fetching corpus: 4350, signal 185017/224910 (executing program) 2022/09/30 16:41:15 fetching corpus: 4400, signal 185799/225582 (executing program) 2022/09/30 16:41:15 fetching corpus: 4450, signal 186287/226144 (executing program) 2022/09/30 16:41:15 fetching corpus: 4500, signal 186936/226723 (executing program) 2022/09/30 16:41:15 fetching corpus: 4550, signal 187591/227298 (executing program) 2022/09/30 16:41:15 fetching corpus: 4600, signal 188011/227839 (executing program) 2022/09/30 16:41:15 fetching corpus: 4650, signal 188549/228377 (executing program) 2022/09/30 16:41:15 fetching corpus: 4700, signal 188879/228910 (executing program) 2022/09/30 16:41:15 fetching corpus: 4750, signal 189403/229449 (executing program) 2022/09/30 16:41:16 fetching corpus: 4800, signal 190180/230014 (executing program) 2022/09/30 16:41:16 fetching corpus: 4850, signal 190401/230443 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/230944 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/231386 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/231816 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/232204 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/232598 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/233050 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/233462 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/233867 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/234261 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/234693 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/235092 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/235536 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/235969 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/236381 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/236807 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/237247 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/237659 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/238092 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/238488 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/238888 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/239208 (executing program) 2022/09/30 16:41:16 fetching corpus: 4872, signal 190746/239208 (executing program) 2022/09/30 16:41:18 starting 8 fuzzer processes 16:41:18 executing program 0: prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/192) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/14) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/196) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/35) prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/4096) prctl$PR_GET_NAME(0x10, &(0x7f0000001240)=""/33) prctl$PR_GET_NAME(0x10, &(0x7f0000001280)=""/236) prctl$PR_GET_NAME(0x10, &(0x7f0000001380)=""/4096) prctl$PR_GET_NAME(0x10, &(0x7f0000002380)=""/165) prctl$PR_GET_NAME(0x10, &(0x7f0000002440)=""/178) prctl$PR_GET_NAME(0x10, &(0x7f0000002500)=""/241) prctl$PR_GET_NAME(0x10, &(0x7f0000002600)=""/4096) prctl$PR_GET_NAME(0x10, &(0x7f0000003600)=""/248) prctl$PR_GET_NAME(0x10, &(0x7f0000003700)=""/188) prctl$PR_GET_NAME(0x10, &(0x7f00000037c0)=""/19) prctl$PR_GET_NAME(0x10, &(0x7f0000003800)=""/181) prctl$PR_GET_NAME(0x10, &(0x7f00000038c0)=""/4096) prctl$PR_GET_NAME(0x10, &(0x7f00000048c0)=""/4096) prctl$PR_GET_NAME(0x10, &(0x7f00000058c0)=""/33) prctl$PR_GET_NAME(0x10, &(0x7f0000005900)=""/108) 16:41:18 executing program 1: pidfd_send_signal(0xffffffffffffffff, 0x34, &(0x7f0000000000)={0x21, 0x20, 0x5a3d}, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x28, &(0x7f0000000080)={0x26, 0x6b, 0x8}, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x62) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x810, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0xf093, 0x2, 0x1, {0x0, 0x0, r0}}, 0xfffffff8) mknodat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x4, 0x6) r3 = syz_io_uring_setup(0x32a1, &(0x7f00000001c0)={0x0, 0x23dc, 0x1, 0x1, 0x231, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0xa, &(0x7f0000000300)={r6, r7+60000000}, 0x1, 0x1, 0x1, {0x0, r8}}, 0x6) syncfs(r3) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r9, 0x8, 0x0, 0x7ff}, 0x40) r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x200040, 0x0) r11 = syz_io_uring_setup(0x3ac0, &(0x7f0000000440)={0x0, 0x62c5, 0x2, 0x3, 0x39c, 0x0, r10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x6a4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r12, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000600)={r11, 0xfffffffffffffffb, 0xffff, 0x3ff}) 16:41:18 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb885}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x1, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x24000804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000085) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x41401}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r5, 0x700, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x1, 0x9, 0x101, 0x0, 0x0, {0x8bc95559a08f2956, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x100}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8dc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x200000c8) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x0, 0x1304, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x38}}, 0x8000000) 16:41:18 executing program 3: sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x434, 0x3f3, 0x400, 0x70bd2c, 0x25dfdbfe, {0x5, 0x1, 0x18, [0x9b, 0x1f, 0xd3e4, 0xfffffffb, 0x3ff8000, 0x1, 0x5, 0x9, 0x3, 0x7fffffff, 0x2, 0x7, 0x100, 0x79c, 0xffff, 0x3, 0x411, 0x55a1, 0x81, 0x2, 0x9, 0xd8, 0x1, 0x9, 0x7, 0x7, 0x2, 0x5, 0x4, 0xfffffff7, 0x9, 0xfff, 0x3, 0xffffffff, 0x1, 0x1ff, 0x2, 0x65, 0x9, 0x3b4, 0x2, 0x4, 0x3, 0x7, 0xff, 0x3, 0x0, 0x10001, 0x1, 0x4, 0x101, 0x1, 0x36, 0x3ff, 0x0, 0xc57, 0x200, 0x3f, 0x5, 0x5, 0x80, 0xffff, 0x6, 0x3], [0x7, 0x2d, 0x4, 0x9, 0x7fff, 0x2, 0x1f, 0x1, 0x64d, 0xc3, 0xaa5, 0xaf1, 0x81, 0x1, 0x5, 0xf3, 0x3, 0x800, 0xfffffff8, 0x3ff, 0x3, 0x80000001, 0x3, 0x8, 0x99c7, 0x9, 0x80, 0x1, 0x7, 0x10001, 0x80000001, 0x6, 0x368, 0x2, 0x80000001, 0x6, 0x7ff, 0x7d295a13, 0x2, 0x2cf9, 0x0, 0x1ff, 0xc09, 0xffffffff, 0xc19, 0x8, 0x8, 0x400, 0x5, 0xfff, 0x6, 0x1, 0x3ff, 0x9, 0x1000, 0xffffffff, 0x2, 0x5d2a, 0x4, 0x0, 0x9, 0xfff, 0x0, 0x7], [0x8001, 0xfffffffd, 0x9, 0x101, 0x4, 0x1f, 0x2, 0x20, 0x100, 0x10c3f4d0, 0x3a, 0x10001, 0x7, 0x66dc, 0x5, 0x1ca2, 0x4, 0xfffffff8, 0x101, 0x1, 0xffff0b8d, 0x20, 0x1ff, 0x255, 0xffe3, 0x8, 0x2, 0x1, 0xb24e, 0xffff, 0xb2, 0x1f, 0x40, 0x3f, 0x5, 0x9636, 0xda26, 0x8, 0x2bb, 0x7, 0x3, 0x9, 0x6, 0x8, 0x8b1, 0x62ba2c28, 0x3, 0x2631, 0xb75c, 0x7fffffff, 0xffff, 0x0, 0x8000, 0x0, 0x400, 0xffff, 0x8, 0x6, 0xfffffffe, 0xffffffff, 0x9, 0x7, 0x1, 0x7fffffff], [0x0, 0x80, 0x9, 0x8, 0xffffffff, 0x4, 0xfffffffa, 0x3ff, 0x3, 0x0, 0xfff, 0x2, 0x5, 0x2, 0x7f, 0x6, 0x5, 0x2, 0x101, 0x5c5, 0x7, 0xb879, 0xfff, 0x2, 0x601f, 0x4, 0x9, 0x4, 0x20, 0x4, 0x0, 0x2, 0x8, 0x8, 0x7, 0x5, 0x7ff, 0xf38, 0x8, 0x1, 0x1, 0x1c4, 0x7, 0x5, 0x8000, 0x1ff, 0x5, 0x5, 0x80, 0x1, 0x29, 0x7fff, 0x80000000, 0xfffffff8, 0x8000, 0x8000, 0x1, 0xfffffffa, 0x3, 0x400, 0x7, 0x1f, 0x1a9, 0x3488], 0x14, ['\x00', '&-,$a,}:{!\x00', '&\x03.[)%\x00', '\x00']}, ["", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x4004090}, 0x20000800) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x41, 0xef, 0x1}, 0x18) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x3f7, 0x300, 0x70bd28, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20008840) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fcntl$setstatus(r0, 0x4, 0x44800) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2048040}, 0x4051) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x40880) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) r3 = signalfd4(r2, &(0x7f0000000c80)={[0xef01]}, 0x8, 0x100800) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000cc0)) r4 = signalfd(r2, &(0x7f0000000d00)={[0x8]}, 0x8) fcntl$setstatus(r4, 0x4, 0x6800) r5 = socket$inet(0x2, 0x5, 0xff) getpeername(r5, &(0x7f0000000d40)=@l2, &(0x7f0000000dc0)=0x80) signalfd4(r2, &(0x7f0000000e00)={[0x9f]}, 0x8, 0x80000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f00000043c0)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000004240)=[{{&(0x7f0000000e40)=@ax25={{0x3, @rose}, [@null, @default, @bcast, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000ec0)=""/19, 0x13}, {&(0x7f0000000f00)}, {&(0x7f0000000f40)=""/55, 0x37}, {&(0x7f0000000f80)=""/109, 0x6d}, {&(0x7f0000001000)=""/214, 0xd6}], 0x5, &(0x7f0000001180)=""/142, 0x8e}, 0x8000}, {{&(0x7f0000001240)=@x25={0x9, @remote}, 0x80, &(0x7f0000002640)=[{&(0x7f00000012c0)=""/120, 0x78}, {&(0x7f0000001340)=""/104, 0x68}, {&(0x7f00000013c0)=""/86, 0x56}, {&(0x7f0000001440)=""/227, 0xe3}, {&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f00000015c0)=""/110, 0x6e}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, &(0x7f00000026c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000036c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003740)=""/112, 0x70}, {&(0x7f00000037c0)=""/198, 0xc6}, {&(0x7f00000038c0)=""/72, 0x48}, {&(0x7f0000003940)=""/198, 0xc6}], 0x4, &(0x7f0000003a80)=""/249, 0xf9}, 0x1}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003b80)=""/18, 0x12}, {&(0x7f0000003bc0)=""/238, 0xee}, {&(0x7f0000003cc0)=""/31, 0x1f}], 0x3, &(0x7f0000003d40)=""/124, 0x7c}, 0x1}, {{&(0x7f0000003dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003e40)=""/120, 0x78}, {&(0x7f0000003ec0)=""/78, 0x4e}, {&(0x7f0000003f40)=""/6, 0x6}], 0x3, &(0x7f0000003fc0)=""/35, 0x23}, 0x800}, {{&(0x7f0000004000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004100)=[{&(0x7f0000004080)=""/31, 0x1f}, {&(0x7f00000040c0)}], 0x2, &(0x7f0000004140)=""/207, 0xcf}, 0xbb6}], 0x6, 0x10000, &(0x7f0000004400)={r7, r8+10000000}) 16:41:18 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x6, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x10000008}) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xe8, 0x40202) r2 = accept$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) r3 = io_uring_setup(0x6a4c, &(0x7f0000000180)={0x0, 0x2a9b, 0x20, 0x0, 0x78}) r4 = accept4$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) sendfile(r3, r4, &(0x7f0000000280)=0xf1b, 0x52) r5 = dup2(r0, r1) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000001640)={0x5, &(0x7f0000001580)=[{0x4162, 0x1f, &(0x7f00000002c0)="0c6cd890bc99f8b093dd4a8fd25af209384c9f0046ef8fe0de973c8c886e18"}, {0x6, 0x1000, &(0x7f0000000300)="8e82ea1439a8d64a38c90fb210200bd40fef374c34d21a32e54a2ff5e200e127cb48dd425736114174dc6ab450b39d6a5031d7544117e35cc7c6b594dd8fd59399a074f109bf78a622d71dc653e5152dd61d07325b8cc64cf804aa9f0d5ae56a245a01b32321ff2b45aadcc4cf9410a8fbabd6649bc894fac3eeb9275e37b251ef91b4576e17f648e6851bfe3d56d4783c80851865f234b31c5dcef7909364d10d3ee237f7d0d686163df622b521312ab83ad7b2cd43888e83a1a0af83b2039a24c8fb49aa135c0be1f94a047e78ee6d05f9c331138a87beb8ad6419cc52aa557fe77bff6ac3d3e0cad9a86f4ac2fc61697d453e1e3f0934cf445848f6f245a429cbdef7f4addd36f5c03f174d7e579757173d02b162b488f22c1a903e75a3f7fb10a81931379c4fa5191d608e431e6a1d7df5b491907d5022b59ac67488adb63cb6eabcab9dd49355f0c233419db052c4f31af100cca2bc69ae16eeb17e9a7a424d314fc29559d07d27f042f7a1ba294617cff920588c877621662195f7005f7e0883a44c1bf2ab24a0f8964090109d1c3ac9439c73bc858eb38432b36beb8eddbdb154d29e88c30db13fd865699a5f641bc23a803d3990fdd1931028f061b6cc905fc0349253854554b3c6a4b98cc17fca551b032743cb44ed111ccf0086daf7b11419f3b7427439c8937bc8ef5bf74b277f2850ebc0b5e68161ace7808369ee5f8e8a83941bfb69f237c79d8663962ebbf576d1ae302d1718f001e87e065d796b90637d7fb317e0dab8e64f18627316077d80aaeed195ff39f768ef619e117356c995b5d87f0c30004dd752fcf7c5381805d7f2bfd4be0c23e2ff1730d83fd5af085499d616db857860270fbd52aa697a9a6622ddc83f1aac1dd342d9c985712459263032990163e1d5b6d532625190565dc5bb3078b972d935d5261624a93d912cd3031519de5dac79d817c898c2ace4ef0de199eb81c7b7514d334bd3beba66cfe55b7f687e3bda9662a538995c61a3f4fb89c88c1773ff7c11fd570a7b533422c433f97029505feb4f72a478c35b7dc97a0b276b5fd208c0230f2cc068362e5f76f82672d7f2dca417cd19ab3ba4c5115bce0c229f9d09a1bb79a021875e2a059f892eba1227611d6f7ad7ec0b573c9da4ee053d6cc544f38439f96ee15b9106e7437dcf9c6ea8a8422becc2078fb995e7d5bf0d4f51884944ca97a12091160ffa85d0f5ca7f4b3a2f7d6fc72f5613b1b9b64e5f09079f089e9cb3b44ebb1194cb9ebe2d6d59380dab176043e60367d8ebb6ad82bbb6fea74a3f82e89f077b12096290c4ceaa340d7672d768e99d58822c9fa6d1838c749b2a56b243da0fdd34b2a23a6a68a8b8f948eeee751ad5895fef3ee807dfa0a1fb2b5aa5981765e44741177c74b1b86b96bca10df427b51d78be37f07ffedcd5919fba5e3355800dd29c1894ea781111e1268ca98c2484f868dfb332b76fa885eccc082fcf77cb048646ee219168f350cf46740662a052b44608c7ccf9ffff387ded6f01b2e3bd6c55905b317a773559c0bb7495f1b909dab957d30432b51dd05490c3ae55b1671e44197cf1ba76418850e6cb2e2ecfdc868ce1a8b5fd0de26f4d23ad83cd419be7772f396a663fe3c08658b7fe26ca5538923eb96f532ca750a0fd0db572b73cccfd8ec336bab2bc04d6fa47364820b70d5304c8374ed0f18d3425a74b163e98a5ac1c03b68156fbed9baae7a95cad55a94456906a7a8415c58c3b22b774e73e2fb08f22d7e96bc07658d15ebdf6286dc2aa02719036e78aed40bcd3c6b732b8e2f07bd451cfddaa55ada9685220df3a701ab3360315b22f625e14716068478b53dec45f1cb1f3493ee89105a18b301bc000100f7b3804677062cd9d7e81b5d574787a0237f64a5feb87f092e8c40d6187e661b8c6904c7ff57dd0e834fd27e76851b27d45dc2591c2e722a96eeafa77787a12259e905880e343ca87ecb58cfae126160f63c7246e00dec7fb998f247d388b653577d62c84d744c05225e0825c5c20d6bc880cc2d55092cce9d0bd0171d2b4d24dd1850b3b0548a092e857d937c707d8d4be01ce1c2cbcb1946f7b6c51495f636b63bf89f6048c375e9cf717bfe974e215bdd8d4bd2271a39c669e774e171a663ca593a06968c09753475cfea480cb0c92355ee01c9864b3933caf548a3b0e8f21a5d45c514580035bab2d2fbd6f23bdeea06cbd6b29ab4d03e67b3dd0ea431cac67fb5294456a42379db9f1156201188c832cf070fd2d04db91a537d24d33af6a8136d21ff08a424fc53e441a3324fff5a33fa15e601b09797559811f504805e435b584aa7e8fef5179e6b5fefdbf6833b70683a95029b7d0e98c084040e9eee30962c75decee4ec8ad7d4c91d3c9e796afee0c854593b85543dfe95c16b4f3dbee3e299229e0557b3f81241fb5eb30c30848c7938bec13cec0b73360c3a8b08dd2cbe43e69506a3561b01653c87999cdd1a3a3497c5d443684664d4f51272e5269ea7f245e207f590f1ddb444ca5de9df6574fa43f6208ce9c67140bf7849444e1064f6e50bd0bffa97a47fa36571245a3fcd049ecf068adb75882d901c6b32768258183f764cd0577cdb96d817965f496d2bcc8ed16c9002ec626b3bf6573a8c26bb7ddb0ba00ca92c45e19c2c807013a5fe027cc9af2956fa579b435e65a020b566f03bd758d6ae1bce4d4fe14a8219528ffc392109491dda90176ff0ecee36cbc6ef40b1dc636529f617db8baec25d953c1b2e5dc80368cbbdfd4783581ad26fc6e0102157bed526bc652aec83139b714d0ec7a4c8ac4653af89d99c811cf5360c8aad75673ff844cb21486dab81455f739e51d304b04c5862e4fde2eae10a4fe277a8e3caf691606c3aa7028e3b75e2bbfcfb72a0a4f16108fadf81ef3af22019355ede0f4f025759fdb13cf595246af227b2a02517a7a16cc905999c375052cf2d5d6244f04a4cf186b4ee3db71ff3de2a3f59b0133a3ef1cd187e7b60a87363b2489846a105c2c6ba67fccf8a906a3874f42644d3c79e74e992852e9add696b026a8d0f59ec29f62e8d7f2d5fb6ec9c198ae0a7973e51f8dcf171ac10f1de8bd452ed548314acebe6477179a52105d2c6c2110f958db8971afb068256d5bab73b23d272b4674d1d612f8772a25edc75bcf1c0c8ef147d48b169bb3ad66ee3cbe4f7b6a9d03aa1b38f65c02fcc8d5d70919d38f265d8c8d8df2fe74bec2761c5425d36bf9f98211170119c6c55effb0836d0d4692f3480063d95e6404d2f588bde9b00da549d13b30459829e2fbf8e9951f4200afb4a858d66384c45d2b1e2aee8bcb9537b22b90699509f2679518a9766f321a5ad36bf11e69937c36445b7f6141c474f410517f3369766584ac62d7db7b86915307787138622b1310daaf5511d70c4d63f6b7c0e185f13a988ca9a7e09d17107dadf7457963ae8b193e20f04cb9fd7c10f1419f8c0e487d0f57e2dab0aa5bf7d576f871827ecaeabf5dbdc73bdd2622da8c1c39a33477b86a5fcd3cd3404c30bd9bebed860bf9537a367b5ccb1845aa7770ad2ca9892b43d5438fee00515f0ffb7badac9138052ae6688444cb15379ac578fcee0a46adea9a971638cf3a0253a186b461e68f369b74eb5b6db186828934e45f0f5212a28f9dbbe6c57438353ad10a83cad9ca0daaf8355cc0946d75b60034015a6d5d3d3cd8b222570f0bbc179afd3859e048c4b8030c93402304ace28470da2e9b8f92763494701b4f196bcec30b21e02c2c876915a7aef52dc85c7b82787c174c4b328466568ad1d13cda5ec8dd0c83513b1fb4b09db99c7cb6c16614227c0fb1c7478afc197b03944254feafb4e05e7014f6fe87968d1efe3a2fc60732a26318014ac393c60044177d41735e54736bd3cc87616540f67d637b1142ce803b4ed55efece4ee9ff3cf47a23be1d5d903bfbc1a4ec53f32b4c332e27a74146496c11084f9f7df6c5b1b0ed2530f2a1026e9dbbafd358f64389eb0c622e9a15578a74de0661c061b3b63cce93117a7bb8ea25eec64ff68cf8a514f0a2d33e7c26bcc036cc0972ce0d65d967fd9b138cc18e4d6cd1fbfe4fcf777de376b5101d0f505bf90e891602bc17ad314b3ed6cd713e08faf39648291c2e040026111895475225c55669650e91441470c90c2f2ad1537ad1108fb08481785d9dd21210f36e76195b2e8749c846300cafd11b3a80149b7945447dce5899dc4458b6480f013313c7e77a7babea6e699985cc82cd80a3dbc543155b9e431b121c24caa46a151555f1c4061fee0fe7d61b7a8c8eefc6c5b4b284e9170c6ed94bf5f2f633af5ffc1c4a443eb34335cddcf68e26fd1e39b7cbeadcf30ffd3abe008ed60f00bc0fdba6a314731933253217c9383c1fc98503de966d3180973bbd7fcf81780a8228a8627350319b93857af8f774ff9e4eeb29b7f5c661b372f713d97b1002c314107bccd5fb566c9314879eb18036173cc47ff5df92948375726f6e9d30bb802335dcc451aa8991522fef91663a3af81c9b5f201c336f4f9fc1ce25b28a26c94030843eb0b80de842d2dc918319b46c0f494d4fbfdd143193dc096a34b892558c15afb02a0cbb78123f74e9f6b0267a5431e15f404f518f225adf9c31f6004efa4a97f026f8c87bb12815ed4ef6829382779966901178b6bca7ac638ddce1a1b16cd5777cf90ee63187716d8d4af1a6e790be6d304043c64ad153cb1626552e2fc09dd0cd34a087d5fd7fd57dcf4a6d54307bae722a75d9592aa39593da7a0b9f05d3d83c943c7f699678b2f9f24096671264a323173d858fbed1ad271e1c41e498573bc04565dea938a9c3c6a141f564177e188784ceaf62d79e73ab13aed12d944ff3d4e6f455e42928ac3d314236fcdc1f02b217fa801e4ad40481090e787442581f56e93de21eac27a88daf263a5602bfd1ab82b40c3712495a74f9cfc4891e99a948ce662a334ff3b79b80f76822fe54b7aa1ea204a22f6d78e91cc13e0f9b83072596b9b69db49ff40cfa023078cc9d12c1378878ff33a1728a21089387f0eeb2c2be98c17f03d7b8135ef81c21c5074fbcc077dd3fcb64b6c5449300a71aa38654aabcefb0b83aed51e3a823aed39b6214e28f3ecaf1109bfa4874b4836a856d73794963e94100be101f696ad165b9865c25ac48ee43e26ea4f025f0f6642faee862ca80bb5c9ac83c4d1b3a7b9c644117b35462186839379ad5a1fe0440bd212dfb9d02d595ee68abe73378563072e66106668c91a2a8f72eb63bc45ea43e9353e4b38d069843cc7981a85c649ef94de6b79cafda3185a3b98f733a4ad1ce94cd01ee4821bfb1fbdaab110c890813783bdd51db9ca3be91e757001a9effc2a56234b0f53492c0d4b32414deda6ebba03b94e559786cd9517e33c44360fd0a4dcbcf1fcb4bdcc4248c3f8d18dcd440ad8fd6f02b9e896d0c71a5b48531d075325b7838891cb3b45a66ecbee732897ae4d5a53adf4990546ce45132a36d46c4c25bdc5d4167dfde5e927cdbf62b1dd0167eeb30060b95a58e9af2c01bd6a7dc367f6b0cded060b070b895960d80b4d160ef2b2815520f28b1ee927c4bfb186c3176b73b2a60973eb707e443f62e80ef2f4ba3d4f72c782b814326f3d27d2a09ae7a9d86d0230954a2ea6e4da3d7c24861aa9069424cd8466aea96c38cf5bbd9ba924b9546e883f54c44fb84d751c9ea56189bb1511fbf325c0f887c3ea0d9fce75e30333604c550fbc3298dfcf6be0274bd5db4ce40089742ddc19d8920328e128a", 0x1, 0x1}, {0x8, 0xb5, &(0x7f0000001300)="cf7fdc57dd9536391e5c031736767e897cf601247a9240098d680ed78386881f50fe7cdbb98a2c9e77282bce82b5919f7a8e5cd893e9856166e781ab6f0b5885f9e3555d750852697f9b0f62e719d093d516adaf09e34eb8ed930ee2e0def799f6f7484ba9341675b54b963e27243a250aab1ad9cd8dfc799497b52a1f977b801406f6051c703338ff7b98c760b4ed62a89506be382d363ba1ad90c53737b065d426e674140678f9920f5e4307067130c37511259f", 0x1, 0x1}, {0x0, 0xae, &(0x7f00000013c0)="af21ba8f22e6f989180fea1751b69e86e60d28de444200d36e13bf5dedc5bcc4d8adbd7eb1feeeeca13451555970ebbb6683d511c3851e01271a8074c9272851358b43cff574dfb8ec14b59cb7bec8fd168e9010e430688d204aeeba66ced19ec7392428608d82acd6452beb5300f4b06d795edfc28c06053d3d56cc3460e8d5456c3a03942b2ae2a87a59245519aea0393a2ddea80db3eb3727c75f69c5424c3876efbf5da11840b3561052112f"}, {0x7, 0xcb, &(0x7f0000001480)="458a646a22f9e1cbc73a2371e359d65d71485de5fbcfc5b4db72c4e431ca6c4dd89b1254ddbcd12e61c8676d146d30d1e104b6d4c477308f291ddff8d866605cec8b6434c7988f143452cc57968b73a8a8110f45edd8c27365dc280a073e36ba25adcafe118f6b0437157dfd78c239fb7396dfce2c4fa7edfea2c5aee996fce6c3b33793acedbfa7871213bc01d412c05f6e10d52ad887ca7a4c3181d66ace38690fe7bd49eb9f99606e08671c314dea9a04d6631734e752ee8a786ad9bae94808ce34b905bc3ca15f1526", 0x1, 0xe475663a936a3cf5}]}) setsockopt$packet_buf(r5, 0x107, 0x5, &(0x7f0000001680)="799bc63c7561518e0a39ef2bfc06a48d42b57e5841839f281e1e4def8360c84d72aa2eca6853bab2cfbd6637644f60c43e5adeb4c49f83fb88a4f5a296a9653c44a84564ad6327192caeebeb3a2c7c2667450333fe710b76c658f131412d26ca5f7164d2179f799fae2d8078", 0x6c) sendto$inet(r1, &(0x7f0000001700)="c1e4e6f8354d301895fd4cb5aede9760e2e8aae54625e2b64c42aacb201a5a72f8e8521e342fa5c678c53c6db9f142f96f0d1d328fb9fa6dc40364406ceebb84d6eff6f5e5272fe29933dd1c267a1f13a65edc832096e6e640da2cadbc2e145933c435b78e1680c2bf603d41b84019076dfd9979b82ac8b187b93285b814e8e76b2f861bc681577ca23a4533506f17132808b1f603a1e10aab1850e1f227c961453f78b34e0bbe92aa927ff3d42476e387fd638a88f3178bf22f1a2487eebe6c695309f793160d5c13b075", 0xcb, 0x2000c014, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000001800)={{0x3c, @broadcast, 0x4e24, 0x1, 'lc\x00', 0x20, 0x1, 0x62}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4e22, 0x10000, 0x2ee2, 0x7ff, 0xffff}}, 0x44) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001880)={0x9, {{0x2, 0x4e23, @remote}}}, 0x88) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000001d40)={0x19a, 0x3, &(0x7f0000001940)="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"}) r7 = openat$cgroup_pressure(r5, &(0x7f0000001d80)='cpu.pressure\x00', 0x2, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000001dc0)=0x1ff00000000000) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001e00)=0x1, 0x4) [ 71.444536] audit: type=1400 audit(1664556078.900:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:41:18 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x401, 0x144) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8800) recvmmsg$unix(r0, &(0x7f000000cb40)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x8, &(0x7f0000003540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000003640)=@abs, 0x6e, &(0x7f0000005780)=[{&(0x7f00000036c0)=""/5, 0x5}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/123, 0x7b}], 0x4, &(0x7f00000057c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000005900)=@abs, 0x6e, &(0x7f0000005e80)=[{&(0x7f0000005980)=""/135, 0x87}, {&(0x7f0000005a40)=""/122, 0x7a}, {&(0x7f0000005ac0)=""/111, 0x6f}, {&(0x7f0000005b40)=""/62, 0x3e}, {&(0x7f0000005b80)=""/251, 0xfb}, {&(0x7f0000005c80)=""/210, 0xd2}, {&(0x7f0000005d80)=""/200, 0xc8}], 0x7, &(0x7f0000005f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000005f80), 0x6e, &(0x7f0000006240)=[{&(0x7f0000006000)}, {&(0x7f0000006040)=""/63, 0x3f}, {&(0x7f0000006080)=""/111, 0x6f}, {&(0x7f0000006100)=""/87, 0x57}, {&(0x7f0000006180)=""/178, 0xb2}], 0x5, &(0x7f00000062c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000006400), 0x6e, &(0x7f0000008700)=[{&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/53, 0x35}, {&(0x7f00000074c0)=""/4096, 0x1000}, {&(0x7f00000084c0)=""/199, 0xc7}, {&(0x7f00000085c0)=""/56, 0x38}, {&(0x7f0000008600)=""/216, 0xd8}], 0x6, &(0x7f0000008780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f000000ab00)=[{&(0x7f0000008800)=""/90, 0x5a}, {&(0x7f0000008880)=""/4096, 0x1000}, {&(0x7f0000009880)=""/91, 0x5b}, {&(0x7f0000009900)=""/4096, 0x1000}, {&(0x7f000000a900)=""/95, 0x5f}, {&(0x7f000000a980)=""/122, 0x7a}, {&(0x7f000000aa00)=""/238, 0xee}], 0x7, &(0x7f000000ab80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f000000ac40), 0x6e, &(0x7f000000ad80)=[{&(0x7f000000acc0)=""/147, 0x93}], 0x1, &(0x7f000000adc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f000000aec0)=@abs, 0x6e, &(0x7f000000c140)=[{&(0x7f000000af40)=""/4096, 0x1000}, {&(0x7f000000bf40)=""/220, 0xdc}, {&(0x7f000000c040)=""/229, 0xe5}], 0x3}}, {{&(0x7f000000c180), 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c200)=""/209, 0xd1}, {&(0x7f000000c300)=""/191, 0xbf}], 0x2, &(0x7f000000c400)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f000000c500)=@abs, 0x6e, &(0x7f000000cac0)=[{&(0x7f000000c580)=""/136, 0x88}, {&(0x7f000000c640)=""/142, 0x8e}, {&(0x7f000000c700)=""/202, 0xca}, {&(0x7f000000c800)=""/195, 0xc3}, {&(0x7f000000c900)=""/29, 0x1d}, {&(0x7f000000c940)=""/88, 0x58}, {&(0x7f000000c9c0)=""/204, 0xcc}], 0x7}}], 0xa, 0x21, &(0x7f000000cdc0)={0x0, 0x989680}) chown(&(0x7f0000000140)='./file0/file0\x00', r8, 0xee00) r13 = openat$cgroup_freezer_state(r7, &(0x7f000000ce00), 0x2, 0x0) fcntl$F_SET_RW_HINT(r13, 0x40c, &(0x7f000000ce40)=0x4) openat(r10, &(0x7f000000ce80)='./file0\x00', 0x141001, 0xb24de52290d8dded) r14 = syz_open_procfs(r1, &(0x7f000000cec0)='attr\x00') fstat(0xffffffffffffffff, &(0x7f000000cf00)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f000000cf80)='./file0/../file0\x00', 0x400, 0x40, &(0x7f000000cfc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r14, 0xc018937b, &(0x7f000000d0c0)={{0x1, 0x1, 0x18, r12, {r15, r16}}, './file0/file0\x00'}) r17 = openat$sndtimer(0xffffffffffffff9c, &(0x7f000000d100), 0x2000) fcntl$addseals(r17, 0x409, 0x0) r18 = openat(r4, &(0x7f000000d140)='./file0/../file0\x00', 0x240104, 0x80) sendmsg$TIPC_NL_LINK_GET(r18, &(0x7f000000d280)={&(0x7f000000d180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000d240)={&(0x7f000000d1c0)={0x7c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3de}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x168}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf353}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) sendfile(r11, r5, &(0x7f000000d2c0)=0x4, 0x3) rmdir(&(0x7f000000d300)='./file0/../file0\x00') close_range(r6, r9, 0x2) r19 = syz_open_dev$hidraw(&(0x7f000000d340), 0x3, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f000000d5c0)={{0x1, 0x1, 0x18, r19}, './file0/file0\x00'}) 16:41:18 executing program 6: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x7, 0x1, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x8000, 0x1f, 0x6}}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x800, 0x0, 0x80, 0xd00, 0x9, 0x200000, r0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3e, r0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r0, 0x2f, 0x0, 0xfd, 0x9, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x4, 0x2}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x5, 0x6e4, 0x7e, 0x100, 0x8, 0x1240220, r1}) r2 = syz_open_dev$vcsa(&(0x7f0000000400), 0x184d, 0x90000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', r1, 0x2f, 0x1f, 0x5, 0x7c, 0x20, @loopback, @mcast1, 0x10, 0x80, 0xcd0, 0x7fff}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @local, 0x190000, 0x0, 0x4, 0x0, 0x7, 0x84060154, r3}) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x6206de57e8b21b59, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x24000041) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000700)={@private0, 0x7, 0x2, 0x1, 0x8, 0x8, 0x20}, &(0x7f0000000740)=0x20) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xe8) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000008c0)={@local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0xdd1c, 0x9, 0x100, 0x7, 0x1720000, r6}) init_module(&(0x7f0000000940)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, &(0x7f0000000980)='\x00') getsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f00000009c0)=""/4096, &(0x7f00000019c0)=0x1000) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000001a00)={0x33, 0x4, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @hao={0xc9, 0x10, @local}, @enc_lim]}, 0x30) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000001a40)={@empty, @empty, @mcast1, 0x2, 0x200, 0x1, 0x100, 0x78f, 0x81080001, r3}) 16:41:18 executing program 7: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x1, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffff8b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x4040000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0xd}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x8801}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x7]}, 0x8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x502000, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x48}, @void, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x48}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x51}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x14}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000480), &(0x7f00000004c0)={'L-', 0x8000000000000}, 0x16, 0x2) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xff}, {0x7}, {0x8, 0x1}, {0x1, 0x7}, {0xce, 0x3}, {0xff, 0x3}, {0x5, 0x5}, {0x3, 0x7}, {0x80, 0x6}, {0xff}], "80e7482155c16690"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8085}, 0x8804) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000600)={0x1, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x170, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x24020150}, 0x4000800) r5 = accept4(r4, &(0x7f0000000880)=@l2={0x1f, 0x0, @none}, &(0x7f0000000900)=0x80, 0x80800) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4604d) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r6, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x46}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x184, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x164, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6ed}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9093}, @NL802154_DEVKEY_ATTR_ID={0xbc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x64, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x184}}, 0x4048810) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r2) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xb4, r8, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1740}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000044}, 0x8050) [ 72.663549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.665639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.667168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.670324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.672285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.673841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.678800] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.710675] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.712795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.718794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.721933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.726643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.732633] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.735472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.736810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.738612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.740992] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.744914] Bluetooth: hci2: HCI_REQ-0x0c1a [ 72.753605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.754949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.757102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.758387] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.759814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.766909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.769160] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.770737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.775479] Bluetooth: hci3: HCI_REQ-0x0c1a [ 72.782428] Bluetooth: hci1: HCI_REQ-0x0c1a [ 72.793591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.795170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.796905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.800238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.802078] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.803562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.808222] Bluetooth: hci4: HCI_REQ-0x0c1a [ 72.866127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.868982] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.871483] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.874785] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.877722] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.879186] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.885326] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.741874] Bluetooth: hci0: command 0x0409 tx timeout [ 74.805856] Bluetooth: hci3: command 0x0409 tx timeout [ 74.805884] Bluetooth: hci2: command 0x0409 tx timeout [ 74.807511] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 74.808316] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 74.869399] Bluetooth: hci1: command 0x0409 tx timeout [ 74.870060] Bluetooth: hci4: command 0x0409 tx timeout [ 74.934337] Bluetooth: hci7: command 0x0409 tx timeout [ 76.789435] Bluetooth: hci0: command 0x041b tx timeout [ 76.853417] Bluetooth: hci3: command 0x041b tx timeout [ 76.854394] Bluetooth: hci2: command 0x041b tx timeout [ 76.918356] Bluetooth: hci4: command 0x041b tx timeout [ 76.918825] Bluetooth: hci1: command 0x041b tx timeout [ 76.982342] Bluetooth: hci7: command 0x041b tx timeout [ 78.009741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.021259] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.042048] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.062958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.085459] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.087138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.112996] Bluetooth: hci5: HCI_REQ-0x0c1a [ 78.838344] Bluetooth: hci0: command 0x040f tx timeout [ 78.902336] Bluetooth: hci2: command 0x040f tx timeout [ 78.902747] Bluetooth: hci3: command 0x040f tx timeout [ 78.966354] Bluetooth: hci1: command 0x040f tx timeout [ 78.966815] Bluetooth: hci4: command 0x040f tx timeout [ 79.030335] Bluetooth: hci7: command 0x040f tx timeout [ 79.990351] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 80.182369] Bluetooth: hci5: command 0x0409 tx timeout [ 80.885334] Bluetooth: hci0: command 0x0419 tx timeout [ 80.950351] Bluetooth: hci3: command 0x0419 tx timeout [ 80.950765] Bluetooth: hci2: command 0x0419 tx timeout [ 81.013385] Bluetooth: hci4: command 0x0419 tx timeout [ 81.013787] Bluetooth: hci1: command 0x0419 tx timeout [ 81.077332] Bluetooth: hci7: command 0x0419 tx timeout [ 82.230346] Bluetooth: hci5: command 0x041b tx timeout [ 82.674918] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.677169] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.679411] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.690448] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.696698] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.698902] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.705356] Bluetooth: hci6: HCI_REQ-0x0c1a [ 84.278332] Bluetooth: hci5: command 0x040f tx timeout [ 84.789367] Bluetooth: hci6: command 0x0409 tx timeout [ 86.325377] Bluetooth: hci5: command 0x0419 tx timeout [ 86.838369] Bluetooth: hci6: command 0x041b tx timeout [ 88.885374] Bluetooth: hci6: command 0x040f tx timeout [ 90.934393] Bluetooth: hci6: command 0x0419 tx timeout 16:42:13 executing program 7: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f00000005c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)=""/171, 0xab}], 0x1}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000580)=""/46, 0x2e}, {&(0x7f00000005c0)=""/141, 0x8d}, {&(0x7f0000000680)=""/147, 0x93}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x170}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000980)=""/42, 0x2a}, {&(0x7f00000009c0)=""/52, 0x34}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/132, 0x84}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/184, 0xb8}], 0x7, &(0x7f0000001cc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001d80)=""/225, 0xe1}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/21, 0x15}, {&(0x7f0000002ec0)=""/209, 0xd1}, {&(0x7f0000002fc0)=""/1, 0x1}], 0x5, &(0x7f0000003080)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000003100), 0x6e, &(0x7f0000003340)=[{&(0x7f0000003180)=""/162, 0xa2}, {&(0x7f0000003240)=""/237, 0xed}], 0x2, &(0x7f0000003380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000034c0)=""/35, 0x23}, {&(0x7f0000003500)=""/100, 0x64}, {&(0x7f0000003580)=""/163, 0xa3}, {&(0x7f0000003640)=""/218, 0xda}, {&(0x7f0000003740)=""/225, 0xe1}, {&(0x7f0000003840)=""/116, 0x74}], 0x6, &(0x7f0000003940)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}], 0x6, 0x40000040, &(0x7f0000003bc0)) r7 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$hiddev(r8, &(0x7f0000000c00)=""/4082, 0xfffffdef) clone3(&(0x7f0000003c40)={0x83000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x4}, &(0x7f0000000140)=""/247, 0xf7, &(0x7f0000000240)=""/123, &(0x7f0000003c00)=[r0, r5, r6, r7], 0x4, {r8}}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x6398a5787ab7d03e, 0x0) [ 126.506045] Bluetooth: MGMT ver 1.22 16:42:14 executing program 7: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f00000005c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)=""/171, 0xab}], 0x1}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000580)=""/46, 0x2e}, {&(0x7f00000005c0)=""/141, 0x8d}, {&(0x7f0000000680)=""/147, 0x93}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x170}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000980)=""/42, 0x2a}, {&(0x7f00000009c0)=""/52, 0x34}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/132, 0x84}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/184, 0xb8}], 0x7, &(0x7f0000001cc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001d80)=""/225, 0xe1}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/21, 0x15}, {&(0x7f0000002ec0)=""/209, 0xd1}, {&(0x7f0000002fc0)=""/1, 0x1}], 0x5, &(0x7f0000003080)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000003100), 0x6e, &(0x7f0000003340)=[{&(0x7f0000003180)=""/162, 0xa2}, {&(0x7f0000003240)=""/237, 0xed}], 0x2, &(0x7f0000003380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000034c0)=""/35, 0x23}, {&(0x7f0000003500)=""/100, 0x64}, {&(0x7f0000003580)=""/163, 0xa3}, {&(0x7f0000003640)=""/218, 0xda}, {&(0x7f0000003740)=""/225, 0xe1}, {&(0x7f0000003840)=""/116, 0x74}], 0x6, &(0x7f0000003940)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}], 0x6, 0x40000040, &(0x7f0000003bc0)) r7 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$hiddev(r8, &(0x7f0000000c00)=""/4082, 0xfffffdef) clone3(&(0x7f0000003c40)={0x83000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x4}, &(0x7f0000000140)=""/247, 0xf7, &(0x7f0000000240)=""/123, &(0x7f0000003c00)=[r0, r5, r6, r7], 0x4, {r8}}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x6398a5787ab7d03e, 0x0) 16:42:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x40, 0x6, 0x5, 0x0, 0x5, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000000100), 0xd}, 0x2000, 0x45c1, 0x7, 0x0, 0x9, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x100000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) r0 = getpgrp(0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='0'], 0x6) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) waitid(0x2, r2, 0x0, 0x40000000, &(0x7f0000000300)) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r3, 0x3) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000000040)=""/161, 0xa1) [ 128.221860] audit: type=1400 audit(1664556135.677:7): avc: denied { open } for pid=3774 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.223364] audit: type=1400 audit(1664556135.677:8): avc: denied { kernel } for pid=3774 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.238508] ------------[ cut here ]------------ [ 128.238527] [ 128.238529] ====================================================== [ 128.238533] WARNING: possible circular locking dependency detected [ 128.238537] 6.0.0-rc7-next-20220929 #1 Not tainted [ 128.238543] ------------------------------------------------------ [ 128.238546] syz-executor.3/3775 is trying to acquire lock: [ 128.238552] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 128.238591] [ 128.238591] but task is already holding lock: [ 128.238593] ffff88801b504020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.238620] [ 128.238620] which lock already depends on the new lock. [ 128.238620] [ 128.238623] [ 128.238623] the existing dependency chain (in reverse order) is: [ 128.238626] [ 128.238626] -> #3 (&ctx->lock){....}-{2:2}: [ 128.238640] _raw_spin_lock+0x2a/0x40 [ 128.238650] __perf_event_task_sched_out+0x53b/0x18d0 [ 128.238661] __schedule+0xedd/0x2470 [ 128.238675] schedule+0xda/0x1b0 [ 128.238688] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.238701] syscall_exit_to_user_mode+0x19/0x40 [ 128.238713] do_syscall_64+0x48/0x90 [ 128.238730] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.238743] [ 128.238743] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 128.238756] _raw_spin_lock_nested+0x30/0x40 [ 128.238767] raw_spin_rq_lock_nested+0x1e/0x30 [ 128.238779] task_fork_fair+0x63/0x4d0 [ 128.238795] sched_cgroup_fork+0x3d0/0x540 [ 128.238809] copy_process+0x4183/0x6e20 [ 128.238820] kernel_clone+0xe7/0x890 [ 128.238829] user_mode_thread+0xad/0xf0 [ 128.238839] rest_init+0x24/0x250 [ 128.238851] arch_call_rest_init+0xf/0x14 [ 128.238868] start_kernel+0x4c6/0x4eb [ 128.238882] secondary_startup_64_no_verify+0xe0/0xeb [ 128.238896] [ 128.238896] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 128.238909] _raw_spin_lock_irqsave+0x39/0x60 [ 128.238920] try_to_wake_up+0xab/0x1930 [ 128.238933] up+0x75/0xb0 [ 128.238947] __up_console_sem+0x6e/0x80 [ 128.238962] console_unlock+0x46a/0x590 [ 128.238978] vt_ioctl+0x2822/0x2ca0 [ 128.238990] tty_ioctl+0x785/0x16b0 [ 128.239000] __x64_sys_ioctl+0x19a/0x210 [ 128.239014] do_syscall_64+0x3b/0x90 [ 128.239030] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.239043] [ 128.239043] -> #0 ((console_sem).lock){....}-{2:2}: [ 128.239056] __lock_acquire+0x2a02/0x5e70 [ 128.239073] lock_acquire+0x1a2/0x530 [ 128.239089] _raw_spin_lock_irqsave+0x39/0x60 [ 128.239099] down_trylock+0xe/0x70 [ 128.239114] __down_trylock_console_sem+0x3b/0xd0 [ 128.239132] vprintk_emit+0x16b/0x560 [ 128.239148] vprintk+0x84/0xa0 [ 128.239164] _printk+0xba/0xf1 [ 128.239176] report_bug.cold+0x72/0xab [ 128.239191] handle_bug+0x3c/0x70 [ 128.239208] exc_invalid_op+0x14/0x50 [ 128.239224] asm_exc_invalid_op+0x16/0x20 [ 128.239236] group_sched_out.part.0+0x2c7/0x460 [ 128.239253] ctx_sched_out+0x8f1/0xc10 [ 128.239270] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.239281] __schedule+0xedd/0x2470 [ 128.239294] schedule+0xda/0x1b0 [ 128.239307] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.239318] syscall_exit_to_user_mode+0x19/0x40 [ 128.239330] do_syscall_64+0x48/0x90 [ 128.239347] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.239359] [ 128.239359] other info that might help us debug this: [ 128.239359] [ 128.239362] Chain exists of: [ 128.239362] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 128.239362] [ 128.239377] Possible unsafe locking scenario: [ 128.239377] [ 128.239379] CPU0 CPU1 [ 128.239381] ---- ---- [ 128.239383] lock(&ctx->lock); [ 128.239389] lock(&rq->__lock); [ 128.239395] lock(&ctx->lock); [ 128.239401] lock((console_sem).lock); [ 128.239407] [ 128.239407] *** DEADLOCK *** [ 128.239407] [ 128.239409] 2 locks held by syz-executor.3/3775: [ 128.239415] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 128.239444] #1: ffff88801b504020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.239471] [ 128.239471] stack backtrace: [ 128.239473] CPU: 1 PID: 3775 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220929 #1 [ 128.239486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.239494] Call Trace: [ 128.239497] [ 128.239501] dump_stack_lvl+0x8b/0xb3 [ 128.239519] check_noncircular+0x263/0x2e0 [ 128.239535] ? format_decode+0x26c/0xb50 [ 128.239551] ? print_circular_bug+0x450/0x450 [ 128.239568] ? enable_ptr_key_workfn+0x20/0x20 [ 128.239585] ? format_decode+0x26c/0xb50 [ 128.239602] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 128.239620] __lock_acquire+0x2a02/0x5e70 [ 128.239641] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.239664] lock_acquire+0x1a2/0x530 [ 128.239680] ? down_trylock+0xe/0x70 [ 128.239697] ? lock_release+0x750/0x750 [ 128.239718] ? vprintk+0x84/0xa0 [ 128.239735] _raw_spin_lock_irqsave+0x39/0x60 [ 128.239747] ? down_trylock+0xe/0x70 [ 128.239763] down_trylock+0xe/0x70 [ 128.239778] ? vprintk+0x84/0xa0 [ 128.239795] __down_trylock_console_sem+0x3b/0xd0 [ 128.239812] vprintk_emit+0x16b/0x560 [ 128.239831] vprintk+0x84/0xa0 [ 128.239848] _printk+0xba/0xf1 [ 128.239860] ? record_print_text.cold+0x16/0x16 [ 128.239875] ? report_bug.cold+0x66/0xab [ 128.239893] ? group_sched_out.part.0+0x2c7/0x460 [ 128.239911] report_bug.cold+0x72/0xab [ 128.239930] handle_bug+0x3c/0x70 [ 128.239947] exc_invalid_op+0x14/0x50 [ 128.239965] asm_exc_invalid_op+0x16/0x20 [ 128.239978] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.239999] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.240010] RSP: 0018:ffff888017de7c48 EFLAGS: 00010006 [ 128.240019] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.240027] RDX: ffff888015e60000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 128.240034] RBP: ffff88803f8f0000 R08: 0000000000000005 R09: 0000000000000001 [ 128.240042] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88801b504000 [ 128.240049] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 128.240060] ? group_sched_out.part.0+0x2c7/0x460 [ 128.240080] ? group_sched_out.part.0+0x2c7/0x460 [ 128.240100] ctx_sched_out+0x8f1/0xc10 [ 128.240119] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.240134] ? lock_is_held_type+0xd7/0x130 [ 128.240147] ? __perf_cgroup_move+0x160/0x160 [ 128.240158] ? set_next_entity+0x304/0x550 [ 128.240175] ? update_curr+0x267/0x740 [ 128.240194] ? lock_is_held_type+0xd7/0x130 [ 128.240208] __schedule+0xedd/0x2470 [ 128.240225] ? io_schedule_timeout+0x150/0x150 [ 128.240241] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.240261] schedule+0xda/0x1b0 [ 128.240276] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.240288] syscall_exit_to_user_mode+0x19/0x40 [ 128.240302] do_syscall_64+0x48/0x90 [ 128.240320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.240333] RIP: 0033:0x7f04a6290b19 [ 128.240341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.240352] RSP: 002b:00007f04a3806218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.240363] RAX: 0000000000000001 RBX: 00007f04a63a3f68 RCX: 00007f04a6290b19 [ 128.240370] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f04a63a3f6c [ 128.240377] RBP: 00007f04a63a3f60 R08: 000000000000000e R09: 0000000000000000 [ 128.240384] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f04a63a3f6c [ 128.240392] R13: 00007ffc4f86602f R14: 00007f04a3806300 R15: 0000000000022000 [ 128.240404] [ 128.295916] WARNING: CPU: 1 PID: 3775 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 128.296578] Modules linked in: [ 128.296811] CPU: 1 PID: 3775 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220929 #1 [ 128.297382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.298161] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.298551] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.299816] RSP: 0018:ffff888017de7c48 EFLAGS: 00010006 [ 128.300197] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.300698] RDX: ffff888015e60000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 128.301205] RBP: ffff88803f8f0000 R08: 0000000000000005 R09: 0000000000000001 [ 128.301720] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88801b504000 [ 128.302222] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 128.302727] FS: 00007f04a3806700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 128.303293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.303704] CR2: 00007fe9ab9c61f0 CR3: 000000003f3b6000 CR4: 0000000000350ee0 [ 128.304204] Call Trace: [ 128.304393] [ 128.304559] ctx_sched_out+0x8f1/0xc10 [ 128.304858] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.305228] ? lock_is_held_type+0xd7/0x130 [ 128.305548] ? __perf_cgroup_move+0x160/0x160 [ 128.305869] ? set_next_entity+0x304/0x550 [ 128.306193] ? update_curr+0x267/0x740 [ 128.306497] ? lock_is_held_type+0xd7/0x130 [ 128.306826] __schedule+0xedd/0x2470 [ 128.307116] ? io_schedule_timeout+0x150/0x150 [ 128.307467] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.307836] schedule+0xda/0x1b0 [ 128.308102] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.308469] syscall_exit_to_user_mode+0x19/0x40 [ 128.308828] do_syscall_64+0x48/0x90 [ 128.309115] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.309534] RIP: 0033:0x7f04a6290b19 [ 128.309817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.311166] RSP: 002b:00007f04a3806218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.311730] RAX: 0000000000000001 RBX: 00007f04a63a3f68 RCX: 00007f04a6290b19 [ 128.312259] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f04a63a3f6c [ 128.312798] RBP: 00007f04a63a3f60 R08: 000000000000000e R09: 0000000000000000 [ 128.313336] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f04a63a3f6c [ 128.313866] R13: 00007ffc4f86602f R14: 00007f04a3806300 R15: 0000000000022000 [ 128.314407] [ 128.314586] irq event stamp: 664 [ 128.314843] hardirqs last enabled at (663): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 128.315541] hardirqs last disabled at (664): [] __schedule+0x1225/0x2470 [ 128.316161] softirqs last enabled at (652): [] __irq_exit_rcu+0x11b/0x180 [ 128.316800] softirqs last disabled at (643): [] __irq_exit_rcu+0x11b/0x180 [ 128.317436] ---[ end trace 0000000000000000 ]--- 16:42:15 executing program 7: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f00000005c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)=""/171, 0xab}], 0x1}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000580)=""/46, 0x2e}, {&(0x7f00000005c0)=""/141, 0x8d}, {&(0x7f0000000680)=""/147, 0x93}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x170}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000980)=""/42, 0x2a}, {&(0x7f00000009c0)=""/52, 0x34}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/132, 0x84}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/184, 0xb8}], 0x7, &(0x7f0000001cc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001d80)=""/225, 0xe1}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/21, 0x15}, {&(0x7f0000002ec0)=""/209, 0xd1}, {&(0x7f0000002fc0)=""/1, 0x1}], 0x5, &(0x7f0000003080)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000003100), 0x6e, &(0x7f0000003340)=[{&(0x7f0000003180)=""/162, 0xa2}, {&(0x7f0000003240)=""/237, 0xed}], 0x2, &(0x7f0000003380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000034c0)=""/35, 0x23}, {&(0x7f0000003500)=""/100, 0x64}, {&(0x7f0000003580)=""/163, 0xa3}, {&(0x7f0000003640)=""/218, 0xda}, {&(0x7f0000003740)=""/225, 0xe1}, {&(0x7f0000003840)=""/116, 0x74}], 0x6, &(0x7f0000003940)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}], 0x6, 0x40000040, &(0x7f0000003bc0)) r7 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$hiddev(r8, &(0x7f0000000c00)=""/4082, 0xfffffdef) clone3(&(0x7f0000003c40)={0x83000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x4}, &(0x7f0000000140)=""/247, 0xf7, &(0x7f0000000240)=""/123, &(0x7f0000003c00)=[r0, r5, r6, r7], 0x4, {r8}}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x6398a5787ab7d03e, 0x0) [ 128.567215] audit: type=1400 audit(1664556136.023:9): avc: denied { write } for pid=3774 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 16:42:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x40, 0x6, 0x5, 0x0, 0x5, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000000100), 0xd}, 0x2000, 0x45c1, 0x7, 0x0, 0x9, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x100000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) r0 = getpgrp(0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='0'], 0x6) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) waitid(0x2, r2, 0x0, 0x40000000, &(0x7f0000000300)) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r3, 0x3) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000000040)=""/161, 0xa1) 16:42:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x40, 0x6, 0x5, 0x0, 0x5, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000000100), 0xd}, 0x2000, 0x45c1, 0x7, 0x0, 0x9, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x100000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) r0 = getpgrp(0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='0'], 0x6) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) waitid(0x2, r2, 0x0, 0x40000000, &(0x7f0000000300)) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r3, 0x3) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000000040)=""/161, 0xa1) 16:42:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x40, 0x6, 0x5, 0x0, 0x5, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000000100), 0xd}, 0x2000, 0x45c1, 0x7, 0x0, 0x9, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x100000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) r0 = getpgrp(0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='0'], 0x6) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) waitid(0x2, r2, 0x0, 0x40000000, &(0x7f0000000300)) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r3, 0x3) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000000040)=""/161, 0xa1) [ 128.955301] hrtimer: interrupt took 17923 ns 16:42:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x40, 0x6, 0x5, 0x0, 0x5, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000000100), 0xd}, 0x2000, 0x45c1, 0x7, 0x0, 0x9, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x100000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) r0 = getpgrp(0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='0'], 0x6) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r2], 0x2}, 0x58) waitid(0x2, r2, 0x0, 0x40000000, &(0x7f0000000300)) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r3, 0x3) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000000040)=""/161, 0xa1) [ 129.389450] audit: type=1400 audit(1664556136.846:10): avc: denied { create } for pid=3856 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 VM DIAGNOSIS: 16:42:15 Registers: info registers vcpu 0 RAX=1ffff11007eea488 RBX=800000002ebcf005 RCX=ffffffff8169103f RDX=ffff88803a7b5040 RSI=800000002ebcf005 RDI=0000000000000000 RBP=ffff88803f752440 RSP=ffff88803f8bf908 R8 =0000000000000004 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88803f8bfcf8 R13=800000002ebcf065 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff814609a4 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5488ba06f4 CR3=000000003ecc2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f5488baf470 00007f5488baef20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff888017de7690 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002e R11=0000000000000001 R12=000000000000002e R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f04a3806700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe9ab9c61f0 CR3=000000003f3b6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f04a63777c0 00007f04a63777c8 YMM02=0000000000000000 0000000000000000 00007f04a63777e0 00007f04a63777c0 YMM03=0000000000000000 0000000000000000 00007f04a63777c8 00007f04a63777c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000