Warning: Permanently added '[localhost]:29670' (ECDSA) to the list of known hosts. 2022/10/04 15:33:40 fuzzer started 2022/10/04 15:33:40 dialing manager at localhost:46847 syzkaller login: [ 36.947471] cgroup: Unknown subsys name 'net' [ 37.059588] cgroup: Unknown subsys name 'rlimit' 2022/10/04 15:33:54 syscalls: 2215 2022/10/04 15:33:54 code coverage: enabled 2022/10/04 15:33:54 comparison tracing: enabled 2022/10/04 15:33:54 extra coverage: enabled 2022/10/04 15:33:54 setuid sandbox: enabled 2022/10/04 15:33:54 namespace sandbox: enabled 2022/10/04 15:33:54 Android sandbox: enabled 2022/10/04 15:33:54 fault injection: enabled 2022/10/04 15:33:54 leak checking: enabled 2022/10/04 15:33:54 net packet injection: enabled 2022/10/04 15:33:54 net device setup: enabled 2022/10/04 15:33:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/04 15:33:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/04 15:33:54 USB emulation: enabled 2022/10/04 15:33:54 hci packet injection: enabled 2022/10/04 15:33:54 wifi device emulation: failed to parse kernel version (6.0.0-next-20221004����������������������������������������������) 2022/10/04 15:33:54 802.15.4 emulation: enabled 2022/10/04 15:33:54 fetching corpus: 50, signal 22532/24278 (executing program) 2022/10/04 15:33:54 fetching corpus: 100, signal 32402/35688 (executing program) 2022/10/04 15:33:54 fetching corpus: 150, signal 42493/47163 (executing program) 2022/10/04 15:33:54 fetching corpus: 200, signal 46330/52401 (executing program) 2022/10/04 15:33:54 fetching corpus: 250, signal 51554/58838 (executing program) 2022/10/04 15:33:54 fetching corpus: 300, signal 59428/67666 (executing program) 2022/10/04 15:33:54 fetching corpus: 350, signal 63247/72590 (executing program) 2022/10/04 15:33:54 fetching corpus: 400, signal 67059/77445 (executing program) 2022/10/04 15:33:55 fetching corpus: 450, signal 70606/81954 (executing program) 2022/10/04 15:33:55 fetching corpus: 500, signal 72764/85174 (executing program) 2022/10/04 15:33:55 fetching corpus: 550, signal 76802/89957 (executing program) 2022/10/04 15:33:55 fetching corpus: 600, signal 79598/93616 (executing program) 2022/10/04 15:33:55 fetching corpus: 650, signal 83863/98516 (executing program) 2022/10/04 15:33:55 fetching corpus: 700, signal 86436/101853 (executing program) 2022/10/04 15:33:55 fetching corpus: 750, signal 89444/105440 (executing program) 2022/10/04 15:33:55 fetching corpus: 800, signal 91425/108172 (executing program) 2022/10/04 15:33:56 fetching corpus: 850, signal 95035/112158 (executing program) 2022/10/04 15:33:56 fetching corpus: 900, signal 99024/116384 (executing program) 2022/10/04 15:33:56 fetching corpus: 950, signal 102319/120004 (executing program) 2022/10/04 15:33:56 fetching corpus: 1000, signal 103636/121992 (executing program) 2022/10/04 15:33:56 fetching corpus: 1050, signal 105885/124664 (executing program) 2022/10/04 15:33:56 fetching corpus: 1100, signal 110210/128944 (executing program) 2022/10/04 15:33:56 fetching corpus: 1150, signal 111829/131023 (executing program) 2022/10/04 15:33:56 fetching corpus: 1200, signal 114206/133598 (executing program) 2022/10/04 15:33:57 fetching corpus: 1250, signal 116720/136284 (executing program) 2022/10/04 15:33:57 fetching corpus: 1300, signal 118999/138778 (executing program) 2022/10/04 15:33:57 fetching corpus: 1350, signal 120928/140963 (executing program) 2022/10/04 15:33:57 fetching corpus: 1400, signal 122647/142912 (executing program) 2022/10/04 15:33:57 fetching corpus: 1450, signal 123676/144358 (executing program) 2022/10/04 15:33:57 fetching corpus: 1500, signal 125835/146575 (executing program) 2022/10/04 15:33:57 fetching corpus: 1550, signal 126938/148032 (executing program) 2022/10/04 15:33:57 fetching corpus: 1600, signal 130287/150990 (executing program) 2022/10/04 15:33:58 fetching corpus: 1650, signal 131610/152496 (executing program) 2022/10/04 15:33:58 fetching corpus: 1700, signal 132680/153851 (executing program) 2022/10/04 15:33:58 fetching corpus: 1750, signal 133498/155005 (executing program) 2022/10/04 15:33:58 fetching corpus: 1800, signal 135728/156926 (executing program) 2022/10/04 15:33:58 fetching corpus: 1850, signal 136635/158090 (executing program) 2022/10/04 15:33:58 fetching corpus: 1900, signal 138198/159574 (executing program) 2022/10/04 15:33:58 fetching corpus: 1950, signal 140087/161288 (executing program) 2022/10/04 15:33:58 fetching corpus: 2000, signal 141116/162399 (executing program) 2022/10/04 15:33:58 fetching corpus: 2050, signal 142655/163783 (executing program) 2022/10/04 15:33:59 fetching corpus: 2100, signal 143794/164968 (executing program) 2022/10/04 15:33:59 fetching corpus: 2150, signal 144956/166097 (executing program) 2022/10/04 15:33:59 fetching corpus: 2200, signal 145943/167133 (executing program) 2022/10/04 15:33:59 fetching corpus: 2250, signal 146783/168066 (executing program) 2022/10/04 15:33:59 fetching corpus: 2300, signal 148494/169427 (executing program) 2022/10/04 15:33:59 fetching corpus: 2350, signal 150189/170712 (executing program) 2022/10/04 15:33:59 fetching corpus: 2400, signal 151344/171755 (executing program) 2022/10/04 15:33:59 fetching corpus: 2450, signal 152103/172559 (executing program) 2022/10/04 15:34:00 fetching corpus: 2500, signal 153233/173543 (executing program) 2022/10/04 15:34:00 fetching corpus: 2550, signal 154198/174330 (executing program) 2022/10/04 15:34:00 fetching corpus: 2600, signal 154905/175049 (executing program) 2022/10/04 15:34:00 fetching corpus: 2650, signal 155831/175864 (executing program) 2022/10/04 15:34:00 fetching corpus: 2700, signal 156874/176702 (executing program) 2022/10/04 15:34:00 fetching corpus: 2750, signal 157532/177325 (executing program) 2022/10/04 15:34:00 fetching corpus: 2800, signal 158487/178081 (executing program) 2022/10/04 15:34:00 fetching corpus: 2850, signal 159670/178917 (executing program) 2022/10/04 15:34:00 fetching corpus: 2900, signal 160551/179588 (executing program) 2022/10/04 15:34:01 fetching corpus: 2950, signal 161288/180174 (executing program) 2022/10/04 15:34:01 fetching corpus: 3000, signal 163162/181194 (executing program) 2022/10/04 15:34:01 fetching corpus: 3050, signal 163926/181776 (executing program) 2022/10/04 15:34:01 fetching corpus: 3100, signal 165009/182453 (executing program) 2022/10/04 15:34:01 fetching corpus: 3150, signal 165776/182986 (executing program) 2022/10/04 15:34:01 fetching corpus: 3200, signal 166737/183545 (executing program) 2022/10/04 15:34:01 fetching corpus: 3250, signal 167358/183982 (executing program) 2022/10/04 15:34:01 fetching corpus: 3300, signal 168050/184446 (executing program) 2022/10/04 15:34:02 fetching corpus: 3350, signal 169109/185146 (executing program) 2022/10/04 15:34:02 fetching corpus: 3400, signal 169945/185599 (executing program) 2022/10/04 15:34:02 fetching corpus: 3450, signal 170414/185963 (executing program) 2022/10/04 15:34:02 fetching corpus: 3500, signal 170950/186352 (executing program) 2022/10/04 15:34:02 fetching corpus: 3550, signal 171848/186774 (executing program) 2022/10/04 15:34:02 fetching corpus: 3600, signal 172725/187194 (executing program) 2022/10/04 15:34:02 fetching corpus: 3650, signal 173729/187631 (executing program) 2022/10/04 15:34:02 fetching corpus: 3700, signal 174610/188019 (executing program) 2022/10/04 15:34:03 fetching corpus: 3750, signal 175286/188359 (executing program) 2022/10/04 15:34:03 fetching corpus: 3800, signal 176112/188691 (executing program) 2022/10/04 15:34:03 fetching corpus: 3850, signal 176817/188976 (executing program) 2022/10/04 15:34:03 fetching corpus: 3900, signal 177515/189264 (executing program) 2022/10/04 15:34:03 fetching corpus: 3950, signal 178303/189587 (executing program) 2022/10/04 15:34:03 fetching corpus: 4000, signal 179025/189860 (executing program) 2022/10/04 15:34:03 fetching corpus: 4050, signal 179307/190057 (executing program) 2022/10/04 15:34:03 fetching corpus: 4100, signal 179889/190288 (executing program) 2022/10/04 15:34:03 fetching corpus: 4150, signal 180447/190492 (executing program) 2022/10/04 15:34:04 fetching corpus: 4200, signal 181132/190732 (executing program) 2022/10/04 15:34:04 fetching corpus: 4250, signal 181614/190906 (executing program) 2022/10/04 15:34:04 fetching corpus: 4300, signal 182800/191526 (executing program) 2022/10/04 15:34:04 fetching corpus: 4350, signal 183758/191716 (executing program) 2022/10/04 15:34:04 fetching corpus: 4400, signal 184318/191849 (executing program) 2022/10/04 15:34:04 fetching corpus: 4450, signal 185146/191979 (executing program) 2022/10/04 15:34:04 fetching corpus: 4500, signal 186027/192092 (executing program) 2022/10/04 15:34:04 fetching corpus: 4503, signal 186045/192156 (executing program) 2022/10/04 15:34:04 fetching corpus: 4503, signal 186045/192221 (executing program) 2022/10/04 15:34:04 fetching corpus: 4503, signal 186045/192275 (executing program) 2022/10/04 15:34:04 fetching corpus: 4503, signal 186045/192335 (executing program) 2022/10/04 15:34:04 fetching corpus: 4503, signal 186045/192364 (executing program) 2022/10/04 15:34:04 fetching corpus: 4503, signal 186045/192364 (executing program) 2022/10/04 15:34:07 starting 8 fuzzer processes 15:34:07 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000000040)={0x1014, 0x17, 0x2, 0x70bd29, 0x25dfdbfb, {0x10}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x24000001}, 0x804) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x80080, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000001140)) r1 = memfd_secret(0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001200)={{r0}, 0x0, 0x10, @inherit={0x70, &(0x7f0000001180)={0x1, 0x5, 0x81, 0x9, {0x1e, 0x5, 0x4, 0x9, 0x23a}, [0x400, 0x5, 0x2, 0x3, 0x3]}}, @devid}) syz_io_uring_setup(0x6534, &(0x7f0000002200)={0x0, 0x67d1, 0x10, 0x3, 0x2c7, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002280)=<r2=>0x0, &(0x7f00000022c0)) r3 = syz_io_uring_setup(0x24d4, &(0x7f0000002300)={0x0, 0xae03, 0x10, 0x1, 0x36b, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002380)=<r4=>0x0, &(0x7f00000023c0)=<r5=>0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002400), 0x12400, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000002580)=@IORING_OP_STATX={0x15, 0x3, 0x0, r6, &(0x7f0000002440), &(0x7f0000002540)='./file0\x00', 0x480, 0x800, 0x1}, 0x4) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) fsync(r7) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x810, r1, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000002700)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000025c0), &(0x7f00000026c0)='./file0\x00', 0x2, 0x4000, 0x0, {0x0, r9}}, 0x22) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000002740)) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xd, 0x40010, r3, 0x10000000) syz_io_uring_submit(0x0, r10, &(0x7f0000002980)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r1, 0x0, &(0x7f0000002940)='./file0\x00', 0x12, 0x10001, 0x23456, {0x0, r9}}, 0x6) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000002a00)={0x2, &(0x7f00000029c0)=[{0x1ff, 0x4}, {0x0, 0x6}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000002a40)={{0x1, 0x1, 0x18, <r11=>r6}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002a80)=""/165, 0xa5}, {&(0x7f0000002b40)=""/152, 0x98}, {&(0x7f0000002c00)=""/194, 0xc2}, {&(0x7f0000002d00)=""/239, 0xef}, {&(0x7f0000002e00)=""/48, 0x30}, {&(0x7f0000002e40)=""/41, 0x29}, {&(0x7f0000002e80)=""/100, 0x64}], 0x7) 15:34:07 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x428000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'}) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, @in_args={0x4}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}) r6 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0/file0\x00'}) chmod(&(0x7f0000000280)='./file1\x00', 0x1) link(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r7=>r3, {0x9}}, './file1\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x254, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x2c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x40}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffb}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xff}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}]}}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb84facc68039fc97}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_NAT_SRC={0x6c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x95}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x10001}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x81}]}}, @CTA_TUPLE_ORIG={0x4}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2f2a}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x24044090}, 0x40054) mount$9p_unix(&(0x7f00000006c0)='./file2\x00', &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x210000, &(0x7f0000000780)={'trans=unix,', {[{@aname={'aname', 0x3d, '/dev/autofs\x00'}}, {@aname={'aname', 0x3d, '\x00'}}, {@access_client}, {@access_any}, {@privport}, {@msize={'msize', 0x3d, 0x4}}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x53, 0x38, 0x31, 0x61, 0x62, 0x33, 0x38], 0x2d, [0x36, 0x65, 0x61, 0x37], 0x2d, [0x65, 0x63, 0x37, 0x33], 0x2d, [0x6b, 0x33, 0x32, 0x35], 0x2d, [0x30, 0x36, 0xbd7c6eb143555da7, 0x64, 0x37, 0x0, 0x30, 0x37]}}}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@uid_eq={'uid', 0x3d, r5}}]}}) mknod(&(0x7f0000000880)='./file0\x00', 0x100, 0x8000) stat(&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)) setxattr$trusted_overlay_redirect(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), &(0x7f0000000a00)='./file0/file0\x00', 0xe, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x10082, 0x202) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) rename(&(0x7f0000000ac0)='./file0/file0\x00', &(0x7f0000000b00)='./file2\x00') 15:34:07 executing program 2: ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000000)={0x6, 0xbc, 0x7, 0x20, 0x1, 0xbc}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000000100)={0x81, 0x1}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000180)={'syz0', "4a43523c34c72e5e42ef39c4765bf40e6de843668393d45854cc397247640c0c3fd2820d3acd567543f8505b306e6b6d6f232c484525363ef5725f97fb51d596"}, 0x44) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x0) r2 = openat(r1, &(0x7f0000000200)='./file0\x00', 0x180, 0x80) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000240)={0xa4}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) r3 = dup2(r0, r0) r4 = openat(r3, &(0x7f0000000340)='./file0\x00', 0x100, 0x22) ioctl$FITHAW(r4, 0xc0045878) ioctl$CDROM_SELECT_DISK(r1, 0x5322, 0x3) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000380)={{0x0, 0x100, 0x7, 0x1, 0xaa, 0x2, 0x2, 0x8, 0x8, 0x8, 0x0, 0x5, 0x3, 0x0, 0x9}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mount(&(0x7f0000000440)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='vfat\x00', 0x4, 0x0) renameat2(r3, &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x4) 15:34:07 executing program 3: r0 = geteuid() mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800030, &(0x7f0000000080)={[{}, {}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}) r1 = geteuid() r2 = gettid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x1, r0, 0xee00, r1, 0xffffffffffffffff, 0x84, 0x9}, 0x4bc, 0x100000000, 0x100000001, 0x8, r2, 0xffffffffffffffff, 0x101}) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x4000)=nil, 0x2000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={<r4=>0x0}, &(0x7f0000000340)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x2, 0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0x144, 0x7f}, 0x9ed8, 0x5, 0x0, 0x8, r4, r2, 0x7}) rt_tgsigqueueinfo(r4, r4, 0x3e, &(0x7f0000000400)={0x0, 0x9}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x7000) r5 = dup(0xffffffffffffffff) pidfd_send_signal(r5, 0x3d, &(0x7f0000000480)={0x41, 0x3, 0x1}, 0x0) getuid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r5, 0x8, 0x0, 0x8, 0x2}, 0x2) preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f0000000640)=""/214, 0xd6}], 0x2, 0xff, 0x10000) getpgid(r4) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0)={0x0, <r7=>0x0}, &(0x7f0000000800)=0xc) fsetxattr$system_posix_acl(r6, &(0x7f0000000780)='system.posix_acl_default\x00', &(0x7f0000000900)={{}, {0x1, 0x4}, [{0x2, 0x4, r7}, {0x2, 0x5, r1}, {0x2, 0x1, r1}, {0x2, 0x6}, {0x2, 0x5, r1}], {0x4, 0x6}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x4c, 0x2) 15:34:07 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000080)=0x80, 0x80800) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x420240, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x100000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x501c0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x46, &(0x7f0000000140)="b4ef8d08d8c5742e470cdc12e4a9a988543915100e947a3775664c397dd9246e46f376f81aef136ac4d662d1c6339abb5a4d63a6e53cbfa0de601918e357f9aa78eaa52268d6", 0x1a, 0x0, &(0x7f00000001c0)="88f2c5132c8d6babcfd239fbea7c87723b4de3d7393c20e08030"}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r4=>0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x1c}, r4}, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r5=>r1, {0x1000}}, './file0\x00'}) inotify_add_watch(r5, &(0x7f0000000340)='./file0\x00', 0x4000800) r6 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f00000003c0)={0x101, 0x7fffffff, 0x3, 0x20}, 0x10) r7 = accept$inet6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000440)=0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000480)={'syztnl2\x00', <r8=>r4, 0x700, 0x721, 0x0, 0x2824, {{0x2c, 0x4, 0x2, 0x4, 0xb0, 0x64, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@noop, @rr={0x7, 0x1b, 0x2b, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, @remote, @dev={0xac, 0x14, 0x14, 0x17}]}, @timestamp={0x44, 0x24, 0xa7, 0x0, 0x9, [0xff, 0x2, 0x6, 0x9, 0x87, 0x1ff, 0xbb, 0xffffffc1]}, @timestamp_addr={0x44, 0x34, 0xa5, 0x1, 0xf, [{@private=0xa010100, 0xf54d}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast2, 0x400}, {@broadcast, 0x1}, {@private=0xa010100, 0x5}]}, @timestamp_prespec={0x44, 0x24, 0xab, 0x3, 0x8, [{@multicast1, 0x65}, {@multicast2, 0x80000001}, {@empty, 0x3ff}, {@broadcast, 0x7}]}, @ra={0x94, 0x4}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f00000005c0)={@mcast2, r8}, 0x14) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x2000000a) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000640)) getpeername$unix(r0, &(0x7f0000000680), &(0x7f0000000700)=0x6e) flock(0xffffffffffffffff, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x2) [ 63.259151] audit: type=1400 audit(1664897647.381:6): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:34:07 executing program 5: prctl$PR_CAPBSET_READ(0x17, 0x6) prctl$PR_CAPBSET_READ(0x17, 0x17) prctl$PR_CAPBSET_READ(0x17, 0x3) prctl$PR_CAPBSET_READ(0x17, 0x1b) prctl$PR_CAPBSET_READ(0x17, 0x17) prctl$PR_CAPBSET_READ(0x17, 0x16) prctl$PR_CAPBSET_READ(0x17, 0x15) prctl$PR_CAPBSET_READ(0x17, 0x20) prctl$PR_CAPBSET_READ(0x17, 0xe) prctl$PR_CAPBSET_READ(0x17, 0x1f) prctl$PR_CAPBSET_READ(0x17, 0xe) prctl$PR_CAPBSET_READ(0x17, 0xf) prctl$PR_CAPBSET_READ(0x17, 0x12) prctl$PR_CAPBSET_READ(0x17, 0x18) prctl$PR_CAPBSET_READ(0x17, 0x12) prctl$PR_CAPBSET_READ(0x17, 0x1e) prctl$PR_CAPBSET_READ(0x17, 0x21) prctl$PR_CAPBSET_READ(0x17, 0x17) prctl$PR_CAPBSET_READ(0x17, 0x1d) prctl$PR_CAPBSET_READ(0x17, 0x20) 15:34:07 executing program 6: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) lseek(r0, 0x0, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x541, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) pipe2(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800) write$rfkill(r4, &(0x7f00000000c0)={0x3, 0x3, 0x1, 0x0, 0x1}, 0x8) fcntl$setpipe(r1, 0x407, 0x1f) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r5=>r4, {0x9}}, './file0\x00'}) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>r1, {0x33b4}}, './file0/file0\x00'}) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000180)={0x4, 0xffff, 0x4, 0x6, 0x2, [{0x9, 0x9, 0xe698, '\x00', 0x308}, {0xba2, 0x1, 0x10000, '\x00', 0x1400}]}) 15:34:07 executing program 7: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x711, 0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_1\x00', 0x10) r2 = accept4$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10, 0x80800) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000001c0)={0x32, @multicast1, 0x4e24, 0x1, 'sh\x00', 0x1, 0x0, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x3b, @loopback, 0x4e20, 0x0, 'lblcr\x00', 0xc, 0x21a, 0x53}, {@remote, 0x4e23, 0x1, 0x28d4, 0xfffffffd, 0x3}}, 0x44) r3 = dup2(r1, r0) setsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000280)="17df3e99247d724161fc8dc731c17dda8a448386db47f1fb0e1ef444866d21abff930800c83520c0cf4680057b0393e0cbc382670b779bb8a108baef8ba1608d5946f622ba851013a6aedd86991d17ba5dae1660b94e75919447e819edbb977f8c063eaa339b6e0996a751d22355a54d011aba571c192511b0825b8b3c0446bdb93099faa9bd1f4303168c9fa78dbc2b6daf74082f9556d182eeb8b6d3dcd0aacf72eefdbc071bb9f78d7e14b2c77c", 0xaf) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000340)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000007c0)={0x3, 0x2, 0x3, 0x0, 0x800}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r3) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x5020200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x802}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) r6 = accept$packet(r3, 0x0, &(0x7f0000000980)) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f00000009c0)={'team_slave_0\x00', {0x2, 0x0, @multicast1}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000a00)) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000b00)) [ 64.531409] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.533713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.535238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.538035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.543525] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.545048] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.552346] Bluetooth: hci0: HCI_REQ-0x0c1a [ 64.672783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.678428] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.680130] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.686435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.692765] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 64.697833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.706087] Bluetooth: hci6: HCI_REQ-0x0c1a [ 64.726832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.734542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.738245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.744741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.754744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.756142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.758166] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.762188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.764148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.765959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.770170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.771801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.781610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.784532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.785811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.786914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.792092] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.793913] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.795424] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.796790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.797840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 64.799012] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.800225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.808869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.810105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.811413] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.835688] Bluetooth: hci4: HCI_REQ-0x0c1a [ 64.837768] Bluetooth: hci3: HCI_REQ-0x0c1a [ 64.843231] Bluetooth: hci2: HCI_REQ-0x0c1a [ 64.845236] Bluetooth: hci5: HCI_REQ-0x0c1a [ 64.876673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.885203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.896626] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.898080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.916037] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.615585] Bluetooth: hci0: command 0x0409 tx timeout [ 66.679340] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 66.744330] Bluetooth: hci6: command 0x0409 tx timeout [ 66.871899] Bluetooth: hci4: command 0x0409 tx timeout [ 66.872549] Bluetooth: hci2: command 0x0409 tx timeout [ 66.873024] Bluetooth: hci5: command 0x0409 tx timeout [ 66.873528] Bluetooth: hci3: command 0x0409 tx timeout [ 66.936681] Bluetooth: hci1: command 0x0409 tx timeout [ 68.663316] Bluetooth: hci0: command 0x041b tx timeout [ 68.791344] Bluetooth: hci6: command 0x041b tx timeout [ 68.919622] Bluetooth: hci3: command 0x041b tx timeout [ 68.920051] Bluetooth: hci5: command 0x041b tx timeout [ 68.920488] Bluetooth: hci2: command 0x041b tx timeout [ 68.920877] Bluetooth: hci4: command 0x041b tx timeout [ 68.983312] Bluetooth: hci1: command 0x041b tx timeout [ 69.472294] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.476086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.479036] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.486427] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.489618] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 69.492894] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.498323] Bluetooth: hci7: HCI_REQ-0x0c1a [ 70.711427] Bluetooth: hci0: command 0x040f tx timeout [ 70.839351] Bluetooth: hci6: command 0x040f tx timeout [ 70.967391] Bluetooth: hci4: command 0x040f tx timeout [ 70.968157] Bluetooth: hci2: command 0x040f tx timeout [ 70.968934] Bluetooth: hci5: command 0x040f tx timeout [ 70.969667] Bluetooth: hci3: command 0x040f tx timeout [ 71.031349] Bluetooth: hci1: command 0x040f tx timeout [ 71.543398] Bluetooth: hci7: command 0x0409 tx timeout [ 72.759467] Bluetooth: hci0: command 0x0419 tx timeout [ 72.887485] Bluetooth: hci6: command 0x0419 tx timeout [ 73.015418] Bluetooth: hci3: command 0x0419 tx timeout [ 73.016241] Bluetooth: hci5: command 0x0419 tx timeout [ 73.017128] Bluetooth: hci2: command 0x0419 tx timeout [ 73.017928] Bluetooth: hci4: command 0x0419 tx timeout [ 73.079385] Bluetooth: hci1: command 0x0419 tx timeout [ 73.591411] Bluetooth: hci7: command 0x041b tx timeout [ 75.639321] Bluetooth: hci7: command 0x040f tx timeout [ 77.687348] Bluetooth: hci7: command 0x0419 tx timeout 15:35:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/214, 0xd6}], 0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) [ 116.492960] audit: type=1400 audit(1664897700.615:7): avc: denied { open } for pid=3751 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 116.494586] audit: type=1400 audit(1664897700.615:8): avc: denied { kernel } for pid=3751 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 116.508753] ------------[ cut here ]------------ [ 116.508776] [ 116.508780] ====================================================== [ 116.508784] WARNING: possible circular locking dependency detected [ 116.508788] 6.0.0-next-20221004 #1 Not tainted [ 116.508794] ------------------------------------------------------ [ 116.508797] syz-executor.2/3754 is trying to acquire lock: [ 116.508803] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 116.508845] [ 116.508845] but task is already holding lock: [ 116.508848] ffff88801d703c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 116.508874] [ 116.508874] which lock already depends on the new lock. [ 116.508874] [ 116.508877] [ 116.508877] the existing dependency chain (in reverse order) is: [ 116.508881] [ 116.508881] -> #3 (&ctx->lock){....}-{2:2}: [ 116.508894] _raw_spin_lock+0x2a/0x40 [ 116.508907] __perf_event_task_sched_out+0x53b/0x18d0 [ 116.508918] __schedule+0xedd/0x2470 [ 116.508935] schedule+0xda/0x1b0 [ 116.508951] exit_to_user_mode_prepare+0x114/0x1a0 [ 116.508963] syscall_exit_to_user_mode+0x19/0x40 [ 116.508978] do_syscall_64+0x48/0x90 [ 116.508999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 116.509013] [ 116.509013] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 116.509026] _raw_spin_lock_nested+0x30/0x40 [ 116.509038] raw_spin_rq_lock_nested+0x1e/0x30 [ 116.509052] task_fork_fair+0x63/0x4d0 [ 116.509071] sched_cgroup_fork+0x3d0/0x540 [ 116.509087] copy_process+0x4183/0x6e20 [ 116.509098] kernel_clone+0xe7/0x890 [ 116.509108] user_mode_thread+0xad/0xf0 [ 116.509119] rest_init+0x24/0x250 [ 116.509132] arch_call_rest_init+0xf/0x14 [ 116.509155] start_kernel+0x4c6/0x4eb [ 116.509174] secondary_startup_64_no_verify+0xe0/0xeb [ 116.509189] [ 116.509189] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 116.509202] _raw_spin_lock_irqsave+0x39/0x60 [ 116.509214] try_to_wake_up+0xab/0x1930 [ 116.509228] up+0x75/0xb0 [ 116.509246] __up_console_sem+0x6e/0x80 [ 116.509267] console_unlock+0x46a/0x590 [ 116.509286] vprintk_emit+0x1bd/0x560 [ 116.509305] vprintk+0x84/0xa0 [ 116.509324] _printk+0xba/0xf1 [ 116.509337] kauditd_hold_skb.cold+0x3f/0x4e [ 116.509357] kauditd_send_queue+0x233/0x290 [ 116.509374] kauditd_thread+0x5f9/0x9c0 [ 116.509390] kthread+0x2ed/0x3a0 [ 116.509407] ret_from_fork+0x22/0x30 [ 116.509420] [ 116.509420] -> #0 ((console_sem).lock){....}-{2:2}: [ 116.509434] __lock_acquire+0x2a02/0x5e70 [ 116.509455] lock_acquire+0x1a2/0x530 [ 116.509476] _raw_spin_lock_irqsave+0x39/0x60 [ 116.509489] down_trylock+0xe/0x70 [ 116.509507] __down_trylock_console_sem+0x3b/0xd0 [ 116.509525] vprintk_emit+0x16b/0x560 [ 116.509544] vprintk+0x84/0xa0 [ 116.509563] _printk+0xba/0xf1 [ 116.509574] report_bug.cold+0x72/0xab [ 116.509594] handle_bug+0x3c/0x70 [ 116.509603] exc_invalid_op+0x14/0x50 [ 116.509612] asm_exc_invalid_op+0x16/0x20 [ 116.509626] group_sched_out.part.0+0x2c7/0x460 [ 116.509646] ctx_sched_out+0x8f1/0xc10 [ 116.509666] __perf_event_task_sched_out+0x6d0/0x18d0 [ 116.509677] __schedule+0xedd/0x2470 [ 116.509693] schedule+0xda/0x1b0 [ 116.509709] exit_to_user_mode_prepare+0x114/0x1a0 [ 116.509720] syscall_exit_to_user_mode+0x19/0x40 [ 116.509734] do_syscall_64+0x48/0x90 [ 116.509754] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 116.509768] [ 116.509768] other info that might help us debug this: [ 116.509768] [ 116.509771] Chain exists of: [ 116.509771] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 116.509771] [ 116.509785] Possible unsafe locking scenario: [ 116.509785] [ 116.509788] CPU0 CPU1 [ 116.509790] ---- ---- [ 116.509792] lock(&ctx->lock); [ 116.509798] lock(&rq->__lock); [ 116.509804] lock(&ctx->lock); [ 116.509810] lock((console_sem).lock); [ 116.509816] [ 116.509816] *** DEADLOCK *** [ 116.509816] [ 116.509818] 2 locks held by syz-executor.2/3754: [ 116.509825] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 116.509856] #1: ffff88801d703c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 116.509883] [ 116.509883] stack backtrace: [ 116.509886] CPU: 0 PID: 3754 Comm: syz-executor.2 Not tainted 6.0.0-next-20221004 #1 [ 116.509898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 116.509906] Call Trace: [ 116.509909] <TASK> [ 116.509914] dump_stack_lvl+0x8b/0xb3 [ 116.509936] check_noncircular+0x263/0x2e0 [ 116.509955] ? format_decode+0x26c/0xb50 [ 116.509974] ? print_circular_bug+0x450/0x450 [ 116.509994] ? simple_strtoul+0x30/0x30 [ 116.510012] ? format_decode+0x26c/0xb50 [ 116.510032] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 116.510052] __lock_acquire+0x2a02/0x5e70 [ 116.510076] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 116.510101] lock_acquire+0x1a2/0x530 [ 116.510120] ? down_trylock+0xe/0x70 [ 116.510140] ? lock_release+0x750/0x750 [ 116.510163] ? vprintk+0x84/0xa0 [ 116.510184] _raw_spin_lock_irqsave+0x39/0x60 [ 116.510196] ? down_trylock+0xe/0x70 [ 116.510216] down_trylock+0xe/0x70 [ 116.510235] ? vprintk+0x84/0xa0 [ 116.510255] __down_trylock_console_sem+0x3b/0xd0 [ 116.510274] vprintk_emit+0x16b/0x560 [ 116.510296] vprintk+0x84/0xa0 [ 116.510316] _printk+0xba/0xf1 [ 116.510329] ? record_print_text.cold+0x16/0x16 [ 116.510346] ? report_bug.cold+0x66/0xab [ 116.510368] ? group_sched_out.part.0+0x2c7/0x460 [ 116.510389] report_bug.cold+0x72/0xab [ 116.510411] handle_bug+0x3c/0x70 [ 116.510421] exc_invalid_op+0x14/0x50 [ 116.510432] asm_exc_invalid_op+0x16/0x20 [ 116.510446] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 116.510470] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 116.510481] RSP: 0018:ffff888015d6fc48 EFLAGS: 00010006 [ 116.510491] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 116.510498] RDX: ffff88801d679ac0 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 116.510506] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 116.510514] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88801d703c00 [ 116.510521] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 116.510532] ? group_sched_out.part.0+0x2c7/0x460 [ 116.510555] ? group_sched_out.part.0+0x2c7/0x460 [ 116.510578] ctx_sched_out+0x8f1/0xc10 [ 116.510600] __perf_event_task_sched_out+0x6d0/0x18d0 [ 116.510615] ? lock_is_held_type+0xd7/0x130 [ 116.510630] ? __perf_cgroup_move+0x160/0x160 [ 116.510641] ? set_next_entity+0x304/0x550 [ 116.510661] ? update_curr+0x267/0x740 [ 116.510682] ? lock_is_held_type+0xd7/0x130 [ 116.510698] __schedule+0xedd/0x2470 [ 116.510717] ? io_schedule_timeout+0x150/0x150 [ 116.510739] schedule+0xda/0x1b0 [ 116.510756] exit_to_user_mode_prepare+0x114/0x1a0 [ 116.510769] syscall_exit_to_user_mode+0x19/0x40 [ 116.510784] do_syscall_64+0x48/0x90 [ 116.510806] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 116.510820] RIP: 0033:0x7f6807f0db19 [ 116.510828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 116.510839] RSP: 002b:00007f6805483218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.510850] RAX: 0000000000000001 RBX: 00007f6808020f68 RCX: 00007f6807f0db19 [ 116.510857] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6808020f6c [ 116.510865] RBP: 00007f6808020f60 R08: 000000000000000e R09: 0000000000000000 [ 116.510872] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f6808020f6c [ 116.510879] R13: 00007ffc9ff4475f R14: 00007f6805483300 R15: 0000000000022000 [ 116.510892] </TASK> [ 116.566394] WARNING: CPU: 0 PID: 3754 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 116.567084] Modules linked in: [ 116.567326] CPU: 0 PID: 3754 Comm: syz-executor.2 Not tainted 6.0.0-next-20221004 #1 [ 116.567893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 116.568709] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 116.569107] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 116.570413] RSP: 0018:ffff888015d6fc48 EFLAGS: 00010006 [ 116.570806] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 116.571328] RDX: ffff88801d679ac0 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 116.571853] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 116.572367] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88801d703c00 [ 116.572892] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 116.573414] FS: 00007f6805483700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 116.573998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.574422] CR2: 00007f976a93f368 CR3: 000000001d9b4000 CR4: 0000000000350ef0 [ 116.574943] Call Trace: [ 116.575141] <TASK> [ 116.575313] ctx_sched_out+0x8f1/0xc10 [ 116.575618] __perf_event_task_sched_out+0x6d0/0x18d0 [ 116.576001] ? lock_is_held_type+0xd7/0x130 [ 116.576328] ? __perf_cgroup_move+0x160/0x160 [ 116.576659] ? set_next_entity+0x304/0x550 [ 116.576980] ? update_curr+0x267/0x740 [ 116.577276] ? lock_is_held_type+0xd7/0x130 [ 116.577596] __schedule+0xedd/0x2470 [ 116.577887] ? io_schedule_timeout+0x150/0x150 [ 116.578233] schedule+0xda/0x1b0 [ 116.578494] exit_to_user_mode_prepare+0x114/0x1a0 [ 116.578862] syscall_exit_to_user_mode+0x19/0x40 [ 116.579213] do_syscall_64+0x48/0x90 [ 116.579510] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 116.579892] RIP: 0033:0x7f6807f0db19 [ 116.580167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 116.581474] RSP: 002b:00007f6805483218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.582024] RAX: 0000000000000001 RBX: 00007f6808020f68 RCX: 00007f6807f0db19 [ 116.582539] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6808020f6c [ 116.583060] RBP: 00007f6808020f60 R08: 000000000000000e R09: 0000000000000000 [ 116.583580] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f6808020f6c [ 116.584103] R13: 00007ffc9ff4475f R14: 00007f6805483300 R15: 0000000000022000 [ 116.584625] </TASK> [ 116.584799] irq event stamp: 588 [ 116.585044] hardirqs last enabled at (587): [<ffffffff8133f829>] exit_to_user_mode_prepare+0x109/0x1a0 [ 116.585723] hardirqs last disabled at (588): [<ffffffff8425ec15>] __schedule+0x1225/0x2470 [ 116.586320] softirqs last enabled at (286): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180 [ 116.586943] softirqs last disabled at (281): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180 [ 116.587573] ---[ end trace 0000000000000000 ]--- 15:35:00 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() r3 = gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r5}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@loose}, {@fscache}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@uid_gt={'uid>', r6}}, {@subj_user}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '.]\'*.%{.\\!-/O+{\xcb.\''}}, {@fsname={'fsname', 0x3d, '[X--\')'}}, {@audit}]}}) kcmp(r2, r3, 0x0, r1, r1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x3) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x7f, 0x80, 0x1, 0x0, 0x2, 0x43044, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x6}, 0x10000, 0x0, 0x3, 0x5, 0x1, 0x7, 0x3, 0x0, 0x1, 0x0, 0xa420}, r2, 0x4, r7, 0x1) getresgid(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) [ 116.882715] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 116.893512] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 15:35:01 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() r3 = gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r5}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@loose}, {@fscache}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@uid_gt={'uid>', r6}}, {@subj_user}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '.]\'*.%{.\\!-/O+{\xcb.\''}}, {@fsname={'fsname', 0x3d, '[X--\')'}}, {@audit}]}}) kcmp(r2, r3, 0x0, r1, r1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x3) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x7f, 0x80, 0x1, 0x0, 0x2, 0x43044, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x6}, 0x10000, 0x0, 0x3, 0x5, 0x1, 0x7, 0x3, 0x0, 0x1, 0x0, 0xa420}, r2, 0x4, r7, 0x1) getresgid(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) [ 116.985547] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 15:35:01 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() r3 = gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r5}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@loose}, {@fscache}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@uid_gt={'uid>', r6}}, {@subj_user}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '.]\'*.%{.\\!-/O+{\xcb.\''}}, {@fsname={'fsname', 0x3d, '[X--\')'}}, {@audit}]}}) kcmp(r2, r3, 0x0, r1, r1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x3) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x7f, 0x80, 0x1, 0x0, 0x2, 0x43044, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x6}, 0x10000, 0x0, 0x3, 0x5, 0x1, 0x7, 0x3, 0x0, 0x1, 0x0, 0xa420}, r2, 0x4, r7, 0x1) getresgid(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) [ 117.089124] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 15:35:01 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() r3 = gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r5}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@loose}, {@fscache}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@uid_gt={'uid>', r6}}, {@subj_user}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '.]\'*.%{.\\!-/O+{\xcb.\''}}, {@fsname={'fsname', 0x3d, '[X--\')'}}, {@audit}]}}) kcmp(r2, r3, 0x0, r1, r1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x3) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x7f, 0x80, 0x1, 0x0, 0x2, 0x43044, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x6}, 0x10000, 0x0, 0x3, 0x5, 0x1, 0x7, 0x3, 0x0, 0x1, 0x0, 0xa420}, r2, 0x4, r7, 0x1) getresgid(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) [ 117.180139] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 15:35:01 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() r3 = gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r5}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@loose}, {@fscache}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@uid_gt={'uid>', r6}}, {@subj_user}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '.]\'*.%{.\\!-/O+{\xcb.\''}}, {@fsname={'fsname', 0x3d, '[X--\')'}}, {@audit}]}}) kcmp(r2, r3, 0x0, r1, r1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x3) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x7f, 0x80, 0x1, 0x0, 0x2, 0x43044, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x6}, 0x10000, 0x0, 0x3, 0x5, 0x1, 0x7, 0x3, 0x0, 0x1, 0x0, 0xa420}, r2, 0x4, r7, 0x1) getresgid(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 117.285866] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 15:35:01 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() r3 = gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r5}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@loose}, {@fscache}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@uid_gt={'uid>', r6}}, {@subj_user}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '.]\'*.%{.\\!-/O+{\xcb.\''}}, {@fsname={'fsname', 0x3d, '[X--\')'}}, {@audit}]}}) kcmp(r2, r3, 0x0, r1, r1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x3) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x7f, 0x80, 0x1, 0x0, 0x2, 0x43044, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x6}, 0x10000, 0x0, 0x3, 0x5, 0x1, 0x7, 0x3, 0x0, 0x1, 0x0, 0xa420}, r2, 0x4, r7, 0x1) getresgid(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) [ 117.317999] 9pnet_fd: p9_fd_create_unix (3835): problem connecting socket: ./file2: -2 15:35:01 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() r3 = gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r5}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@loose}, {@fscache}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@uid_gt={'uid>', r6}}, {@subj_user}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '.]\'*.%{.\\!-/O+{\xcb.\''}}, {@fsname={'fsname', 0x3d, '[X--\')'}}, {@audit}]}}) kcmp(r2, r3, 0x0, r1, r1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x3) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x7f, 0x80, 0x1, 0x0, 0x2, 0x43044, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x6}, 0x10000, 0x0, 0x3, 0x5, 0x1, 0x7, 0x3, 0x0, 0x1, 0x0, 0xa420}, r2, 0x4, r7, 0x1) getresgid(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 117.343924] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 117.371421] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 117.712690] rfkill: input handler disabled [ 117.714124] rfkill: input handler enabled [ 117.724409] rfkill: input handler disabled [ 117.725943] rfkill: input handler enabled VM DIAGNOSIS: 15:35:00 Registers: info registers vcpu 0 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bd531 RDI=ffffffff8765c9a0 RBP=ffffffff8765c960 RSP=ffff888015d6f690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001 R12=0000000000000034 R13=ffffffff8765c960 R14=0000000000000010 R15=ffffffff823bd520 RIP=ffffffff823bd589 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6805483700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f976a93f368 CR3=000000001d9b4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f6807ff47c0 00007f6807ff47c8 YMM02=0000000000000000 0000000000000000 00007f6807ff47e0 00007f6807ff47c0 YMM03=0000000000000000 0000000000000000 00007f6807ff47c8 00007f6807ff47c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=1ffff11003712e8e RSI=ffff88801b897ec8 RDI=ffff88801b897478 RBP=00007f7c01e80000 RSP=ffff88801b8973a8 R8 =ffffffff85ec5990 R9 =ffffffff85ec5994 R10=ffffed1003712e92 R11=ffff88801b897468 R12=ffff88801b897469 R13=ffff88801b897488 R14=ffff88801b897428 R15=0000000000000005 RIP=ffffffff8111c73c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7c01f47260 CR3=000000002fc0c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000