Warning: Permanently added '[localhost]:50216' (ECDSA) to the list of known hosts. 2022/09/30 12:08:40 fuzzer started 2022/09/30 12:08:41 dialing manager at localhost:40535 syzkaller login: [ 45.212377] cgroup: Unknown subsys name 'net' [ 45.301576] cgroup: Unknown subsys name 'rlimit' 2022/09/30 12:08:54 syscalls: 2215 2022/09/30 12:08:54 code coverage: enabled 2022/09/30 12:08:54 comparison tracing: enabled 2022/09/30 12:08:54 extra coverage: enabled 2022/09/30 12:08:54 setuid sandbox: enabled 2022/09/30 12:08:54 namespace sandbox: enabled 2022/09/30 12:08:54 Android sandbox: enabled 2022/09/30 12:08:54 fault injection: enabled 2022/09/30 12:08:54 leak checking: enabled 2022/09/30 12:08:54 net packet injection: enabled 2022/09/30 12:08:54 net device setup: enabled 2022/09/30 12:08:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 12:08:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 12:08:54 USB emulation: enabled 2022/09/30 12:08:54 hci packet injection: enabled 2022/09/30 12:08:54 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 12:08:54 802.15.4 emulation: enabled 2022/09/30 12:08:54 fetching corpus: 50, signal 25669/27425 (executing program) 2022/09/30 12:08:54 fetching corpus: 100, signal 37833/41131 (executing program) 2022/09/30 12:08:54 fetching corpus: 150, signal 43712/48525 (executing program) 2022/09/30 12:08:54 fetching corpus: 200, signal 50886/57056 (executing program) 2022/09/30 12:08:54 fetching corpus: 250, signal 58817/66170 (executing program) 2022/09/30 12:08:54 fetching corpus: 300, signal 63503/72120 (executing program) 2022/09/30 12:08:55 fetching corpus: 350, signal 70313/79982 (executing program) 2022/09/30 12:08:55 fetching corpus: 400, signal 72850/83694 (executing program) 2022/09/30 12:08:55 fetching corpus: 450, signal 77030/88914 (executing program) 2022/09/30 12:08:55 fetching corpus: 500, signal 81509/94310 (executing program) 2022/09/30 12:08:55 fetching corpus: 550, signal 85757/99438 (executing program) 2022/09/30 12:08:55 fetching corpus: 600, signal 88228/102920 (executing program) 2022/09/30 12:08:55 fetching corpus: 650, signal 93386/108742 (executing program) 2022/09/30 12:08:56 fetching corpus: 700, signal 95299/111559 (executing program) 2022/09/30 12:08:56 fetching corpus: 750, signal 97287/114460 (executing program) 2022/09/30 12:08:56 fetching corpus: 800, signal 100024/117965 (executing program) 2022/09/30 12:08:56 fetching corpus: 850, signal 103390/121918 (executing program) 2022/09/30 12:08:56 fetching corpus: 900, signal 105065/124435 (executing program) 2022/09/30 12:08:56 fetching corpus: 950, signal 106354/126631 (executing program) 2022/09/30 12:08:56 fetching corpus: 1000, signal 109074/129914 (executing program) 2022/09/30 12:08:56 fetching corpus: 1050, signal 110898/132406 (executing program) 2022/09/30 12:08:56 fetching corpus: 1100, signal 112670/134861 (executing program) 2022/09/30 12:08:57 fetching corpus: 1150, signal 115217/137910 (executing program) 2022/09/30 12:08:57 fetching corpus: 1200, signal 116693/140103 (executing program) 2022/09/30 12:08:57 fetching corpus: 1250, signal 117904/142034 (executing program) 2022/09/30 12:08:57 fetching corpus: 1300, signal 120246/144774 (executing program) 2022/09/30 12:08:57 fetching corpus: 1350, signal 121913/147003 (executing program) 2022/09/30 12:08:57 fetching corpus: 1400, signal 123048/148772 (executing program) 2022/09/30 12:08:57 fetching corpus: 1450, signal 124987/151096 (executing program) 2022/09/30 12:08:57 fetching corpus: 1500, signal 125990/152747 (executing program) 2022/09/30 12:08:58 fetching corpus: 1550, signal 127179/154455 (executing program) 2022/09/30 12:08:58 fetching corpus: 1600, signal 128649/156405 (executing program) 2022/09/30 12:08:58 fetching corpus: 1650, signal 129879/158090 (executing program) 2022/09/30 12:08:58 fetching corpus: 1700, signal 130974/159721 (executing program) 2022/09/30 12:08:58 fetching corpus: 1750, signal 132839/161863 (executing program) 2022/09/30 12:08:58 fetching corpus: 1800, signal 134835/164097 (executing program) 2022/09/30 12:08:58 fetching corpus: 1850, signal 135737/165507 (executing program) 2022/09/30 12:08:58 fetching corpus: 1900, signal 136899/167082 (executing program) 2022/09/30 12:08:59 fetching corpus: 1950, signal 137887/168509 (executing program) 2022/09/30 12:08:59 fetching corpus: 2000, signal 139268/170168 (executing program) 2022/09/30 12:08:59 fetching corpus: 2050, signal 140314/171645 (executing program) 2022/09/30 12:08:59 fetching corpus: 2100, signal 141806/173337 (executing program) 2022/09/30 12:08:59 fetching corpus: 2150, signal 142746/174656 (executing program) 2022/09/30 12:08:59 fetching corpus: 2200, signal 144083/176211 (executing program) 2022/09/30 12:08:59 fetching corpus: 2250, signal 144475/177199 (executing program) 2022/09/30 12:08:59 fetching corpus: 2300, signal 145798/178689 (executing program) 2022/09/30 12:08:59 fetching corpus: 2350, signal 146999/180143 (executing program) 2022/09/30 12:09:00 fetching corpus: 2400, signal 148249/181570 (executing program) 2022/09/30 12:09:00 fetching corpus: 2450, signal 149159/182782 (executing program) 2022/09/30 12:09:00 fetching corpus: 2500, signal 150487/184278 (executing program) 2022/09/30 12:09:00 fetching corpus: 2550, signal 151794/185672 (executing program) 2022/09/30 12:09:00 fetching corpus: 2600, signal 152983/187004 (executing program) 2022/09/30 12:09:00 fetching corpus: 2650, signal 153606/187981 (executing program) 2022/09/30 12:09:00 fetching corpus: 2700, signal 154224/188946 (executing program) 2022/09/30 12:09:00 fetching corpus: 2750, signal 155165/190087 (executing program) 2022/09/30 12:09:00 fetching corpus: 2800, signal 155721/190978 (executing program) 2022/09/30 12:09:01 fetching corpus: 2850, signal 156797/192134 (executing program) 2022/09/30 12:09:01 fetching corpus: 2900, signal 158119/193399 (executing program) 2022/09/30 12:09:01 fetching corpus: 2950, signal 159835/194842 (executing program) 2022/09/30 12:09:01 fetching corpus: 3000, signal 160468/195759 (executing program) 2022/09/30 12:09:01 fetching corpus: 3050, signal 161492/196835 (executing program) 2022/09/30 12:09:01 fetching corpus: 3100, signal 162388/197818 (executing program) 2022/09/30 12:09:01 fetching corpus: 3150, signal 162991/198628 (executing program) 2022/09/30 12:09:01 fetching corpus: 3200, signal 164221/199710 (executing program) 2022/09/30 12:09:01 fetching corpus: 3250, signal 164896/200570 (executing program) 2022/09/30 12:09:02 fetching corpus: 3300, signal 165654/201442 (executing program) 2022/09/30 12:09:02 fetching corpus: 3350, signal 166149/202191 (executing program) 2022/09/30 12:09:02 fetching corpus: 3400, signal 167489/203229 (executing program) 2022/09/30 12:09:02 fetching corpus: 3450, signal 168967/204441 (executing program) 2022/09/30 12:09:02 fetching corpus: 3500, signal 169846/205472 (executing program) 2022/09/30 12:09:02 fetching corpus: 3550, signal 170200/206080 (executing program) 2022/09/30 12:09:02 fetching corpus: 3600, signal 171450/207046 (executing program) 2022/09/30 12:09:02 fetching corpus: 3650, signal 172161/207756 (executing program) 2022/09/30 12:09:02 fetching corpus: 3700, signal 172939/208507 (executing program) 2022/09/30 12:09:03 fetching corpus: 3750, signal 173558/209220 (executing program) 2022/09/30 12:09:03 fetching corpus: 3800, signal 174386/209967 (executing program) 2022/09/30 12:09:03 fetching corpus: 3850, signal 174946/210618 (executing program) 2022/09/30 12:09:03 fetching corpus: 3900, signal 176141/211410 (executing program) 2022/09/30 12:09:03 fetching corpus: 3950, signal 176815/212089 (executing program) 2022/09/30 12:09:03 fetching corpus: 4000, signal 177495/212737 (executing program) 2022/09/30 12:09:03 fetching corpus: 4050, signal 178212/213375 (executing program) 2022/09/30 12:09:03 fetching corpus: 4100, signal 178615/213939 (executing program) 2022/09/30 12:09:04 fetching corpus: 4150, signal 179615/214667 (executing program) 2022/09/30 12:09:04 fetching corpus: 4200, signal 180430/215527 (executing program) 2022/09/30 12:09:04 fetching corpus: 4250, signal 181275/216340 (executing program) 2022/09/30 12:09:04 fetching corpus: 4300, signal 182152/216961 (executing program) 2022/09/30 12:09:04 fetching corpus: 4350, signal 183536/217661 (executing program) 2022/09/30 12:09:04 fetching corpus: 4400, signal 184050/218142 (executing program) 2022/09/30 12:09:04 fetching corpus: 4450, signal 184956/218750 (executing program) 2022/09/30 12:09:05 fetching corpus: 4500, signal 185645/219294 (executing program) 2022/09/30 12:09:05 fetching corpus: 4550, signal 186854/219889 (executing program) 2022/09/30 12:09:05 fetching corpus: 4600, signal 187441/220386 (executing program) 2022/09/30 12:09:05 fetching corpus: 4650, signal 188365/220913 (executing program) 2022/09/30 12:09:05 fetching corpus: 4700, signal 188829/221375 (executing program) 2022/09/30 12:09:05 fetching corpus: 4750, signal 189297/221777 (executing program) 2022/09/30 12:09:05 fetching corpus: 4800, signal 189822/222228 (executing program) 2022/09/30 12:09:05 fetching corpus: 4850, signal 190544/222681 (executing program) 2022/09/30 12:09:05 fetching corpus: 4872, signal 190746/223011 (executing program) 2022/09/30 12:09:05 fetching corpus: 4872, signal 190746/223313 (executing program) 2022/09/30 12:09:05 fetching corpus: 4872, signal 190746/223667 (executing program) 2022/09/30 12:09:05 fetching corpus: 4872, signal 190746/224009 (executing program) 2022/09/30 12:09:05 fetching corpus: 4872, signal 190746/224328 (executing program) 2022/09/30 12:09:06 fetching corpus: 4872, signal 190746/224641 (executing program) 2022/09/30 12:09:06 fetching corpus: 4872, signal 190746/224973 (executing program) 2022/09/30 12:09:06 fetching corpus: 4872, signal 190746/225301 (executing program) 2022/09/30 12:09:06 fetching corpus: 4872, signal 190746/225606 (executing program) 2022/09/30 12:09:06 fetching corpus: 4872, signal 190746/225924 (executing program) 2022/09/30 12:09:06 fetching corpus: 4872, signal 190746/226292 (executing program) 2022/09/30 12:09:06 fetching corpus: 4872, signal 190746/226625 (executing program) 2022/09/30 12:09:06 fetching corpus: 4872, signal 190746/226957 (executing program) 2022/09/30 12:09:06 fetching corpus: 4872, signal 190746/227318 (executing program) 2022/09/30 12:09:06 fetching corpus: 4872, signal 190746/227620 (executing program) 2022/09/30 12:09:06 fetching corpus: 4872, signal 190746/227620 (executing program) 2022/09/30 12:09:08 starting 8 fuzzer processes 12:09:08 executing program 0: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000140)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000240)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000280)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000002c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000340)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000380)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000400)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000440)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000480)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000004c0)) 12:09:08 executing program 1: clock_settime(0x2, &(0x7f0000000000)={0x0, 0x3938700}) nanosleep(&(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)) r0 = semget(0x3, 0x0, 0x41) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x1, 0x800}, {0x4, 0x9bc, 0x800}], 0x2, &(0x7f0000000140)={r1, r2+10000000}) clock_gettime(0x5, &(0x7f0000000180)) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)) clock_gettime(0x4, &(0x7f0000000240)) semget(0x2, 0x3, 0x400) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000280)={[0x3]}, &(0x7f00000002c0), &(0x7f0000000380)={r3, r4+60000000}, 0x8) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) nanosleep(&(0x7f0000000400)={r5, r6+60000000}, &(0x7f0000000440)) clock_gettime(0x5, &(0x7f0000000480)) clock_gettime(0x3, &(0x7f00000004c0)) clock_gettime(0x6, &(0x7f0000000500)) recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/9, 0x9}], 0x1, &(0x7f0000000640)=""/38, 0x26}, 0xef0e}], 0x1, 0x10000, 0x0) clock_gettime(0x3, &(0x7f00000006c0)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000c40)) 12:09:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$binfmt_aout(r0, &(0x7f0000000040)={{0x0, 0x1, 0x2, 0x2cb, 0x30e, 0x5a, 0x11f, 0x2}, "d7a9e887b041994966fa9bdd2a7b2e17f26cb67ad76f751848eb40b9f6c3adf7dee8bd6373c52a9b853dc9bcf94edfe13d843245b98e06d15b836c1759f514d58b3056e3c2c1c05e45b7bb64b3c95798c55477cbfbc9edf9848ac1371cb986f8c839ba9142d9dab565d8f579f973b38b6999a260ceb04010e3cfa9094d40c5f7ff41556d8acca4dc7cb9a91489ef4e7d22d9b29b2a745713872da7720aaaa99cb0322f2be4ff95914756d3e7c3b4d16912679eee69cca7c557fa8ab501f27bba93595617a9d8e67b4040812189af64ff88ee21fb5c063f19d26e00308fd85027a8a9c3556eb10e35f47623de", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x80c) r1 = inotify_init1(0x80800) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000880)) r2 = open(&(0x7f00000008c0)='.\x00', 0x2002, 0x184) r3 = dup3(r2, r0, 0x0) preadv(r3, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/184, 0xb8}, {&(0x7f00000009c0)=""/158, 0x9e}, {&(0x7f0000000a80)=""/66, 0x42}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000c00)=""/26, 0x1a}], 0x5, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000cc0)={0x0, 0x10000, 0x4}) r5 = memfd_secret(0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000010c0)={r4, 0x9, 0x20}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000001500)={'team_slave_1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', 0x8a43, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001580)={{0x0, 0x2, 0x7, 0x3ff, 0x60000000000000, 0xfffffffffffffffa, 0x10000, 0x4bc, 0x0, 0x800, 0xfffffff9, 0xaa, 0x6, 0xdb0, 0xf7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$sr(0xffffffffffffff9c, &(0x7f0000001640), 0x214582, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001680)={r4, 0x9, 0x4}) r7 = syz_io_uring_setup(0x1131, &(0x7f0000001a80)={0x0, 0x572a, 0x4, 0x3, 0x1f7, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000001b00), &(0x7f0000001b40)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000001b80)={r4, 0x6, 0x2}) open(&(0x7f0000001f80)='./file0\x00', 0x80, 0x10c) 12:09:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6c, 0x80040) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x52, 0xc40b, 0x3, {0x5, 0x3}, {0x100, 0x9}, @ramp={0x7, 0x28, {0x2, 0x81, 0x4, 0x5}}}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x10d000) r2 = signalfd4(r1, &(0x7f0000000100)={[0x7]}, 0x8, 0x100800) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000180)=""/240) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x14982eea, 0x4}}, './file0\x00'}) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f00000002c0)=""/134) ftruncate(r1, 0x2) fcntl$getflags(r3, 0x1) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000380)={0x0, 0x6, 0x7c}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f00000007c0)=0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000800)=""/200) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$int_in(r7, 0x5452, &(0x7f0000000900)=0x5) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000940)=0x7ff, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) close(0xffffffffffffffff) [ 72.923853] audit: type=1400 audit(1664539749.010:6): avc: denied { execmem } for pid=288 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:09:09 executing program 4: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = gettid() fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x2, 0x0, 0x20, 0x0, r1}) move_pages(r1, 0x4, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000100)=[0x20, 0x3], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4) shmget(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x5a}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2b, 0x7, 0xd8, 0x8001, 0x48, @loopback, @empty, 0x700, 0x8, 0x80000000, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x40, 0x20, 0x1, 0x401, {{0x8, 0x4, 0x3, 0x2e, 0x20, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@generic={0x89, 0xc, "d1afed61f3211505b0b7"}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x14c, 0x0, 0x520, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) r5 = fsopen(&(0x7f0000000540)='squashfs\x00', 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000580)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'tunl0\x00', r3, 0x1, 0x8, 0x891a, 0x200, {{0x1c, 0x4, 0x3, 0x3e, 0x70, 0x65, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x25}, {[@cipso={0x86, 0x24, 0x2, [{0x6, 0x9, "db03500ba9e10b"}, {0x0, 0xc, "a74775504b746dc9ffeb"}, {0x2, 0x2}, {0x6, 0x7, "750876b6cc"}]}, @timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@loopback, 0x8}, {@broadcast, 0x1f}, {@empty, 0xfffffffc}]}, @cipso={0x86, 0x9, 0x3, [{0x5, 0x3, "02"}]}, @lsrr={0x83, 0x13, 0x13, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', r6, 0x29, 0x7f, 0x1, 0x1000, 0x44, @private2, @mcast2, 0x20, 0x8710, 0x1d8b, 0x9}}) sched_getscheduler(r1) fchmod(r5, 0x1e4) process_vm_readv(0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/108, 0x6c}], 0x1, &(0x7f0000000940)=[{&(0x7f0000000840)=""/120, 0x78}, {&(0x7f00000008c0)=""/70, 0x46}], 0x2, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) openat(r2, &(0x7f0000000980)='./file0\x00', 0x406001, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) 12:09:09 executing program 5: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x2, 0x2, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0xdc724218ea124429}, 0x4044) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8fc2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0xd0}}, 0x4080004) fsetxattr$security_selinux(r0, &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:setfiles_exec_t:s0\x00', 0x25, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x701, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000680)={0x50000018}) r4 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cgroup.stat\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r2) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0xc000, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x84, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004}, 0x80) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000001) socketpair(0x23, 0x2, 0x9, &(0x7f0000000a80)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r9) epoll_wait(r2, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x800) 12:09:09 executing program 6: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x170, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf177}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe487}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc74a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x242f115}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000800}, 0x8040) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000) lseek(0xffffffffffffffff, 0x6, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x31, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048800}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x7f}, @device_a, @device_a, @compressed={{0x1}, {0x9, 0x81}}}}, @NL80211_ATTR_FRAME={0x34, 0x33, @mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_a, @device_b, @from_mac=@device_b, {0x2, 0x6c}}, @ver_80211n={0x0, 0x62ec, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x2d, @val={0x8c, 0x10, {0x350, "1f71dd5197cd", @short="5df680913475fdf3"}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x4044) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x42, 0x7c}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0xfffff3fd}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc010) r5 = openat2(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x80001, 0x105, 0x2}, 0x18) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x5, 0xb3c, 0x8, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x10, 0x1ff, 0x7}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x2000c0c1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000bc0), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d40)={'virt_wifi0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000001000)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xf0, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x40) 12:09:09 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x66, 0x1, 0x9, 0x3, 0x6, 0x3, 0x3, 0x2, 0x3d7, 0x38, 0x2bb, 0x8, 0x93b0, 0x20, 0x1, 0x3, 0x0, 0xbf32}, [{0x6474e551, 0x5, 0x4, 0xe0, 0x1, 0x88b, 0x2, 0xbe5}, {0x7, 0x0, 0x1, 0x3, 0x6, 0x3, 0x7fff, 0x7}], "fae39492f48be546f327faa6b16e014cdc242106d4c0437b523f6e2bb2c5484d57eed7f7b2657a9441f5e9303c27554a9ee1d55fd8c48f30793a2646379b516da4109020613c344bcef1d786c16c639440509f9124d5f4a8f94ae1fd491e4ae1e21749610f73f7785f16481ff75eb91b20a946052643e41df72348a8f4a5485517f8672d1dea912e225cb40f6ef3d2bd33b38de02d2a755e20776826b490ed4d1ede49134efd8e6a933dad2a8310628d2e281143d357e0b0b48f7a7fa039b8f7c962719c5ff3244879aa", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x742) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000b80)={0x4a, 0xe, &(0x7f0000000780)}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000bc0)=""/142) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000c80)={0x36, 0xfffffff7}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000cc0)={0x1, 0x2, 0xffff}) r1 = signalfd4(r0, &(0x7f0000000d00)={[0xe15]}, 0x8, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0xffffffffffffff32) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000d80)) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000011c0)={0x30, 0x2, &(0x7f0000000dc0)="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"}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001200), 0x111040, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000001640)={0x1, 0x1, 0x1c, 0x1, 0x175, &(0x7f0000001240)}) ioctl$VT_WAITACTIVE(r3, 0x5607) pipe2(&(0x7f0000001680)={0xffffffffffffffff}, 0x80000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001780)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000016c0)=""/91, 0x5b, 0x1, &(0x7f0000001740)=""/21, 0x15}, &(0x7f00000017c0)=0x40) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001800)={0x9, 0x1, 0x3, 0xce58, 0x1a, "3742240f4f67e92b"}) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000001840)={0x400}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000001880)={0x1, 0x469, 0x6}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000018c0)={{0x0, 0x1, 0x0, 0x10000, 0x7ff, 0x2, 0xdce, 0x3, 0x401, 0x4, 0x0, 0x6, 0x6, 0x0, 0x3}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 74.237233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.238893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.242125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.243506] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.244975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.246681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.250713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.252144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.254289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.254361] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.271648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.272733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.280705] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.282444] Bluetooth: hci1: HCI_REQ-0x0c1a [ 74.283585] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.285453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.288232] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.289173] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.290922] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.292550] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.297565] Bluetooth: hci2: HCI_REQ-0x0c1a [ 74.407302] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.412744] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.415271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.416726] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.418961] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.420470] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.425569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.428253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.429680] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.433781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.435316] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.440674] Bluetooth: hci5: HCI_REQ-0x0c1a [ 74.441749] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.454235] Bluetooth: hci7: HCI_REQ-0x0c1a [ 76.370577] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 76.370592] Bluetooth: hci2: command 0x0409 tx timeout [ 76.372402] Bluetooth: hci1: command 0x0409 tx timeout [ 76.372619] Bluetooth: hci0: command 0x0409 tx timeout [ 76.434226] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 76.435552] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 76.498193] Bluetooth: hci7: command 0x0409 tx timeout [ 76.499194] Bluetooth: hci5: command 0x0409 tx timeout [ 78.418396] Bluetooth: hci0: command 0x041b tx timeout [ 78.419597] Bluetooth: hci1: command 0x041b tx timeout [ 78.420423] Bluetooth: hci2: command 0x041b tx timeout [ 78.546533] Bluetooth: hci5: command 0x041b tx timeout [ 78.546585] Bluetooth: hci7: command 0x041b tx timeout [ 80.466147] Bluetooth: hci2: command 0x040f tx timeout [ 80.466231] Bluetooth: hci1: command 0x040f tx timeout [ 80.466711] Bluetooth: hci0: command 0x040f tx timeout [ 80.594161] Bluetooth: hci5: command 0x040f tx timeout [ 80.595207] Bluetooth: hci7: command 0x040f tx timeout [ 80.621793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.624963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.626701] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.632955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.634135] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.634976] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.650207] Bluetooth: hci3: HCI_REQ-0x0c1a [ 80.938472] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.939595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.941875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.946239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.951460] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 80.953517] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 80.961642] Bluetooth: hci6: HCI_REQ-0x0c1a [ 82.514175] Bluetooth: hci1: command 0x0419 tx timeout [ 82.514200] Bluetooth: hci0: command 0x0419 tx timeout [ 82.514626] Bluetooth: hci2: command 0x0419 tx timeout [ 82.642161] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 82.643357] Bluetooth: hci7: command 0x0419 tx timeout [ 82.643752] Bluetooth: hci5: command 0x0419 tx timeout [ 82.706268] Bluetooth: hci3: command 0x0409 tx timeout [ 83.026199] Bluetooth: hci6: command 0x0409 tx timeout [ 84.754277] Bluetooth: hci3: command 0x041b tx timeout [ 85.074217] Bluetooth: hci6: command 0x041b tx timeout [ 86.802156] Bluetooth: hci3: command 0x040f tx timeout [ 87.058246] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 87.122142] Bluetooth: hci6: command 0x040f tx timeout [ 88.850222] Bluetooth: hci3: command 0x0419 tx timeout [ 89.170106] Bluetooth: hci6: command 0x0419 tx timeout [ 91.666117] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 94.337859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.342228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.344030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.353348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.356953] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.359516] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.365097] Bluetooth: hci4: HCI_REQ-0x0c1a [ 96.402186] Bluetooth: hci4: command 0x0409 tx timeout [ 98.450113] Bluetooth: hci4: command 0x041b tx timeout [ 100.498104] Bluetooth: hci4: command 0x040f tx timeout [ 102.546243] Bluetooth: hci4: command 0x0419 tx timeout 12:10:06 executing program 3: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x123008, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010002b51255757ec09644f4", @ANYRES32=r0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="040005000000000008000000", @ANYRES32=0xee00, @ANYBLOB="10000000000000002000060000000000"], 0x44, 0x3) mount$9p_unix(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x140000, 0x0) 12:10:06 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000540)={0x4, 0x8, 0x0, 0x6, 0x2b, 0x3}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f9ffffffffffffff00", @ANYRES32=r0, @ANYBLOB="f5090000000000002e2f66696c653000"]) sendto$inet(r4, &(0x7f0000000fc0)="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", 0xfb, 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf0, 0x3, 0x8, 0x1, 0x0, 0x5, 0x42, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa63, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x41004, 0x6, 0x80000000, 0x3, 0x7fca, 0xffff, 0x1a9, 0x0, 0x0, 0x0, 0xdc8}, 0xffffffffffffffff, 0x9, r3, 0x8) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 130.210450] audit: type=1400 audit(1664539806.295:7): avc: denied { open } for pid=3562 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.211939] audit: type=1400 audit(1664539806.295:8): avc: denied { kernel } for pid=3562 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.227752] ------------[ cut here ]------------ [ 130.227774] [ 130.227777] ====================================================== [ 130.227781] WARNING: possible circular locking dependency detected [ 130.227785] 6.0.0-rc7-next-20220929 #1 Not tainted [ 130.227792] ------------------------------------------------------ [ 130.227795] syz-executor.3/3565 is trying to acquire lock: [ 130.227802] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 130.227845] [ 130.227845] but task is already holding lock: [ 130.227848] ffff88800edef020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.227876] [ 130.227876] which lock already depends on the new lock. [ 130.227876] [ 130.227879] [ 130.227879] the existing dependency chain (in reverse order) is: [ 130.227882] [ 130.227882] -> #3 (&ctx->lock){....}-{2:2}: [ 130.227897] _raw_spin_lock+0x2a/0x40 [ 130.227908] __perf_event_task_sched_out+0x53b/0x18d0 [ 130.227919] __schedule+0xedd/0x2470 [ 130.227933] schedule+0xda/0x1b0 [ 130.227947] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.227960] syscall_exit_to_user_mode+0x19/0x40 [ 130.227973] do_syscall_64+0x48/0x90 [ 130.227991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.228004] [ 130.228004] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 130.228018] _raw_spin_lock_nested+0x30/0x40 [ 130.228028] raw_spin_rq_lock_nested+0x1e/0x30 [ 130.228041] task_fork_fair+0x63/0x4d0 [ 130.228062] sched_cgroup_fork+0x3d0/0x540 [ 130.228076] copy_process+0x4183/0x6e20 [ 130.228086] kernel_clone+0xe7/0x890 [ 130.228096] user_mode_thread+0xad/0xf0 [ 130.228106] rest_init+0x24/0x250 [ 130.228118] arch_call_rest_init+0xf/0x14 [ 130.228135] start_kernel+0x4c6/0x4eb [ 130.228149] secondary_startup_64_no_verify+0xe0/0xeb [ 130.228164] [ 130.228164] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 130.228178] _raw_spin_lock_irqsave+0x39/0x60 [ 130.228188] try_to_wake_up+0xab/0x1930 [ 130.228201] up+0x75/0xb0 [ 130.228215] __up_console_sem+0x6e/0x80 [ 130.228232] console_unlock+0x46a/0x590 [ 130.228247] vt_ioctl+0x2822/0x2ca0 [ 130.228260] tty_ioctl+0x785/0x16b0 [ 130.228271] __x64_sys_ioctl+0x19a/0x210 [ 130.228285] do_syscall_64+0x3b/0x90 [ 130.228301] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.228314] [ 130.228314] -> #0 ((console_sem).lock){....}-{2:2}: [ 130.228327] __lock_acquire+0x2a02/0x5e70 [ 130.228344] lock_acquire+0x1a2/0x530 [ 130.228360] _raw_spin_lock_irqsave+0x39/0x60 [ 130.228370] down_trylock+0xe/0x70 [ 130.228385] __down_trylock_console_sem+0x3b/0xd0 [ 130.228401] vprintk_emit+0x16b/0x560 [ 130.228417] vprintk+0x84/0xa0 [ 130.228433] _printk+0xba/0xf1 [ 130.228444] report_bug.cold+0x72/0xab [ 130.228460] handle_bug+0x3c/0x70 [ 130.228476] exc_invalid_op+0x14/0x50 [ 130.228493] asm_exc_invalid_op+0x16/0x20 [ 130.228505] group_sched_out.part.0+0x2c7/0x460 [ 130.228523] ctx_sched_out+0x8f1/0xc10 [ 130.228539] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.228550] __schedule+0xedd/0x2470 [ 130.228564] schedule+0xda/0x1b0 [ 130.228577] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.228587] syscall_exit_to_user_mode+0x19/0x40 [ 130.228600] do_syscall_64+0x48/0x90 [ 130.228616] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.228628] [ 130.228628] other info that might help us debug this: [ 130.228628] [ 130.228631] Chain exists of: [ 130.228631] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 130.228631] [ 130.228646] Possible unsafe locking scenario: [ 130.228646] [ 130.228648] CPU0 CPU1 [ 130.228651] ---- ---- [ 130.228653] lock(&ctx->lock); [ 130.228659] lock(&rq->__lock); [ 130.228665] lock(&ctx->lock); [ 130.228672] lock((console_sem).lock); [ 130.228677] [ 130.228677] *** DEADLOCK *** [ 130.228677] [ 130.228679] 2 locks held by syz-executor.3/3565: [ 130.228686] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 130.228715] #1: ffff88800edef020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.228741] [ 130.228741] stack backtrace: [ 130.228744] CPU: 1 PID: 3565 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220929 #1 [ 130.228757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.228765] Call Trace: [ 130.228769] [ 130.228773] dump_stack_lvl+0x8b/0xb3 [ 130.228791] check_noncircular+0x263/0x2e0 [ 130.228808] ? format_decode+0x26c/0xb50 [ 130.228824] ? print_circular_bug+0x450/0x450 [ 130.228841] ? enable_ptr_key_workfn+0x20/0x20 [ 130.228857] ? format_decode+0x26c/0xb50 [ 130.228875] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 130.228892] __lock_acquire+0x2a02/0x5e70 [ 130.228914] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 130.228936] lock_acquire+0x1a2/0x530 [ 130.228952] ? down_trylock+0xe/0x70 [ 130.228969] ? lock_release+0x750/0x750 [ 130.228990] ? vprintk+0x84/0xa0 [ 130.229007] _raw_spin_lock_irqsave+0x39/0x60 [ 130.229018] ? down_trylock+0xe/0x70 [ 130.229034] down_trylock+0xe/0x70 [ 130.229050] ? vprintk+0x84/0xa0 [ 130.229067] __down_trylock_console_sem+0x3b/0xd0 [ 130.229084] vprintk_emit+0x16b/0x560 [ 130.229103] vprintk+0x84/0xa0 [ 130.229120] _printk+0xba/0xf1 [ 130.229131] ? record_print_text.cold+0x16/0x16 [ 130.229147] ? report_bug.cold+0x66/0xab [ 130.229165] ? group_sched_out.part.0+0x2c7/0x460 [ 130.229183] report_bug.cold+0x72/0xab [ 130.229201] handle_bug+0x3c/0x70 [ 130.229219] exc_invalid_op+0x14/0x50 [ 130.229236] asm_exc_invalid_op+0x16/0x20 [ 130.229249] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.229269] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.229281] RSP: 0018:ffff8880406f7c48 EFLAGS: 00010006 [ 130.229290] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.229298] RDX: ffff88801a931ac0 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 130.229305] RBP: ffff88803bd20000 R08: 0000000000000005 R09: 0000000000000001 [ 130.229313] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800edef000 [ 130.229321] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 130.229332] ? group_sched_out.part.0+0x2c7/0x460 [ 130.229352] ? group_sched_out.part.0+0x2c7/0x460 [ 130.229378] ctx_sched_out+0x8f1/0xc10 [ 130.229397] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.229411] ? lock_is_held_type+0xd7/0x130 [ 130.229425] ? __perf_cgroup_move+0x160/0x160 [ 130.229436] ? set_next_entity+0x304/0x550 [ 130.229453] ? update_curr+0x267/0x740 [ 130.229472] ? lock_is_held_type+0xd7/0x130 [ 130.229486] __schedule+0xedd/0x2470 [ 130.229503] ? io_schedule_timeout+0x150/0x150 [ 130.229519] ? rcu_read_lock_sched_held+0x3e/0x80 [ 130.229541] schedule+0xda/0x1b0 [ 130.229555] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.229568] syscall_exit_to_user_mode+0x19/0x40 [ 130.229581] do_syscall_64+0x48/0x90 [ 130.229599] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.229612] RIP: 0033:0x7f42a6e54b19 [ 130.229620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.229630] RSP: 002b:00007f42a43ca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.229641] RAX: 0000000000000001 RBX: 00007f42a6f67f68 RCX: 00007f42a6e54b19 [ 130.229649] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f42a6f67f6c [ 130.229656] RBP: 00007f42a6f67f60 R08: 000000000000000e R09: 0000000000000000 [ 130.229664] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f42a6f67f6c [ 130.229671] R13: 00007fffa3a285bf R14: 00007f42a43ca300 R15: 0000000000022000 [ 130.229684] [ 130.331672] WARNING: CPU: 1 PID: 3565 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 130.333036] Modules linked in: [ 130.333528] CPU: 1 PID: 3565 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220929 #1 [ 130.334697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.336329] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.337138] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.339778] RSP: 0018:ffff8880406f7c48 EFLAGS: 00010006 [ 130.340563] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.341590] RDX: ffff88801a931ac0 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 130.342632] RBP: ffff88803bd20000 R08: 0000000000000005 R09: 0000000000000001 [ 130.343674] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800edef000 [ 130.344712] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 130.345751] FS: 00007f42a43ca700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 130.346932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.347787] CR2: 000055fb4d7fe080 CR3: 0000000040046000 CR4: 0000000000350ee0 [ 130.348827] Call Trace: [ 130.349210] [ 130.349571] ctx_sched_out+0x8f1/0xc10 [ 130.350179] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.350947] ? lock_is_held_type+0xd7/0x130 [ 130.351577] ? __perf_cgroup_move+0x160/0x160 [ 130.352238] ? set_next_entity+0x304/0x550 [ 130.352873] ? update_curr+0x267/0x740 [ 130.353480] ? lock_is_held_type+0xd7/0x130 [ 130.354117] __schedule+0xedd/0x2470 [ 130.354690] ? io_schedule_timeout+0x150/0x150 [ 130.355375] ? rcu_read_lock_sched_held+0x3e/0x80 [ 130.356104] schedule+0xda/0x1b0 [ 130.356620] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.357345] syscall_exit_to_user_mode+0x19/0x40 [ 130.358076] do_syscall_64+0x48/0x90 [ 130.358642] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.359396] RIP: 0033:0x7f42a6e54b19 [ 130.359951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.362605] RSP: 002b:00007f42a43ca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.363715] RAX: 0000000000000001 RBX: 00007f42a6f67f68 RCX: 00007f42a6e54b19 [ 130.364747] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f42a6f67f6c [ 130.365802] RBP: 00007f42a6f67f60 R08: 000000000000000e R09: 0000000000000000 [ 130.366837] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f42a6f67f6c [ 130.367880] R13: 00007fffa3a285bf R14: 00007f42a43ca300 R15: 0000000000022000 [ 130.368883] [ 130.369221] irq event stamp: 732 [ 130.369703] hardirqs last enabled at (731): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 130.370978] hardirqs last disabled at (732): [] __schedule+0x1225/0x2470 [ 130.372112] softirqs last enabled at (530): [] __irq_exit_rcu+0x11b/0x180 [ 130.373288] softirqs last disabled at (483): [] __irq_exit_rcu+0x11b/0x180 [ 130.374474] ---[ end trace 0000000000000000 ]--- 12:10:06 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000540)={0x4, 0x8, 0x0, 0x6, 0x2b, 0x3}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f9ffffffffffffff00", @ANYRES32=r0, @ANYBLOB="f5090000000000002e2f66696c653000"]) sendto$inet(r4, &(0x7f0000000fc0)="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", 0xfb, 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf0, 0x3, 0x8, 0x1, 0x0, 0x5, 0x42, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa63, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x41004, 0x6, 0x80000000, 0x3, 0x7fca, 0xffff, 0x1a9, 0x0, 0x0, 0x0, 0xdc8}, 0xffffffffffffffff, 0x9, r3, 0x8) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 12:10:07 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000540)={0x4, 0x8, 0x0, 0x6, 0x2b, 0x3}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f9ffffffffffffff00", @ANYRES32=r0, @ANYBLOB="f5090000000000002e2f66696c653000"]) sendto$inet(r4, &(0x7f0000000fc0)="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", 0xfb, 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf0, 0x3, 0x8, 0x1, 0x0, 0x5, 0x42, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa63, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x41004, 0x6, 0x80000000, 0x3, 0x7fca, 0xffff, 0x1a9, 0x0, 0x0, 0x0, 0xdc8}, 0xffffffffffffffff, 0x9, r3, 0x8) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 12:10:07 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000540)={0x4, 0x8, 0x0, 0x6, 0x2b, 0x3}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f9ffffffffffffff00", @ANYRES32=r0, @ANYBLOB="f5090000000000002e2f66696c653000"]) sendto$inet(r4, &(0x7f0000000fc0)="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", 0xfb, 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf0, 0x3, 0x8, 0x1, 0x0, 0x5, 0x42, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa63, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x41004, 0x6, 0x80000000, 0x3, 0x7fca, 0xffff, 0x1a9, 0x0, 0x0, 0x0, 0xdc8}, 0xffffffffffffffff, 0x9, r3, 0x8) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 12:10:07 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000540)={0x4, 0x8, 0x0, 0x6, 0x2b, 0x3}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f9ffffffffffffff00", @ANYRES32=r0, @ANYBLOB="f5090000000000002e2f66696c653000"]) sendto$inet(r4, &(0x7f0000000fc0)="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", 0xfb, 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf0, 0x3, 0x8, 0x1, 0x0, 0x5, 0x42, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa63, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x41004, 0x6, 0x80000000, 0x3, 0x7fca, 0xffff, 0x1a9, 0x0, 0x0, 0x0, 0xdc8}, 0xffffffffffffffff, 0x9, r3, 0x8) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 131.346070] hrtimer: interrupt took 19056 ns 12:10:07 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000540)={0x4, 0x8, 0x0, 0x6, 0x2b, 0x3}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f9ffffffffffffff00", @ANYRES32=r0, @ANYBLOB="f5090000000000002e2f66696c653000"]) sendto$inet(r4, &(0x7f0000000fc0)="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", 0xfb, 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf0, 0x3, 0x8, 0x1, 0x0, 0x5, 0x42, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa63, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x41004, 0x6, 0x80000000, 0x3, 0x7fca, 0xffff, 0x1a9, 0x0, 0x0, 0x0, 0xdc8}, 0xffffffffffffffff, 0x9, r3, 0x8) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 12:10:07 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000540)={0x4, 0x8, 0x0, 0x6, 0x2b, 0x3}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f9ffffffffffffff00", @ANYRES32=r0, @ANYBLOB="f5090000000000002e2f66696c653000"]) sendto$inet(r4, &(0x7f0000000fc0)="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", 0xfb, 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf0, 0x3, 0x8, 0x1, 0x0, 0x5, 0x42, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa63, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x41004, 0x6, 0x80000000, 0x3, 0x7fca, 0xffff, 0x1a9, 0x0, 0x0, 0x0, 0xdc8}, 0xffffffffffffffff, 0x9, r3, 0x8) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 137.362118] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 139.541181] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 139.542559] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 139.544913] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 139.547100] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 139.549236] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 139.550527] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 139.553889] Bluetooth: hci7: HCI_REQ-0x0c1a VM DIAGNOSIS: 12:10:06 Registers: info registers vcpu 0 RAX=0000000080000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88803f5c5040 RSI=ffffffff81e58fc4 RDI=0000000000000007 RBP=ffff88801b631900 RSP=ffff88801827fca8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000001 R14=ffff88800d630c00 R15=0000000000000002 RIP=ffffffff81460cd7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f33e9e01028 CR3=0000000018642000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000002b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff8880406f7690 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002b R11=0000000000000001 R12=000000000000002b R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f42a43ca700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fb4d7fe080 CR3=0000000040046000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f42a6f3b7c0 00007f42a6f3b7c8 YMM02=0000000000000000 0000000000000000 00007f42a6f3b7e0 00007f42a6f3b7c0 YMM03=0000000000000000 0000000000000000 00007f42a6f3b7c8 00007f42a6f3b7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000