Warning: Permanently added '[localhost]:46315' (ECDSA) to the list of known hosts. 2022/10/06 18:50:14 fuzzer started 2022/10/06 18:50:15 dialing manager at localhost:37161 syzkaller login: [ 36.833435] cgroup: Unknown subsys name 'net' [ 36.912637] cgroup: Unknown subsys name 'rlimit' 2022/10/06 18:50:29 syscalls: 2215 2022/10/06 18:50:29 code coverage: enabled 2022/10/06 18:50:29 comparison tracing: enabled 2022/10/06 18:50:29 extra coverage: enabled 2022/10/06 18:50:29 setuid sandbox: enabled 2022/10/06 18:50:29 namespace sandbox: enabled 2022/10/06 18:50:29 Android sandbox: enabled 2022/10/06 18:50:29 fault injection: enabled 2022/10/06 18:50:29 leak checking: enabled 2022/10/06 18:50:29 net packet injection: enabled 2022/10/06 18:50:29 net device setup: enabled 2022/10/06 18:50:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/06 18:50:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/06 18:50:29 USB emulation: enabled 2022/10/06 18:50:29 hci packet injection: enabled 2022/10/06 18:50:29 wifi device emulation: failed to parse kernel version (6.0.0-next-20221006) 2022/10/06 18:50:29 802.15.4 emulation: enabled 2022/10/06 18:50:29 fetching corpus: 50, signal 23524/25281 (executing program) 2022/10/06 18:50:29 fetching corpus: 100, signal 32662/35970 (executing program) 2022/10/06 18:50:29 fetching corpus: 150, signal 43840/48465 (executing program) 2022/10/06 18:50:30 fetching corpus: 200, signal 51035/56915 (executing program) 2022/10/06 18:50:30 fetching corpus: 250, signal 53801/61011 (executing program) 2022/10/06 18:50:30 fetching corpus: 300, signal 57494/65943 (executing program) 2022/10/06 18:50:30 fetching corpus: 350, signal 62121/71646 (executing program) 2022/10/06 18:50:30 fetching corpus: 400, signal 65447/76075 (executing program) 2022/10/06 18:50:30 fetching corpus: 450, signal 68847/80494 (executing program) 2022/10/06 18:50:30 fetching corpus: 500, signal 72439/85048 (executing program) 2022/10/06 18:50:30 fetching corpus: 550, signal 76333/89725 (executing program) 2022/10/06 18:50:30 fetching corpus: 600, signal 79994/94098 (executing program) 2022/10/06 18:50:31 fetching corpus: 650, signal 82903/97832 (executing program) 2022/10/06 18:50:31 fetching corpus: 700, signal 85604/101323 (executing program) 2022/10/06 18:50:31 fetching corpus: 750, signal 88649/105036 (executing program) 2022/10/06 18:50:31 fetching corpus: 800, signal 92382/109224 (executing program) 2022/10/06 18:50:31 fetching corpus: 850, signal 95327/112697 (executing program) 2022/10/06 18:50:31 fetching corpus: 900, signal 98327/116155 (executing program) 2022/10/06 18:50:31 fetching corpus: 950, signal 101407/119640 (executing program) 2022/10/06 18:50:31 fetching corpus: 1000, signal 102437/121433 (executing program) 2022/10/06 18:50:31 fetching corpus: 1050, signal 104951/124368 (executing program) 2022/10/06 18:50:32 fetching corpus: 1100, signal 106286/126358 (executing program) 2022/10/06 18:50:32 fetching corpus: 1150, signal 107987/128514 (executing program) 2022/10/06 18:50:32 fetching corpus: 1200, signal 109535/130573 (executing program) 2022/10/06 18:50:32 fetching corpus: 1250, signal 110711/132322 (executing program) 2022/10/06 18:50:32 fetching corpus: 1300, signal 111586/133809 (executing program) 2022/10/06 18:50:32 fetching corpus: 1350, signal 112961/135623 (executing program) 2022/10/06 18:50:32 fetching corpus: 1400, signal 114371/137433 (executing program) 2022/10/06 18:50:32 fetching corpus: 1450, signal 115790/139254 (executing program) 2022/10/06 18:50:32 fetching corpus: 1500, signal 116996/140897 (executing program) 2022/10/06 18:50:33 fetching corpus: 1550, signal 118343/142566 (executing program) 2022/10/06 18:50:33 fetching corpus: 1600, signal 120271/144638 (executing program) 2022/10/06 18:50:33 fetching corpus: 1650, signal 121598/146246 (executing program) 2022/10/06 18:50:33 fetching corpus: 1700, signal 123723/148352 (executing program) 2022/10/06 18:50:33 fetching corpus: 1750, signal 124913/149868 (executing program) 2022/10/06 18:50:33 fetching corpus: 1800, signal 126697/151688 (executing program) 2022/10/06 18:50:33 fetching corpus: 1850, signal 127789/153030 (executing program) 2022/10/06 18:50:33 fetching corpus: 1900, signal 128970/154410 (executing program) 2022/10/06 18:50:33 fetching corpus: 1950, signal 129788/155636 (executing program) 2022/10/06 18:50:34 fetching corpus: 2000, signal 130852/156955 (executing program) 2022/10/06 18:50:34 fetching corpus: 2050, signal 131876/158194 (executing program) 2022/10/06 18:50:34 fetching corpus: 2100, signal 133490/159726 (executing program) 2022/10/06 18:50:34 fetching corpus: 2150, signal 135169/161249 (executing program) 2022/10/06 18:50:34 fetching corpus: 2200, signal 136095/162377 (executing program) 2022/10/06 18:50:34 fetching corpus: 2250, signal 137146/163525 (executing program) 2022/10/06 18:50:34 fetching corpus: 2300, signal 137836/164476 (executing program) 2022/10/06 18:50:34 fetching corpus: 2350, signal 138566/165425 (executing program) 2022/10/06 18:50:34 fetching corpus: 2400, signal 140103/166780 (executing program) 2022/10/06 18:50:35 fetching corpus: 2450, signal 141564/168059 (executing program) 2022/10/06 18:50:35 fetching corpus: 2500, signal 142525/169057 (executing program) 2022/10/06 18:50:35 fetching corpus: 2550, signal 143758/170192 (executing program) 2022/10/06 18:50:35 fetching corpus: 2600, signal 144272/171004 (executing program) 2022/10/06 18:50:35 fetching corpus: 2650, signal 145219/171902 (executing program) 2022/10/06 18:50:35 fetching corpus: 2700, signal 145656/172576 (executing program) 2022/10/06 18:50:35 fetching corpus: 2750, signal 146767/173529 (executing program) 2022/10/06 18:50:35 fetching corpus: 2800, signal 147199/174216 (executing program) 2022/10/06 18:50:35 fetching corpus: 2850, signal 147856/174907 (executing program) 2022/10/06 18:50:35 fetching corpus: 2900, signal 148398/175622 (executing program) 2022/10/06 18:50:35 fetching corpus: 2950, signal 148851/176311 (executing program) 2022/10/06 18:50:36 fetching corpus: 3000, signal 149544/177043 (executing program) 2022/10/06 18:50:36 fetching corpus: 3050, signal 150877/177995 (executing program) 2022/10/06 18:50:36 fetching corpus: 3100, signal 151599/178685 (executing program) 2022/10/06 18:50:36 fetching corpus: 3150, signal 152085/179319 (executing program) 2022/10/06 18:50:36 fetching corpus: 3200, signal 152964/180062 (executing program) 2022/10/06 18:50:36 fetching corpus: 3250, signal 153609/180693 (executing program) 2022/10/06 18:50:36 fetching corpus: 3300, signal 154188/181285 (executing program) 2022/10/06 18:50:36 fetching corpus: 3350, signal 154786/181869 (executing program) 2022/10/06 18:50:36 fetching corpus: 3400, signal 156491/182773 (executing program) 2022/10/06 18:50:36 fetching corpus: 3450, signal 157063/183321 (executing program) 2022/10/06 18:50:37 fetching corpus: 3500, signal 157700/183864 (executing program) 2022/10/06 18:50:37 fetching corpus: 3550, signal 158407/184457 (executing program) 2022/10/06 18:50:37 fetching corpus: 3600, signal 159150/185006 (executing program) 2022/10/06 18:50:37 fetching corpus: 3650, signal 160012/185558 (executing program) 2022/10/06 18:50:37 fetching corpus: 3700, signal 160981/186142 (executing program) 2022/10/06 18:50:37 fetching corpus: 3750, signal 162188/186729 (executing program) 2022/10/06 18:50:37 fetching corpus: 3800, signal 162917/187204 (executing program) 2022/10/06 18:50:37 fetching corpus: 3850, signal 163848/187741 (executing program) 2022/10/06 18:50:37 fetching corpus: 3900, signal 164829/188236 (executing program) 2022/10/06 18:50:38 fetching corpus: 3950, signal 165434/188653 (executing program) 2022/10/06 18:50:38 fetching corpus: 4000, signal 165919/189015 (executing program) 2022/10/06 18:50:38 fetching corpus: 4050, signal 166523/189392 (executing program) 2022/10/06 18:50:38 fetching corpus: 4100, signal 167082/189783 (executing program) 2022/10/06 18:50:38 fetching corpus: 4150, signal 167779/190169 (executing program) 2022/10/06 18:50:38 fetching corpus: 4200, signal 169014/190629 (executing program) 2022/10/06 18:50:38 fetching corpus: 4250, signal 169462/190965 (executing program) 2022/10/06 18:50:38 fetching corpus: 4300, signal 169791/191269 (executing program) 2022/10/06 18:50:38 fetching corpus: 4350, signal 171260/191664 (executing program) 2022/10/06 18:50:39 fetching corpus: 4400, signal 172073/191946 (executing program) 2022/10/06 18:50:39 fetching corpus: 4450, signal 173269/192265 (executing program) 2022/10/06 18:50:39 fetching corpus: 4500, signal 174149/192536 (executing program) 2022/10/06 18:50:39 fetching corpus: 4550, signal 175211/192801 (executing program) 2022/10/06 18:50:39 fetching corpus: 4600, signal 175742/193018 (executing program) 2022/10/06 18:50:39 fetching corpus: 4650, signal 176404/193263 (executing program) 2022/10/06 18:50:39 fetching corpus: 4700, signal 177084/193450 (executing program) 2022/10/06 18:50:39 fetching corpus: 4750, signal 177983/193626 (executing program) 2022/10/06 18:50:40 fetching corpus: 4800, signal 178264/193788 (executing program) 2022/10/06 18:50:40 fetching corpus: 4850, signal 178538/193800 (executing program) 2022/10/06 18:50:40 fetching corpus: 4900, signal 179257/193800 (executing program) 2022/10/06 18:50:40 fetching corpus: 4950, signal 179738/193800 (executing program) 2022/10/06 18:50:40 fetching corpus: 5000, signal 180113/193800 (executing program) 2022/10/06 18:50:40 fetching corpus: 5050, signal 180433/193801 (executing program) 2022/10/06 18:50:40 fetching corpus: 5100, signal 180727/193802 (executing program) 2022/10/06 18:50:40 fetching corpus: 5150, signal 181278/193804 (executing program) 2022/10/06 18:50:40 fetching corpus: 5200, signal 181813/193806 (executing program) 2022/10/06 18:50:40 fetching corpus: 5228, signal 182059/193806 (executing program) 2022/10/06 18:50:40 fetching corpus: 5228, signal 182059/193806 (executing program) 2022/10/06 18:50:43 starting 8 fuzzer processes 18:50:43 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x800) fstatfs(r0, &(0x7f0000000040)=""/177) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000200)={{r2}, "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"}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000025c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002580)={&(0x7f0000001280)={0x12fc, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x11dc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "df3ae7c716b6d5efc26682907764b63671890fac8c3db99bf6f84ba2a5f0897307"}}, @TIPC_NLA_NODE_ID={0x33, 0x3, "ccea0509c4cd7573c46bd75ad506a527b0cf2b0c1a09edf5f43dc90fe0f478d5706e30ea9a474370076a32da68f9fe"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "5cf64cdf3d1f6a13ed292ab58a1a404a401cf80e357429c210d05640cc37e7a328d565da6c12b701f0a7f2ce4ac7723f937a85c01a5fba7ab256fbe9cdd9e7a1bd1a3578fc6f3c8faa97b28bf4eb9bfd4d8520f4bbf8cb1fc048323858f34331f71d03a88e014fc9d6a49950abbbcc41132b2b2647c3dcb1f13aeb9705c34331919aff5e5ddab6dc1b74ab44966074d8e126f4e4553dbb0317bdbf392300a274e77d53"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x20, 0x3, "43dedd60bbeb865310734f06d9e774d0113fabec3afa426e26ab183c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x40, 0x3, "33646036d5aa63b3cd07a5e0085046bcb2c5df14b757e491a27a543f820cee62e04c51f63dc41e647f5bfd4228a158e7e08e8b20da2cc2745228e9f4"}, @TIPC_NLA_NODE_ID={0x3a, 0x3, "be6408ee739142a9b24c2bed34cbeea8f66392f789b2583549cb4184f8dd8aaf38457f5f2b76149fe4a092f896b85bfd312c20d9c28f"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x834}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x24000000}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x364}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3dfa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x105}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x12fc}, 0x1, 0x0, 0x0, 0x4}, 0x801) copy_file_range(r2, &(0x7f0000002600)=0x5, r2, &(0x7f0000002640)=0xc2, 0xffffffffffff384c, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000002680)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000002880)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002840)={&(0x7f0000002700)={0x134, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}}}}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa1b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbc6e}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x134}}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000002900)=0x27, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000002940)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r6 = accept$inet(r4, &(0x7f0000002980), &(0x7f00000029c0)=0x10) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000002a00)=0x8) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000002a40)='syz1\x00', &(0x7f0000002a80)='./file0\x00', r4) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000002ac0)=0xfc45a9d5aab69a2c) 18:50:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501002) syncfs(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40800, 0x80) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f0000000180)=""/30, 0x1e}], 0x2, 0x5, 0x400, 0x2) syz_io_uring_setup(0x33e4, &(0x7f0000000200)={0x0, 0xa472, 0x18, 0x3, 0x2b, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x6888, &(0x7f0000000300)={0x0, 0x59a4, 0x4, 0x1, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000440)={{0x0, 0x9c}, {0x1, 0x8}, 0x2, 0x6, 0x8}) r3 = fsmount(r1, 0x0, 0x2) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x17c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xda, 0xa8, @random="fe46ba05ed8c0ab1395f43077c936136274edc55ee7dbf69fe78252b17ce4dfc95751f94f8183d6bec406378f0cdb707a3146ba7b53b9b6f06e8f98f5da0bf4f43b3d33aa9af45656d1ee89c36ed25ae339832b0c7315361fb8466aa5078280dbc438d757c7300be2091284511b0f7954375635db746546cccf93db61ff0bd0f3185c16066306c9993a5eb92572b37f7fc112ee0822d2d1451e9ecb23904f66f404aa323acd5aaba8416573a7f4b832f41decaff2f0d622e125c4585d1850b1983f7a23f117d27d79949e60ee3a9e6006eda366aac10"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0x17c}}, 0x8c4) r4 = syz_mount_image$msdos(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x80000001, 0x3, &(0x7f0000000980)=[{&(0x7f0000000780)="b1dd988adcc78b4efd598d6cbeeed708c53fbef5a2c2d30edbc2cebb911c9c105fd65eb26a6bb5d48d51b86105a2473f7561462ef5d8ce68831c3dce3ff5cc6982a1c6111d477d6c1da97d45c5780b595dd65ef9de879a5fc6f575654dad66968ec6454cabbb09b745732836f78c3ffc1e020b0d8390164b98e7d28c8a7fc596e6a471768240c4345dd20f9e2fd187a31ed1aa58188378669e2605b54766771822834d6231209bca09fda99948b5a8f43936dc37c6628180e068d7b849f9ac77a74cc9783839865ad63b30185c3db64d9dcc4e4d4e9afcb1cfe315ffc09c08a053d238671936242830f7e4df132a95f9f2", 0xf1, 0x6}, {&(0x7f0000000880)="619ac8ed2b2a724dbf48c2bafd99adc67f50e9f8956dbba58937ff7a0bd5556ec443beceba0d489f82ba7358476ce5a34870fa96bb14dd03f5d20c4bb7df461ac8c69d2f3704e901", 0x48, 0x8001}, {&(0x7f0000000900)="00af9f056744a8be701f867b1cbfa2973577ca425aed2bee56ee9c65cbc8fed7b6c22c6cf1c2d13d4302e0bcb2a40347a314e7853b3f1237c7b15173f1aeffe7cfd5f83abe18f747aed6c4d87ec42bdfad4b37aceb1515189b45ab173814a0acb0d6fd4b8adbdb76d9c9a1cffd1ad980", 0x70, 0x6}], 0x3910020, &(0x7f0000000a00)={[{@dots}, {@nodots}, {@fat=@check_normal}, {@dots}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_lt}, {@obj_user={'obj_user', 0x3d, 'netdevsim\x00'}}]}) mknodat$null(r4, &(0x7f0000000ac0)='./file0\x00', 0x20, 0x103) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11f5}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1304}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8084) truncate(&(0x7f0000000c40)='./file0\x00', 0x4) unlinkat(r3, &(0x7f0000000c80)='./file0\x00', 0x200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000cc0)={{0x3, 0x4}, {0x2, 0x45}, 0x0, 0x1}) accept4$unix(r3, &(0x7f0000000d40)=@abs, &(0x7f0000000dc0)=0x6e, 0x0) dup(0xffffffffffffffff) 18:50:43 executing program 2: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 18:50:43 executing program 3: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x48000, 0x59, 0x8, 0x4, 0x8000, 0x3ff}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/153) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x55, 0x8, 0x200, {0x1ff, 0x1}, {0xb4, 0x6}, @period={0x59, 0x3da, 0xff, 0x5, 0x800, {0x0, 0xfff, 0x417, 0x5}, 0x3, &(0x7f0000000140)=[0x8, 0x400, 0x7]}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000200)) r2 = syz_mount_image$nfs4(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x3f, 0x5, &(0x7f00000005c0)=[{&(0x7f00000002c0)="d0cf5f5036f53331e35aa4b44c677484c1d117ffa74d9cd87d1084e51a41915dd0a9368a426a6ec729ac3e3bf843748e26f4785983c0a066023c0c5284657b0aa88c79f6cfa79b85809f3bdcd9ce21d74f45c0e0426f3efc7ab509fefff1548ab27cb4f6163dffee323010438092c1ac3403fbdc3cc299a02f6b201c122d", 0x7e, 0xd456}, {&(0x7f0000000340)="29bbecf1fc6ab1308734e1844fa875c1c32e19f6ec7451d4b018dcba90a03da6583adf52abc8b4700d48fd9b8aca900b04f78613985d20bd8d3138317ad1e92f112dc4003ec4c0a9f0c8224b1eff99d87618f935b09e805a11f08f135b8d229df750842f0c53663d21b1fbb8deb8a697795eabfd90484f819659f2c3518279070d07295578e4f5e813864c6c1006e656433c39c704bcf2", 0x97}, {&(0x7f0000000400)="5b80fc54c74082319070a66d1165cfbd70089bf6f381ef59981f71f0bb824a4b58f30277b6a52ea578ad83d86a82788fd59d4b52c9744fe4c1c2a1e8bded55154c71c9513c6e775d7973a1501eef6577f97da622ad9500c6b5393b9a1ea4bfda472da1757b168e465eb8a216aff3a15cb6dddef4479d691362f7b1", 0x7b, 0x8}, {&(0x7f0000000480)="78409601bb6d99d61f205dc39e5ff8e1755430b54599622bdc2a3614d41c84cc67aded7ebb77220086d9315b7818eecebc0731005ce2ad3047c379866dafa4accb894bf0e20ae38814163f6bf438a03b48ca2965bfb91bb1e734897c8547db5660cc347b752dd8", 0x67}, {&(0x7f0000000500)="fd476395884fcec263e882d17b4bb1615a2c1f55fc31ce4d5f96c31b7630a840bbfe7d84a2257a352d9d2f455f5651c3e3cfb7845de0eb2aa6cfdee953b71d1ddcab568a05279fac76480dd30e60b6a9722f42ff9f31e9d4a593daa1900a892d925df6ae6c7e00d42d23aa2b92895d2ca0a5bbe11bf00a8eeca9b2951edf4425dd8339f4fae09199eeea3199e6568f27dc5518bacd16bf4163a7b892d980c1841b087177408756461f158b1536", 0xad, 0xac}], 0x111048, &(0x7f0000000640)={[{']\xf7,@/+$-\xda*-\'-]-s,#)-'}, {'-.}u'}], [{@fsname={'fsname', 0x3d, '/dev/full\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'S\'\'@'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) r3 = signalfd4(r1, &(0x7f0000000700)={[0x8]}, 0x8, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000814}, 0x20000000) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x3) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder-control\x00', 0x2, 0x0) flistxattr(r4, &(0x7f0000000880)=""/5, 0x5) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r3) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r7, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000890}, 0x800) r8 = openat$cgroup(r3, &(0x7f0000000c80)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000001d80)={{r2}, 0x0, 0x6, @inherit={0x50, &(0x7f0000000ec0)={0x1, 0x1, 0x80, 0x4, {0x18, 0xad, 0x1d0f, 0x0, 0xe5c5}, [0x6cc2]}}, @devid}) 18:50:43 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x185200, 0x0) fcntl$getown(r0, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xfffffffffffffff7, 0x3, 0x1}) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) readahead(r2, 0x2, 0xfffffffffffffffd) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000140)={0x4, 0x1, 'client0\x00', 0xffffffff80000001, "274c98e0d291c9b6", "8a03144ed10bb24866e55e420265e8c247acb3cdb0e02d4cee02fe0bc99ffdad", 0x0, 0xca9}) r4 = io_uring_setup(0x79ff, &(0x7f0000000200)={0x0, 0xb942, 0x2, 0x3, 0x3bf, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x20801) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000000300)={0x6, 0x6, 0x9, {0x178, 0x9}, 0x10000, 0xfffff000}) r7 = syz_io_uring_setup(0x4511, &(0x7f0000000380)={0x0, 0xcaf1, 0x20, 0x0, 0x19b, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000480)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r6, 0xffffffffffff0000, 0x0, 0x401, 0x0, 0x0, {0x0, r9}}, 0x635e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, &(0x7f0000000500)={0x0, 0xb5, [0x4, 0x0, 0x400, 0x4, 0x7f, 0x7]}) fchmod(0xffffffffffffffff, 0x20) r10 = syz_open_dev$vcsu(&(0x7f0000000540), 0x4, 0x242703) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000580)={0x80, @tick=0x2, 0x20, {0x9, 0x6d}, 0x3f, 0x1}) [ 64.722554] audit: type=1400 audit(1665082243.191:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:50:43 executing program 5: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0xa7979000) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xbf1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xf9ba279af6f4610f) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x240, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x255d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb41}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x84}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9e3a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff078}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcfc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x404}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x35d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x10040080}, 0x801) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x1) socket$netlink(0x10, 0x3, 0x5) r2 = syz_open_dev$vcsn(&(0x7f0000000700), 0x400, 0x40000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) r5 = dup3(r0, r3, 0x80000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x969b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x81) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000050) r6 = openat$cgroup_ro(r4, &(0x7f00000009c0)='rdma.current\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r7, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3ff, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x8000) 18:50:43 executing program 7: keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 18:50:43 executing program 6: ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000600)={0x9, &(0x7f00000004c0)=[{0x80, 0xde, &(0x7f0000000000)="4e4464af05d0431dde2ee8b960a95a0402c43e34d52925055c747a75de658ffe45dc8cc1e2ae0908038f46f9d0d97b08c0c3b22e67b55f9b64236222e17f0db6b579649a924c09158e7d1674947a680a12735d400b2a6c599da963ff9bac2c1277acaaa217eecc7ae13f49986e74e673ec97f8b6e3f1533d9b5e7db470fe61d3fc35ac7488498f675ef3757dde6e66b963d3f0dedc544a1da1a64035792ba37f386fc32fbab069f643bf901eee5f61032e77cf7cc7b52a56b24f632ac314f5bc59b6b7f515e08658deb18513655bbae1c3e6f0c86f686deec2c2f51daab5", 0x1}, {0x0, 0x62, &(0x7f0000000100)="e0c5b7d0a57da8122c50b5200cc8b7ed26039a658343f6c342cfa39a868520fe14bf9ed32f31cc737d51d0c16c3ff20fa964ddfe6a2d91d17890eb1cd38d7e79b36c58253867ae8da470b951d255456cc358cbedd0e15c43dbaa1942b7af40ad6fd5", 0x1, 0x1}, {0x7, 0xd9, &(0x7f0000000180)="a5b85b1d6933478b91d120ec098e2d6d92e0a1fcdd48c7c35fd0602d8f78042ddaecf701211b9505bee2692dfa75cc15d5bc9304592fb136accb2959f4f8ac0ca2e52f811979b2e0a659015618e76dd5fdbc5c6c425bc8e8bd55e5abd5013b70165939540f92ca66efc99eef00b65623c6547079b6be428383f1f66f82fa10577e22f84d5c3d7322825595c6a846fd50a3a43b60776e3e1120dc61cfefadeb7607c4fe1968e6ac6e819207be337392c77d417aa68b7e8dc648cfae8408d6ef4fdfb82be5243419f6a1be1bc15fd4909fc415981b5398d9fa7e"}, {0x3, 0x6f, &(0x7f0000000280)="9b5af8ba4fcc5ff829311bef746445ce6bc74d23de07de010cb45e553ad172940de8229a57b40aa002cabeb791e4a926f120cf66c99650101c9be8a48b2342979cdbd920f141a66be23a875c24843d7685cc991ea75e0f5e61dfd2218270a445b114d53bcc5238b7370f3fcc2a7d79", 0x1}, {0x1f, 0x36, &(0x7f0000000300)="5ca3c8d143cdb71f626997d5b28c473b64509c9b25ad2bdf6c56bccf6d2c3b21f1e9ab594273d8edacc83f9af39c72ed4e25d4ce366c"}, {0x7ff, 0x2a, &(0x7f0000000340)="b32b311ab169cb116f82774e6074ea69a8a7039959571192f32103b0716af89e5fb74ca7eea81952c3ac", 0x0, 0x1}, {0x5, 0x3c, &(0x7f0000000380)="db44efebecf803304229b34b1f773797969ff55d3e92c2233af9d5b675f98543e32a6521520fd4517f5e8520c27ac3823d72c521058546db1993b6db"}, {0x400, 0x76, &(0x7f00000003c0)="e169ae5bf4a6c6f1d39dea478c53ca13d4c4ebe55a663c4da39a7f9fd8ebbadab5d4316449a84b12972bdd70922da80072090a1fadbf750630301c6565c61386734f5207bcd1584a47fb920b596bb9f04791051ece7d9710f1c2009bff5a15fe1e63e7ec1b42a051ee7f7bd2db495913a67d19464f7c", 0x1, 0x1}, {0x4, 0x55, &(0x7f0000000440)="2eb492822e400c65852a433431003821664f17cb0e2ffd187d50179a9415e51772336c7b501c81af99032b1c3cd51941dc4790a3752df7a931dd03c0d182193c13de98d86f0af540431b31cbe6b8299d5d28d1d05a", 0x1, 0x1}]}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'syztnl0\x00', r0, 0x2f, 0x9, 0x8, 0x7, 0x4, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x0, 0x8, 0x4}}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000007c0)) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000840)={0x2, 0x10, '\x00', 0x1, &(0x7f0000000800)=[0x0, 0x0]}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000880)=0x8001, 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x8420, 0x0) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{&(0x7f0000000900)={0xa, 0x4e21, 0xe2a, @empty, 0xfffffff9}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000940)="4cef4a2771824aa290a9a43a37b68b709651d5bd8cfd42aa7a85b9e7ea7c53", 0x1f}, {&(0x7f0000000980)="9170b4a64568fde4c14a8da09d0a8afbee1013b3075b763a912851e590ed4204f8cd5a9dc28b9b3b0ff2ace7433b692f78fed2133a790144ff0ef772c7f7e1d1c303196695a21600b198ecc3a79f1d7adfa3da4880e792db564632cbd5a1f5254ae092ec52ed87468f2abf7bf0b8e7a4ffb1ec89567505c0f119f1c1b39b855a1854d053187c2305b91ef0a04fd08654dea8e98547f852c15e0ad5ddefcb7358a4e3b3b85034f5d80d878033a07767e0d4a7cf9538dcfa6a1f5dc964021aa37138f339c891a0f0fdcb29fc935ad4c85da50d69a61d671649b8baa8e7e09713b8ac27ceb0e15c8d6b04be2199b8202609c0a372b97ddcaeea145d2b7f4890", 0xfe}], 0x2, &(0x7f0000000ac0)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x40}}], 0x30}}], 0x1, 0x4004800) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b40), 0x80) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r2, {0xffffff3f, 0x80000000}}, '.\x00'}) open_by_handle_at(r3, &(0x7f0000000bc0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x6, 0xfffffffffffffffb, 0x4, 0x3}}, 0x84800) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6_vti0\x00', r0, 0x29, 0x81, 0x20, 0xffffffa0, 0x10, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, 0x20, 0x7, 0x200, 0x5}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) dup2(r1, r4) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x10000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000d00), 0x40002, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000d40)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000d80)={{0x0, 0x8000, 0x200, 0x7, 0x1, 0x100000000, 0x100000000, 0x1000, 0x1, 0x5a2, 0x89b, 0x0, 0x60000000, 0x43b, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000006fbc0)={0x9, [{r6}], 0x81, "a1422ce373ae5f"}) [ 66.037374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.039077] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.041077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.042674] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.045244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.046355] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.047968] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.049250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.050423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.052085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.054573] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.066371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.068976] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.072061] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.074283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.074338] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.077665] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.079104] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.079522] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.081192] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.081729] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.083217] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.087865] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.089667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.090601] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.091683] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.091886] Bluetooth: hci5: HCI_REQ-0x0c1a [ 66.092680] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.094652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.096072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.096148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.101516] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.104305] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.107858] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.108543] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.242585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.246059] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.254359] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.263611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.270998] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.277026] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.318885] Bluetooth: hci4: HCI_REQ-0x0c1a [ 68.167346] Bluetooth: hci0: command 0x0409 tx timeout [ 68.167366] Bluetooth: hci3: command 0x0409 tx timeout [ 68.168043] Bluetooth: hci5: command 0x0409 tx timeout [ 68.168804] Bluetooth: hci2: command 0x0409 tx timeout [ 68.169339] Bluetooth: hci1: command 0x0409 tx timeout [ 68.169934] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 68.171400] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 68.358847] Bluetooth: hci4: command 0x0409 tx timeout [ 70.214846] Bluetooth: hci2: command 0x041b tx timeout [ 70.215404] Bluetooth: hci5: command 0x041b tx timeout [ 70.216156] Bluetooth: hci3: command 0x041b tx timeout [ 70.216654] Bluetooth: hci0: command 0x041b tx timeout [ 70.217183] Bluetooth: hci1: command 0x041b tx timeout [ 70.406803] Bluetooth: hci4: command 0x041b tx timeout [ 72.263820] Bluetooth: hci1: command 0x040f tx timeout [ 72.263850] Bluetooth: hci0: command 0x040f tx timeout [ 72.264228] Bluetooth: hci3: command 0x040f tx timeout [ 72.264619] Bluetooth: hci5: command 0x040f tx timeout [ 72.264977] Bluetooth: hci2: command 0x040f tx timeout [ 72.455845] Bluetooth: hci4: command 0x040f tx timeout [ 73.415808] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 73.416554] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 74.310825] Bluetooth: hci5: command 0x0419 tx timeout [ 74.311828] Bluetooth: hci2: command 0x0419 tx timeout [ 74.312184] Bluetooth: hci3: command 0x0419 tx timeout [ 74.312537] Bluetooth: hci0: command 0x0419 tx timeout [ 74.312919] Bluetooth: hci1: command 0x0419 tx timeout [ 74.503165] Bluetooth: hci4: command 0x0419 tx timeout [ 76.457233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 76.463682] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 76.467279] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 76.494486] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 76.503807] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 76.507004] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 76.511978] Bluetooth: hci7: HCI_REQ-0x0c1a [ 78.214995] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 78.534868] Bluetooth: hci7: command 0x0409 tx timeout [ 80.582837] Bluetooth: hci7: command 0x041b tx timeout [ 81.101006] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.102693] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.105272] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.141328] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.143142] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.145098] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.152839] Bluetooth: hci6: HCI_REQ-0x0c1a [ 82.630813] Bluetooth: hci7: command 0x040f tx timeout [ 83.207862] Bluetooth: hci6: command 0x0409 tx timeout [ 84.679026] Bluetooth: hci7: command 0x0419 tx timeout [ 85.254831] Bluetooth: hci6: command 0x041b tx timeout [ 87.302824] Bluetooth: hci6: command 0x040f tx timeout [ 89.350825] Bluetooth: hci6: command 0x0419 tx timeout 18:51:34 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x440603, 0x0) openat(r1, &(0x7f0000000200)='./file0\x00', 0x40, 0x102) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB='all,ap\a\x00aise,permit_directio,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c61707072616973652c7375626a5f757365723d295b268b3a23c7282c00"]) [ 115.684587] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 115.705776] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 18:51:34 executing program 7: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) write$binfmt_aout(r1, &(0x7f0000000000)={{0xcc, 0x4, 0x7f, 0x1c1, 0x8d, 0x5, 0x17c, 0x7}, "3d1016da4934d8e4058e1c1b8e5d9d58fd11b3f19c9eb6d153f8d83152ec307562a6727fb1b2d740abc3c0b6f4c345c2c61ffb69e224adab338ef15c70e437d2e3f78c963a32cc81038c840df852301871706dd4b91a5a185fae25dc0b9851f1c9339dace580bc65bf0c64d91160d974c7635aed36dad1a1431072f4f42fc1f161e565a3ef84a698d27ce80efa0b2bbd3ec2ac6a42113450316a498c6c9e100bdb670d0e30e952fe35d4e209eb7f8fc98bfc9d9406056f74e13ad5cdc05c6253956a"}, 0xe2) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x1ac0, &(0x7f0000001080)={0x0, 0xe628, 0x0, 0x0, 0x10010a}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001100), &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x80010, r3, 0x10000000) r4 = socket$unix(0x1, 0x1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r4, 0x0}]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {r0}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x100010, r3, 0x10000000) [ 115.887001] Zero length message leads to an empty skb 18:51:34 executing program 7: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) write$binfmt_aout(r1, &(0x7f0000000000)={{0xcc, 0x4, 0x7f, 0x1c1, 0x8d, 0x5, 0x17c, 0x7}, "3d1016da4934d8e4058e1c1b8e5d9d58fd11b3f19c9eb6d153f8d83152ec307562a6727fb1b2d740abc3c0b6f4c345c2c61ffb69e224adab338ef15c70e437d2e3f78c963a32cc81038c840df852301871706dd4b91a5a185fae25dc0b9851f1c9339dace580bc65bf0c64d91160d974c7635aed36dad1a1431072f4f42fc1f161e565a3ef84a698d27ce80efa0b2bbd3ec2ac6a42113450316a498c6c9e100bdb670d0e30e952fe35d4e209eb7f8fc98bfc9d9406056f74e13ad5cdc05c6253956a"}, 0xe2) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x1ac0, &(0x7f0000001080)={0x0, 0xe628, 0x0, 0x0, 0x10010a}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001100), &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x80010, r3, 0x10000000) r4 = socket$unix(0x1, 0x1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r4, 0x0}]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {r0}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x100010, r3, 0x10000000) 18:51:34 executing program 7: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:device_t:s0\x00', 0x1e) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x45c, r1, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6bdf7cb7, 0x44}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TX_RATES={0x430, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb34, 0xfff8, 0x0, 0x1, 0x4, 0x1, 0x1, 0x1000]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x9}, {0x6, 0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x1, 0x6}, {0x4, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x6, 0x8}, {}, {0x4, 0x6}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffa, 0x1, 0x1, 0x1000, 0xffff, 0x0, 0x800]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x0, 0x2, 0x30, 0x24, 0x12, 0x1, 0xc, 0x5, 0x9, 0xf]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x6}, {0x2, 0x9}, {0x5, 0x3}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0xa}, {0x3, 0x5}, {0x6, 0x2}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x7, 0x2}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0x4}, {0x3, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x1}, {0x6, 0x6}, {0x5, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x40, 0x20, 0x7928, 0x80, 0x3, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3}, {0x6, 0x9}, {0x5, 0xa}, {0x1, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x4}, {0x1, 0x2}, {0x1}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0x8}, {0x4, 0x5}, {0x6, 0x8}, {0x2, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x7, 0x6}, {0x2, 0x5}, {0x2, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x4, 0x7}, {0x6, 0x2}, {0x2}, {0x3, 0x4}, {0x2, 0x4}, {0x3, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x6, 0x8}, {0x7, 0x2}, {0x6, 0x8}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0xa}, {0x6, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x4, 0xa}, {0x7, 0x5}, {0x3, 0x9}, {0x5, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x7, 0x5}, {0x2, 0x7}, {0x3, 0x3}, {0x2, 0x7}, {0x5, 0x2}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0xa}, {0x3, 0x1}, {0x3, 0x3}, {0x7, 0x9}, {0x6, 0x6}, {0x1, 0x5}, {0x6, 0x1}, {0x5, 0x3}, {0x6, 0x9}, {0x2, 0x6}, {0x4, 0x4}, {0x1}, {0x1}, {0x6, 0x3}, {0x5, 0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x7, 0x8}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x3}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x2, 0x48, 0x30, 0x0, 0x50, 0x36, 0x60, 0x6c, 0x15, 0x4, 0x18]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x12, 0x2, 0x36, 0x6, 0x0, 0x8b589bf5ef3f6b35, 0x9, 0x2, 0x6c, 0x3, 0x1, 0x3, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40e, 0x8, 0x8, 0x8, 0x3, 0x9, 0x9, 0x3a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1, 0x401, 0x2, 0x3f, 0x9, 0xc13e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3ff, 0x100, 0x5, 0xb37, 0x2, 0x6, 0x7]}}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x7, 0xfff, 0x7, 0xf001, 0x48a7, 0x5d]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0xc, 0x60, 0x2, 0x30, 0x1, 0x1b, 0x6c, 0x36, 0x3, 0x1, 0x4, 0x6c, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x7}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x2}, {0x7, 0x8}, {0x5, 0x9}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x8}, {0x5, 0x6}, {0x3, 0x2}, {}, {0x7, 0x5}, {0x5, 0x8}, {}, {0x6, 0x9}, {0x2, 0x3}, {0x3, 0x6}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x1}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x6}, {0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x4}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0x6}, {0x1}, {0x3, 0x1}, {0x3, 0x8}, {0x6, 0x3}, {0x5, 0x5}, {0x7, 0x1}, {0x6, 0xa}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x1, 0x16, 0x5, 0x24, 0x36, 0x4, 0xb, 0x9, 0x9, 0x6c, 0x9, 0x1, 0x4, 0xb, 0x6, 0x4, 0x6, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3f, 0x4, 0x21d7, 0x9, 0x0, 0x1f, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x24, 0x16, 0x5, 0x3, 0x1b, 0x60, 0x1, 0x16]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0xc, 0x4, 0x1b, 0x4, 0xc, 0x24, 0x4, 0x16, 0x1, 0x1, 0x36, 0x6c, 0x24, 0x6, 0x5, 0x5, 0x2, 0x9, 0x16, 0x12, 0x48, 0x4, 0x2, 0x30, 0x9, 0x6, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb1, 0x7fff, 0xffff, 0x7fff, 0x1, 0x4]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x21, 0x24, 0x12, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x42d, 0x6, 0x3, 0xc351, 0xfff, 0x7, 0x7, 0x401]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x6, 0x2}, {0x4, 0xa}, {0x1, 0x4}, {0x3, 0x2}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0x6}, {0x4, 0x4}, {0x5, 0x6}, {0x7, 0xa}, {0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x5, 0x7}, {0x1}, {0x6, 0x5}, {0x6}, {0x3, 0xa}, {0x3, 0x9}, {0x5, 0x8}, {0x6, 0xa}, {0x6, 0xa}, {0x6, 0x8}, {0x7, 0x4}, {0x3, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x3, 0x1}, {0x6, 0xa}, {0x2, 0x2}, {0x0, 0x2}, {0x3, 0x4}, {0x5}, {0x2, 0xa}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x20, 0x3f, 0x6, 0x8001, 0x400, 0x80, 0x8000]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x4}, {0x2}, {0x7}, {0x0, 0x6}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0x8}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x6}, {0x7}, {0x3, 0x5}, {0x2}, {}, {0x4, 0x2}, {0x2, 0x7}, {0x4, 0x8}, {0x5, 0x5}, {0x3, 0x4}, {0x1}, {0x1, 0x9}, {0x2, 0x6}, {0x6}, {0x5, 0x3}, {0x2, 0x3}, {0x5, 0x4}, {0x3, 0xa}, {0x7, 0x9}, {0x3, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x2, 0x4}, {0x3, 0x5}, {0x4, 0x1}, {0x1, 0x2}]}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x5}, {0x6, 0x1}, {0x4, 0x2}, {0x3, 0xa}, {0x3, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x5, 0xa}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x7, 0x5}, {0x6, 0x1}, {0x3, 0x9}, {0x5, 0x8}, {0x3, 0x6}, {0x4, 0x2}, {0x5, 0x8}, {0x2, 0x1}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x6}, {0x6, 0xd}, {0x7, 0x7}, {0x4}, {0x0, 0x5}, {0x2, 0x8}, {0x0, 0x2}, {0x0, 0x4}, {}, {}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x9}, {0x1}, {0x2, 0xa}, {0x4, 0xa}, {0x5, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x2}, {0x6, 0x3}, {0x6, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x7}, {}, {0x1, 0x5}, {0x4, 0x5}, {0x6, 0x1}, {0x3, 0x1}, {0x1, 0x6}, {0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x6}, {0x2, 0x3}, {0x1}, {0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x0, 0xfb, 0x64, 0x217c, 0x8e, 0x80]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1}, {0x6, 0x8}, {0x3}, {0x5, 0x8}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x3}, {0x2, 0xa}, {0x1}, {0x4, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x4, 0x8}, {0x7, 0x3}, {}, {0x1, 0x3}, {0x3, 0x2}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x5, 0x3}, {0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x4, 0x5}, {0x3, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x3}, {0x4, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x5}, {}, {0x5, 0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x1, 0x3}, {0x7, 0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x3}, {0x3, 0x4}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x2}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x4}, {0x2, 0x2}, {0x0, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x4}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x7}, {0x4, 0x7}, {0x7, 0x2}, {0x6, 0x2}, {0x3}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x1c, 0x1, 0x30, 0x12, 0x5, 0x60, 0x9, 0x4, 0x24, 0x5, 0x17, 0x3, 0x18, 0x12, 0x60, 0x36, 0x1, 0x1b, 0x60, 0xb, 0x16, 0x5, 0xb, 0x24, 0x1a, 0x16, 0xc, 0x15, 0x2, 0x6, 0xb]}]}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0x44844}, 0x4) [ 116.424490] audit: type=1400 audit(1665082294.893:7): avc: denied { create } for pid=3659 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=netlink_generic_socket permissive=1 [ 116.426400] audit: type=1400 audit(1665082294.895:8): avc: denied { write } for pid=3659 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=netlink_generic_socket permissive=1 [ 116.430678] audit: type=1400 audit(1665082294.899:9): avc: denied { read } for pid=3659 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=netlink_generic_socket permissive=1 18:51:34 executing program 7: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0/file0\x00', r1, &(0x7f00000001c0)='./file0\x00') statx(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000)) r2 = dup(r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@remote, @link_local, @val, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "3ff447", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, @private2, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x4e20, 0x4f21}}}}}}}}, 0x0) 18:51:35 executing program 7: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0/file0\x00', r1, &(0x7f00000001c0)='./file0\x00') statx(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000)) r2 = dup(r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@remote, @link_local, @val, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "3ff447", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, @private2, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x4e20, 0x4f21}}}}}}}}, 0x0) 18:51:35 executing program 7: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0/file0\x00', r1, &(0x7f00000001c0)='./file0\x00') statx(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000100)='./file0/file0/file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/211, 0xd3) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, &(0x7f0000000500)) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000180)=0x6cb) 18:51:35 executing program 7: r0 = syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x422ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x1}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x1, 0x7, 0x41, 0x0, 0x4, 0x20, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x4, @perf_config_ext={0x8, 0x5}, 0x22, 0x10000, 0x3, 0x7, 0x80000000, 0x5, 0x1000, 0x0, 0x4, 0x0, 0xffffffffffffffe0}, r3, 0xd, r4, 0x8) chroot(&(0x7f0000000340)='./file0\x00') io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={r4, r0, 0x6}) [ 117.143506] audit: type=1400 audit(1665082295.612:10): avc: denied { open } for pid=3703 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 117.144826] audit: type=1400 audit(1665082295.612:11): avc: denied { kernel } for pid=3703 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 117.161342] ------------[ cut here ]------------ [ 117.161365] [ 117.161368] ====================================================== [ 117.161372] WARNING: possible circular locking dependency detected [ 117.161376] 6.0.0-next-20221006 #1 Not tainted [ 117.161382] ------------------------------------------------------ [ 117.161386] syz-executor.7/3705 is trying to acquire lock: [ 117.161392] ffffffff853fac98 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 117.161436] [ 117.161436] but task is already holding lock: [ 117.161439] ffff88800f360c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 117.161466] [ 117.161466] which lock already depends on the new lock. [ 117.161466] [ 117.161469] [ 117.161469] the existing dependency chain (in reverse order) is: [ 117.161472] [ 117.161472] -> #3 (&ctx->lock){....}-{2:2}: [ 117.161486] _raw_spin_lock+0x2a/0x40 [ 117.161499] __perf_event_task_sched_out+0x53b/0x18d0 [ 117.161510] __schedule+0xedd/0x2470 [ 117.161525] schedule+0xda/0x1b0 [ 117.161540] exit_to_user_mode_prepare+0x114/0x1a0 [ 117.161553] syscall_exit_to_user_mode+0x19/0x40 [ 117.161567] do_syscall_64+0x48/0x90 [ 117.161577] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.161592] [ 117.161592] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 117.161605] _raw_spin_lock_nested+0x30/0x40 [ 117.161617] raw_spin_rq_lock_nested+0x1e/0x30 [ 117.161630] task_fork_fair+0x63/0x4d0 [ 117.161647] sched_cgroup_fork+0x3d0/0x540 [ 117.161661] copy_process+0x4183/0x6e20 [ 117.161672] kernel_clone+0xe7/0x890 [ 117.161682] user_mode_thread+0xad/0xf0 [ 117.161692] rest_init+0x24/0x250 [ 117.161705] arch_call_rest_init+0xf/0x14 [ 117.161717] start_kernel+0x4c6/0x4eb [ 117.161727] secondary_startup_64_no_verify+0xe0/0xeb [ 117.161745] [ 117.161745] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 117.161758] _raw_spin_lock_irqsave+0x39/0x60 [ 117.161770] try_to_wake_up+0xab/0x1930 [ 117.161783] up+0x75/0xb0 [ 117.161798] __up_console_sem+0x6e/0x80 [ 117.161815] console_unlock+0x46a/0x590 [ 117.161831] vt_ioctl+0x2822/0x2ca0 [ 117.161844] tty_ioctl+0x785/0x16b0 [ 117.161856] __x64_sys_ioctl+0x19a/0x210 [ 117.161870] do_syscall_64+0x3b/0x90 [ 117.161880] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.161894] [ 117.161894] -> #0 ((console_sem).lock){....}-{2:2}: [ 117.161907] __lock_acquire+0x2a02/0x5e70 [ 117.161924] lock_acquire+0x1a2/0x530 [ 117.161940] _raw_spin_lock_irqsave+0x39/0x60 [ 117.161952] down_trylock+0xe/0x70 [ 117.161968] __down_trylock_console_sem+0x3b/0xd0 [ 117.161984] vprintk_emit+0x16b/0x560 [ 117.162000] vprintk+0x84/0xa0 [ 117.162015] _printk+0xba/0xf1 [ 117.162029] report_bug.cold+0x72/0xab [ 117.162038] handle_bug+0x3c/0x70 [ 117.162047] exc_invalid_op+0x14/0x50 [ 117.162057] asm_exc_invalid_op+0x16/0x20 [ 117.162071] group_sched_out.part.0+0x2c7/0x460 [ 117.162089] ctx_sched_out+0x8f1/0xc10 [ 117.162105] __perf_event_task_sched_out+0x6d0/0x18d0 [ 117.162116] __schedule+0xedd/0x2470 [ 117.162131] schedule+0xda/0x1b0 [ 117.162145] exit_to_user_mode_prepare+0x114/0x1a0 [ 117.162156] syscall_exit_to_user_mode+0x19/0x40 [ 117.162170] do_syscall_64+0x48/0x90 [ 117.162180] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.162194] [ 117.162194] other info that might help us debug this: [ 117.162194] [ 117.162196] Chain exists of: [ 117.162196] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 117.162196] [ 117.162211] Possible unsafe locking scenario: [ 117.162211] [ 117.162214] CPU0 CPU1 [ 117.162216] ---- ---- [ 117.162219] lock(&ctx->lock); [ 117.162224] lock(&rq->__lock); [ 117.162231] lock(&ctx->lock); [ 117.162237] lock((console_sem).lock); [ 117.162243] [ 117.162243] *** DEADLOCK *** [ 117.162243] [ 117.162245] 2 locks held by syz-executor.7/3705: [ 117.162252] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 117.162282] #1: ffff88800f360c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 117.162308] [ 117.162308] stack backtrace: [ 117.162311] CPU: 1 PID: 3705 Comm: syz-executor.7 Not tainted 6.0.0-next-20221006 #1 [ 117.162324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.162330] Call Trace: [ 117.162334] [ 117.162338] dump_stack_lvl+0x8b/0xb3 [ 117.162350] check_noncircular+0x263/0x2e0 [ 117.162366] ? format_decode+0x26c/0xb50 [ 117.162383] ? print_circular_bug+0x450/0x450 [ 117.162400] ? simple_strtoul+0x30/0x30 [ 117.162417] ? format_decode+0x26c/0xb50 [ 117.162435] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 117.162453] __lock_acquire+0x2a02/0x5e70 [ 117.162474] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 117.162497] lock_acquire+0x1a2/0x530 [ 117.162513] ? down_trylock+0xe/0x70 [ 117.162531] ? lock_release+0x750/0x750 [ 117.162551] ? vprintk+0x84/0xa0 [ 117.162569] _raw_spin_lock_irqsave+0x39/0x60 [ 117.162582] ? down_trylock+0xe/0x70 [ 117.162599] down_trylock+0xe/0x70 [ 117.162616] ? vprintk+0x84/0xa0 [ 117.162633] __down_trylock_console_sem+0x3b/0xd0 [ 117.162650] vprintk_emit+0x16b/0x560 [ 117.162668] vprintk+0x84/0xa0 [ 117.162686] _printk+0xba/0xf1 [ 117.162698] ? record_print_text.cold+0x16/0x16 [ 117.162715] ? report_bug.cold+0x66/0xab [ 117.162726] ? group_sched_out.part.0+0x2c7/0x460 [ 117.162745] report_bug.cold+0x72/0xab [ 117.162757] handle_bug+0x3c/0x70 [ 117.162767] exc_invalid_op+0x14/0x50 [ 117.162779] asm_exc_invalid_op+0x16/0x20 [ 117.162793] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 117.162814] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 117.162825] RSP: 0018:ffff88803fe37c48 EFLAGS: 00010006 [ 117.162834] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 117.162842] RDX: ffff8880206d1ac0 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 117.162850] RBP: ffff88801e3f8000 R08: 0000000000000005 R09: 0000000000000001 [ 117.162857] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800f360c00 [ 117.162865] R13: ffff88806cf3d2c0 R14: ffffffff8547d200 R15: 0000000000000002 [ 117.162876] ? group_sched_out.part.0+0x2c7/0x460 [ 117.162896] ? group_sched_out.part.0+0x2c7/0x460 [ 117.162915] ctx_sched_out+0x8f1/0xc10 [ 117.162935] __perf_event_task_sched_out+0x6d0/0x18d0 [ 117.162949] ? lock_is_held_type+0xd7/0x130 [ 117.162964] ? __perf_cgroup_move+0x160/0x160 [ 117.162975] ? set_next_entity+0x304/0x550 [ 117.162992] ? update_curr+0x267/0x740 [ 117.163011] ? lock_is_held_type+0xd7/0x130 [ 117.163026] __schedule+0xedd/0x2470 [ 117.163044] ? io_schedule_timeout+0x150/0x150 [ 117.163062] ? rcu_read_lock_sched_held+0x3e/0x80 [ 117.163082] schedule+0xda/0x1b0 [ 117.163099] exit_to_user_mode_prepare+0x114/0x1a0 [ 117.163111] syscall_exit_to_user_mode+0x19/0x40 [ 117.163126] do_syscall_64+0x48/0x90 [ 117.163137] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.163151] RIP: 0033:0x7f83df0fab19 [ 117.163159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.163170] RSP: 002b:00007f83dc670218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.163181] RAX: 0000000000000001 RBX: 00007f83df20df68 RCX: 00007f83df0fab19 [ 117.163188] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f83df20df6c [ 117.163196] RBP: 00007f83df20df60 R08: 000000000000000e R09: 0000000000000000 [ 117.163203] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f83df20df6c [ 117.163210] R13: 00007ffff9c82dbf R14: 00007f83dc670300 R15: 0000000000022000 [ 117.163223] [ 117.216369] WARNING: CPU: 1 PID: 3705 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 117.216989] Modules linked in: [ 117.217214] CPU: 1 PID: 3705 Comm: syz-executor.7 Not tainted 6.0.0-next-20221006 #1 [ 117.217732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.218283] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 117.218652] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 117.219869] RSP: 0018:ffff88803fe37c48 EFLAGS: 00010006 [ 117.220238] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 117.220720] RDX: ffff8880206d1ac0 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 117.221195] RBP: ffff88801e3f8000 R08: 0000000000000005 R09: 0000000000000001 [ 117.221670] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800f360c00 [ 117.222149] R13: ffff88806cf3d2c0 R14: ffffffff8547d200 R15: 0000000000000002 [ 117.222638] FS: 00007f83dc670700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 117.223177] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.223568] CR2: 00007fa75c2d7310 CR3: 00000000177f2000 CR4: 0000000000350ee0 [ 117.224051] Call Trace: [ 117.224241] [ 117.224403] ctx_sched_out+0x8f1/0xc10 [ 117.224677] __perf_event_task_sched_out+0x6d0/0x18d0 [ 117.225028] ? lock_is_held_type+0xd7/0x130 [ 117.225331] ? __perf_cgroup_move+0x160/0x160 [ 117.225636] ? set_next_entity+0x304/0x550 [ 117.225935] ? update_curr+0x267/0x740 [ 117.226215] ? lock_is_held_type+0xd7/0x130 [ 117.226510] __schedule+0xedd/0x2470 [ 117.226775] ? io_schedule_timeout+0x150/0x150 [ 117.227092] ? rcu_read_lock_sched_held+0x3e/0x80 [ 117.227422] schedule+0xda/0x1b0 [ 117.227663] exit_to_user_mode_prepare+0x114/0x1a0 [ 117.227994] syscall_exit_to_user_mode+0x19/0x40 [ 117.228331] do_syscall_64+0x48/0x90 [ 117.228589] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.228938] RIP: 0033:0x7f83df0fab19 [ 117.229198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.230407] RSP: 002b:00007f83dc670218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.230913] RAX: 0000000000000001 RBX: 00007f83df20df68 RCX: 00007f83df0fab19 [ 117.231383] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f83df20df6c [ 117.231860] RBP: 00007f83df20df60 R08: 000000000000000e R09: 0000000000000000 [ 117.232343] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f83df20df6c [ 117.232817] R13: 00007ffff9c82dbf R14: 00007f83dc670300 R15: 0000000000022000 [ 117.233301] [ 117.233463] irq event stamp: 1174 [ 117.233696] hardirqs last enabled at (1173): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 117.234334] hardirqs last disabled at (1174): [] __schedule+0x1225/0x2470 [ 117.234897] softirqs last enabled at (928): [] __irq_exit_rcu+0x11b/0x180 [ 117.235461] softirqs last disabled at (629): [] __irq_exit_rcu+0x11b/0x180 [ 117.236030] ---[ end trace 0000000000000000 ]--- [ 117.279707] loop3: detected capacity change from 0 to 212 [ 117.281532] ======================================================= [ 117.281532] WARNING: The mand mount option has been deprecated and [ 117.281532] and is ignored by this kernel. Remove the mand [ 117.281532] option from the mount to silence this warning. [ 117.281532] ======================================================= [ 117.356580] loop3: detected capacity change from 0 to 212 [ 121.939380] loop1: detected capacity change from 0 to 264192 VM DIAGNOSIS: 18:51:35 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff8135acf0 RCX=0000000000000000 RDX=1ffff11003c24f04 RSI=ffffffff8163919f RDI=ffff88801e127890 RBP=ffff88801e127860 RSP=ffff88801e1277b8 R8 =ffffffff85ed2b0e R9 =ffffffff85ed2b12 R10=ffffed1003c24f06 R11=ffff88801e127808 R12=ffff88801e127890 R13=0000000000000000 R14=ffff888020e13580 R15=0000000000000dc0 RIP=ffffffff8135acfb RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f00af988028 CR3=00000000207c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823c0801 RDI=ffffffff8765c9e0 RBP=ffffffff8765c9a0 RSP=ffff88803fe37690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8765c9a0 R14=0000000000000010 R15=ffffffff823c07f0 RIP=ffffffff823c0859 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f83dc670700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa75c2d7310 CR3=00000000177f2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000