Warning: Permanently added '[localhost]:22584' (ECDSA) to the list of known hosts. 2022/10/07 00:27:07 fuzzer started 2022/10/07 00:27:07 dialing manager at localhost:37161 syzkaller login: [ 35.403936] cgroup: Unknown subsys name 'net' [ 35.476432] cgroup: Unknown subsys name 'rlimit' 2022/10/07 00:27:21 syscalls: 2215 2022/10/07 00:27:21 code coverage: enabled 2022/10/07 00:27:21 comparison tracing: enabled 2022/10/07 00:27:21 extra coverage: enabled 2022/10/07 00:27:21 setuid sandbox: enabled 2022/10/07 00:27:21 namespace sandbox: enabled 2022/10/07 00:27:21 Android sandbox: enabled 2022/10/07 00:27:21 fault injection: enabled 2022/10/07 00:27:21 leak checking: enabled 2022/10/07 00:27:21 net packet injection: enabled 2022/10/07 00:27:21 net device setup: enabled 2022/10/07 00:27:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/07 00:27:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/07 00:27:21 USB emulation: enabled 2022/10/07 00:27:21 hci packet injection: enabled 2022/10/07 00:27:21 wifi device emulation: failed to parse kernel version (6.0.0-next-20221006) 2022/10/07 00:27:21 802.15.4 emulation: enabled 2022/10/07 00:27:21 fetching corpus: 50, signal 28380/30097 (executing program) 2022/10/07 00:27:21 fetching corpus: 100, signal 35013/38299 (executing program) 2022/10/07 00:27:21 fetching corpus: 150, signal 43557/48239 (executing program) 2022/10/07 00:27:21 fetching corpus: 200, signal 50319/56279 (executing program) 2022/10/07 00:27:21 fetching corpus: 250, signal 57903/64926 (executing program) 2022/10/07 00:27:21 fetching corpus: 300, signal 62649/70852 (executing program) 2022/10/07 00:27:21 fetching corpus: 350, signal 65315/74724 (executing program) 2022/10/07 00:27:22 fetching corpus: 400, signal 71167/81477 (executing program) 2022/10/07 00:27:22 fetching corpus: 450, signal 75151/86362 (executing program) 2022/10/07 00:27:22 fetching corpus: 500, signal 76496/88843 (executing program) 2022/10/07 00:27:22 fetching corpus: 550, signal 78264/91658 (executing program) 2022/10/07 00:27:22 fetching corpus: 600, signal 81047/95278 (executing program) 2022/10/07 00:27:22 fetching corpus: 650, signal 83935/98988 (executing program) 2022/10/07 00:27:22 fetching corpus: 700, signal 86549/102419 (executing program) 2022/10/07 00:27:22 fetching corpus: 750, signal 88280/105017 (executing program) 2022/10/07 00:27:22 fetching corpus: 800, signal 90503/107955 (executing program) 2022/10/07 00:27:22 fetching corpus: 850, signal 92227/110438 (executing program) 2022/10/07 00:27:23 fetching corpus: 900, signal 95051/113880 (executing program) 2022/10/07 00:27:23 fetching corpus: 950, signal 98637/117814 (executing program) 2022/10/07 00:27:23 fetching corpus: 1000, signal 100241/120158 (executing program) 2022/10/07 00:27:23 fetching corpus: 1050, signal 101457/122076 (executing program) 2022/10/07 00:27:23 fetching corpus: 1100, signal 103870/124986 (executing program) 2022/10/07 00:27:23 fetching corpus: 1150, signal 105446/127165 (executing program) 2022/10/07 00:27:23 fetching corpus: 1200, signal 106463/128878 (executing program) 2022/10/07 00:27:23 fetching corpus: 1250, signal 109937/132462 (executing program) 2022/10/07 00:27:23 fetching corpus: 1300, signal 111021/134197 (executing program) 2022/10/07 00:27:24 fetching corpus: 1350, signal 112047/135831 (executing program) 2022/10/07 00:27:24 fetching corpus: 1400, signal 113472/137741 (executing program) 2022/10/07 00:27:24 fetching corpus: 1450, signal 114463/139347 (executing program) 2022/10/07 00:27:24 fetching corpus: 1500, signal 116200/141416 (executing program) 2022/10/07 00:27:24 fetching corpus: 1550, signal 118140/143649 (executing program) 2022/10/07 00:27:24 fetching corpus: 1600, signal 119167/145167 (executing program) 2022/10/07 00:27:24 fetching corpus: 1650, signal 120224/146670 (executing program) 2022/10/07 00:27:24 fetching corpus: 1700, signal 122780/149166 (executing program) 2022/10/07 00:27:24 fetching corpus: 1750, signal 123439/150375 (executing program) 2022/10/07 00:27:24 fetching corpus: 1800, signal 124413/151741 (executing program) 2022/10/07 00:27:24 fetching corpus: 1850, signal 125768/153372 (executing program) 2022/10/07 00:27:25 fetching corpus: 1900, signal 127234/155027 (executing program) 2022/10/07 00:27:25 fetching corpus: 1950, signal 128807/156703 (executing program) 2022/10/07 00:27:25 fetching corpus: 2000, signal 129566/157902 (executing program) 2022/10/07 00:27:25 fetching corpus: 2050, signal 130710/159284 (executing program) 2022/10/07 00:27:25 fetching corpus: 2100, signal 132241/160813 (executing program) 2022/10/07 00:27:25 fetching corpus: 2150, signal 133799/162423 (executing program) 2022/10/07 00:27:25 fetching corpus: 2200, signal 135117/163837 (executing program) 2022/10/07 00:27:25 fetching corpus: 2250, signal 136401/165223 (executing program) 2022/10/07 00:27:25 fetching corpus: 2300, signal 137933/166695 (executing program) 2022/10/07 00:27:26 fetching corpus: 2350, signal 138760/167756 (executing program) 2022/10/07 00:27:26 fetching corpus: 2400, signal 139656/168832 (executing program) 2022/10/07 00:27:26 fetching corpus: 2450, signal 140650/169907 (executing program) 2022/10/07 00:27:26 fetching corpus: 2500, signal 141402/170924 (executing program) 2022/10/07 00:27:26 fetching corpus: 2550, signal 142678/172138 (executing program) 2022/10/07 00:27:26 fetching corpus: 2600, signal 143615/173164 (executing program) 2022/10/07 00:27:26 fetching corpus: 2650, signal 144180/173962 (executing program) 2022/10/07 00:27:26 fetching corpus: 2700, signal 145249/174945 (executing program) 2022/10/07 00:27:26 fetching corpus: 2750, signal 145821/175722 (executing program) 2022/10/07 00:27:26 fetching corpus: 2800, signal 146335/176486 (executing program) 2022/10/07 00:27:27 fetching corpus: 2850, signal 146938/177315 (executing program) 2022/10/07 00:27:27 fetching corpus: 2900, signal 147759/178188 (executing program) 2022/10/07 00:27:27 fetching corpus: 2950, signal 148402/179020 (executing program) 2022/10/07 00:27:27 fetching corpus: 3000, signal 149007/179817 (executing program) 2022/10/07 00:27:27 fetching corpus: 3050, signal 149740/180634 (executing program) 2022/10/07 00:27:27 fetching corpus: 3100, signal 150600/181492 (executing program) 2022/10/07 00:27:27 fetching corpus: 3150, signal 150990/182145 (executing program) 2022/10/07 00:27:27 fetching corpus: 3200, signal 151911/182969 (executing program) 2022/10/07 00:27:27 fetching corpus: 3250, signal 152575/183650 (executing program) 2022/10/07 00:27:27 fetching corpus: 3300, signal 153534/184472 (executing program) 2022/10/07 00:27:28 fetching corpus: 3350, signal 153976/185083 (executing program) 2022/10/07 00:27:28 fetching corpus: 3400, signal 155608/186068 (executing program) 2022/10/07 00:27:28 fetching corpus: 3450, signal 156173/186686 (executing program) 2022/10/07 00:27:28 fetching corpus: 3500, signal 156815/187340 (executing program) 2022/10/07 00:27:28 fetching corpus: 3550, signal 157394/187957 (executing program) 2022/10/07 00:27:28 fetching corpus: 3600, signal 157885/188549 (executing program) 2022/10/07 00:27:28 fetching corpus: 3650, signal 158749/189203 (executing program) 2022/10/07 00:27:28 fetching corpus: 3700, signal 159232/189756 (executing program) 2022/10/07 00:27:28 fetching corpus: 3750, signal 159512/190225 (executing program) 2022/10/07 00:27:28 fetching corpus: 3800, signal 160357/190857 (executing program) 2022/10/07 00:27:28 fetching corpus: 3850, signal 160902/191371 (executing program) 2022/10/07 00:27:29 fetching corpus: 3900, signal 161633/191955 (executing program) 2022/10/07 00:27:29 fetching corpus: 3950, signal 162761/192708 (executing program) 2022/10/07 00:27:29 fetching corpus: 4000, signal 163207/193164 (executing program) 2022/10/07 00:27:29 fetching corpus: 4050, signal 163749/193646 (executing program) 2022/10/07 00:27:29 fetching corpus: 4100, signal 164395/194125 (executing program) 2022/10/07 00:27:29 fetching corpus: 4150, signal 165333/194628 (executing program) 2022/10/07 00:27:29 fetching corpus: 4200, signal 165942/195062 (executing program) 2022/10/07 00:27:29 fetching corpus: 4250, signal 166688/195534 (executing program) 2022/10/07 00:27:29 fetching corpus: 4300, signal 167915/196041 (executing program) 2022/10/07 00:27:30 fetching corpus: 4350, signal 168590/196442 (executing program) 2022/10/07 00:27:30 fetching corpus: 4400, signal 169422/196876 (executing program) 2022/10/07 00:27:30 fetching corpus: 4450, signal 169946/197267 (executing program) 2022/10/07 00:27:30 fetching corpus: 4500, signal 170720/197625 (executing program) 2022/10/07 00:27:30 fetching corpus: 4550, signal 171213/197979 (executing program) 2022/10/07 00:27:30 fetching corpus: 4600, signal 171584/198324 (executing program) 2022/10/07 00:27:30 fetching corpus: 4650, signal 172281/198650 (executing program) 2022/10/07 00:27:30 fetching corpus: 4700, signal 172794/198973 (executing program) 2022/10/07 00:27:30 fetching corpus: 4750, signal 173705/199330 (executing program) 2022/10/07 00:27:30 fetching corpus: 4800, signal 174369/199627 (executing program) 2022/10/07 00:27:31 fetching corpus: 4850, signal 175356/199913 (executing program) 2022/10/07 00:27:31 fetching corpus: 4900, signal 175626/200184 (executing program) 2022/10/07 00:27:31 fetching corpus: 4950, signal 176405/200453 (executing program) 2022/10/07 00:27:31 fetching corpus: 5000, signal 177234/200558 (executing program) 2022/10/07 00:27:31 fetching corpus: 5050, signal 178030/200558 (executing program) 2022/10/07 00:27:31 fetching corpus: 5100, signal 178817/200558 (executing program) 2022/10/07 00:27:31 fetching corpus: 5150, signal 179189/200558 (executing program) 2022/10/07 00:27:31 fetching corpus: 5200, signal 179592/200564 (executing program) 2022/10/07 00:27:31 fetching corpus: 5250, signal 180136/200605 (executing program) 2022/10/07 00:27:31 fetching corpus: 5300, signal 181033/200606 (executing program) 2022/10/07 00:27:32 fetching corpus: 5350, signal 181468/200606 (executing program) 2022/10/07 00:27:32 fetching corpus: 5400, signal 182257/200606 (executing program) 2022/10/07 00:27:32 fetching corpus: 5446, signal 182778/200610 (executing program) 2022/10/07 00:27:32 fetching corpus: 5446, signal 182778/200610 (executing program) 2022/10/07 00:27:34 starting 8 fuzzer processes 00:27:34 executing program 0: ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0xbf, 0x0, 0x1, 0x4, 0x80, 0x5}) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) sendfile(r0, r0, &(0x7f00000000c0)=0x400, 0x81) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000140)=""/38, 0x26}], 0x2) close(r1) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x8, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)='system_u:object_r:udev_var_run_t:s0\x00', 0x24, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0x7, 0x7, 0x0, 0x4, 0x9, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) recvmmsg$unix(r3, &(0x7f0000002a00)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/63, 0x3f}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000640)}, {&(0x7f0000000680)=""/67, 0x43}, {&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000780)=""/144, 0x90}], 0x4, &(0x7f0000000880)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000940), 0x0, &(0x7f0000000980)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/113, 0x71}, {&(0x7f0000000ac0)=""/140, 0x8c}], 0x2, &(0x7f0000000bc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000c80), 0x6e, &(0x7f0000002400)=[{&(0x7f0000000d00)=""/218, 0xda}, {&(0x7f0000000e00)=""/247, 0xf7}, {&(0x7f0000000f00)=""/177, 0xb1}, {&(0x7f0000000fc0)=""/226, 0xe2}, {&(0x7f00000010c0)=""/93, 0x5d}, {&(0x7f0000001140)=""/159, 0x9f}, {&(0x7f0000001200)=""/47, 0x2f}, {&(0x7f0000001240)=""/235, 0xeb}, {&(0x7f0000001340)=""/145, 0x91}, {&(0x7f0000001400)=""/4096, 0x1000}], 0xa, &(0x7f00000024c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002540), 0x6e, &(0x7f0000002680)=[{&(0x7f00000025c0)=""/63, 0x3f}, {&(0x7f0000002600)=""/113, 0x71}], 0x2}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002740)=""/229, 0xe5}, {&(0x7f0000002840)=""/14, 0xe}, {&(0x7f0000002880)=""/5, 0x5}], 0x3, &(0x7f0000002900)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}], 0x7, 0x10000, &(0x7f0000002bc0)={0x77359400}) mount$9p_unix(&(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80), 0x80000, &(0x7f0000002cc0)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, r6}}, {@uname={'uname', 0x3d, '\x00'}}, {@cachetag={'cachetag', 0x3d, 'security.selinux\x00'}}, {@uname={'uname', 0x3d, 'system_u:object_r:udev_var_run_t:s0\x00'}}, {@cache_none}, {@noextend}, {@loose}]}}) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002d80)='./binderfs/binder-control\x00', 0x802, 0x0) fchdir(r7) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000002e00)={&(0x7f0000002dc0)=""/10, 0xa, 0x8, 0xffff0001}) clock_gettime(0x0, &(0x7f0000002e80)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000002e40)='./file0\x00', &(0x7f0000002ec0)={{r8, r9/1000+10000}, {0x0, 0xea60}}, 0x100) 00:27:34 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x40, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_mac_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x24044004}, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8, 0x80800) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x205, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xfffffffd}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x8}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x80}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x7}]}, 0x4c}}, 0x20000000) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = signalfd(r2, &(0x7f0000000300)={[0xa4b]}, 0x8) r4 = pidfd_getfd(r2, r3, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000380)=0x4) r6 = accept$inet(r4, 0x0, &(0x7f00000003c0)) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000400)=0xda1b) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r7, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}]}, 0x28}}, 0x20004050) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, r7, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tpm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) pidfd_send_signal(r3, 0x14, &(0x7f00000006c0)={0x2c, 0x1, 0x6}, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x840) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) sendfile(r8, r3, &(0x7f0000000880), 0x4) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10090}, 0x8840) 00:27:34 executing program 2: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7841, 0x1, 0x3407, 0x5, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x65, 0x0, 0xf9, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1a}, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x10, 0x1, [{0x2, 0xa, "378780b3f15400b4"}]}, @generic={0x82, 0x4, "1361"}, @noop, @generic={0x83, 0x6, "95077878"}, @rr={0x7, 0x13, 0xb2, [@empty, @local, @broadcast, @loopback]}, @noop, @rr={0x7, 0x13, 0x59, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x25}, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', r0, 0x29, 0x3, 0x1, 0x5, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, 0x7, 0x20, 0x5, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', r1, 0x700, 0x700, 0xfffffbff, 0x2, {{0x24, 0x4, 0x2, 0x8, 0x90, 0x68, 0x0, 0x2, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0x14, 0xdb, 0x1, 0x7, [{@empty, 0x100}, {@private=0xa010101, 0x1a6}]}, @cipso={0x86, 0x66, 0x0, [{0x5, 0xb, "f38b76473a502e18a6"}, {0x1, 0xe, "bfd1d7a79d1e71ff4216928b"}, {0x5, 0xa, "c5afadb1bc1672eb"}, {0x1, 0xd, "fef5e7abdde92c3065b5b0"}, {0x7, 0x2}, {0x7, 0x12, "a190e89957a8bbe88b72343388075754"}, {0x0, 0x6, 'a0x0, 0x700, 0x10, 0x4, 0x10001, {{0x10, 0x4, 0x1, 0x7, 0x40, 0x66, 0x0, 0xc, 0x4, 0x0, @multicast1, @multicast2, {[@end, @generic={0x88, 0x2}, @timestamp={0x44, 0xc, 0xeb, 0x0, 0x8, [0x4, 0x406]}, @timestamp_prespec={0x44, 0x4, 0x5b, 0x3, 0x2}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x23}, {@loopback, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'gre0\x00', r4, 0x8000, 0x700, 0x8, 0x4, {{0x26, 0x4, 0x3, 0x2, 0x98, 0x7, 0x0, 0x1, 0x4, 0x0, @broadcast, @broadcast, {[@end, @lsrr={0x83, 0x27, 0x38, [@multicast2, @rand_addr=0x64010101, @loopback, @local, @remote, @loopback, @rand_addr=0x64010101, @multicast2, @broadcast]}, @noop, @generic={0x44, 0x12, "4accfa65debacf4f1e3c1cde398df0fa"}, @rr={0x7, 0x1b, 0xfb, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0xd9, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x44}, 0xfffffc08}, {@rand_addr=0x64010101, 0x8}, {@local, 0x1}, {@broadcast, 0x400}, {@broadcast, 0x9}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x29, 0xa9, 0x87, 0x5, 0x4a, @remote, @local, 0x8, 0x700, 0xfffff92e, 0x6}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in6=@private0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000740)=0xe8) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x109080, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000800)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r8 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), r3) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000a00)={0x0, @private, @dev}, &(0x7f0000000a40)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x2, 0x200, 0x20, @private0, @private1, 0x40, 0x7800, 0x5, 0x4c11}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x118, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000d00)={'ip_vti0\x00', r0, 0x1, 0x8, 0x1, 0x4d0, {{0x7, 0x4, 0x1, 0x4, 0x1c, 0x66, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x3f, 0x0}, @remote, {[@ssrr={0x89, 0x3, 0x32}, @timestamp_addr={0x44, 0x4, 0xe4, 0x1, 0x6}]}}}}}) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000d80), 0x22000, 0x0) write$cgroup_subtree(r11, &(0x7f0000000dc0)={[{0x2b, 'cpuset'}, {0x2b, 'devices'}, {0x2b, 'net'}, {0x2d, 'net'}, {0x2b, 'blkio'}, {0x2b, 'cpuacct'}, {0x2d, 'net_prio'}, {0x2b, 'hugetlb'}]}, 0x3e) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000e00)='macvtap0\x00', 0x10) 00:27:34 executing program 3: ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000000)="5822bc82f64711ae6bdbdc0da557f25379957c8bfdfdbd8192639efb0a436ca7242381d196f3455f2298f47a7b0e3671feea2870fee1a27d3153736b985f6582acb5e81f08f045f3c0308153c02ef483") r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = signalfd(r0, &(0x7f0000000080)={[0xffffffffffff0001]}, 0x8) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x3}, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r2, 0x409, 0xe) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400000, 0x131) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:lastlog_t:s0\x00', 0x1f, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r2, &(0x7f0000000200)={0x18000, 0x40, 0x4}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r6}}, 0x80000000) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000340)={{r3}, 0x0, 0x10, @inherit={0x48, &(0x7f00000002c0)={0x0, 0x0, 0x959cf09, 0x8001, {0x12, 0x7, 0x80, 0x800, 0x8}}}, @devid}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f00000013c0)={{r2}, 0x0, 0x0, @inherit={0x68, &(0x7f0000001340)={0x1, 0x4, 0x7fffffff, 0x3ff, {0x0, 0xfffffffffffffc00, 0x200000000000, 0xf0, 0x4}, [0x401, 0x1f, 0x3, 0x1]}}, @name="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"}) bind$bt_l2cap(r7, &(0x7f00000023c0)={0x1f, 0x7, @none, 0x0, 0x1}, 0xe) copy_file_range(0xffffffffffffffff, &(0x7f0000002400)=0xfd9, r1, &(0x7f0000002440)=0xaa, 0x9, 0x0) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000002480)=0x2) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000024c0), 0x80, 0x0) ioctl$BLKROTATIONAL(r8, 0x127e, &(0x7f0000002500)) openat(0xffffffffffffffff, &(0x7f0000002580)='./file0\x00', 0x42, 0x0) [ 62.085690] audit: type=1400 audit(1665102454.756:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:27:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10200, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f2dd938}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa00000000000}]}, 0x9c}, 0x1, 0x0, 0x0, 0x14}, 0x84) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44011}, 0x40814) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x1, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb5}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9e}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004090) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:setrans_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r9, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x1, 0x8, 0x800, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x88}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) mount$cgroup2(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x8000, &(0x7f0000000900)={[{@memory_localevents}, {@memory_recursiveprot}, {}, {@subsystem='rlimit'}, {}, {}, {@subsystem='cpu'}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000980)={'wpan1\x00'}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r8, 0xc865) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x118, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0xc804) 00:27:34 executing program 5: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40e9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x1084) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x40) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000340)=0x3) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000380)="68345db08451de3075f2e7d3728e895e4b65e85abc6c47757a3341d01402426cf6884e1ffeb2eb1508ce314984e642736eb4a9cd41493d247a079fcbee53cb75e2716b2a69357c76671ed0feaa4860117daee2abef9eff99b94b2c8967f3d18f64d81e6687e0db369a84b94502629b3d83492646d6bb3bb6ef2f601e28a23427ec1f1a8e7792494ea9") r1 = socket$inet_icmp(0x2, 0x2, 0x1) ftruncate(r1, 0x8) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x100) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000880)={0x46, 0x19, &(0x7f0000000480)="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"}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000008c0)=""/32) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x800, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x2}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000a40)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x240400c4}, 0x5) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000bc0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x128, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x20}}}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 00:27:34 executing program 6: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x40d, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040014) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1b4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe3f}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd62}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000400)={'syz0', "da8b4e"}, 0x7) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000440)=0x5) tee(r2, r1, 0x8, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) r4 = fsmount(r0, 0x1, 0x70) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x78}, @void, @val={0xc, 0x99, {0x1000, 0x69}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000007c0), 0x28080, 0x0) write$binfmt_aout(r7, &(0x7f0000000800)={{0x107, 0x99, 0x3, 0x31f, 0x3bb, 0x100, 0x211, 0x5}, "0ad212ff09da69e0693a86c328e0b6af0754f19ce6fffa4295234989e2cf3de926a2955b1ed18ada22d15831d05d4422ac95c937dd0fd7a89b31b0ebd0c07e23ee4d1bb844d51a080c728d1dc61d828d2ebebd588b045ad6a20981a0b7bd94c60efb1ea5186a26a24cc2c1b76c8dfb21ed3df212f98722824e941482c885e04f528a09d761f30046fc40fc6ae4bd402b01e185a9bc28becc2f17f98b021b13d3460e9e65afd39f3f3558f39aa18c60bbd9ee1d2f2f87ce00b9aed89c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9dc) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x8c, 0x0, 0x501, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) recvmmsg(r7, &(0x7f0000002480)=[{{&(0x7f0000001440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001800)=[{&(0x7f00000014c0)=""/213, 0xd5}, {&(0x7f00000015c0)=""/110, 0x6e}, {&(0x7f0000001640)=""/247, 0xf7}, {&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/107, 0x6b}], 0x5, &(0x7f0000001880)=""/59, 0x3b}, 0x9}, {{&(0x7f00000018c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/202, 0xca}], 0x1}, 0x7}, {{&(0x7f0000001a80)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001c80)=""/5, 0x5}, {&(0x7f0000001cc0)=""/120, 0x78}, {&(0x7f0000001d40)=""/152, 0x98}, {&(0x7f0000001e00)=""/128, 0x80}, {&(0x7f0000001e80)=""/231, 0xe7}, {&(0x7f0000001f80)=""/207, 0xcf}], 0x8, &(0x7f0000002100)=""/246, 0xf6}, 0x2}, {{&(0x7f0000002200)=@in, 0x80, &(0x7f0000002400)=[{&(0x7f0000002280)=""/24, 0x18}, {&(0x7f00000022c0)=""/152, 0x98}, {&(0x7f0000002380)=""/79, 0x4f}], 0x3, &(0x7f0000002440)=""/10, 0xa}, 0x1}], 0x4, 0x2000, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x64, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) 00:27:34 executing program 7: ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x2, 0x2, 0x18, 0x8, 0x3, 0x80}) ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4004, @fd_index=0x8, 0x1ff, 0x800, 0x7, 0x12, 0x1, {0x0, r0}}, 0x400) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$security_ima(r1, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x2, "ebb274350db61dedb57b1105b25928bd42cb71c5"}, 0x15, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='autogroup\x00') ioctl$CDROMREADALL(r2, 0x5318, &(0x7f0000000180)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000c00)={0x6, 0x0, 0x7, 0x140, 0x5, [{0x1ff, 0x5, 0x8, '\x00', 0x402}, {0x804f, 0x8, 0x7fff, '\x00', 0x280}, {0x9, 0x3a, 0xfffffffffffffffd, '\x00', 0x148e}, {0x100000001, 0x81, 0x400, '\x00', 0x980}, {0x1000, 0xe7, 0x0, '\x00', 0x2}]}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000d40), 0x41, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80350}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xf4, 0x27, 0x400, 0x70bd2a, 0x25dfdbfe, {0x3}, [@generic="349830d660d8d36acd55790d483f3de1e63cf3e105ef9acc1d61aa6800ad0818024b77558f60a257bba1a2b65fb1430595767c4f875c911db245d83caba18f3c1767fc25cc05f9183e0fcaa7352e70805dc1086f9ba0fce8ddd098e833", @generic="fcee13a2d0d2c4c3f7c55b24af291fcd08175f93f2fc62c704cb885494fdf81bb6edc5dfdb15ab303c0f8315c81c657bc697e47069e7c19230ce05958bbd66dc3e97671b7995c60d706e1322e386d91a8d5412f9060afa43e960c177b234204c30988f5a66820759a58258d0d52ee9b7166330a70d4b133f55bb8e1e5a52fb0245a6"]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x200080c0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syncfs(r4) r5 = dup3(r1, r3, 0x80000) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000f40)=[r4, r1], 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000f80), r2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r5) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x1b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x80) [ 63.384267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.386297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.387839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.389494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.390619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.391993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.393420] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.394500] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.395505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.401860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.405349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.409047] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.412153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.414941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.437055] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.445695] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.447164] Bluetooth: hci2: HCI_REQ-0x0c1a [ 63.448548] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.452846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.455505] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.458112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.459913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.468740] Bluetooth: hci4: HCI_REQ-0x0c1a [ 63.477453] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.483466] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.488604] Bluetooth: hci0: HCI_REQ-0x0c1a [ 63.489301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.490316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.491590] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.498792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.500248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.502066] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.503872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.507677] Bluetooth: hci1: HCI_REQ-0x0c1a [ 63.507851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.509776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.518910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.520623] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 63.522304] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.526464] Bluetooth: hci5: HCI_REQ-0x0c1a [ 63.526479] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.528458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.529140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.531394] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.531872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.534204] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 63.535073] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.535948] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 63.536642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.538402] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.545499] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.549691] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.551261] Bluetooth: hci6: HCI_REQ-0x0c1a [ 63.553392] Bluetooth: hci7: HCI_REQ-0x0c1a [ 63.554379] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.562767] Bluetooth: hci3: HCI_REQ-0x0c1a [ 65.453542] Bluetooth: hci2: command 0x0409 tx timeout [ 65.517049] Bluetooth: hci0: command 0x0409 tx timeout [ 65.517584] Bluetooth: hci4: command 0x0409 tx timeout [ 65.581397] Bluetooth: hci3: command 0x0409 tx timeout [ 65.581869] Bluetooth: hci5: command 0x0409 tx timeout [ 65.582345] Bluetooth: hci7: command 0x0409 tx timeout [ 65.582792] Bluetooth: hci1: command 0x0409 tx timeout [ 65.583255] Bluetooth: hci6: command 0x0409 tx timeout [ 67.501121] Bluetooth: hci2: command 0x041b tx timeout [ 67.565034] Bluetooth: hci4: command 0x041b tx timeout [ 67.565439] Bluetooth: hci0: command 0x041b tx timeout [ 67.629084] Bluetooth: hci6: command 0x041b tx timeout [ 67.629490] Bluetooth: hci1: command 0x041b tx timeout [ 67.629843] Bluetooth: hci7: command 0x041b tx timeout [ 67.630241] Bluetooth: hci5: command 0x041b tx timeout [ 67.630600] Bluetooth: hci3: command 0x041b tx timeout [ 69.549088] Bluetooth: hci2: command 0x040f tx timeout [ 69.613103] Bluetooth: hci0: command 0x040f tx timeout [ 69.613515] Bluetooth: hci4: command 0x040f tx timeout [ 69.677097] Bluetooth: hci3: command 0x040f tx timeout [ 69.677494] Bluetooth: hci5: command 0x040f tx timeout [ 69.677844] Bluetooth: hci7: command 0x040f tx timeout [ 69.678235] Bluetooth: hci1: command 0x040f tx timeout [ 69.678596] Bluetooth: hci6: command 0x040f tx timeout [ 71.597014] Bluetooth: hci2: command 0x0419 tx timeout [ 71.661086] Bluetooth: hci4: command 0x0419 tx timeout [ 71.661507] Bluetooth: hci0: command 0x0419 tx timeout [ 71.725106] Bluetooth: hci6: command 0x0419 tx timeout [ 71.725516] Bluetooth: hci1: command 0x0419 tx timeout [ 71.725865] Bluetooth: hci7: command 0x0419 tx timeout [ 71.726254] Bluetooth: hci5: command 0x0419 tx timeout [ 71.726605] Bluetooth: hci3: command 0x0419 tx timeout 00:28:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x7, 0xff, 0x1, 0x0, 0x8, 0x40801, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xb64, 0x2, @perf_config_ext={0x128, 0x8001}, 0x200, 0xdc52, 0x2000, 0x8, 0xff, 0x81, 0x5, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f0000000bc0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r3 = gettid() kcmp(r3, 0x0, 0x0, r2, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r4, &(0x7f0000000300)='./file1\x00', 0x420000, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0x6, 0x6, 0xb6f, 0x9, 0x47c9}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) close(r5) fsmount(r5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) [ 112.903642] audit: type=1400 audit(1665102505.574:7): avc: denied { open } for pid=3900 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 112.905050] audit: type=1400 audit(1665102505.574:8): avc: denied { kernel } for pid=3900 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 112.925724] ------------[ cut here ]------------ [ 112.925744] [ 112.925746] ====================================================== [ 112.925750] WARNING: possible circular locking dependency detected [ 112.925754] 6.0.0-next-20221006 #1 Not tainted [ 112.925760] ------------------------------------------------------ [ 112.925763] syz-executor.2/3901 is trying to acquire lock: [ 112.925769] ffffffff853fac98 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 112.925808] [ 112.925808] but task is already holding lock: [ 112.925810] ffff88800e63a820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 112.925837] [ 112.925837] which lock already depends on the new lock. [ 112.925837] [ 112.925840] [ 112.925840] the existing dependency chain (in reverse order) is: [ 112.925843] [ 112.925843] -> #3 (&ctx->lock){....}-{2:2}: [ 112.925856] _raw_spin_lock+0x2a/0x40 [ 112.925869] __perf_event_task_sched_out+0x53b/0x18d0 [ 112.925880] __schedule+0xedd/0x2470 [ 112.925895] schedule+0xda/0x1b0 [ 112.925909] exit_to_user_mode_prepare+0x114/0x1a0 [ 112.925921] syscall_exit_to_user_mode+0x19/0x40 [ 112.925935] do_syscall_64+0x48/0x90 [ 112.925944] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.925962] [ 112.925962] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 112.925975] _raw_spin_lock_nested+0x30/0x40 [ 112.925987] raw_spin_rq_lock_nested+0x1e/0x30 [ 112.926000] task_fork_fair+0x63/0x4d0 [ 112.926016] sched_cgroup_fork+0x3d0/0x540 [ 112.926030] copy_process+0x4183/0x6e20 [ 112.926041] kernel_clone+0xe7/0x890 [ 112.926050] user_mode_thread+0xad/0xf0 [ 112.926060] rest_init+0x24/0x250 [ 112.926073] arch_call_rest_init+0xf/0x14 [ 112.926084] start_kernel+0x4c6/0x4eb [ 112.926094] secondary_startup_64_no_verify+0xe0/0xeb [ 112.926109] [ 112.926109] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 112.926122] _raw_spin_lock_irqsave+0x39/0x60 [ 112.926134] try_to_wake_up+0xab/0x1930 [ 112.926147] up+0x75/0xb0 [ 112.926162] __up_console_sem+0x6e/0x80 [ 112.926178] console_unlock+0x46a/0x590 [ 112.926194] vprintk_emit+0x1bd/0x560 [ 112.926210] vprintk+0x84/0xa0 [ 112.926225] _printk+0xba/0xf1 [ 112.926238] kauditd_hold_skb.cold+0x3f/0x4e [ 112.926256] kauditd_send_queue+0x233/0x290 [ 112.926270] kauditd_thread+0x5f9/0x9c0 [ 112.926284] kthread+0x2ed/0x3a0 [ 112.926298] ret_from_fork+0x22/0x30 [ 112.926310] [ 112.926310] -> #0 ((console_sem).lock){....}-{2:2}: [ 112.926323] __lock_acquire+0x2a02/0x5e70 [ 112.926340] lock_acquire+0x1a2/0x530 [ 112.926355] _raw_spin_lock_irqsave+0x39/0x60 [ 112.926367] down_trylock+0xe/0x70 [ 112.926383] __down_trylock_console_sem+0x3b/0xd0 [ 112.926399] vprintk_emit+0x16b/0x560 [ 112.926415] vprintk+0x84/0xa0 [ 112.926430] _printk+0xba/0xf1 [ 112.926441] report_bug.cold+0x72/0xab [ 112.926451] handle_bug+0x3c/0x70 [ 112.926460] exc_invalid_op+0x14/0x50 [ 112.926470] asm_exc_invalid_op+0x16/0x20 [ 112.926483] group_sched_out.part.0+0x2c7/0x460 [ 112.926501] ctx_sched_out+0x8f1/0xc10 [ 112.926518] __perf_event_task_sched_out+0x6d0/0x18d0 [ 112.926528] __schedule+0xedd/0x2470 [ 112.926543] schedule+0xda/0x1b0 [ 112.926558] exit_to_user_mode_prepare+0x114/0x1a0 [ 112.926568] syscall_exit_to_user_mode+0x19/0x40 [ 112.926582] do_syscall_64+0x48/0x90 [ 112.926592] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.926606] [ 112.926606] other info that might help us debug this: [ 112.926606] [ 112.926608] Chain exists of: [ 112.926608] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 112.926608] [ 112.926623] Possible unsafe locking scenario: [ 112.926623] [ 112.926625] CPU0 CPU1 [ 112.926628] ---- ---- [ 112.926630] lock(&ctx->lock); [ 112.926635] lock(&rq->__lock); [ 112.926641] lock(&ctx->lock); [ 112.926648] lock((console_sem).lock); [ 112.926653] [ 112.926653] *** DEADLOCK *** [ 112.926653] [ 112.926655] 2 locks held by syz-executor.2/3901: [ 112.926662] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 112.926692] #1: ffff88800e63a820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 112.926719] [ 112.926719] stack backtrace: [ 112.926721] CPU: 1 PID: 3901 Comm: syz-executor.2 Not tainted 6.0.0-next-20221006 #1 [ 112.926734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.926740] Call Trace: [ 112.926743] [ 112.926747] dump_stack_lvl+0x8b/0xb3 [ 112.926759] check_noncircular+0x263/0x2e0 [ 112.926775] ? format_decode+0x26c/0xb50 [ 112.926792] ? print_circular_bug+0x450/0x450 [ 112.926809] ? simple_strtoul+0x30/0x30 [ 112.926825] ? format_decode+0x26c/0xb50 [ 112.926844] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 112.926861] __lock_acquire+0x2a02/0x5e70 [ 112.926882] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 112.926905] lock_acquire+0x1a2/0x530 [ 112.926921] ? down_trylock+0xe/0x70 [ 112.926939] ? lock_release+0x750/0x750 [ 112.926960] ? vprintk+0x84/0xa0 [ 112.926977] _raw_spin_lock_irqsave+0x39/0x60 [ 112.926990] ? down_trylock+0xe/0x70 [ 112.927007] down_trylock+0xe/0x70 [ 112.927024] ? vprintk+0x84/0xa0 [ 112.927041] __down_trylock_console_sem+0x3b/0xd0 [ 112.927058] vprintk_emit+0x16b/0x560 [ 112.927077] vprintk+0x84/0xa0 [ 112.927097] _printk+0xba/0xf1 [ 112.927109] ? record_print_text.cold+0x16/0x16 [ 112.927126] ? report_bug.cold+0x66/0xab [ 112.927137] ? group_sched_out.part.0+0x2c7/0x460 [ 112.927156] report_bug.cold+0x72/0xab [ 112.927167] handle_bug+0x3c/0x70 [ 112.927178] exc_invalid_op+0x14/0x50 [ 112.927189] asm_exc_invalid_op+0x16/0x20 [ 112.927203] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 112.927224] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 112.927235] RSP: 0018:ffff8880101a7c48 EFLAGS: 00010006 [ 112.927244] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 112.927252] RDX: ffff8880212f8000 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 112.927259] RBP: ffff888010528000 R08: 0000000000000005 R09: 0000000000000001 [ 112.927266] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800e63a800 [ 112.927274] R13: ffff88806cf3d2c0 R14: ffffffff8547d200 R15: 0000000000000002 [ 112.927284] ? group_sched_out.part.0+0x2c7/0x460 [ 112.927304] ? group_sched_out.part.0+0x2c7/0x460 [ 112.927324] ctx_sched_out+0x8f1/0xc10 [ 112.927349] __perf_event_task_sched_out+0x6d0/0x18d0 [ 112.927363] ? lock_is_held_type+0xd7/0x130 [ 112.927378] ? __perf_cgroup_move+0x160/0x160 [ 112.927389] ? set_next_entity+0x304/0x550 [ 112.927406] ? update_curr+0x267/0x740 [ 112.927424] ? lock_is_held_type+0xd7/0x130 [ 112.927439] __schedule+0xedd/0x2470 [ 112.927458] ? io_schedule_timeout+0x150/0x150 [ 112.927475] ? rcu_read_lock_sched_held+0x3e/0x80 [ 112.927495] schedule+0xda/0x1b0 [ 112.927511] exit_to_user_mode_prepare+0x114/0x1a0 [ 112.927524] syscall_exit_to_user_mode+0x19/0x40 [ 112.927538] do_syscall_64+0x48/0x90 [ 112.927549] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.927564] RIP: 0033:0x7fe86786db19 [ 112.927572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.927582] RSP: 002b:00007fe864de3218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.927593] RAX: 0000000000000001 RBX: 00007fe867980f68 RCX: 00007fe86786db19 [ 112.927600] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe867980f6c [ 112.927607] RBP: 00007fe867980f60 R08: 000000000000000e R09: 0000000000000000 [ 112.927614] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe867980f6c [ 112.927621] R13: 00007ffef217086f R14: 00007fe864de3300 R15: 0000000000022000 [ 112.927634] [ 112.981477] WARNING: CPU: 1 PID: 3901 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 112.982104] Modules linked in: [ 112.982332] CPU: 1 PID: 3901 Comm: syz-executor.2 Not tainted 6.0.0-next-20221006 #1 [ 112.982859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.983417] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 112.983793] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 112.985013] RSP: 0018:ffff8880101a7c48 EFLAGS: 00010006 [ 112.985374] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 112.985857] RDX: ffff8880212f8000 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 112.986343] RBP: ffff888010528000 R08: 0000000000000005 R09: 0000000000000001 [ 112.986824] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800e63a800 [ 112.987307] R13: ffff88806cf3d2c0 R14: ffffffff8547d200 R15: 0000000000000002 [ 112.987813] FS: 00007fe864de3700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 112.988366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.988764] CR2: 00005588c9585080 CR3: 0000000008a52000 CR4: 0000000000350ee0 [ 112.989258] Call Trace: [ 112.989436] [ 112.989598] ctx_sched_out+0x8f1/0xc10 [ 112.989885] __perf_event_task_sched_out+0x6d0/0x18d0 [ 112.990241] ? lock_is_held_type+0xd7/0x130 [ 112.990542] ? __perf_cgroup_move+0x160/0x160 [ 112.990857] ? set_next_entity+0x304/0x550 [ 112.991157] ? update_curr+0x267/0x740 [ 112.991441] ? lock_is_held_type+0xd7/0x130 [ 112.991747] __schedule+0xedd/0x2470 [ 112.992014] ? io_schedule_timeout+0x150/0x150 [ 112.992339] ? rcu_read_lock_sched_held+0x3e/0x80 [ 112.992680] schedule+0xda/0x1b0 [ 112.992927] exit_to_user_mode_prepare+0x114/0x1a0 [ 112.993263] syscall_exit_to_user_mode+0x19/0x40 [ 112.993595] do_syscall_64+0x48/0x90 [ 112.993857] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.994216] RIP: 0033:0x7fe86786db19 [ 112.994478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.995727] RSP: 002b:00007fe864de3218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.996237] RAX: 0000000000000001 RBX: 00007fe867980f68 RCX: 00007fe86786db19 [ 112.996726] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe867980f6c [ 112.997211] RBP: 00007fe867980f60 R08: 000000000000000e R09: 0000000000000000 [ 112.997698] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe867980f6c [ 112.998184] R13: 00007ffef217086f R14: 00007fe864de3300 R15: 0000000000022000 [ 112.998672] [ 112.998837] irq event stamp: 620 [ 112.999068] hardirqs last enabled at (619): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 112.999710] hardirqs last disabled at (620): [] __schedule+0x1225/0x2470 [ 113.000277] softirqs last enabled at (40): [] __irq_exit_rcu+0x11b/0x180 [ 113.000853] softirqs last disabled at (35): [] __irq_exit_rcu+0x11b/0x180 [ 113.001430] ---[ end trace 0000000000000000 ]--- 00:28:25 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000180)='./file1\x00', 0x18001, 0xc) write$binfmt_aout(r2, &(0x7f0000000ac0)={{0xcc, 0xe1, 0x3f, 0x100, 0x3c6, 0x0, 0x94, 0x1f}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1920) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8e4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) read(0xffffffffffffffff, &(0x7f0000000300)=""/5, 0x5) creat(&(0x7f0000000400)='./file1\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_aout(r4, &(0x7f00000005c0)={{0x0, 0x7f, 0x3, 0x3da, 0xd4, 0xff, 0x19e, 0x7}, "6efcb8fc9ee95561b37e5b60ecf6a3be2d7867506e2f4b80ea7a4acc2ffd62599f85f2d31cfeb500ec931e9021c715ee74301b83240335fd81ae159bb87c32c2e15c2aa0a3e77a9516b8c8588c15f6037f4d496a08e38966845c59492649ca430ea8b4bc8588dad5a70c8ca6bcc69bb3b94c513e0843ed1318fe99c945fadb9a030c65011b17014c77645b8e9f390efabcb47ab19c63b34c05f5d428c735b513027aef3e8e84d85a3394", ['\x00', '\x00', '\x00', '\x00']}, 0x4ca) [ 113.135471] audit: type=1400 audit(1665102505.806:9): avc: denied { write } for pid=3918 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 113.581388] audit: type=1400 audit(1665102506.252:10): avc: denied { map } for pid=3957 comm="syz-executor.3" path="pipe:[14560]" dev="pipefs" ino=14560 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 VM DIAGNOSIS: 00:28:25 Registers: info registers vcpu 0 RAX=0000555e791b4348 RBX=00007fe47a859180 RCX=00007fe47a52ebf8 RDX=0000000000000003 RSI=0000000000674cda RDI=00007fe47a541b38 RBP=0000000000000000 RSP=00007ffc4b314380 R8 =00007ffc4b3144c0 R9 =00007fe47a859440 R10=00007fe47a6cf1c0 R11=0000000000000007 R12=0000000000000007 R13=00007fe47a828a90 R14=0000000000000001 R15=0000000000000000 RIP=00007fe47a837083 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe47a31d540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdb5c947368 CR3=000000001e3e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000000000766e65 XMM04=6c665f7465735f5854435f43414d4800 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823c0801 RDI=ffffffff8765c9e0 RBP=ffffffff8765c9a0 RSP=ffff8880101a7690 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002e R11=0000000000000001 R12=000000000000002e R13=ffffffff8765c9a0 R14=0000000000000010 R15=ffffffff823c07f0 RIP=ffffffff823c0859 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe864de3700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005588c9585080 CR3=0000000008a52000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fe8679547c000007fe8679547c8 XMM02=00007fe8679547e000007fe8679547c0 XMM03=00007fe8679547c800007fe8679547c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000