Warning: Permanently added '[localhost]:8777' (ECDSA) to the list of known hosts. 2022/09/15 08:25:02 fuzzer started 2022/09/15 08:25:03 dialing manager at localhost:33849 syzkaller login: [ 44.361329] cgroup: Unknown subsys name 'net' [ 44.435917] cgroup: Unknown subsys name 'rlimit' 2022/09/15 08:25:16 syscalls: 2215 2022/09/15 08:25:16 code coverage: enabled 2022/09/15 08:25:16 comparison tracing: enabled 2022/09/15 08:25:16 extra coverage: enabled 2022/09/15 08:25:16 setuid sandbox: enabled 2022/09/15 08:25:16 namespace sandbox: enabled 2022/09/15 08:25:16 Android sandbox: enabled 2022/09/15 08:25:16 fault injection: enabled 2022/09/15 08:25:16 leak checking: enabled 2022/09/15 08:25:16 net packet injection: enabled 2022/09/15 08:25:16 net device setup: enabled 2022/09/15 08:25:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/15 08:25:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/15 08:25:16 USB emulation: enabled 2022/09/15 08:25:16 hci packet injection: enabled 2022/09/15 08:25:16 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914) 2022/09/15 08:25:16 802.15.4 emulation: enabled 2022/09/15 08:25:16 fetching corpus: 50, signal 30628/32384 (executing program) 2022/09/15 08:25:17 fetching corpus: 100, signal 49402/52702 (executing program) 2022/09/15 08:25:17 fetching corpus: 150, signal 58758/63489 (executing program) 2022/09/15 08:25:17 fetching corpus: 200, signal 65821/71913 (executing program) 2022/09/15 08:25:17 fetching corpus: 250, signal 71169/78623 (executing program) 2022/09/15 08:25:17 fetching corpus: 300, signal 75930/84644 (executing program) 2022/09/15 08:25:17 fetching corpus: 350, signal 82752/92593 (executing program) 2022/09/15 08:25:17 fetching corpus: 400, signal 85198/96320 (executing program) 2022/09/15 08:25:17 fetching corpus: 450, signal 89275/101534 (executing program) 2022/09/15 08:25:18 fetching corpus: 500, signal 93038/106398 (executing program) 2022/09/15 08:25:18 fetching corpus: 550, signal 97424/111785 (executing program) 2022/09/15 08:25:18 fetching corpus: 600, signal 101383/116753 (executing program) 2022/09/15 08:25:18 fetching corpus: 650, signal 104769/121143 (executing program) 2022/09/15 08:25:18 fetching corpus: 700, signal 107298/124707 (executing program) 2022/09/15 08:25:18 fetching corpus: 750, signal 111111/129330 (executing program) 2022/09/15 08:25:18 fetching corpus: 800, signal 112752/132029 (executing program) 2022/09/15 08:25:19 fetching corpus: 850, signal 115412/135570 (executing program) 2022/09/15 08:25:19 fetching corpus: 900, signal 119009/139903 (executing program) 2022/09/15 08:25:19 fetching corpus: 950, signal 120831/142670 (executing program) 2022/09/15 08:25:19 fetching corpus: 1000, signal 123439/146016 (executing program) 2022/09/15 08:25:19 fetching corpus: 1050, signal 126371/149623 (executing program) 2022/09/15 08:25:19 fetching corpus: 1100, signal 128183/152284 (executing program) 2022/09/15 08:25:19 fetching corpus: 1150, signal 129889/154797 (executing program) 2022/09/15 08:25:19 fetching corpus: 1200, signal 131083/156871 (executing program) 2022/09/15 08:25:19 fetching corpus: 1250, signal 133960/160310 (executing program) 2022/09/15 08:25:20 fetching corpus: 1300, signal 137764/164514 (executing program) 2022/09/15 08:25:20 fetching corpus: 1350, signal 140385/167673 (executing program) 2022/09/15 08:25:20 fetching corpus: 1400, signal 142222/170183 (executing program) 2022/09/15 08:25:20 fetching corpus: 1450, signal 144141/172759 (executing program) 2022/09/15 08:25:20 fetching corpus: 1500, signal 146203/175386 (executing program) 2022/09/15 08:25:20 fetching corpus: 1550, signal 148065/177819 (executing program) 2022/09/15 08:25:20 fetching corpus: 1600, signal 150166/180397 (executing program) 2022/09/15 08:25:21 fetching corpus: 1650, signal 152284/182942 (executing program) 2022/09/15 08:25:21 fetching corpus: 1700, signal 154865/185841 (executing program) 2022/09/15 08:25:21 fetching corpus: 1750, signal 156214/187784 (executing program) 2022/09/15 08:25:21 fetching corpus: 1800, signal 157448/189578 (executing program) 2022/09/15 08:25:21 fetching corpus: 1850, signal 158712/191426 (executing program) 2022/09/15 08:25:21 fetching corpus: 1900, signal 159594/192955 (executing program) 2022/09/15 08:25:21 fetching corpus: 1950, signal 161005/194880 (executing program) 2022/09/15 08:25:21 fetching corpus: 2000, signal 162573/196953 (executing program) 2022/09/15 08:25:21 fetching corpus: 2050, signal 163691/198627 (executing program) 2022/09/15 08:25:22 fetching corpus: 2100, signal 165110/200458 (executing program) 2022/09/15 08:25:22 fetching corpus: 2150, signal 166174/202025 (executing program) 2022/09/15 08:25:22 fetching corpus: 2200, signal 167064/203463 (executing program) 2022/09/15 08:25:22 fetching corpus: 2250, signal 167875/204816 (executing program) 2022/09/15 08:25:22 fetching corpus: 2300, signal 170469/207432 (executing program) 2022/09/15 08:25:22 fetching corpus: 2350, signal 171659/209044 (executing program) 2022/09/15 08:25:22 fetching corpus: 2400, signal 172971/210727 (executing program) 2022/09/15 08:25:23 fetching corpus: 2450, signal 174200/212353 (executing program) 2022/09/15 08:25:23 fetching corpus: 2500, signal 176691/214709 (executing program) 2022/09/15 08:25:23 fetching corpus: 2550, signal 177452/215943 (executing program) 2022/09/15 08:25:23 fetching corpus: 2600, signal 179331/217896 (executing program) 2022/09/15 08:25:23 fetching corpus: 2650, signal 180804/219524 (executing program) 2022/09/15 08:25:23 fetching corpus: 2700, signal 183071/221665 (executing program) 2022/09/15 08:25:24 fetching corpus: 2750, signal 184247/223124 (executing program) 2022/09/15 08:25:24 fetching corpus: 2800, signal 185247/224509 (executing program) 2022/09/15 08:25:24 fetching corpus: 2850, signal 186910/226185 (executing program) 2022/09/15 08:25:24 fetching corpus: 2900, signal 188376/227754 (executing program) 2022/09/15 08:25:24 fetching corpus: 2950, signal 189288/228969 (executing program) 2022/09/15 08:25:24 fetching corpus: 3000, signal 190623/230384 (executing program) 2022/09/15 08:25:24 fetching corpus: 3050, signal 192065/231905 (executing program) 2022/09/15 08:25:25 fetching corpus: 3100, signal 192743/232963 (executing program) 2022/09/15 08:25:25 fetching corpus: 3150, signal 193463/233994 (executing program) 2022/09/15 08:25:25 fetching corpus: 3200, signal 195154/235580 (executing program) 2022/09/15 08:25:25 fetching corpus: 3250, signal 196054/236665 (executing program) 2022/09/15 08:25:25 fetching corpus: 3300, signal 197005/237847 (executing program) 2022/09/15 08:25:25 fetching corpus: 3350, signal 198135/239059 (executing program) 2022/09/15 08:25:25 fetching corpus: 3400, signal 199341/240271 (executing program) 2022/09/15 08:25:26 fetching corpus: 3450, signal 200242/241394 (executing program) 2022/09/15 08:25:26 fetching corpus: 3500, signal 200921/242334 (executing program) 2022/09/15 08:25:26 fetching corpus: 3550, signal 202143/243545 (executing program) 2022/09/15 08:25:26 fetching corpus: 3600, signal 203054/244563 (executing program) 2022/09/15 08:25:26 fetching corpus: 3650, signal 203956/245566 (executing program) 2022/09/15 08:25:27 fetching corpus: 3700, signal 205052/246663 (executing program) 2022/09/15 08:25:27 fetching corpus: 3750, signal 206127/247696 (executing program) 2022/09/15 08:25:27 fetching corpus: 3800, signal 206831/248526 (executing program) 2022/09/15 08:25:27 fetching corpus: 3850, signal 207692/249463 (executing program) 2022/09/15 08:25:27 fetching corpus: 3900, signal 208464/250344 (executing program) 2022/09/15 08:25:27 fetching corpus: 3950, signal 209563/251363 (executing program) 2022/09/15 08:25:27 fetching corpus: 4000, signal 210161/252112 (executing program) 2022/09/15 08:25:27 fetching corpus: 4050, signal 210717/252860 (executing program) 2022/09/15 08:25:28 fetching corpus: 4100, signal 211712/253761 (executing program) 2022/09/15 08:25:28 fetching corpus: 4150, signal 212745/254647 (executing program) 2022/09/15 08:25:28 fetching corpus: 4200, signal 212992/255275 (executing program) 2022/09/15 08:25:28 fetching corpus: 4250, signal 213553/255988 (executing program) 2022/09/15 08:25:28 fetching corpus: 4300, signal 214188/256703 (executing program) 2022/09/15 08:25:28 fetching corpus: 4350, signal 214833/257411 (executing program) 2022/09/15 08:25:28 fetching corpus: 4400, signal 215783/258291 (executing program) 2022/09/15 08:25:29 fetching corpus: 4450, signal 216052/258842 (executing program) 2022/09/15 08:25:29 fetching corpus: 4500, signal 216950/259617 (executing program) 2022/09/15 08:25:29 fetching corpus: 4550, signal 217477/260319 (executing program) 2022/09/15 08:25:29 fetching corpus: 4600, signal 218168/261022 (executing program) 2022/09/15 08:25:29 fetching corpus: 4650, signal 218747/261679 (executing program) 2022/09/15 08:25:29 fetching corpus: 4700, signal 219322/262345 (executing program) 2022/09/15 08:25:29 fetching corpus: 4750, signal 220119/263066 (executing program) 2022/09/15 08:25:29 fetching corpus: 4800, signal 221586/263919 (executing program) 2022/09/15 08:25:30 fetching corpus: 4850, signal 222111/264508 (executing program) 2022/09/15 08:25:30 fetching corpus: 4900, signal 222628/265085 (executing program) 2022/09/15 08:25:30 fetching corpus: 4950, signal 223125/265673 (executing program) 2022/09/15 08:25:30 fetching corpus: 5000, signal 223703/266259 (executing program) 2022/09/15 08:25:30 fetching corpus: 5050, signal 224616/266927 (executing program) 2022/09/15 08:25:31 fetching corpus: 5100, signal 225618/267635 (executing program) 2022/09/15 08:25:31 fetching corpus: 5150, signal 226226/268206 (executing program) 2022/09/15 08:25:31 fetching corpus: 5200, signal 226778/268774 (executing program) 2022/09/15 08:25:31 fetching corpus: 5250, signal 227227/269285 (executing program) 2022/09/15 08:25:31 fetching corpus: 5300, signal 228111/269887 (executing program) 2022/09/15 08:25:31 fetching corpus: 5350, signal 228898/270476 (executing program) 2022/09/15 08:25:31 fetching corpus: 5400, signal 230048/271359 (executing program) 2022/09/15 08:25:32 fetching corpus: 5450, signal 230931/271934 (executing program) 2022/09/15 08:25:32 fetching corpus: 5500, signal 231569/272429 (executing program) 2022/09/15 08:25:32 fetching corpus: 5550, signal 232077/272876 (executing program) 2022/09/15 08:25:32 fetching corpus: 5600, signal 232685/273367 (executing program) 2022/09/15 08:25:32 fetching corpus: 5650, signal 233359/273846 (executing program) 2022/09/15 08:25:32 fetching corpus: 5700, signal 233783/274309 (executing program) 2022/09/15 08:25:32 fetching corpus: 5750, signal 234613/274810 (executing program) 2022/09/15 08:25:32 fetching corpus: 5800, signal 235333/275268 (executing program) 2022/09/15 08:25:33 fetching corpus: 5850, signal 235805/275653 (executing program) 2022/09/15 08:25:33 fetching corpus: 5900, signal 236322/276110 (executing program) 2022/09/15 08:25:33 fetching corpus: 5950, signal 237207/276572 (executing program) 2022/09/15 08:25:33 fetching corpus: 6000, signal 237716/276953 (executing program) 2022/09/15 08:25:33 fetching corpus: 6050, signal 238117/277396 (executing program) 2022/09/15 08:25:33 fetching corpus: 6100, signal 238895/277804 (executing program) 2022/09/15 08:25:33 fetching corpus: 6150, signal 239360/278203 (executing program) 2022/09/15 08:25:33 fetching corpus: 6200, signal 239881/278546 (executing program) 2022/09/15 08:25:33 fetching corpus: 6250, signal 240686/278931 (executing program) 2022/09/15 08:25:33 fetching corpus: 6300, signal 241378/279292 (executing program) 2022/09/15 08:25:34 fetching corpus: 6350, signal 242139/279666 (executing program) 2022/09/15 08:25:34 fetching corpus: 6400, signal 242743/280014 (executing program) 2022/09/15 08:25:34 fetching corpus: 6450, signal 243108/280313 (executing program) 2022/09/15 08:25:34 fetching corpus: 6500, signal 244003/280688 (executing program) 2022/09/15 08:25:34 fetching corpus: 6550, signal 244548/280979 (executing program) 2022/09/15 08:25:34 fetching corpus: 6600, signal 245210/281311 (executing program) 2022/09/15 08:25:35 fetching corpus: 6650, signal 245903/281586 (executing program) 2022/09/15 08:25:35 fetching corpus: 6700, signal 246576/281888 (executing program) 2022/09/15 08:25:35 fetching corpus: 6750, signal 247138/282153 (executing program) 2022/09/15 08:25:35 fetching corpus: 6800, signal 247520/282236 (executing program) 2022/09/15 08:25:35 fetching corpus: 6850, signal 248006/282248 (executing program) 2022/09/15 08:25:35 fetching corpus: 6900, signal 248442/282270 (executing program) 2022/09/15 08:25:35 fetching corpus: 6950, signal 248751/282310 (executing program) 2022/09/15 08:25:35 fetching corpus: 7000, signal 249170/282314 (executing program) 2022/09/15 08:25:35 fetching corpus: 7050, signal 249795/282326 (executing program) 2022/09/15 08:25:36 fetching corpus: 7100, signal 250610/282328 (executing program) 2022/09/15 08:25:36 fetching corpus: 7150, signal 251080/282334 (executing program) 2022/09/15 08:25:36 fetching corpus: 7200, signal 251997/282349 (executing program) 2022/09/15 08:25:36 fetching corpus: 7250, signal 252522/282377 (executing program) 2022/09/15 08:25:36 fetching corpus: 7300, signal 253083/282395 (executing program) 2022/09/15 08:25:36 fetching corpus: 7350, signal 253770/282400 (executing program) 2022/09/15 08:25:36 fetching corpus: 7400, signal 254493/282413 (executing program) 2022/09/15 08:25:36 fetching corpus: 7450, signal 254981/282416 (executing program) 2022/09/15 08:25:36 fetching corpus: 7500, signal 255315/282416 (executing program) 2022/09/15 08:25:37 fetching corpus: 7550, signal 256013/282448 (executing program) 2022/09/15 08:25:37 fetching corpus: 7600, signal 256552/282448 (executing program) 2022/09/15 08:25:37 fetching corpus: 7650, signal 256939/282456 (executing program) 2022/09/15 08:25:37 fetching corpus: 7700, signal 257431/282461 (executing program) 2022/09/15 08:25:37 fetching corpus: 7750, signal 257886/282465 (executing program) 2022/09/15 08:25:37 fetching corpus: 7800, signal 258226/282485 (executing program) 2022/09/15 08:25:37 fetching corpus: 7850, signal 258489/282489 (executing program) 2022/09/15 08:25:37 fetching corpus: 7900, signal 259028/282491 (executing program) 2022/09/15 08:25:37 fetching corpus: 7950, signal 259332/282496 (executing program) 2022/09/15 08:25:38 fetching corpus: 8000, signal 259883/282585 (executing program) 2022/09/15 08:25:38 fetching corpus: 8050, signal 260456/282601 (executing program) 2022/09/15 08:25:38 fetching corpus: 8100, signal 260798/282609 (executing program) 2022/09/15 08:25:38 fetching corpus: 8150, signal 261268/282615 (executing program) 2022/09/15 08:25:38 fetching corpus: 8200, signal 261592/282631 (executing program) 2022/09/15 08:25:38 fetching corpus: 8250, signal 262055/282632 (executing program) 2022/09/15 08:25:38 fetching corpus: 8300, signal 262936/282638 (executing program) 2022/09/15 08:25:39 fetching corpus: 8350, signal 263435/282648 (executing program) 2022/09/15 08:25:39 fetching corpus: 8400, signal 263952/282648 (executing program) 2022/09/15 08:25:39 fetching corpus: 8450, signal 264283/282651 (executing program) 2022/09/15 08:25:39 fetching corpus: 8457, signal 264320/282651 (executing program) 2022/09/15 08:25:39 fetching corpus: 8457, signal 264320/282651 (executing program) 2022/09/15 08:25:41 starting 8 fuzzer processes 08:25:41 executing program 0: ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fallocate(r0, 0x1, 0x1, 0x906) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x5) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001440)='/proc/diskstats\x00', 0x0, 0x0) io_submit(0x0, 0x4, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000040)="149e57b6049264b0cb2ff7572648b045ec2b0241be9f9404eac54bebcc311db8c2f89ee01c41f51c5622305a414905d48749cf61fd4cbdd2d33713353f52940a561dd6d9f0464b43c7d32dc750b839e4d5995b9f1b109975e11331cbee082b8f0f50566e1f46e0f0b85db30bcd7c67df2916ca7c7ce7a44b21f4bb4201d04fe2477fd06d402478b3f721d804af130fc7416a9b3d2c478c4b5d23d1b157f01ff02495083811387c6b01efe7a2f162226bda867134bbaad49e213c228f32b45ed04ecec079bde1fd696c7636957035b90751bffde1cecbe1b6c6926777cc8c0c61", 0xe0, 0x7fffffff, 0x0, 0x1, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xc2, r0, &(0x7f0000000180)="205d0796a79b78937774221dccf1419200a8f85364baec37e391f20bec6b2ce1853d5bdafa585eeab256f746e55f3bdc00c25c14000bc4ae9d69e9d2d60a60faca33849205e47ec3824970bd667032484d9a770f2913cf3acec03fa99023fa43f53d6ad15cdea0e7f654bb487b9be5a88e66e96705ee0c42150760a485f96869abb8f8b3060ea4f443759d54ce7e5d2b2cdb89c4d6321f4df01f6c12f1faf3a2aca369506f99650d03bd33348b586c5cb32a51cb3fcf8b60307480031554d5fb80dd0bc1f5a783a7d0b8280abbeb2a97b207f3ad99d601cbca4be0e9f9dcbc78eee541", 0xe3, 0x200, 0x0, 0x1}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f00000002c0)="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", 0x1000, 0x2, 0x0, 0x2, r1}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000001340)="31b3380b6b0c303968a1656e56d1d9ca496f8f9edd9adffcfbfd5c11c793e189f86d1ea3839575d6b34f64e2ceeeb3f73a2c663813b342d0e3b0ef7ef99b27dcdebfc6d4c1f7188b8b646e28ed4139ac688fc365fd23aa568947e18215476602e01defc8f60c9cc973336a6bf3db8c620df5b7969249798b8688a75b561f7bb8bbdb9b1fe93615eaa46b8ca403e7e77287ca71a8b9e47d53140647f695e79e6ccde8ca5cc9957dd9d5481e5ca3286f67e43c921abd937140d9d489cb2afd07731c9e6299656d5bcf", 0xc8, 0x2, 0x0, 0x1, r2}]) close_range(r2, r1, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) lseek(r3, 0x2b, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001500), 0x157002, 0x0) write$binfmt_aout(r4, &(0x7f0000001540)={{0xcc, 0xd2, 0x8, 0x350, 0x29d, 0x80000001, 0x13f, 0x3}, "8e723ae8ced7a670a52a72fab18681724527fa1b47e64bc7c9cc884c9622c8ee044eb9e61a8bb7aa5f086308b4ddc73788639b4b64b42fa60d565aac7d16460814", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x761) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001cc0)={"4a13b8c3ad0622386c7fbd1a67a906d5", 0x0, 0x0, {0x4, 0x5c0}, {0x4, 0x8}, 0x6, [0x25, 0xff, 0x6, 0x4, 0x100000001, 0x7fffffff, 0x4, 0xf7, 0x7fffffff, 0xfff, 0x400, 0x3, 0x3f, 0x100000001, 0x3, 0x9]}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001dc0), 0xa00, 0x0) flock(r5, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc2}, 0x800) epoll_pwait2(r2, &(0x7f0000001f00)=[{}, {}], 0x2, &(0x7f0000001f40), &(0x7f0000001f80)={[0x8]}, 0x8) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x4c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) r6 = syz_open_dev$mouse(&(0x7f0000002100), 0x8001, 0x101000) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x6}}}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 08:25:41 executing program 1: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@dev, @dev, 0x0}, &(0x7f0000000040)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev, @empty, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240040c8}, 0x18) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@dev, @local, 0x0}, &(0x7f0000000280)=0xc) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3518}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}]}, 0x2c}}, 0x24004880) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000580)={@rand_addr, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xfc, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4051}, 0x4000015) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x42a, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40) r9 = signalfd(r5, &(0x7f00000008c0)={[0x5]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xb64d610a6618c18}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x800, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}}, 0x20000000) r11 = syz_open_dev$hiddev(&(0x7f0000000a80), 0x10000, 0x400500) ppoll(&(0x7f0000000ac0)=[{r11, 0x8000}, {r4, 0x4208}, {r4, 0x100}, {r3, 0x8048}, {r3, 0x8}], 0x5, &(0x7f0000000b00)={0x77359400}, &(0x7f0000000b40)={[0x4]}, 0x8) sendmsg$ETHTOOL_MSG_EEE_SET(r9, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x20, 0x4, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x840) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000d80)={'security\x00', 0x52, "a304a09aba9ebd79b158389ac715a81327f694d36853917d9b8bbafefb09af96a267eef46ac8d3a466b63e747fca734f88aafdba5e383e3da510f7b8ad644805a32333e836dbdce73ef71ee90487cb5fd274"}, &(0x7f0000000e00)=0x76) 08:25:41 executing program 2: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000400)={0xc2, 0x8}) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000440)={[0x1ffc0000000]}, 0x8) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000480)) openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCCONS(r1, 0x541d) fallocate(r0, 0x26, 0x3, 0x7fffffff) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000580)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000005c0)={r2, 0x80000000, 0x100000001}) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000600)={0x81, 0xfc, 0x8}) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000640)=0x3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x8100, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80, 0x52, 0x9}, 0x18) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000880)={0xd, 0x80000001}) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000cc0)={0x1, 0x0, 0x12, 0x9, 0x14c, &(0x7f00000008c0)}) close_range(r3, r2, 0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x98, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 82.617335] audit: type=1400 audit(1663230341.639:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:25:41 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$KDADDIO(r0, 0x4b34, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0xff, "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"}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000280)=0x4) mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x8000, &(0x7f0000000380)={'trans=unix,', {[{@mmap}, {@noextend}, {@cache_none}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@access_client}, {@version_L}], [{@fsname}, {@subj_type={'subj_type', 0x3d, '\\}'}}, {@obj_role={'obj_role', 0x3d, '+'}}, {@measure}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000480)={0x40, 0x9, 0x7}) ioctl$TIOCCBRK(r2, 0x5428) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000004c0)) llistxattr(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)=""/248, 0xf8) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000a80)={0x3, 0x1, 0x2, 0x13, 0x102, &(0x7f0000000680)}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000ac0)) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x6c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x9}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20004490) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000c40)) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000c80)={{0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0xfffffffffffff000, 0x6, 0x9283, 0x340d, 0x2, 0xf4, 0x9, 0x4, 0x7}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001c80)={r4, 0xe1}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002cc0), r2) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000002e80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002d00)={0x138, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb180}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x36cf}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x618, @private1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c804) 08:25:41 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x74}}, 0x2000c011) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xc0, 0x453, 0x10, 0x70bd26, 0x25dfdbfb, "d6dd2425a0bb4b4d869543411464feb6c2235da537874fa82035812a9ccd177d7252a5076457331a3ba72eb3b471c4a54e841b44ef979cc87f7f1f95558a87c38e951003580dd838acfdf86d52889fc51c9bc418b02614652848b23f2c19dfb722d65615455682fb96476842c03af46e43c20405b7df0aa85b78492b9e1c69b4f6e5f04a72fa4942a760156e78998215248cc655bba6409eb6255bced10cc2a1dfe481a9d727570b1de86af75d0fa981", ["", ""]}, 0xc0}, 0x1, 0x0, 0x0, 0x8040}, 0x200048a5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000780)={'wpan1\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r9, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x4a}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000085}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) 08:25:41 executing program 7: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x100000001) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x8, 0x0, 0x1f}) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f00000003c0)=""/209, 0xd1}, {&(0x7f00000004c0)=""/29, 0x1d}, {&(0x7f0000000500)=""/129, 0x81}], 0x5) write(0xffffffffffffffff, &(0x7f0000000640)="421a1872cbfb86e0213f21a428bdd61f63a6c66b5e6461e205884b6ece21ecb341ea527fca10141f0cb7c727878da4b1bb6b39e55a83fdef65e3b28207cccd4cccc88c4a96bbaa304f868c6b92ea22ab1d76e71ad87e0a5e33a0b1", 0x5b) r2 = syz_open_dev$loop(&(0x7f00000006c0), 0xc64, 0x400002) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000700)=0x100000001, 0xfff) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000740), &(0x7f0000000780)=0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/90, 0x5a}, {&(0x7f0000000840)=""/126, 0x7e}, {&(0x7f00000008c0)=""/160, 0xa0}], 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000a00)={0x0, 0x0, "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", "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"}) r4 = syz_open_dev$vcsn(&(0x7f0000001a00), 0x7fff, 0x103141) ioctl$SNAPSHOT_FREE(r4, 0x3305) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000001a40)) readahead(r3, 0x80000000, 0x3) 08:25:41 executing program 5: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x301, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000140), 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000500)=""/177, 0xb1}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/6, 0x6}], 0x8, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x10000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0xc000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x58100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x53}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0xc004) r5 = signalfd(r1, &(0x7f0000000b40)={[0x5]}, 0x8) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x3fa, 0x4, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000e00), r5) accept$packet(r5, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f40)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000f80)={@empty, 0x0}, &(0x7f0000000fc0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001000)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000001100)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000014c0)={'tunl0\x00', &(0x7f0000001480)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x2, 0x3ab, {{0x8, 0x4, 0x0, 0x2, 0x20, 0x67, 0x0, 0xd0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}, {[@ssrr={0x89, 0xb, 0x6, [@local, @rand_addr=0x64010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001500)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001540)={@local, 0x0}, &(0x7f0000001580)=0x14) getpeername$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001600)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001700)={'erspan0\x00', &(0x7f0000001640)={'tunl0\x00', 0x0, 0x7800, 0x1, 0x0, 0x80, {{0x1c, 0x4, 0x1, 0x0, 0x70, 0x65, 0x0, 0x6, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp={0x44, 0x10, 0xe, 0x0, 0xf, [0x3, 0x81, 0x5]}, @cipso={0x86, 0x13, 0x3, [{0x1, 0xd, "904423c189730585676fef"}]}, @ssrr={0x89, 0x13, 0x29, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, @local]}, @generic={0x88, 0xf, "e133dbf560c495f89ce5583cf8"}, @timestamp_prespec={0x44, 0x14, 0x8a, 0x3, 0x1, [{@remote, 0x4}, {@local, 0x2}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001740)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f00000020c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001780)={0x8d0, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x13c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0xea, 0x3f, 0x5}, {0x7, 0x4b, 0x1, 0xffffffff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x0, 0xca, 0x6903}, {0x43, 0xf9, 0x7f}, {0x80, 0x81, 0x81, 0x1}, {0x8, 0x9, 0x1, 0x1}, {0x8, 0x1b, 0x8, 0x6}, {0x0, 0x1f, 0xff, 0xfffffff7}, {0x7dbb, 0x7, 0x6, 0x7}, {0x20, 0x3, 0x40, 0x401}]}}}]}}, {{0x8, 0x1, r10}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xebe5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x800, 0x3, 0x6, 0x5}, {0x1ff, 0x9, 0x1, 0x5}, {0x7, 0x7, 0x9, 0x6}, {0x4, 0x9, 0x0, 0x5}, {0x6, 0x2, 0xc8, 0x6}, {0xff, 0xd4, 0x81, 0x6}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x44d7}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3412}}, {0x8, 0x6, r14}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x16}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r16}}}]}}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x4080}, 0x11) 08:25:41 executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x8, 'veth1\x00', {'team0\x00'}, 0x81}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)=""/178, &(0x7f0000000140)=0xb2) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = accept$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000200)=0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x5}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x44410}, 0x40002) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0x8, 0x0, 0xe0d, 0x2, @local, @remote, 0x3fd0, 0x8, 0x5827, 0x6}}) r3 = accept$inet(r0, 0x0, &(0x7f0000000440)) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480), 0x10) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000004c0), 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000500)={'veth0_virt_wifi\x00', {0x2, 0x0, @private}}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000540)=""/200, &(0x7f0000000640)=0xc8) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000680)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000006c0)=0x28) r5 = openat$cgroup_subtree(r0, &(0x7f0000000700), 0x2, 0x0) dup(r5) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000740)={{0x2, 0x4e21, @multicast2}, {0x306, @multicast}, 0x2c, {0x2, 0x4e20, @broadcast}, 'wg1\x00'}) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x1000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@noextend}, {@cache_loose}], [{@obj_type={'obj_type', 0x3d, ']^-+\x8c(+}!A^\\@:\''}}, {@euid_lt={'euid<', 0xee00}}]}}) syncfs(r1) [ 83.823200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.825266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.826384] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.828671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.830066] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.831022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.835223] Bluetooth: hci0: HCI_REQ-0x0c1a [ 84.025195] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.027219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.028726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.030038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.032155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.033342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.034591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.034588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.035397] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.037591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.038748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.041868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.044328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.045145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.047297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.048518] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.050511] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.051404] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.052254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.053304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.054250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.055795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.057165] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.058599] Bluetooth: hci1: HCI_REQ-0x0c1a [ 84.065102] Bluetooth: hci3: HCI_REQ-0x0c1a [ 84.075378] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.083029] Bluetooth: hci2: HCI_REQ-0x0c1a [ 84.084598] Bluetooth: hci4: HCI_REQ-0x0c1a [ 84.132035] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.133323] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.134286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.135923] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.136591] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.137844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.141634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.142551] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.143285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.163507] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.164460] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.166511] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.169950] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.171644] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.172518] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.173386] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.175193] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.227334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.230533] Bluetooth: hci7: HCI_REQ-0x0c1a [ 84.253344] Bluetooth: hci6: HCI_REQ-0x0c1a [ 84.279802] Bluetooth: hci5: HCI_REQ-0x0c1a [ 85.853460] Bluetooth: hci0: command 0x0409 tx timeout [ 86.108805] Bluetooth: hci1: command 0x0409 tx timeout [ 86.109428] Bluetooth: hci2: command 0x0409 tx timeout [ 86.110325] Bluetooth: hci4: command 0x0409 tx timeout [ 86.112552] Bluetooth: hci3: command 0x0409 tx timeout [ 86.301929] Bluetooth: hci5: command 0x0409 tx timeout [ 86.302627] Bluetooth: hci6: command 0x0409 tx timeout [ 86.303222] Bluetooth: hci7: command 0x0409 tx timeout [ 87.901110] Bluetooth: hci0: command 0x041b tx timeout [ 88.156797] Bluetooth: hci3: command 0x041b tx timeout [ 88.157522] Bluetooth: hci4: command 0x041b tx timeout [ 88.158156] Bluetooth: hci2: command 0x041b tx timeout [ 88.158746] Bluetooth: hci1: command 0x041b tx timeout [ 88.348795] Bluetooth: hci7: command 0x041b tx timeout [ 88.349938] Bluetooth: hci6: command 0x041b tx timeout [ 88.350559] Bluetooth: hci5: command 0x041b tx timeout [ 89.949751] Bluetooth: hci0: command 0x040f tx timeout [ 90.205813] Bluetooth: hci1: command 0x040f tx timeout [ 90.206530] Bluetooth: hci2: command 0x040f tx timeout [ 90.207795] Bluetooth: hci4: command 0x040f tx timeout [ 90.208379] Bluetooth: hci3: command 0x040f tx timeout [ 90.396794] Bluetooth: hci5: command 0x040f tx timeout [ 90.397461] Bluetooth: hci6: command 0x040f tx timeout [ 90.398366] Bluetooth: hci7: command 0x040f tx timeout [ 91.997762] Bluetooth: hci0: command 0x0419 tx timeout [ 92.253860] Bluetooth: hci3: command 0x0419 tx timeout [ 92.254484] Bluetooth: hci4: command 0x0419 tx timeout [ 92.255202] Bluetooth: hci2: command 0x0419 tx timeout [ 92.255877] Bluetooth: hci1: command 0x0419 tx timeout [ 92.445833] Bluetooth: hci7: command 0x0419 tx timeout [ 92.448048] Bluetooth: hci6: command 0x0419 tx timeout [ 92.448819] Bluetooth: hci5: command 0x0419 tx timeout [ 143.613864] syz-executor.7 (296) used greatest stack depth: 24672 bytes left [ 146.295088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.296796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.298912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.300898] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.312997] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.315320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.320919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.322776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.323837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.324585] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.325721] Bluetooth: hci1: HCI_REQ-0x0c1a [ 146.328461] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.329159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.362890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.364661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.368043] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.369612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.371107] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.372106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.374573] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.374746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.376048] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.376296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.377675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.378215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.380598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.381911] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.382657] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.383417] Bluetooth: hci0: HCI_REQ-0x0c1a [ 146.387131] Bluetooth: hci4: HCI_REQ-0x0c1a [ 146.387158] Bluetooth: hci2: HCI_REQ-0x0c1a [ 146.404837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.409055] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.410258] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.414050] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.415653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.420482] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.421199] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.421864] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.423880] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.424541] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.425916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.426633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.431568] Bluetooth: hci5: HCI_REQ-0x0c1a [ 146.431865] Bluetooth: hci6: HCI_REQ-0x0c1a [ 146.432949] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.442775] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.445114] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.451432] Bluetooth: hci7: HCI_REQ-0x0c1a [ 148.380884] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 148.383372] Bluetooth: hci1: command 0x0409 tx timeout [ 148.444869] Bluetooth: hci6: command 0x0409 tx timeout [ 148.445655] Bluetooth: hci5: command 0x0409 tx timeout [ 148.447515] Bluetooth: hci4: command 0x0409 tx timeout [ 148.449338] Bluetooth: hci2: command 0x0409 tx timeout [ 148.450073] Bluetooth: hci0: command 0x0409 tx timeout [ 148.508768] Bluetooth: hci7: command 0x0409 tx timeout [ 150.428852] Bluetooth: hci1: command 0x041b tx timeout [ 150.492881] Bluetooth: hci0: command 0x041b tx timeout [ 150.494462] Bluetooth: hci2: command 0x041b tx timeout [ 150.495570] Bluetooth: hci4: command 0x041b tx timeout [ 150.496221] Bluetooth: hci5: command 0x041b tx timeout [ 150.496782] Bluetooth: hci6: command 0x041b tx timeout [ 150.556797] Bluetooth: hci7: command 0x041b tx timeout [ 152.476820] Bluetooth: hci1: command 0x040f tx timeout [ 152.540895] Bluetooth: hci6: command 0x040f tx timeout [ 152.543005] Bluetooth: hci5: command 0x040f tx timeout [ 152.543605] Bluetooth: hci4: command 0x040f tx timeout [ 152.545995] Bluetooth: hci2: command 0x040f tx timeout [ 152.547839] Bluetooth: hci0: command 0x040f tx timeout [ 152.604749] Bluetooth: hci7: command 0x040f tx timeout [ 153.628746] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 154.524760] Bluetooth: hci1: command 0x0419 tx timeout [ 154.588843] Bluetooth: hci0: command 0x0419 tx timeout [ 154.589293] Bluetooth: hci2: command 0x0419 tx timeout [ 154.590252] Bluetooth: hci4: command 0x0419 tx timeout [ 154.590805] Bluetooth: hci5: command 0x0419 tx timeout [ 154.593326] Bluetooth: hci6: command 0x0419 tx timeout [ 154.652746] Bluetooth: hci7: command 0x0419 tx timeout [ 156.256865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.258885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.259664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.261420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.263660] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.264639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.270449] Bluetooth: hci3: HCI_REQ-0x0c1a [ 158.301366] Bluetooth: hci3: command 0x0409 tx timeout [ 160.348766] Bluetooth: hci3: command 0x041b tx timeout [ 162.396880] Bluetooth: hci3: command 0x040f tx timeout [ 164.444843] Bluetooth: hci3: command 0x0419 tx timeout 08:27:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb4, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x10}], 0x1}, 0x0) 08:27:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0xa0) fallocate(r1, 0x0, 0x0, 0x87ffffc) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r5, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000003c0)=ANY=[@ANYBLOB="e50300000000000004000000", @ANYRES32=r5, @ANYBLOB="01000000000000002e2f66696c654c00054a7c50dffbc222e5b6e9661d619b72988db658d37fe263f61b308c01790b898f2b0e0b6c8ecf178ee1a0ca721ea14f26656683c113e7dc7d4394d9b93a5b63e92508"]) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) r6 = fcntl$dupfd(r4, 0x0, r2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r8, &(0x7f0000000200)={0x32b001, 0x1c2}, &(0x7f0000000240)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x9, 0x0, &(0x7f0000000440)="f01b06fcb05790c7eb0305542db656244b991b89a02c588d980738b303db26a2aea9dde63e19c51c89dc011199be8002a701e2c64d52c283cd3aa088596aaedf3289a4b59d1a67178400801361e5c32dd6bd4e190be22e750ee42149f8511a4e6435", 0x62, 0x5, 0x1}, 0xfffffffd) dup3(r6, r7, 0x80000) [ 199.579401] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=512 sclass=netlink_tcpdiag_socket pid=7167 comm=syz-executor.2 [ 199.594390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=512 sclass=netlink_tcpdiag_socket pid=7167 comm=syz-executor.2 [ 199.642137] audit: type=1400 audit(1663230458.664:7): avc: denied { open } for pid=7173 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 199.643745] audit: type=1400 audit(1663230458.664:8): avc: denied { kernel } for pid=7173 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 199.660713] ------------[ cut here ]------------ [ 199.660738] [ 199.660741] ====================================================== [ 199.660745] WARNING: possible circular locking dependency detected [ 199.660750] 6.0.0-rc5-next-20220914 #1 Not tainted [ 199.660756] ------------------------------------------------------ [ 199.660760] syz-executor.4/7174 is trying to acquire lock: [ 199.660767] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 199.660806] [ 199.660806] but task is already holding lock: [ 199.660809] ffff888008a97c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 199.660837] [ 199.660837] which lock already depends on the new lock. [ 199.660837] [ 199.660840] [ 199.660840] the existing dependency chain (in reverse order) is: [ 199.660844] [ 199.660844] -> #3 (&ctx->lock){....}-{2:2}: [ 199.660858] _raw_spin_lock+0x2a/0x40 [ 199.660875] __perf_event_task_sched_out+0x53b/0x18d0 [ 199.660888] __schedule+0xedd/0x2470 [ 199.660898] schedule+0xda/0x1b0 [ 199.660909] exit_to_user_mode_prepare+0x114/0x1a0 [ 199.660929] syscall_exit_to_user_mode+0x19/0x40 [ 199.660946] do_syscall_64+0x48/0x90 [ 199.660960] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 199.660977] [ 199.660977] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 199.660991] _raw_spin_lock_nested+0x30/0x40 [ 199.661005] raw_spin_rq_lock_nested+0x1e/0x30 [ 199.661019] task_fork_fair+0x63/0x4d0 [ 199.661035] sched_cgroup_fork+0x3d0/0x540 [ 199.661049] copy_process+0x4183/0x6e20 [ 199.661060] kernel_clone+0xe7/0x890 [ 199.661069] user_mode_thread+0xad/0xf0 [ 199.661079] rest_init+0x24/0x250 [ 199.661095] arch_call_rest_init+0xf/0x14 [ 199.661107] start_kernel+0x4c1/0x4e6 [ 199.661117] secondary_startup_64_no_verify+0xe0/0xeb [ 199.661131] [ 199.661131] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 199.661144] _raw_spin_lock_irqsave+0x39/0x60 [ 199.661159] try_to_wake_up+0xab/0x1920 [ 199.661172] up+0x75/0xb0 [ 199.661183] __up_console_sem+0x6e/0x80 [ 199.661199] console_unlock+0x46a/0x590 [ 199.661214] vt_ioctl+0x2822/0x2ca0 [ 199.661227] tty_ioctl+0x7c4/0x1700 [ 199.661238] __x64_sys_ioctl+0x19a/0x210 [ 199.661253] do_syscall_64+0x3b/0x90 [ 199.661266] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 199.661282] [ 199.661282] -> #0 ((console_sem).lock){....}-{2:2}: [ 199.661296] __lock_acquire+0x2a02/0x5e70 [ 199.661312] lock_acquire+0x1a2/0x530 [ 199.661327] _raw_spin_lock_irqsave+0x39/0x60 [ 199.661342] down_trylock+0xe/0x70 [ 199.661354] __down_trylock_console_sem+0x3b/0xd0 [ 199.661370] vprintk_emit+0x16b/0x560 [ 199.661386] vprintk+0x84/0xa0 [ 199.661401] _printk+0xba/0xf1 [ 199.661419] report_bug.cold+0x72/0xab [ 199.661431] handle_bug+0x3c/0x70 [ 199.661443] exc_invalid_op+0x14/0x50 [ 199.661456] asm_exc_invalid_op+0x16/0x20 [ 199.661472] group_sched_out.part.0+0x2c7/0x460 [ 199.661483] ctx_sched_out+0x8f1/0xc10 [ 199.661492] __perf_event_task_sched_out+0x6d0/0x18d0 [ 199.661504] __schedule+0xedd/0x2470 [ 199.661514] schedule+0xda/0x1b0 [ 199.661523] exit_to_user_mode_prepare+0x114/0x1a0 [ 199.661541] syscall_exit_to_user_mode+0x19/0x40 [ 199.661558] do_syscall_64+0x48/0x90 [ 199.661570] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 199.661587] [ 199.661587] other info that might help us debug this: [ 199.661587] [ 199.661590] Chain exists of: [ 199.661590] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 199.661590] [ 199.661605] Possible unsafe locking scenario: [ 199.661605] [ 199.661607] CPU0 CPU1 [ 199.661610] ---- ---- [ 199.661612] lock(&ctx->lock); [ 199.661618] lock(&rq->__lock); [ 199.661624] lock(&ctx->lock); [ 199.661630] lock((console_sem).lock); [ 199.661636] [ 199.661636] *** DEADLOCK *** [ 199.661636] [ 199.661638] 2 locks held by syz-executor.4/7174: [ 199.661645] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 199.661671] #1: ffff888008a97c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 199.661698] [ 199.661698] stack backtrace: [ 199.661701] CPU: 0 PID: 7174 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220914 #1 [ 199.661714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 199.661722] Call Trace: [ 199.661726] [ 199.661730] dump_stack_lvl+0x8b/0xb3 [ 199.661745] check_noncircular+0x263/0x2e0 [ 199.661761] ? format_decode+0x26c/0xb50 [ 199.661777] ? print_circular_bug+0x450/0x450 [ 199.661793] ? enable_ptr_key_workfn+0x20/0x20 [ 199.661808] ? format_decode+0x26c/0xb50 [ 199.661823] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 199.661841] __lock_acquire+0x2a02/0x5e70 [ 199.661862] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 199.661884] lock_acquire+0x1a2/0x530 [ 199.661901] ? down_trylock+0xe/0x70 [ 199.661915] ? rcu_read_unlock+0x40/0x40 [ 199.661936] ? vprintk+0x84/0xa0 [ 199.661954] _raw_spin_lock_irqsave+0x39/0x60 [ 199.661969] ? down_trylock+0xe/0x70 [ 199.661982] down_trylock+0xe/0x70 [ 199.661995] ? vprintk+0x84/0xa0 [ 199.662012] __down_trylock_console_sem+0x3b/0xd0 [ 199.662029] vprintk_emit+0x16b/0x560 [ 199.662048] vprintk+0x84/0xa0 [ 199.662065] _printk+0xba/0xf1 [ 199.662082] ? record_print_text.cold+0x16/0x16 [ 199.662104] ? report_bug.cold+0x66/0xab [ 199.662118] ? group_sched_out.part.0+0x2c7/0x460 [ 199.662129] report_bug.cold+0x72/0xab [ 199.662144] handle_bug+0x3c/0x70 [ 199.662158] exc_invalid_op+0x14/0x50 [ 199.662172] asm_exc_invalid_op+0x16/0x20 [ 199.662189] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 199.662202] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 199.662214] RSP: 0018:ffff888034ce7c48 EFLAGS: 00010006 [ 199.662223] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 199.662231] RDX: ffff88803ce19ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 199.662239] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 199.662246] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888008a97c00 [ 199.662254] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 199.662265] ? group_sched_out.part.0+0x2c7/0x460 [ 199.662278] ? group_sched_out.part.0+0x2c7/0x460 [ 199.662291] ctx_sched_out+0x8f1/0xc10 [ 199.662303] __perf_event_task_sched_out+0x6d0/0x18d0 [ 199.662318] ? lock_is_held_type+0xd7/0x130 [ 199.662336] ? __perf_cgroup_move+0x160/0x160 [ 199.662348] ? set_next_entity+0x304/0x550 [ 199.662365] ? update_curr+0x267/0x740 [ 199.662383] ? lock_is_held_type+0xd7/0x130 [ 199.662401] __schedule+0xedd/0x2470 [ 199.662414] ? io_schedule_timeout+0x150/0x150 [ 199.662427] ? rcu_read_lock_sched_held+0x3e/0x80 [ 199.662447] schedule+0xda/0x1b0 [ 199.662458] exit_to_user_mode_prepare+0x114/0x1a0 [ 199.662478] syscall_exit_to_user_mode+0x19/0x40 [ 199.662496] do_syscall_64+0x48/0x90 [ 199.662510] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 199.662527] RIP: 0033:0x7f3d8937eb19 [ 199.662536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 199.662547] RSP: 002b:00007f3d868f4218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 199.662557] RAX: 0000000000000001 RBX: 00007f3d89491f68 RCX: 00007f3d8937eb19 [ 199.662565] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3d89491f6c [ 199.662573] RBP: 00007f3d89491f60 R08: 000000000000000e R09: 0000000000000000 [ 199.662580] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f3d89491f6c [ 199.662587] R13: 00007ffdbda1fb4f R14: 00007f3d868f4300 R15: 0000000000022000 [ 199.662600] [ 199.716087] WARNING: CPU: 0 PID: 7174 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 199.716764] Modules linked in: [ 199.717002] CPU: 0 PID: 7174 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220914 #1 [ 199.717588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 199.718401] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 199.718794] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 199.720108] RSP: 0018:ffff888034ce7c48 EFLAGS: 00010006 [ 199.720495] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 199.721010] RDX: ffff88803ce19ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 199.721525] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 199.722038] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888008a97c00 [ 199.722549] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 199.723071] FS: 00007f3d868f4700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 199.723649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.724078] CR2: 00007f3173c59260 CR3: 000000000f3ae000 CR4: 0000000000350ef0 [ 199.724609] Call Trace: [ 199.724806] [ 199.724981] ctx_sched_out+0x8f1/0xc10 [ 199.725279] __perf_event_task_sched_out+0x6d0/0x18d0 [ 199.725665] ? lock_is_held_type+0xd7/0x130 [ 199.725990] ? __perf_cgroup_move+0x160/0x160 [ 199.726317] ? set_next_entity+0x304/0x550 [ 199.726637] ? update_curr+0x267/0x740 [ 199.726935] ? lock_is_held_type+0xd7/0x130 [ 199.727264] __schedule+0xedd/0x2470 [ 199.727542] ? io_schedule_timeout+0x150/0x150 [ 199.727885] ? rcu_read_lock_sched_held+0x3e/0x80 [ 199.728250] schedule+0xda/0x1b0 [ 199.728509] exit_to_user_mode_prepare+0x114/0x1a0 [ 199.728879] syscall_exit_to_user_mode+0x19/0x40 [ 199.729233] do_syscall_64+0x48/0x90 [ 199.729512] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 199.729898] RIP: 0033:0x7f3d8937eb19 [ 199.730178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 199.731491] RSP: 002b:00007f3d868f4218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 199.732041] RAX: 0000000000000001 RBX: 00007f3d89491f68 RCX: 00007f3d8937eb19 [ 199.732562] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3d89491f6c [ 199.733080] RBP: 00007f3d89491f60 R08: 000000000000000e R09: 0000000000000000 [ 199.733614] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f3d89491f6c [ 199.734126] R13: 00007ffdbda1fb4f R14: 00007f3d868f4300 R15: 0000000000022000 [ 199.734643] [ 199.734816] irq event stamp: 712 [ 199.735071] hardirqs last enabled at (711): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 199.735752] hardirqs last disabled at (712): [] __schedule+0x1225/0x2470 [ 199.736344] softirqs last enabled at (402): [] __irq_exit_rcu+0x11b/0x180 [ 199.736963] softirqs last disabled at (393): [] __irq_exit_rcu+0x11b/0x180 [ 199.737585] ---[ end trace 0000000000000000 ]--- 08:27:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb4, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x10}], 0x1}, 0x0) [ 199.773435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=512 sclass=netlink_tcpdiag_socket pid=7180 comm=syz-executor.2 08:27:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb4, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x10}], 0x1}, 0x0) [ 199.852739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=512 sclass=netlink_tcpdiag_socket pid=7188 comm=syz-executor.2 08:27:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb4, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x10}], 0x1}, 0x0) 08:27:38 executing program 4: r0 = syz_io_uring_setup(0x659e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) poll(0xfffffffffffffffe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x408000, 0x1, 0x1f}, 0x18) close_range(r1, r0, 0x0) syz_mount_image$vfat(&(0x7f0000003980), &(0x7f00000039c0)='./file0\x00', 0x0, 0x1, &(0x7f0000003a80)=[{&(0x7f0000003a00)='P', 0x1}], 0x1006021, &(0x7f0000003ac0)=ANY=[@ANYBLOB="646f6e745f68503361ba7425577368acd232896b5f6d6561"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4c000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x5) [ 199.935157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=512 sclass=netlink_tcpdiag_socket pid=7198 comm=syz-executor.2 08:27:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb4, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 08:27:39 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x4000) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) [ 200.039955] audit: type=1400 audit(1663230459.062:9): avc: denied { write } for pid=7209 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 200.043251] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=512 sclass=netlink_tcpdiag_socket pid=7214 comm=syz-executor.2 VM DIAGNOSIS: 08:27:39 Registers: info registers vcpu 0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff888034ce7698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000039 R11=0000000000000001 R12=0000000000000039 R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0 RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3d868f4700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3173c59260 CR3=000000000f3ae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f3d894657c0 00007f3d894657c8 YMM02=0000000000000000 0000000000000000 00007f3d894657e0 00007f3d894657c0 YMM03=0000000000000000 0000000000000000 00007f3d894657c8 00007f3d894657c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=1ffff11006993f10 RBX=0000000000000005 RCX=0000000000000800 RDX=0000000000000000 RSI=000000000000000c RDI=ffff888034c9f880 RBP=dffffc0000000000 RSP=ffff888034c9f7d0 R8 =0000000000000000 R9 =ffffffff85b02e97 R10=0000000000000000 R11=0000000000000001 R12=000000000000000c R13=0000000000000000 R14=0000000000000800 R15=ffff888034c9f858 RIP=ffffffff8135b516 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f07d12938e0 CR3=0000000033514000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000