Warning: Permanently added '[localhost]:18890' (ECDSA) to the list of known hosts. 2022/09/22 07:00:33 fuzzer started 2022/09/22 07:00:33 dialing manager at localhost:40289 syzkaller login: [ 40.407741] cgroup: Unknown subsys name 'net' [ 40.518452] cgroup: Unknown subsys name 'rlimit' 2022/09/22 07:00:47 syscalls: 2215 2022/09/22 07:00:47 code coverage: enabled 2022/09/22 07:00:47 comparison tracing: enabled 2022/09/22 07:00:47 extra coverage: enabled 2022/09/22 07:00:47 setuid sandbox: enabled 2022/09/22 07:00:47 namespace sandbox: enabled 2022/09/22 07:00:47 Android sandbox: enabled 2022/09/22 07:00:47 fault injection: enabled 2022/09/22 07:00:47 leak checking: enabled 2022/09/22 07:00:47 net packet injection: enabled 2022/09/22 07:00:47 net device setup: enabled 2022/09/22 07:00:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/22 07:00:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/22 07:00:47 USB emulation: enabled 2022/09/22 07:00:47 hci packet injection: enabled 2022/09/22 07:00:47 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220921) 2022/09/22 07:00:47 802.15.4 emulation: enabled 2022/09/22 07:00:47 fetching corpus: 50, signal 27990/29746 (executing program) 2022/09/22 07:00:47 fetching corpus: 100, signal 40030/43299 (executing program) 2022/09/22 07:00:47 fetching corpus: 150, signal 49501/54186 (executing program) 2022/09/22 07:00:47 fetching corpus: 200, signal 58649/64645 (executing program) 2022/09/22 07:00:47 fetching corpus: 250, signal 63483/70761 (executing program) 2022/09/22 07:00:47 fetching corpus: 300, signal 68587/77077 (executing program) 2022/09/22 07:00:47 fetching corpus: 350, signal 71707/81386 (executing program) 2022/09/22 07:00:48 fetching corpus: 400, signal 74815/85677 (executing program) 2022/09/22 07:00:48 fetching corpus: 450, signal 78014/90029 (executing program) 2022/09/22 07:00:48 fetching corpus: 500, signal 80283/93467 (executing program) 2022/09/22 07:00:48 fetching corpus: 550, signal 84623/98768 (executing program) 2022/09/22 07:00:48 fetching corpus: 600, signal 87217/102408 (executing program) 2022/09/22 07:00:48 fetching corpus: 650, signal 92016/107934 (executing program) 2022/09/22 07:00:48 fetching corpus: 700, signal 94422/111278 (executing program) 2022/09/22 07:00:48 fetching corpus: 750, signal 96197/114002 (executing program) 2022/09/22 07:00:48 fetching corpus: 800, signal 99084/117681 (executing program) 2022/09/22 07:00:49 fetching corpus: 850, signal 103020/122237 (executing program) 2022/09/22 07:00:49 fetching corpus: 900, signal 104708/124800 (executing program) 2022/09/22 07:00:49 fetching corpus: 950, signal 106334/127315 (executing program) 2022/09/22 07:00:49 fetching corpus: 1000, signal 109980/131431 (executing program) 2022/09/22 07:00:49 fetching corpus: 1050, signal 112756/134771 (executing program) 2022/09/22 07:00:49 fetching corpus: 1100, signal 114483/137205 (executing program) 2022/09/22 07:00:49 fetching corpus: 1150, signal 117964/141106 (executing program) 2022/09/22 07:00:50 fetching corpus: 1200, signal 120985/144590 (executing program) 2022/09/22 07:00:50 fetching corpus: 1250, signal 123498/147579 (executing program) 2022/09/22 07:00:50 fetching corpus: 1300, signal 124701/149457 (executing program) 2022/09/22 07:00:50 fetching corpus: 1350, signal 126260/151652 (executing program) 2022/09/22 07:00:50 fetching corpus: 1400, signal 128725/154439 (executing program) 2022/09/22 07:00:50 fetching corpus: 1450, signal 130357/156603 (executing program) 2022/09/22 07:00:50 fetching corpus: 1500, signal 131622/158481 (executing program) 2022/09/22 07:00:50 fetching corpus: 1550, signal 132902/160299 (executing program) 2022/09/22 07:00:50 fetching corpus: 1600, signal 134514/162316 (executing program) 2022/09/22 07:00:51 fetching corpus: 1650, signal 135769/164142 (executing program) 2022/09/22 07:00:51 fetching corpus: 1700, signal 136560/165530 (executing program) 2022/09/22 07:00:51 fetching corpus: 1750, signal 137984/167371 (executing program) 2022/09/22 07:00:51 fetching corpus: 1800, signal 139069/169005 (executing program) 2022/09/22 07:00:51 fetching corpus: 1850, signal 141144/171273 (executing program) 2022/09/22 07:00:51 fetching corpus: 1900, signal 142778/173200 (executing program) 2022/09/22 07:00:51 fetching corpus: 1950, signal 143621/174552 (executing program) 2022/09/22 07:00:51 fetching corpus: 2000, signal 144379/175858 (executing program) 2022/09/22 07:00:51 fetching corpus: 2050, signal 145428/177298 (executing program) 2022/09/22 07:00:51 fetching corpus: 2100, signal 146805/178967 (executing program) 2022/09/22 07:00:52 fetching corpus: 2150, signal 147673/180233 (executing program) 2022/09/22 07:00:52 fetching corpus: 2200, signal 149385/182013 (executing program) 2022/09/22 07:00:52 fetching corpus: 2250, signal 149988/183204 (executing program) 2022/09/22 07:00:52 fetching corpus: 2300, signal 151376/184872 (executing program) 2022/09/22 07:00:52 fetching corpus: 2350, signal 152513/186294 (executing program) 2022/09/22 07:00:52 fetching corpus: 2400, signal 154047/187893 (executing program) 2022/09/22 07:00:52 fetching corpus: 2450, signal 155636/189582 (executing program) 2022/09/22 07:00:52 fetching corpus: 2500, signal 157160/191211 (executing program) 2022/09/22 07:00:53 fetching corpus: 2550, signal 157740/192247 (executing program) 2022/09/22 07:00:53 fetching corpus: 2600, signal 158992/193600 (executing program) 2022/09/22 07:00:53 fetching corpus: 2650, signal 159744/194659 (executing program) 2022/09/22 07:00:53 fetching corpus: 2700, signal 160845/195924 (executing program) 2022/09/22 07:00:53 fetching corpus: 2750, signal 161576/196939 (executing program) 2022/09/22 07:00:53 fetching corpus: 2800, signal 162354/198009 (executing program) 2022/09/22 07:00:53 fetching corpus: 2850, signal 163772/199373 (executing program) 2022/09/22 07:00:53 fetching corpus: 2900, signal 164528/200360 (executing program) 2022/09/22 07:00:53 fetching corpus: 2950, signal 165156/201253 (executing program) 2022/09/22 07:00:54 fetching corpus: 3000, signal 166214/202353 (executing program) 2022/09/22 07:00:54 fetching corpus: 3050, signal 167551/203606 (executing program) 2022/09/22 07:00:54 fetching corpus: 3100, signal 169108/204950 (executing program) 2022/09/22 07:00:54 fetching corpus: 3150, signal 169870/205842 (executing program) 2022/09/22 07:00:54 fetching corpus: 3200, signal 170424/206665 (executing program) 2022/09/22 07:00:54 fetching corpus: 3250, signal 171770/207854 (executing program) 2022/09/22 07:00:54 fetching corpus: 3300, signal 172166/208580 (executing program) 2022/09/22 07:00:54 fetching corpus: 3350, signal 173273/209599 (executing program) 2022/09/22 07:00:55 fetching corpus: 3400, signal 174521/210619 (executing program) 2022/09/22 07:00:55 fetching corpus: 3450, signal 175598/211618 (executing program) 2022/09/22 07:00:55 fetching corpus: 3500, signal 176166/212384 (executing program) 2022/09/22 07:00:55 fetching corpus: 3550, signal 177854/213564 (executing program) 2022/09/22 07:00:55 fetching corpus: 3600, signal 178597/214349 (executing program) 2022/09/22 07:00:55 fetching corpus: 3650, signal 179161/215140 (executing program) 2022/09/22 07:00:55 fetching corpus: 3700, signal 179905/215917 (executing program) 2022/09/22 07:00:55 fetching corpus: 3750, signal 180921/216852 (executing program) 2022/09/22 07:00:56 fetching corpus: 3800, signal 182229/217705 (executing program) 2022/09/22 07:00:56 fetching corpus: 3850, signal 182856/218396 (executing program) 2022/09/22 07:00:56 fetching corpus: 3900, signal 183324/219004 (executing program) 2022/09/22 07:00:56 fetching corpus: 3950, signal 184265/219794 (executing program) 2022/09/22 07:00:56 fetching corpus: 4000, signal 185313/220535 (executing program) 2022/09/22 07:00:56 fetching corpus: 4050, signal 186311/221276 (executing program) 2022/09/22 07:00:56 fetching corpus: 4100, signal 187497/222149 (executing program) 2022/09/22 07:00:56 fetching corpus: 4150, signal 188495/222907 (executing program) 2022/09/22 07:00:57 fetching corpus: 4200, signal 189349/223535 (executing program) 2022/09/22 07:00:57 fetching corpus: 4250, signal 190378/224225 (executing program) 2022/09/22 07:00:57 fetching corpus: 4300, signal 190966/224906 (executing program) 2022/09/22 07:00:57 fetching corpus: 4350, signal 192253/225649 (executing program) 2022/09/22 07:00:57 fetching corpus: 4400, signal 192841/226206 (executing program) 2022/09/22 07:00:57 fetching corpus: 4450, signal 193465/226850 (executing program) 2022/09/22 07:00:57 fetching corpus: 4500, signal 193895/227291 (executing program) 2022/09/22 07:00:57 fetching corpus: 4550, signal 194564/227829 (executing program) 2022/09/22 07:00:58 fetching corpus: 4600, signal 195753/228688 (executing program) 2022/09/22 07:00:58 fetching corpus: 4650, signal 196360/229155 (executing program) 2022/09/22 07:00:58 fetching corpus: 4700, signal 197246/229684 (executing program) 2022/09/22 07:00:58 fetching corpus: 4750, signal 197900/230163 (executing program) 2022/09/22 07:00:58 fetching corpus: 4800, signal 198819/230647 (executing program) 2022/09/22 07:00:58 fetching corpus: 4850, signal 199721/231120 (executing program) 2022/09/22 07:00:58 fetching corpus: 4900, signal 200571/231594 (executing program) 2022/09/22 07:00:59 fetching corpus: 4950, signal 200871/231960 (executing program) 2022/09/22 07:00:59 fetching corpus: 5000, signal 201492/232444 (executing program) 2022/09/22 07:00:59 fetching corpus: 5050, signal 202197/232815 (executing program) 2022/09/22 07:00:59 fetching corpus: 5100, signal 202783/233182 (executing program) 2022/09/22 07:00:59 fetching corpus: 5150, signal 203426/233565 (executing program) 2022/09/22 07:00:59 fetching corpus: 5200, signal 204097/233928 (executing program) 2022/09/22 07:00:59 fetching corpus: 5250, signal 204632/234253 (executing program) 2022/09/22 07:00:59 fetching corpus: 5300, signal 205730/234627 (executing program) 2022/09/22 07:01:00 fetching corpus: 5350, signal 206264/234993 (executing program) 2022/09/22 07:01:00 fetching corpus: 5400, signal 206836/235284 (executing program) 2022/09/22 07:01:00 fetching corpus: 5450, signal 207228/235551 (executing program) 2022/09/22 07:01:00 fetching corpus: 5500, signal 207806/235837 (executing program) 2022/09/22 07:01:00 fetching corpus: 5550, signal 208838/236117 (executing program) 2022/09/22 07:01:00 fetching corpus: 5600, signal 209514/236393 (executing program) 2022/09/22 07:01:00 fetching corpus: 5650, signal 210036/236653 (executing program) 2022/09/22 07:01:00 fetching corpus: 5700, signal 210697/236793 (executing program) 2022/09/22 07:01:00 fetching corpus: 5750, signal 211293/236822 (executing program) 2022/09/22 07:01:01 fetching corpus: 5800, signal 211866/236858 (executing program) 2022/09/22 07:01:01 fetching corpus: 5850, signal 212211/236911 (executing program) 2022/09/22 07:01:01 fetching corpus: 5900, signal 212698/236911 (executing program) 2022/09/22 07:01:01 fetching corpus: 5950, signal 213118/236912 (executing program) 2022/09/22 07:01:01 fetching corpus: 6000, signal 213463/236913 (executing program) 2022/09/22 07:01:01 fetching corpus: 6050, signal 213881/236988 (executing program) 2022/09/22 07:01:01 fetching corpus: 6100, signal 214719/237053 (executing program) 2022/09/22 07:01:01 fetching corpus: 6150, signal 215363/237053 (executing program) 2022/09/22 07:01:01 fetching corpus: 6200, signal 215605/237053 (executing program) 2022/09/22 07:01:02 fetching corpus: 6250, signal 216136/237053 (executing program) 2022/09/22 07:01:02 fetching corpus: 6300, signal 216779/237059 (executing program) 2022/09/22 07:01:02 fetching corpus: 6308, signal 216822/237059 (executing program) 2022/09/22 07:01:02 fetching corpus: 6308, signal 216822/237059 (executing program) 2022/09/22 07:01:05 starting 8 fuzzer processes 07:01:05 executing program 0: prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = io_uring_setup(0x7a35, &(0x7f0000000000)={0x0, 0x8559, 0xc, 0x1, 0xbe}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/196, 0xc4}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/186, 0xba}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x110, r0, 0x10000000) r2 = syz_open_dev$loop(&(0x7f0000000340), 0xfe, 0x200) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_open_dev$usbmon(&(0x7f0000000380), 0x96, 0x4200) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, r0, r2, r0, r3, r4], 0x6, 0x0, 0x1}, 0x5a29e9f8) r5 = fcntl$dupfd(r2, 0x0, r4) splice(r5, &(0x7f0000000440)=0x9, r0, &(0x7f0000000480)=0x5, 0x4, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x101000) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000005c0)=[r7, r8, r2, r3, r9], 0x5) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000600)) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x6b629) setsockopt$sock_int(r7, 0x1, 0x1e, &(0x7f0000000640)=0x3, 0x4) sendfile(r6, r7, &(0x7f0000000680)=0x7f, 0x80000001) 07:01:05 executing program 1: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000000)={{0x80, 0xfac}, 0x100, './file0\x00'}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe53f4d0f4e8d3ac9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6ab}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4c880}, 0x24000001) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x81, 0x3f, 0x20000000, 0x54, @empty, @local, 0x8, 0x8, 0x9, 0x100}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000810}, 0x44800) preadv(r0, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/100, 0x64}, {&(0x7f0000000700)=""/15, 0xf}, {&(0x7f0000000740)=""/183, 0xb7}, {&(0x7f0000000800)=""/140, 0x8c}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/249, 0xf9}], 0x7, 0x8, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6b78}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x800}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x52a}, @chandef_params]}, 0x34}, 0x1, 0x0, 0x0, 0x8002}, 0x4a0c4) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000c40)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r7, {0xee01}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r7) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r9, 0x500, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4071) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xc) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x16}, @void, @val={0xc, 0x99, {0x6, 0x12}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c004}, 0x8001) 07:01:05 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) syz_io_uring_setup(0x4994, &(0x7f0000000080)={0x0, 0x3e6, 0x8, 0x2, 0x29f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$selinux_attr(r0, &(0x7f0000000180)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28) r1 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x8200, 0x4, 0x8}, 0x18) syz_io_uring_setup(0x2ed3, &(0x7f0000000240)={0x0, 0xf1d1, 0x4, 0x2, 0x3d, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r3 = openat(r2, &(0x7f0000000380)='./file0\x00', 0x80000, 0x0) write$selinux_attr(r2, &(0x7f00000003c0)='system_u:object_r:hostname_exec_t:s0\x00', 0x25) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440), 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000480)={{r3}, 0x0, 0x2, @unused=[0x4, 0x9, 0x7, 0xeff], @subvolid=0x61}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) close(r5) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000001500)='/usr/lib/telepathy/mission-control-5\x00', 0x25) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000001540)=""/53, &(0x7f0000001580)=0x35) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r4, {0xaff4, 0x7}}, './file0\x00'}) readv(r8, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/163, 0xa3}, {&(0x7f00000016c0)=""/91, 0x5b}, {&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f0000001780)=""/49, 0x31}], 0x4) [ 71.850943] audit: type=1400 audit(1663830065.228:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:01:05 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = dup2(r0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'hugetlb'}, {0x2b, 'cpuset'}, {0x2b, 'rlimit'}, {0x2d, 'cpu'}, {0x0, 'rlimit'}, {0x2d, 'io'}, {0x2d, 'devices'}, {0x0, 'freezer'}]}, 0x3c) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)={{0x10b, 0x2, 0x1f, 0x391, 0x1ff, 0x0, 0x392, 0x7ff}, "064683a815af9e60585811235fd39c6a4e08dfc2ef7257dfe5dbb9cf65f0356986207256cd2137d49d95ba02d892b321891e797557cceffba3617ad3416b95a237d47faf964e745d07dc89a4cf472f064a7d43059496687b4685721495d3f1cb79371d17fe79eee675f66b0b53f46ef72fc7740de796851aa85bed97bc7048a1e71b50a8209814ede296ddd4577b8219da299651c2c21902cec45b10062f4a6cd8c7c4984e7377658275fd2b60e8ee797db40e58c89bd1f3dcbd0d357d7e463d52c16886bb0251ff89a06f449b845185", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8f0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0xc000) r4 = open(&(0x7f0000000b40)='./file0\x00', 0x103100, 0x122) r5 = creat(&(0x7f0000000b80)='./file0\x00', 0x60) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xd8, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) r6 = syz_open_dev$vcsn(&(0x7f0000000d80), 0x71b, 0x40200) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xc0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "32d1d945d8bdd82156c1eb1bd1"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x161}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmmsg$unix(r6, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000f40)="3101fe46ca9c63e6812d704c45226cfa68deb2a4ca0e87afddd73a713141f047e8c6b8bae1a982b9c957b1afae1a5aff8de73e1d782e5dd26fec85af18c9ba0f4545ccb6a3cc413c10f18051e3cec565ca25ae6f8ce47fadd65307cf2eaa457120bd7c15b1ae59a07c1861244cf60d8eb7a9b3813660c1b3ed1efc56cb826e26c449035fe6a973bdd205437a6d4fef53e92c7e26f06abbc72b9eed4400a48a704625a8136f44b5a1e685a73311d056cd0d56a8a8113c136b2b02f6371956061f86058521c7b1b62e70bede034d9a033e20c4e169", 0xd4}, {&(0x7f0000001040)="9d36e2f0e71cf4bfa8a8a4f1cbde0095a2add56c615d530edd794df8472d081c7c6b019f5d41d4e31d9670bc35b8d44b60245979c8725b45b516d0ddad8ce3c02ebb33586b8453bb65a4bce0873fe6ea59621e76f6399336ace0f79015018b0a37933d968fae800e2a597c9e222c03cf5faab38c180d5eec6044a80613bf743a6a2797fb3738999a9fe3ae4013dba3f787043565fd52a1db9db30e146d84e20c5e6b304c5907f7acf0d222c4a54e434e81241bff8914a40be6bda79c6176480194f373873f3234d52124c37256e4c88b128916b9bf8a40fa51ce8811486f23cf887e7f07cd3914ec4a80f7eaa2cac5521efcfa", 0xf3}, {&(0x7f0000001140)="633ad55783ac6092c857924322614a21497e2b501f7e62a387520c08aa004688b89dc8f79066f429e6542eba435d6749ea8c6560f1759886247b565407b6898c956894bcb52ef6d845a04e688fc5d8ff8d150b878eec38a3104fa66117a186b8bbeaf4cf93ad66ad5f50fa8ef4f25f72efa563343298febf6af3a561399159372b242094da202420931585150dfe0b54ff331d6143efd0b0225bbc9898e34159a593027d96520a226353d45f3fa6973e42e9c3636cc8f616079cd5b61ddffb7362f6", 0xc2}], 0x3, &(0x7f0000001280)}}], 0x1, 0x4000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001340), r2) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4012}, 0x44) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001480), 0x240, 0x0) dup2(r8, r4) 07:01:05 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x105400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) r2 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x240040, 0x18) r3 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x10040, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x8}}, './file1\x00'}) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000180)={{r0}, 0x2, &(0x7f0000000140)=[0x8, 0x7000], 0x9, 0x1, [0x3, 0x4, 0x5]}) inotify_add_watch(r4, &(0x7f0000000200)='./file1\x00', 0x1000200) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x14000, 0x0) read$hidraw(r5, &(0x7f0000000280)=""/84, 0x54) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder-control\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000340)=0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = openat$cgroup_type(r2, &(0x7f0000001700), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000017c0)=[{{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="2664d982f4827e6f5ef744e659f4698e139157e84e6ef69d43d1a3caaa4bac7c7765cd4b3aa83ef696bbbb43198dfb702bec1bedece1afe6e439e743eded534d94d96e", 0x43}], 0x2, &(0x7f0000001740)=[@rights={{0x24, 0x1, 0x1, [r0, r2, r3, r4, r4]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r5, r6, r7, r0, r2, r4]}}], 0x58, 0x10}}], 0x1, 0x4) write$binfmt_aout(r4, &(0x7f0000001800)={{0xcc, 0x1, 0x0, 0x2ff, 0x32, 0xffffffff, 0x240, 0x3}, "11f618498a53bb63cf68efe57462dcf66b3616044231d84dd367a84dcdae1f6155c3d2d2e93157b82cb1057d827a5c090b15ac94e2da3b25aa3f17a87ef409347cc5bfcb2710d4647a31f082ce0cc828f707364d89009ff56396e6616917dc13a7daacca333f6924b6906c302007a6a4021e129774d7c5c99c5d801275bd0306642996dced16f670084ebc6d9fede1eeed", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab1) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f00000022c0)={0x0, 0x200}) r8 = syz_open_pts(r3, 0xa000) dup2(r8, r1) umount2(&(0x7f00000032c0)='./file0\x00', 0xe) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000003340)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) 07:01:05 executing program 5: r0 = clone3(&(0x7f0000000280)={0x8000000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0xb}, &(0x7f00000000c0)=""/130, 0x82, &(0x7f0000000180)=""/152, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) kcmp(0x0, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(r1, &(0x7f0000000300), &(0x7f0000000340)=@v1={0x1000000, [{0xfffffff8, 0x3}]}, 0xc, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000380)={@id={0x2, 0x0, @c}, 0x10, 0x0, '\x00', @d}) clone3(&(0x7f00000015c0)={0x84000000, &(0x7f0000000400)=0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {}, &(0x7f00000004c0)=""/146, 0x92, &(0x7f0000000580)=""/4096, &(0x7f0000001580)=[r2, r0], 0x2}, 0x58) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000001640)=0x1) ioctl$FIOCLEX(r1, 0x5451) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000001680)={{r4}, {@void, @actul_num={@val=0x2d, 0x1000, 0x31}}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r1, {0x81}}, './file0\x00'}) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000001700)=0x5bee) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000001740)) fstat(r1, &(0x7f0000001780)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001800)) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000001a00)={0x0, 0x0, 0x3f, 0x1}) write$binfmt_elf32(r4, &(0x7f0000001a40)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x81, 0x70, 0x7, 0xffff, 0x3, 0x6, 0x80, 0xc, 0x38, 0x207, 0x80000000, 0x42f, 0x20, 0x2, 0x58, 0x43, 0xf00}, [{0x0, 0x5, 0x3, 0x8, 0x3, 0x6, 0x80, 0x3ff}], "9221d9054e0ac3074528323137ecf7198efefd0e460491c04834c2d3016c24b2501e454c1093345f6c2edd6fc89f3054e7ba9fd59f5364f02860085670e9a0480821159de05aa9b5d2d1e3b262d451a0d16c1d57e2db9d7074f10c1b7ab21ea816f6b4800c2b8b62e0cd371cd2a2bf16482b0dd6eeeb2fb72472e52821c0f92146e6ac5c4a176724cf0b0e5ebf070fc76b2efbd3c1d36c85fc8720029eda90b4c609f5a4a5e1569e49b4d9fa539f6d98038d2398372f4869c51758e27d681b91d112e96804bcb5386074bef690e68277e849e04454e832effb5893236e59", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x836) preadv(r5, &(0x7f0000003580)=[{&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/26, 0x1a}, {&(0x7f00000032c0)=""/78, 0x4e}, {&(0x7f0000003340)=""/183, 0xb7}, {&(0x7f0000003400)=""/227, 0xe3}, {&(0x7f0000003500)=""/69, 0x45}], 0x6, 0x5, 0x1000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000003600)) pread64(r4, &(0x7f0000003640)=""/220, 0xdc, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x68, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004085}, 0x4000) 07:01:05 executing program 6: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) lseek(0xffffffffffffffff, 0x1, 0x4) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) close_range(0xffffffffffffffff, r0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="5578935864de326d15aba4ab3e170d637f121ebbf72ae4854362bde85e3759c87386e96cd398b910004dd6d89863affcc8df69596a36ba40dba7ca0a7fbb28b33b29632df84a53bbbe9cd3b8157b7f7d7b2a4aa4eb08a35aee20d3ff4b4db55f43c544633fd3339ada83c21091b737dccc6e2309749fbe1d26205534a3d75c4aee5211caa30e88e0eff267a50f9152ba53d7d4ecd84fd0ba53b83740b3f53452b372d97254c63623aff8b2bb561426c2b6aa66a63c6e66a4e0c99e26df6948d52ddd9ce206142dcca570d83691510d6d7a8b", 0xd2}], 0x1}, 0x2000800) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x480000, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f0000000300)={0x1, 0x2, 0x9, 0x5, 0xc0, 0x3, @lba, @lba=0x4}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x6, 'nr0\x00', {}, 0x6}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x4, 0xa9, [0x4, 0x400, 0xffff, 0x8000, 0x0, 0x100000001], 0x3, &(0x7f0000000380)=[{}, {}, {}], &(0x7f00000003c0)=""/169}, &(0x7f0000000500)=0x78) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)={0x0, 0x7, 0x1, 0x0, 0x0, [{{r1}, 0x3}]}) fchdir(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000680)={'geneve0\x00', &(0x7f0000000580)=@ethtool_rxnfc={0x2d, 0xb, 0x101, {0xd, @sctp_ip6_spec={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21, 0x4e20, 0x7f}, {0x0, @local, 0x8, 0x2, [0x401]}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x30}, @multicast2, 0x5, 0xd4}, {0x0, @empty, 0x8, 0xef7, [0x1]}, 0x1, 0x9a}, 0x2, [0x2, 0x7fff]}}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000006c0), 0x200, 0x0) write$vga_arbiter(r2, &(0x7f0000000700)=@other={'trylock', ' ', 'io+mem'}, 0xf) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x18) r3 = perf_event_open$cgroup(&(0x7f0000000780)={0x0, 0x80, 0x92, 0xe, 0xe0, 0x6, 0x0, 0x8489, 0x40, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000740), 0x9}, 0x48000, 0x0, 0x5, 0x5, 0x8000, 0x80, 0x9c8b, 0x0, 0xfffffff8, 0x0, 0x10000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xe) pwritev(r3, &(0x7f0000000bc0)=[{&(0x7f0000000800)="17376f62457ab88eca3e1fdbdc830dc7aac3898ce209dc0a7d7d38774c6175ced1191ab17378473b9da2f3db9b67bd6d84041b199ec37c63a33d50fd87fd7694bbdbc9187e75045200ec2dadd005d2263855518a8d6af1256de4eb6abd67cb524f12067555ae00111db574abe245989519c18bb6c982", 0x76}, {&(0x7f0000000880)="87517395eb3b03ca4a024c2765d24206488013b2811f1cff194fc4fd5d2c9bc75211137cc54dfb580669bcef7e40088de38db30b03e0b830a4b9230b30d60ce759ae3f23a716c75dfd65e5545cd949b1b0e270ace4ed0e4af8f2dbf212364fe5f92fe7d83d0781d161e62c0370fe6a73d1c2bdbc739cbd31365adc2595d6bd8b340001b8321ed57ce4b8fef7dd1cb5bcb5400a0549c6d95dc17cec009a6fe2663989a86b65cce7e9d80ed1368e", 0xad}, {&(0x7f0000000940)="463e75db9c689018927c029e146781bcc16b34b01ca6fcbada5b2e95b923cba9754d017a49d87d3224788cbf433478fb69fa600b5a058fcbd77359b26fe820a66b4d195dfb8882d2eabe28e5bf23a1a38d29075fbeb4224581506e9f0f07a981907a6c2ddffa3aa510bdcd58507a2b67a0337031d774458634c488d3562cec1e843498fc82148f63200135d3", 0x8c}, {&(0x7f0000000a00)="59a7f4d861aed33a81535c5bd356455a95b36e308b0d0cdef005a0c6efc4848bb17b2b49ba2e69aedc37dd333d3e6f594de9e1fabaa3f0c21829553075e1a58855dfdf32b11325699e431d5499", 0x4d}, {&(0x7f0000000a80)="c71a50486584b41e492f007e79e631ccbc975a09c3317fd8497f586f71d67e811ae67bf3c8b9392710ab221332b96d1637f2a7c89519932c9beca68375d6dfce363b8f74716abc81", 0x48}, {&(0x7f0000000b00)="2f4fe29d44689516cd0ab6bfefb4a187bd0677d2ffb71a44d6e41822af53546455638f79659edf", 0x27}, {&(0x7f0000000b40)="d2c95a9cec9c31a12cfbc0439668c56e1d2c3927609aee321c72aae6d28d016aa474b6156e293c435da37a17954e047503fdad9ad8bf52f3c47b9ad10aeef1ffc8d563a2699656e4d4b92602ce53d61df944edfb0c0a26de130ef2e1e626041cc711d729f252c82cc1068bd3328eddcbda4a69c72cfbda906ada", 0x7a}], 0x7, 0x1, 0x9) ioctl$FIONCLEX(r0, 0x5450) fcntl$getown(r0, 0x9) 07:01:05 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x80, 0x6, 0x28, @dev={0xfe, 0x80, '\x00', 0x44}, @mcast1, 0x40, 0x10, 0x4, 0x1}}) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendto$packet(r1, &(0x7f0000000100)="d558a665bffb34099307149934c24d3b44b6d1b12670ff0f5481a2520a3b917666638e9bfa234dc181699ae4cf41424e4f5e1407fe985103a8c47f10d9224810f4ea492ce0cdc9c27e5316924ce1", 0x4e, 0x8008, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r0, 0x29, 0xfc, 0x7f, 0x4, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7800, 0x0, 0x8}}) getpeername$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast1}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x80}, 0x10) r5 = signalfd4(r1, &(0x7f0000000680)={[0x1ff]}, 0x8, 0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'tunl0\x00', r2, 0x20, 0x1, 0x5, 0x1, {{0xe, 0x4, 0x3, 0x5, 0x38, 0x66, 0x0, 0x4, 0x4, 0x0, @local, @private=0xa010100, {[@rr={0x7, 0xb, 0x12, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0x42, [@loopback]}, @timestamp={0x44, 0x10, 0x7b, 0x0, 0xf, [0x7, 0xff, 0x40000000]}]}}}}}) r7 = syz_open_dev$vcsa(&(0x7f0000000780), 0x1f, 0x10000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000800)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000000900)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', r2, 0x2f, 0x0, 0x1, 0x5, 0x11, @dev={0xfe, 0x80, '\x00', 0x21}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x7fff, 0xfffffffc}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x20, 0x1, 0xc, @private2, @private2, 0x7800, 0x80, 0x1, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000dc0)={'sit0\x00', r2, 0x2f, 0xe0, 0x2, 0x9, 0x41, @loopback, @loopback, 0x0, 0x7800, 0x4, 0x48d}}) r13 = accept4$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14, 0x81000) r15 = accept4$packet(r5, &(0x7f0000001000)={0x11, 0x0, 0x0}, &(0x7f0000001040)=0x14, 0x80000) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000001940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f0000001080)={0x848, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xe9, 0x7, 0xbc, 0xfffeffff}, {0x68, 0x4, 0x0, 0x3}, {0x73f4, 0x20, 0x3f, 0xf5e}]}}}]}}, {{0x8, 0x1, r8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffc0000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r10}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r3}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r0}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r16}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x9, 0x4, 0x1ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x21}}}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x4088010}, 0x80) r17 = socket$inet_udp(0x2, 0x2, 0x0) bind(r17, &(0x7f0000001980)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x80) sendmsg$unix(r5, &(0x7f0000007d80)={&(0x7f0000001a00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001a80)="9b926a7e16a4349983f37f40fa1b584ad6b48c0a11a430cb6ef34bd70168", 0x1e}, {&(0x7f0000001ac0)="7d4af065d5e2af27034e6a2f413fdbfa77847d6e497b9d3309059940c6c22f983e9cdc6ab79a9fce73657ef41d8526b895983b6f0da47c2a5a0170f18f55a9cdf782c9b348f5f27d016469ccd92ead26770338418b80a54d1c7dea710531a3ec6d0df394e96eb37957ec6232eefb", 0x6e}, {&(0x7f0000001b40)="ab87ed2903fe68582c1bd87305b0853ab70907efa8966041e9138137810c40761ffe7bc19fd2d11958a4ff61baf8b3f2ec9a249c543c44c9e9b8c987a38ee4a634775dd1b232571aefcc2c06f0bc4a7ca5c5a1907d43874ed1e80c3ce17fcaccc4d4d10233325512cc70bceb99dfbbf2acb086c5a651bf77ee6004ff530e03017c36f35d59300593b1de3d7b17b06f958a5e4b716bc604b7b835ee25429b00da08f5833ae0bdc4113f", 0xa9}, {&(0x7f0000001c00)="beb4420d911106a53b5730c8f099d287ad6135399ad44ba8d6e48a1c08bf6b65227d2a80ee81d5f55db54db5a2f12d199ad8055c5924f96f478d2c6abf288d778085da8f9e5b70dcdda9a95cd8537ae9d6a5e7d54cd9637fb577f35542393063e48c5a025bf1f29940e464119ae8ccd3d17cb0625e977afee74c1519c665547de83cb12444cd0e785f194e9f47f7f6e0faade783c0d2519158f2d37fe0c345785222abf79b55461fe9104ea82e3e5165531e128c6a2ec7ff00ce17f84d2fdaa3554797", 0xc3}, {&(0x7f0000001d00)="c5788fb0864997a674c824ab4f419dc7633ed47b91c970c0c0553762fb0b1d7dfce4a6d745443e8f091fbb790d", 0x2d}, {&(0x7f0000001d40)="9949521fabc6", 0x6}], 0x6, &(0x7f0000007c80)=[@rights={{0x1c, 0x1, 0x1, [r15, r13, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, 0xffffffffffffffff}}}], 0xe0, 0x40000}, 0x40080) [ 73.166648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.170544] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.173122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.177104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.179433] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.182211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.189256] Bluetooth: hci0: HCI_REQ-0x0c1a [ 73.216782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.218333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.219709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.220798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.222633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.223665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.230163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.231340] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.234682] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.241252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.242366] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.246421] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.258392] Bluetooth: hci2: HCI_REQ-0x0c1a [ 73.259174] Bluetooth: hci1: HCI_REQ-0x0c1a [ 73.346816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.348683] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.350568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.355350] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.356808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.358509] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.360135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.361331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.362532] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.376545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.377944] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.379563] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.387054] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.388796] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 73.389986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.391199] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.392965] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 73.400309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.413127] Bluetooth: hci3: HCI_REQ-0x0c1a [ 73.414230] Bluetooth: hci7: HCI_REQ-0x0c1a [ 73.435150] Bluetooth: hci6: HCI_REQ-0x0c1a [ 75.252726] Bluetooth: hci0: command 0x0409 tx timeout [ 75.316128] Bluetooth: hci2: command 0x0409 tx timeout [ 75.316226] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 75.317056] Bluetooth: hci1: command 0x0409 tx timeout [ 75.318773] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 75.444273] Bluetooth: hci7: command 0x0409 tx timeout [ 75.445214] Bluetooth: hci3: command 0x0409 tx timeout [ 75.508100] Bluetooth: hci6: command 0x0409 tx timeout [ 77.300104] Bluetooth: hci0: command 0x041b tx timeout [ 77.364122] Bluetooth: hci2: command 0x041b tx timeout [ 77.364613] Bluetooth: hci1: command 0x041b tx timeout [ 77.493087] Bluetooth: hci3: command 0x041b tx timeout [ 77.493560] Bluetooth: hci7: command 0x041b tx timeout [ 77.556153] Bluetooth: hci6: command 0x041b tx timeout [ 79.349048] Bluetooth: hci0: command 0x040f tx timeout [ 79.413104] Bluetooth: hci1: command 0x040f tx timeout [ 79.413157] Bluetooth: hci2: command 0x040f tx timeout [ 79.540060] Bluetooth: hci7: command 0x040f tx timeout [ 79.540072] Bluetooth: hci3: command 0x040f tx timeout [ 79.605043] Bluetooth: hci6: command 0x040f tx timeout [ 80.500079] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 80.629084] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 81.397078] Bluetooth: hci0: command 0x0419 tx timeout [ 81.460052] Bluetooth: hci1: command 0x0419 tx timeout [ 81.460474] Bluetooth: hci2: command 0x0419 tx timeout [ 81.588049] Bluetooth: hci7: command 0x0419 tx timeout [ 81.589057] Bluetooth: hci3: command 0x0419 tx timeout [ 81.652039] Bluetooth: hci6: command 0x0419 tx timeout [ 83.142405] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.143399] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.144257] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.146030] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.146899] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.147605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.171244] Bluetooth: hci4: HCI_REQ-0x0c1a [ 85.237281] Bluetooth: hci4: command 0x0409 tx timeout [ 85.429058] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 87.285050] Bluetooth: hci4: command 0x041b tx timeout [ 88.060816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.065887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.071698] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.079133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.082314] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.093161] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.102062] Bluetooth: hci5: HCI_REQ-0x0c1a [ 89.333097] Bluetooth: hci4: command 0x040f tx timeout [ 90.165067] Bluetooth: hci5: command 0x0409 tx timeout [ 91.381059] Bluetooth: hci4: command 0x0419 tx timeout [ 92.212101] Bluetooth: hci5: command 0x041b tx timeout [ 94.260052] Bluetooth: hci5: command 0x040f tx timeout [ 96.308106] Bluetooth: hci5: command 0x0419 tx timeout 07:01:54 executing program 7: r0 = io_uring_setup(0x3b9b, &(0x7f0000000040)={0x0, 0xaee8}) syz_io_uring_setup(0x2072, &(0x7f0000000100)={0x0, 0xbb6a, 0x20, 0x1, 0x205, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000000c0), 0x1) 07:01:54 executing program 7: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r0, 0xee01, 0xee00) r1 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r1, 0xee01, 0xee00) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x48, &(0x7f0000001980)=ANY=[@ANYRESOCT=r1]) [ 120.957188] ======================================================= [ 120.957188] WARNING: The mand mount option has been deprecated and [ 120.957188] and is ignored by this kernel. Remove the mand [ 120.957188] option from the mount to silence this warning. [ 120.957188] ======================================================= [ 120.972828] FAT-fs (loop7): Unrecognized mount option "00000000000000000000004" or missing value [ 120.991137] FAT-fs (loop7): Unrecognized mount option "00000000000000000000004" or missing value 07:01:54 executing program 7: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r0, 0xee01, 0xee00) r1 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r1, 0xee01, 0xee00) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x48, &(0x7f0000001980)=ANY=[@ANYRESOCT=r1]) [ 121.145795] FAT-fs (loop7): Unrecognized mount option "00000000000000000000004" or missing value 07:01:54 executing program 7: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r0, 0xee01, 0xee00) r1 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r1, 0xee01, 0xee00) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x48, &(0x7f0000001980)=ANY=[@ANYRESOCT=r1]) [ 121.294949] FAT-fs (loop7): Unrecognized mount option "00000000000000000000004" or missing value 07:01:54 executing program 7: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r0, 0xee01, 0xee00) r1 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r1, 0xee01, 0xee00) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x48, &(0x7f0000001980)=ANY=[@ANYRESOCT=r1]) [ 121.456274] FAT-fs (loop7): Unrecognized mount option "00000000000000000000004" or missing value 07:01:54 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3f, 0x80, 0x20, 0x4, 0x0, 0x0, 0x4801, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_config_ext={0x0, 0x7}, 0x40, 0x3, 0x80, 0x9, 0x8, 0x10001, 0x2, 0x0, 0x9, 0x0, 0xfffffffffffffffc}, 0x0, 0x10, 0xffffffffffffffff, 0x0) 07:01:54 executing program 7: r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x6, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r6}}, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r7, r8], 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xe2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r9, 0x0, 0x0, 0x87ffffc) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) [ 121.523883] audit: type=1400 audit(1663830114.901:7): avc: denied { open } for pid=3611 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.525293] audit: type=1400 audit(1663830114.901:8): avc: denied { kernel } for pid=3611 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.539628] ------------[ cut here ]------------ [ 121.539648] [ 121.539651] ====================================================== [ 121.539655] WARNING: possible circular locking dependency detected [ 121.539659] 6.0.0-rc6-next-20220921 #1 Not tainted [ 121.539666] ------------------------------------------------------ [ 121.539670] syz-executor.5/3613 is trying to acquire lock: [ 121.539676] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 121.539716] [ 121.539716] but task is already holding lock: [ 121.539719] ffff88800f825c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.539749] [ 121.539749] which lock already depends on the new lock. [ 121.539749] [ 121.539752] [ 121.539752] the existing dependency chain (in reverse order) is: [ 121.539756] [ 121.539756] -> #3 (&ctx->lock){....}-{2:2}: [ 121.539770] _raw_spin_lock+0x2a/0x40 [ 121.539790] __perf_event_task_sched_out+0x53b/0x18d0 [ 121.539804] __schedule+0xedd/0x2470 [ 121.539818] schedule+0xda/0x1b0 [ 121.539832] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.539846] syscall_exit_to_user_mode+0x19/0x40 [ 121.539860] do_syscall_64+0x48/0x90 [ 121.539878] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.539890] [ 121.539890] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 121.539904] _raw_spin_lock_nested+0x30/0x40 [ 121.539924] raw_spin_rq_lock_nested+0x1e/0x30 [ 121.539938] task_fork_fair+0x63/0x4d0 [ 121.539956] sched_cgroup_fork+0x3d0/0x540 [ 121.539972] copy_process+0x4183/0x6e20 [ 121.539983] kernel_clone+0xe7/0x890 [ 121.539996] user_mode_thread+0xad/0xf0 [ 121.540006] rest_init+0x24/0x250 [ 121.540018] arch_call_rest_init+0xf/0x14 [ 121.540035] start_kernel+0x4c1/0x4e6 [ 121.540050] secondary_startup_64_no_verify+0xe0/0xeb [ 121.540064] [ 121.540064] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 121.540079] _raw_spin_lock_irqsave+0x39/0x60 [ 121.540098] try_to_wake_up+0xab/0x1930 [ 121.540113] up+0x75/0xb0 [ 121.540127] __up_console_sem+0x6e/0x80 [ 121.540144] console_unlock+0x46a/0x590 [ 121.540162] vt_ioctl+0x2822/0x2ca0 [ 121.540176] tty_ioctl+0x7c4/0x1700 [ 121.540188] __x64_sys_ioctl+0x19a/0x210 [ 121.540205] do_syscall_64+0x3b/0x90 [ 121.540222] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.540234] [ 121.540234] -> #0 ((console_sem).lock){....}-{2:2}: [ 121.540248] __lock_acquire+0x2a02/0x5e70 [ 121.540267] lock_acquire+0x1a2/0x530 [ 121.540284] _raw_spin_lock_irqsave+0x39/0x60 [ 121.540304] down_trylock+0xe/0x70 [ 121.540319] __down_trylock_console_sem+0x3b/0xd0 [ 121.540337] vprintk_emit+0x16b/0x560 [ 121.540355] vprintk+0x84/0xa0 [ 121.540372] _printk+0xba/0xf1 [ 121.540383] report_bug.cold+0x72/0xab [ 121.540400] handle_bug+0x3c/0x70 [ 121.540417] exc_invalid_op+0x14/0x50 [ 121.540435] asm_exc_invalid_op+0x16/0x20 [ 121.540446] group_sched_out.part.0+0x2c7/0x460 [ 121.540457] ctx_sched_out+0x8f1/0xc10 [ 121.540468] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.540481] __schedule+0xedd/0x2470 [ 121.540494] schedule+0xda/0x1b0 [ 121.540507] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.540518] syscall_exit_to_user_mode+0x19/0x40 [ 121.540530] do_syscall_64+0x48/0x90 [ 121.540548] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.540560] [ 121.540560] other info that might help us debug this: [ 121.540560] [ 121.540562] Chain exists of: [ 121.540562] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 121.540562] [ 121.540578] Possible unsafe locking scenario: [ 121.540578] [ 121.540580] CPU0 CPU1 [ 121.540583] ---- ---- [ 121.540585] lock(&ctx->lock); [ 121.540591] lock(&rq->__lock); [ 121.540598] lock(&ctx->lock); [ 121.540605] lock((console_sem).lock); [ 121.540611] [ 121.540611] *** DEADLOCK *** [ 121.540611] [ 121.540613] 2 locks held by syz-executor.5/3613: [ 121.540620] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 121.540650] #1: ffff88800f825c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.540680] [ 121.540680] stack backtrace: [ 121.540682] CPU: 1 PID: 3613 Comm: syz-executor.5 Not tainted 6.0.0-rc6-next-20220921 #1 [ 121.540695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.540704] Call Trace: [ 121.540707] [ 121.540711] dump_stack_lvl+0x8b/0xb3 [ 121.540736] check_noncircular+0x263/0x2e0 [ 121.540754] ? format_decode+0x26c/0xb50 [ 121.540771] ? print_circular_bug+0x450/0x450 [ 121.540790] ? enable_ptr_key_workfn+0x20/0x20 [ 121.540807] ? format_decode+0x26c/0xb50 [ 121.540824] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 121.540843] __lock_acquire+0x2a02/0x5e70 [ 121.540867] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 121.540891] lock_acquire+0x1a2/0x530 [ 121.540909] ? down_trylock+0xe/0x70 [ 121.540927] ? lock_release+0x750/0x750 [ 121.540949] ? vprintk+0x84/0xa0 [ 121.540969] _raw_spin_lock_irqsave+0x39/0x60 [ 121.540989] ? down_trylock+0xe/0x70 [ 121.541006] down_trylock+0xe/0x70 [ 121.541022] ? vprintk+0x84/0xa0 [ 121.541041] __down_trylock_console_sem+0x3b/0xd0 [ 121.541059] vprintk_emit+0x16b/0x560 [ 121.541080] vprintk+0x84/0xa0 [ 121.541099] _printk+0xba/0xf1 [ 121.541110] ? record_print_text.cold+0x16/0x16 [ 121.541126] ? report_bug.cold+0x66/0xab [ 121.541145] ? group_sched_out.part.0+0x2c7/0x460 [ 121.541157] report_bug.cold+0x72/0xab [ 121.541176] handle_bug+0x3c/0x70 [ 121.541194] exc_invalid_op+0x14/0x50 [ 121.541213] asm_exc_invalid_op+0x16/0x20 [ 121.541226] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.541240] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.541252] RSP: 0018:ffff888041ddfc48 EFLAGS: 00010006 [ 121.541261] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.541269] RDX: ffff88801e51b580 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 121.541278] RBP: ffff888041d10000 R08: 0000000000000005 R09: 0000000000000001 [ 121.541285] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff88800f825c00 [ 121.541293] R13: ffff88806cf3d140 R14: ffffffff85480400 R15: 0000000000000002 [ 121.541305] ? group_sched_out.part.0+0x2c7/0x460 [ 121.541319] ? group_sched_out.part.0+0x2c7/0x460 [ 121.541332] ctx_sched_out+0x8f1/0xc10 [ 121.541345] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.541362] ? lock_is_held_type+0xd7/0x130 [ 121.541375] ? __perf_cgroup_move+0x160/0x160 [ 121.541388] ? set_next_entity+0x304/0x550 [ 121.541407] ? update_curr+0x267/0x740 [ 121.541427] ? lock_is_held_type+0xd7/0x130 [ 121.541441] __schedule+0xedd/0x2470 [ 121.541458] ? io_schedule_timeout+0x150/0x150 [ 121.541474] ? __x64_sys_futex_time32+0x480/0x480 [ 121.541488] schedule+0xda/0x1b0 [ 121.541503] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.541516] syscall_exit_to_user_mode+0x19/0x40 [ 121.541529] do_syscall_64+0x48/0x90 [ 121.541547] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.541560] RIP: 0033:0x7f05586fbb19 [ 121.541568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.541580] RSP: 002b:00007f0555c71218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.541591] RAX: 0000000000000001 RBX: 00007f055880ef68 RCX: 00007f05586fbb19 [ 121.541599] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f055880ef6c [ 121.541607] RBP: 00007f055880ef60 R08: 000000000000000e R09: 0000000000000000 [ 121.541615] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f055880ef6c [ 121.541622] R13: 00007ffdeb50f3cf R14: 00007f0555c71300 R15: 0000000000022000 [ 121.541636] [ 121.593390] WARNING: CPU: 1 PID: 3613 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 121.593412] Modules linked in: [ 121.593418] CPU: 1 PID: 3613 Comm: syz-executor.5 Not tainted 6.0.0-rc6-next-20220921 #1 [ 121.593432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.593439] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.593453] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.593465] RSP: 0018:ffff888041ddfc48 EFLAGS: 00010006 [ 121.593475] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.593483] RDX: ffff88801e51b580 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 121.593492] RBP: ffff888041d10000 R08: 0000000000000005 R09: 0000000000000001 [ 121.593500] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff88800f825c00 [ 121.593508] R13: ffff88806cf3d140 R14: ffffffff85480400 R15: 0000000000000002 [ 121.593519] FS: 00007f0555c71700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 121.593532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.593541] CR2: 00007f0d6376c6f4 CR3: 000000000e112000 CR4: 0000000000350ee0 [ 121.593549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.593557] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 121.593565] Call Trace: [ 121.593569] [ 121.593574] ctx_sched_out+0x8f1/0xc10 [ 121.593588] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.593605] ? lock_is_held_type+0xd7/0x130 [ 121.593619] ? __perf_cgroup_move+0x160/0x160 [ 121.593632] ? set_next_entity+0x304/0x550 [ 121.593652] ? update_curr+0x267/0x740 [ 121.593672] ? lock_is_held_type+0xd7/0x130 [ 121.593686] __schedule+0xedd/0x2470 [ 121.593704] ? io_schedule_timeout+0x150/0x150 [ 121.593721] ? __x64_sys_futex_time32+0x480/0x480 [ 121.593735] schedule+0xda/0x1b0 [ 121.593750] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.593763] syscall_exit_to_user_mode+0x19/0x40 [ 121.593777] do_syscall_64+0x48/0x90 [ 121.593795] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.593808] RIP: 0033:0x7f05586fbb19 [ 121.593817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.593829] RSP: 002b:00007f0555c71218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.593841] RAX: 0000000000000001 RBX: 00007f055880ef68 RCX: 00007f05586fbb19 [ 121.593849] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f055880ef6c [ 121.593858] RBP: 00007f055880ef60 R08: 000000000000000e R09: 0000000000000000 [ 121.593866] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f055880ef6c [ 121.593874] R13: 00007ffdeb50f3cf R14: 00007f0555c71300 R15: 0000000000022000 [ 121.593888] [ 121.593892] irq event stamp: 736 [ 121.593896] hardirqs last enabled at (735): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 121.593912] hardirqs last disabled at (736): [] __schedule+0x1225/0x2470 [ 121.593930] softirqs last enabled at (582): [] toggle_bp_slot.constprop.0+0x29c5/0x2f50 [ 121.593952] softirqs last disabled at (580): [] toggle_bp_slot.constprop.0+0x131c/0x2f50 [ 121.593974] ---[ end trace 0000000000000000 ]--- 07:01:55 executing program 7: r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x6, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r6}}, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r7, r8], 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xe2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r9, 0x0, 0x0, 0x87ffffc) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) [ 121.873676] audit: type=1400 audit(1663830115.251:9): avc: denied { write } for pid=3611 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 VM DIAGNOSIS: 07:01:55 Registers: info registers vcpu 0 RAX=00007fa1a5249500 RBX=00007fa1a5753470 RCX=0000000018d09e7f RDX=000000000000001b RSI=00000c0200040105 RDI=0000000018d09e7f RBP=0000000000000005 RSP=00007ffc3ef2eeb0 R8 =00007ffc3ef2eff0 R9 =00007fa1a5784440 R10=00007fa1a55c6110 R11=0000000000000007 R12=0000000000000007 R13=00007fa1a5753a90 R14=0000000000000001 R15=0000000000000000 RIP=00007fa1a5762083 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa1a5248540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa1a537c570 CR3=000000001d452000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00ff000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 ff00ffffffffffff ffffffffffffff00 YMM02=0000000000000000 0000000000000000 ff00ffffffffffff ffffffffff000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000043 YMM04=0000000000000000 0000000000000000 322e332e325f4342 494c4700332e325f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff8701bbf3 RCX=0000000000000000 RDX=0000000000000002 RSI=000000000000000a RDI=ffffffff8701bbf2 RBP=ffffffff8701bc1c RSP=ffff888041ddf6a8 R8 =0000000000000006 R9 =0000000000000000 R10=000000000000002d R11=0000000000000001 R12=dffffc0000000000 R13=000000000000000f R14=0000000000000400 R15=0000000000000010 RIP=ffffffff84118f9e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0555c71700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0d6376c6f4 CR3=000000000e112000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f05587e27c0 00007f05587e27c8 YMM02=0000000000000000 0000000000000000 00007f05587e27e0 00007f05587e27c0 YMM03=0000000000000000 0000000000000000 00007f05587e27c8 00007f05587e27c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000