Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:46815' (ECDSA) to the list of known hosts. 2022/09/22 12:16:27 fuzzer started 2022/09/22 12:16:27 dialing manager at localhost:40289 syzkaller login: [ 37.647084] cgroup: Unknown subsys name 'net' [ 37.737689] cgroup: Unknown subsys name 'rlimit' 2022/09/22 12:16:41 syscalls: 2215 2022/09/22 12:16:41 code coverage: enabled 2022/09/22 12:16:41 comparison tracing: enabled 2022/09/22 12:16:41 extra coverage: enabled 2022/09/22 12:16:41 setuid sandbox: enabled 2022/09/22 12:16:41 namespace sandbox: enabled 2022/09/22 12:16:41 Android sandbox: enabled 2022/09/22 12:16:41 fault injection: enabled 2022/09/22 12:16:41 leak checking: enabled 2022/09/22 12:16:41 net packet injection: enabled 2022/09/22 12:16:41 net device setup: enabled 2022/09/22 12:16:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/22 12:16:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/22 12:16:41 USB emulation: enabled 2022/09/22 12:16:41 hci packet injection: enabled 2022/09/22 12:16:41 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220921) 2022/09/22 12:16:41 802.15.4 emulation: enabled 2022/09/22 12:16:42 fetching corpus: 50, signal 20471/22293 (executing program) 2022/09/22 12:16:42 fetching corpus: 100, signal 39813/43149 (executing program) 2022/09/22 12:16:42 fetching corpus: 150, signal 54301/58928 (executing program) 2022/09/22 12:16:42 fetching corpus: 200, signal 61557/67523 (executing program) 2022/09/22 12:16:42 fetching corpus: 250, signal 68061/75234 (executing program) 2022/09/22 12:16:42 fetching corpus: 300, signal 71370/79828 (executing program) 2022/09/22 12:16:42 fetching corpus: 350, signal 75404/85092 (executing program) 2022/09/22 12:16:43 fetching corpus: 400, signal 79752/90577 (executing program) 2022/09/22 12:16:43 fetching corpus: 450, signal 82291/94304 (executing program) 2022/09/22 12:16:43 fetching corpus: 500, signal 88233/101078 (executing program) 2022/09/22 12:16:43 fetching corpus: 550, signal 90563/104450 (executing program) 2022/09/22 12:16:43 fetching corpus: 600, signal 93664/108514 (executing program) 2022/09/22 12:16:43 fetching corpus: 650, signal 95522/111366 (executing program) 2022/09/22 12:16:43 fetching corpus: 700, signal 100140/116661 (executing program) 2022/09/22 12:16:43 fetching corpus: 750, signal 101647/119096 (executing program) 2022/09/22 12:16:44 fetching corpus: 800, signal 104764/122994 (executing program) 2022/09/22 12:16:44 fetching corpus: 850, signal 107029/126048 (executing program) 2022/09/22 12:16:44 fetching corpus: 900, signal 110604/130202 (executing program) 2022/09/22 12:16:44 fetching corpus: 950, signal 113030/133309 (executing program) 2022/09/22 12:16:44 fetching corpus: 1000, signal 115727/136619 (executing program) 2022/09/22 12:16:44 fetching corpus: 1050, signal 117704/139283 (executing program) 2022/09/22 12:16:44 fetching corpus: 1100, signal 119145/141532 (executing program) 2022/09/22 12:16:44 fetching corpus: 1150, signal 120672/143791 (executing program) 2022/09/22 12:16:44 fetching corpus: 1200, signal 122960/146590 (executing program) 2022/09/22 12:16:45 fetching corpus: 1250, signal 124108/148498 (executing program) 2022/09/22 12:16:45 fetching corpus: 1300, signal 125822/150840 (executing program) 2022/09/22 12:16:45 fetching corpus: 1350, signal 127432/153039 (executing program) 2022/09/22 12:16:45 fetching corpus: 1400, signal 129398/155477 (executing program) 2022/09/22 12:16:45 fetching corpus: 1450, signal 130507/157240 (executing program) 2022/09/22 12:16:45 fetching corpus: 1500, signal 132070/159349 (executing program) 2022/09/22 12:16:45 fetching corpus: 1550, signal 132984/160923 (executing program) 2022/09/22 12:16:45 fetching corpus: 1600, signal 134209/162724 (executing program) 2022/09/22 12:16:45 fetching corpus: 1650, signal 135186/164330 (executing program) 2022/09/22 12:16:46 fetching corpus: 1700, signal 136538/166178 (executing program) 2022/09/22 12:16:46 fetching corpus: 1750, signal 137979/168067 (executing program) 2022/09/22 12:16:46 fetching corpus: 1800, signal 139461/169976 (executing program) 2022/09/22 12:16:46 fetching corpus: 1850, signal 141004/171831 (executing program) 2022/09/22 12:16:46 fetching corpus: 1900, signal 141760/173157 (executing program) 2022/09/22 12:16:46 fetching corpus: 1950, signal 143399/175093 (executing program) 2022/09/22 12:16:46 fetching corpus: 2000, signal 145108/177012 (executing program) 2022/09/22 12:16:46 fetching corpus: 2050, signal 146497/178721 (executing program) 2022/09/22 12:16:46 fetching corpus: 2100, signal 148014/180524 (executing program) 2022/09/22 12:16:47 fetching corpus: 2150, signal 150005/182608 (executing program) 2022/09/22 12:16:47 fetching corpus: 2200, signal 150829/183869 (executing program) 2022/09/22 12:16:47 fetching corpus: 2250, signal 152225/185526 (executing program) 2022/09/22 12:16:47 fetching corpus: 2300, signal 153113/186746 (executing program) 2022/09/22 12:16:47 fetching corpus: 2350, signal 154174/188098 (executing program) 2022/09/22 12:16:47 fetching corpus: 2400, signal 155165/189433 (executing program) 2022/09/22 12:16:47 fetching corpus: 2450, signal 156105/190713 (executing program) 2022/09/22 12:16:47 fetching corpus: 2500, signal 157032/191997 (executing program) 2022/09/22 12:16:47 fetching corpus: 2550, signal 158289/193408 (executing program) 2022/09/22 12:16:48 fetching corpus: 2600, signal 159329/194721 (executing program) 2022/09/22 12:16:48 fetching corpus: 2650, signal 161080/196451 (executing program) 2022/09/22 12:16:48 fetching corpus: 2700, signal 162008/197619 (executing program) 2022/09/22 12:16:48 fetching corpus: 2750, signal 163764/199198 (executing program) 2022/09/22 12:16:48 fetching corpus: 2800, signal 165034/200610 (executing program) 2022/09/22 12:16:48 fetching corpus: 2850, signal 165695/201547 (executing program) 2022/09/22 12:16:48 fetching corpus: 2900, signal 166807/202785 (executing program) 2022/09/22 12:16:48 fetching corpus: 2950, signal 168216/204130 (executing program) 2022/09/22 12:16:49 fetching corpus: 3000, signal 169444/205339 (executing program) 2022/09/22 12:16:49 fetching corpus: 3050, signal 170032/206239 (executing program) 2022/09/22 12:16:49 fetching corpus: 3100, signal 170667/207157 (executing program) 2022/09/22 12:16:49 fetching corpus: 3150, signal 172102/208461 (executing program) 2022/09/22 12:16:49 fetching corpus: 3200, signal 173045/209458 (executing program) 2022/09/22 12:16:49 fetching corpus: 3250, signal 173756/210365 (executing program) 2022/09/22 12:16:49 fetching corpus: 3300, signal 175241/211680 (executing program) 2022/09/22 12:16:49 fetching corpus: 3350, signal 175748/212461 (executing program) 2022/09/22 12:16:50 fetching corpus: 3400, signal 176948/213519 (executing program) 2022/09/22 12:16:50 fetching corpus: 3450, signal 178130/214517 (executing program) 2022/09/22 12:16:50 fetching corpus: 3500, signal 178626/215236 (executing program) 2022/09/22 12:16:50 fetching corpus: 3550, signal 179032/215937 (executing program) 2022/09/22 12:16:50 fetching corpus: 3600, signal 179636/216692 (executing program) 2022/09/22 12:16:50 fetching corpus: 3650, signal 180242/217434 (executing program) 2022/09/22 12:16:50 fetching corpus: 3700, signal 180607/218070 (executing program) 2022/09/22 12:16:50 fetching corpus: 3750, signal 180956/218715 (executing program) 2022/09/22 12:16:50 fetching corpus: 3800, signal 181649/219408 (executing program) 2022/09/22 12:16:51 fetching corpus: 3850, signal 182726/220320 (executing program) 2022/09/22 12:16:51 fetching corpus: 3900, signal 183555/221129 (executing program) 2022/09/22 12:16:51 fetching corpus: 3950, signal 184438/221945 (executing program) 2022/09/22 12:16:51 fetching corpus: 4000, signal 185213/222653 (executing program) 2022/09/22 12:16:51 fetching corpus: 4050, signal 185885/223373 (executing program) 2022/09/22 12:16:51 fetching corpus: 4100, signal 186393/224016 (executing program) 2022/09/22 12:16:51 fetching corpus: 4150, signal 187068/224665 (executing program) 2022/09/22 12:16:51 fetching corpus: 4200, signal 187741/225290 (executing program) 2022/09/22 12:16:51 fetching corpus: 4250, signal 188808/226061 (executing program) 2022/09/22 12:16:52 fetching corpus: 4300, signal 189062/226561 (executing program) 2022/09/22 12:16:52 fetching corpus: 4350, signal 189700/227207 (executing program) 2022/09/22 12:16:52 fetching corpus: 4400, signal 190317/227835 (executing program) 2022/09/22 12:16:52 fetching corpus: 4450, signal 191103/228456 (executing program) 2022/09/22 12:16:52 fetching corpus: 4500, signal 191966/229072 (executing program) 2022/09/22 12:16:52 fetching corpus: 4550, signal 192397/229592 (executing program) 2022/09/22 12:16:52 fetching corpus: 4600, signal 193099/230148 (executing program) 2022/09/22 12:16:52 fetching corpus: 4650, signal 193905/230738 (executing program) 2022/09/22 12:16:52 fetching corpus: 4700, signal 194889/231350 (executing program) 2022/09/22 12:16:53 fetching corpus: 4750, signal 195661/231893 (executing program) 2022/09/22 12:16:53 fetching corpus: 4800, signal 196275/232363 (executing program) 2022/09/22 12:16:53 fetching corpus: 4850, signal 197173/232956 (executing program) 2022/09/22 12:16:53 fetching corpus: 4900, signal 198656/233585 (executing program) 2022/09/22 12:16:53 fetching corpus: 4950, signal 199271/234014 (executing program) 2022/09/22 12:16:53 fetching corpus: 5000, signal 200261/234539 (executing program) 2022/09/22 12:16:53 fetching corpus: 5050, signal 201041/234966 (executing program) 2022/09/22 12:16:53 fetching corpus: 5100, signal 201729/235373 (executing program) 2022/09/22 12:16:53 fetching corpus: 5150, signal 202360/235868 (executing program) 2022/09/22 12:16:54 fetching corpus: 5200, signal 202988/236286 (executing program) 2022/09/22 12:16:54 fetching corpus: 5250, signal 203430/236673 (executing program) 2022/09/22 12:16:54 fetching corpus: 5300, signal 203988/237159 (executing program) 2022/09/22 12:16:54 fetching corpus: 5350, signal 204933/237692 (executing program) 2022/09/22 12:16:54 fetching corpus: 5400, signal 205680/238072 (executing program) 2022/09/22 12:16:54 fetching corpus: 5450, signal 205998/238366 (executing program) 2022/09/22 12:16:54 fetching corpus: 5500, signal 207235/238717 (executing program) 2022/09/22 12:16:54 fetching corpus: 5550, signal 207892/239149 (executing program) 2022/09/22 12:16:54 fetching corpus: 5600, signal 208395/239440 (executing program) 2022/09/22 12:16:54 fetching corpus: 5650, signal 208941/239743 (executing program) 2022/09/22 12:16:55 fetching corpus: 5700, signal 209211/240067 (executing program) 2022/09/22 12:16:55 fetching corpus: 5750, signal 209728/240351 (executing program) 2022/09/22 12:16:55 fetching corpus: 5800, signal 210035/240625 (executing program) 2022/09/22 12:16:55 fetching corpus: 5850, signal 211015/240970 (executing program) 2022/09/22 12:16:55 fetching corpus: 5900, signal 212033/241377 (executing program) 2022/09/22 12:16:55 fetching corpus: 5950, signal 213003/241514 (executing program) 2022/09/22 12:16:55 fetching corpus: 6000, signal 213493/241527 (executing program) 2022/09/22 12:16:55 fetching corpus: 6050, signal 214161/241571 (executing program) 2022/09/22 12:16:55 fetching corpus: 6100, signal 214708/241571 (executing program) 2022/09/22 12:16:56 fetching corpus: 6150, signal 215285/241581 (executing program) 2022/09/22 12:16:56 fetching corpus: 6200, signal 215849/241584 (executing program) 2022/09/22 12:16:56 fetching corpus: 6250, signal 216194/241585 (executing program) 2022/09/22 12:16:56 fetching corpus: 6300, signal 216776/241608 (executing program) 2022/09/22 12:16:56 fetching corpus: 6350, signal 217105/241608 (executing program) 2022/09/22 12:16:56 fetching corpus: 6377, signal 217309/241608 (executing program) 2022/09/22 12:16:56 fetching corpus: 6377, signal 217309/241608 (executing program) 2022/09/22 12:16:59 starting 8 fuzzer processes 12:16:59 executing program 0: sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000801}, 0x24044000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x100, 0xffffff7f, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x20}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x1, 0x2, 0x0, {0x19, 0x90, 0x0, 0x78, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x4}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fb78c8a5fd85"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xe000, {0x20, 0x6, 0x5e, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x24000040) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000890}, 0xc000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1b0}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = socket(0x3, 0x1, 0x6) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8050) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1d0, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x104, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ded4011}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40000a0}, 0x5) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c010}, 0x4880) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xc0, 0x1, 0x7, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe7d}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x329d}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_PKTS={0xc}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000dc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x31c, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r4) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0x88, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1f}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3d0a8b2f68a809ab373c2b2251336947e84c367badd464268a9ba1"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "ee1b6c483a4e38be609455138bb4cfdb"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_SSID={0x10, 0x34, @random="2643c86880f80e7e43652142"}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x4000090) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) 12:16:59 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000040)) r1 = pidfd_open(r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8000, 0x200) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000000c0)) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000100)) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000140)={0x6, 0x20}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x42010}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x54}}}}, [@NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1df}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x20, 0x1000000]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x54e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x20000091) ptrace$setregs(0xf, r0, 0x7, &(0x7f0000000400)="71a3acf19733331ef47321882c6f7059ad639a0f3b82bc8ba0fdade930e9fbbeca7db0af210ca31c399a377cb696019dd03e02a250362327a82d504c63a2b3d1f54bcf79e4326fa5be55bd14bab63b2def5203ec42daf9288d870ef3959433840c6648b2e47ef996fd757e9b92f27355f97918bf97180068675d1d437c13aadb5e3013c765c65afe016f49a5c5aab3029f4096417ff1d3534b30a6fd123aed4555e30bd525e3413507d26b8411597cdb109c6fe7c979c1160d59aacf") recvmsg$unix(r3, &(0x7f0000000680)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000540)=""/18, 0x12}], 0x1, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x10000) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xab}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40084) close(r3) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000007c0)={0x1, 0x7, 0x101}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r3) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3ec, r8, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf64}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffdbca}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x274, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "8d6c7b15a1ab9736c72ca23ea99df2b29637ed6c14e33c383cff91697a49b52e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x103, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x17, 0x3, "6176c625407823c88da4403cf4ca7709d98db1"}, @TIPC_NLA_NODE_ID={0x100, 0x3, "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"}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11f79d1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x4040094}, 0x4040) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000001040)={{'\x00', 0x1}, {0x8}, 0x20, 0x0, 0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)="b66c86e2753bdefb66b28e00af130eaf8bbcb321fa8715d6baed40d6df04a2dbd825ffdae37a5c0c9db0beaa93691bdf78be5de4a23b554cf71b53adb66014509039ba16e3e6bd90e54062be6111ae57135f459f4f2f0af10b96bbd6ec077096c33956996a49a45e118c1c6f552328903556f77d610b92554c868eaef56d783196792a26d520fdb6f59ea9faa0881a14b3a33249bd4569a5baa92338c87bb3e4322724b38099564b7e48bfc216f69e55fb4cdb6fbe615d5642fb8fd4bdea2dea0d41404e3bfd1c3470af274de52b4fbe30642b3a162683691059a0e71eafc367371e48bc", 0xe4, 0x0, &(0x7f0000000e80)={0x2, 0x187, {0x0, 0xc, 0x87, "4cf98bac94ebe9607be55d7aada034c140336c28027d63ca01c1eace17fef9d7e92b87deb1cc53591004127b02e3001173123b01ad1c4d40f7249a8ecf1f48c6f4dd60087deca8f99021c3fb5d09ac510e578e6dbf5368f50ef622469784bae3128377660160354fef0ef6447ab41e18b51e2e27074783e219f874664fa0d8cfbad9571fb8623a", 0xf3, "e3453fe03910bd68d02b3109d8118c76f07fc142d9437a14b31b48486294d78f3643f3094e8f03964ed0327c260cf05111e9d204bd3829632c0d46fbfb4c463481cfde035c71d625eb4cab956a9bc4d32cdb2768d27c61c2ffe302b3a9caae841405f3f4579b91780be7d21e78b72b6fb047dbc6100929f1e28cee2ca7802e6928fabdcc6041c95defd7dd9986aab29190ebe90252fee27b6a924cdf921c39430f0eb383eb64a6b5c79dbf7e1180598dbea55bdc2a44edefe1c628ee501020d99c9effbacadffa68368821494cc8f0d7faf45400bc946e125c6815626b3d6cba3327cb760640e391877c221d6de618c52aedf1"}, 0x2d, "431fc8c82ddeb3c3faa5dca00d4a213ce1aeaebf7b32f7de62155e6d4052dc90f8bb50d1ec0aaac836f62eb245"}, 0x1c0}) fsetxattr$security_evm(r6, &(0x7f00000010c0), &(0x7f0000001100)=@v2={0x5, 0x3, 0x6, 0x8, 0xe, "166a9da40a3551e6b17d262eef90"}, 0x17, 0x2) 12:16:59 executing program 2: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0xc, 0xff, 0xff, 0x7, 0x100000001, 0x2, 0x3e, 0x6, 0xcf, 0x40, 0x8e, 0x40, 0xb2a, 0x38, 0x1, 0x0, 0x81, 0xd3}, [{0x4, 0x5, 0x0, 0x5, 0x8, 0xffffffffffffffc5, 0x1000, 0x1}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x778) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000780)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/power/reserved_size', 0x0, 0x26) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000800)) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000840)) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000880), 0x200000, 0x0) syncfs(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000900)=0x800000) r3 = openat$incfs(r0, &(0x7f0000000940)='.log\x00', 0x100, 0x0) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000980)={'\x00', 0x7, 0x0, 0x967a}) r4 = syz_open_dev$sg(&(0x7f0000000a00), 0x6, 0x101) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000a40)={{r2}, "0e43251545d349e65d7c07e54678a7d4daaa205f17e97f65e8939f70ce1226c48ca5e5937eb622fb7097009837e8c3fa0a59a01e09a7b8125e5de36ab6504240b4782f9b081431a60897cfe97cd42d3eed6f10cd1a18fcf573178ece70688b150bf555eea788778611719e027453a6e81372f62b98a059f4413610dde75f8f901b038086bb27f9259a1f7b7542ee5d54fff8e2f1a95e751a083bcb74f422ebf9da5cb998543b5be6e3417adab3afa461e46dd97b9cb71c2eead6d4d2d726cba48dd88fa4abd18c0c6998a81e76fe55a7057949fd175e67fbd91f33d58b7ae672eec04145bdde6b16a87a4cf530df1c466dd27de440ffbb5f4abff83c11a632c606b155f1042009fb71266ff6c1a88bb6fabfa73041bcc2e7ca0f43a7f4f49cda8b88d90387273772c86d344b7fac7c1f9a94b41626f188ed71c31c2fbb8d97816f838a41c95801e6a04cbc53c9389583febd2448975fdc2f1db5bb9e71e7ff7c6a7840aa3aacd58dabc4f0155c06f64425fd1ce5b1566206b0d688d6dbc113ca4b04d6509eac019b579509bae56a9bab6d3ee9889719f627b2c753aee36a2638010be65bead016df1cf64f222eaf7a6d7b48efa01c8e27ff8ebd381d38ce62402274b09c6e07f5a7ea756db006ea0de680ea41403595f69f4252faf9a8bc2ab83fbb97b505aaf9e01a659859792a203d15c88b7224c18b10ccf2ea196de28b5ea5d2d5c21939d4066b1b36b0e63a7f0a3825ea6e01e839a10dcc08f7b4336c54ea5f18eaf8567b0c45da0d532c1d5f2f7c8d752d60542785b7da95a333ccabfd1d22cf3c9c794e1ba763c121d8b1dce1d918467213afadceca9322ded9e129a3c723d26a1ce0463aac259b021618bbd9278ad75794b912bd204a35be2882cb82e90b909b9cd351d39db06fbfbf9fbb1d24eb23e0f856be5ff83bffbf0b28ab50249ddaf19cc9c0ffbf81b1d08211a914a811d80073e7c58af6aac5c08bb9c48563d0369628941538702cbfad71deb776b319a0493dc7fb36ddfb535510957b28ea0071fd672fbb91bfbdc83ce805112ab021ad40137bc5021ce6d98c7b6524fb99cf61dfae7fa76f5246cd9ec912446fcb7f4e727a3567bfdd3fee0ed6b2df0de2c7c996408df4a239b5eb7ef60adb71cd345d2f485f51552c79b099ce12904defbdd2330bcc6acfff04cfc682501318cf9b07103c58d999dba09fd3c80a77e3932e094b931cab1ef53989e487659723626e541326dec7104aefcd8ff6b2f24761018e5e7ecc2bda2a5596b56aa4a165179d21b78c24c1c296b9e02b4c56202aa1ae2dec38fa3d5facb58ec8f8a0abaa0d49e6715179f8deb57b1f22b7818d138ce8bc13ad4874714ee6bf21c781feea8380b6e8ed8a9ac50ff9039a6e84a9027b8a6a3ff53f6353cbe6b539c0ac41e867d38808175e576e59126baca70f3d1235967c97102a5ae1f86c08083cf6d39f43896f7e6ed57f352c8b64056c2b5267e47c1cbd796fdc52344bf0f4f8e3985ff82408ff2c362c36f534af933b21c21a2d64e962d942406cbac5d22ac3ee50a5167a30f6f497dc36c2ea1e3da90eaeb8eba55e2049105f45b51250850d4814af097e9c0b33ccbeb8ebfd313e18f3b982837b584d6aa2eb0deb5743f9ac56e26ed4d72eefb2a651e3b5bff8c98116a1bf88e6dabe31db40682558dbb8dc2938fa42e721409ce6c807f2cf9368a9214373cee0b3025297b4a404507d363a735bb59e634051ccbf0595bb84a5e8a39203e8f5141b53bb3e5e37767fb8c23929a1cdee9e6a6296b49f5b8fcba6c0616cfc668542c425d2d75d16ef0ae3edbd5024e5240e97ef7fd6b5508bbe2c93c1007c36707a209712830ef062ec38d6e423a1068185c65a8575a6b94d87a0018a740c825f69216f2fe8c8ebf4be7098984c4b723bdaa5fddd9f445d5294514d8fe7e9ea74775ade769b062f7d8f88e74fed7e7a383a18d855b1d03c85a3202638ec55f677d315dc98276ff86ed67b2748f36587b6e0aba1acbbf818869cf0110c3da3d12ca70a39bb1c7551e884867b1a952e715a90f616160a751c08c42ba3c2530ccc284c32b55d4804be417cb31bce4145a6e223f3dae019a8fe94d1df74e92dbabcb62dc2bf1df8992fea51390f8c45f81b8617cca7777c01f5f156aa05195a54427c1c8ba35cd3134b111d939f610d160aaf6bb4159fcab513910e2c9a6f4b64b0cee0214438f44703374bdff315c0eaffb627620d22ac481ee96587a75a8e261d90ebc4bc99e8c9719f03c061adcb5d7455e87238cd865622fe5f6a18a7d65e8109b872b62837803dc95a9c8e4362872d73e4f5c8b4f6d133bae295f513a25562f755f79147320304877598190ad04c4d1a7fd24113c55e652c1e6ab7480b0d92eca04385e4ed27b2dd58c6b4005de3ba4c5c9effd19853373c06c22f89c84e1a16b8b03f27754f2a2e594a39ebd603154bc55865811b00f0bb72bacc0f88c4c9213b705d7dcc279456d7cb8ccacb9c8f93e41d75656edc4fefe31bbb252d05800160d5fd83b8e5264dcc0e862e5255972a9d5c288a25db061ba5863dc1a480e5ea636e06ad536fba630f45670eca0002140f31ed033e890388dc33838619a8df13d17a1e4b80e3be9da228c1d1fc5b15bbfb4e5a713944583d46c322cdaa31e2b61a0e440f2b9c452ce14d2868ccbc828fa1a8f28ddd880cfcf6ee5e8ebf98f8a8937b074bc2e7341ff3b87919b5a8d6e8beaf7c07eeeb508c2877228d1653abb73cee0229dcb052239cb60303947d496d929e2124294b79472fa6559bea475831a73b149bd7c8d1c7c4ee111d074386542f9106f0f7b1d5ce4f7f822641cd7ae960a2f08df1136fc7379902bf740f7baaccdd1d1975e4ae3047e9d8ca6e9dc8369e1ed892dbc0c4d4755e3550549e6010f777eb08f8d4eeeb7970d0da3b1e7de35c52b9708ee41c82cfc0547f064a6308de3d4f205552048b43832e94c986b730d7ce4fe69d6d7355c1ecbfc97e342ef6df79f29b4d76d51547a8421c253fd731479faa2e84855676d0e5242fe4b4e14e6b30ad0fc53e2e54597cbd74cc7c8a63b0e5e0e6d4e1c057dcea041e78be4f1f0aa09eb494e1d199a69b12083fd239c1ac7a4965d0608b544d8925eeea8ba9942974bc887ffeafb28db55ed962158701e048c659a46714d4e3bde9b82318ba3c276ff00b6c0a83b35cb901b3726a3adb4cc0d938f4fc394b66688953728fe8fabca1b6b6ec563f8d31eee20ecd07fb1bed51c10a4028c106f6fbea35ad28ea25d59def71e512fccb96a4e8fe9e6fb519c1379e605722034735b35ca7dd5169433bc2d4d5717f9f8e3c9bcfdd43d06c9e783bba1b47eaa8db57d04ef931581a9b4d4c34bdc2ec5d56707d11edceff368eccddfcaa8074c3a223ced79471bc69758d7029d0098aa0fbfd0ea6c9b0c99f44bc71dd017e80a23d99c18b8774ce919a959ee91e6fd7699d8b5f711dc658d2219a29ec1f98537e73c2686c0f63548e350f07eb82a9299dd1186f57cf20cd42c3a26d84e725c52b9100b51d2a95e4a428a9d2d5a4e1b1630bc3414ba9511cc04db82fbbb3f2a02a776cd6d3b65c4852f88bc9c8c724458961c289f5a0a61e4624e8beca92673f79dc4434f2768b17758dba0e76eb55ba6ff0ad4c97d47c055a9161ea38c739b7dac1b9a7c2f04125c3e4aac82896122cf052c7b8d99d75583ac9e52c50c6e9e146d7283f5b44ecbe7a387b95543000f61aefc52f9bbd96f98fb9ba26de0f7e87c0d3b5a6cd668c2e102e05b7e5f57f6f5f3d12f4a812b3efa0c6c747e1b8b4250d6fbc518dad1413d17d820b923353820be6c1c756540e2bff6869e484878ce32d2b894a29ef52f44fb29a8cc439956d68c51c0584914e3b86d5d5ba357007009f6db73d9f3b84011cadf4507c4a265319840ebd29e9a72048550e8ab8aa85a2083ff6c75fc368a03bcbee56e34f94c43ad1127fde1288950aff73d52e9927af99d6ebe777e02b4fb26f99a5464a9016f20791a30d548c131855d680681b526a8e53ad9605baed3742810051f5a5d2bd6b367aba5a345a7c0110a584001c934b7857ba510b4b2c5d52f66b9be23c1c286e78c50b4d294ce8da688a3d9f9559c2fd11ebaf6448e5811f6557a997c4227a5257789ea56cd54148d265a4183d1782b795f06e9b86641d32dc889c1d523754b44a0b8b2ed07d80b149b83d27da1efc5e63b710c187ad29c74cb59da24774ea399ea89a38f7ef88831b90973744ad59108c93f399f54db7b01346fe8b3ffba8fb9d7b5d064f052345d91fd251fbcac991b24599459eb839badef3f8a92882ef3f939f67e4261c3ac1d6f4da757ba21238fd397e8e426716cb1a065f57d8c2c481b14643b797ad6e1355dd1d8d6b0fbca8f2bcafcea339313cc228ac254accb6765195f94056d7ad84fab0bb04e846fd34d70d4d71b67dad758cd96e4b24611cad3ae0b0f1b16973823bb5352e497c9605b3acb782d940c17694760028f54fc8b2aa5e8284e14e4012804f9071d17bfc3b0bfe3a8ee7919926f29a8d3a2a6a08d57e4dca0c11de9fe61708d96206337e2bdc8966d01b8ff8b92ddf0d6d28d038ec249252cd58813de3817293ac20ce35bdef447501c42600b689d3758cb6b40d9622803c064de4ee7e785b27b740640817b7ef090b1a62d7a0c8e4b106a47dd6b0537a9ced53cab7a223c2787f350baf1ac8dec857361b6bed5c62b8140ae90bd75402be10dc7deeeca0d53cd05fd8623239eee57e3b99ca1b07a55a67b4bf2840b6afe69876c381864b4de156aaecd4f66c19f5bda8f712797350940b99ac81ce4656ec60fa4c87ade961080773d4faf3992157911d011ce31be0fb80be606e9d9757ba0b0eed59174c15de1b7b60dd1c6041633d711890c112d14435448ee633b6c6596ee96392a9cb779aaacd76e2608fcf5915396e319651b2eb157f2fa2f6f1e7d78f1c036960436a7fa3c6eacd4ad7d3f79bb3d9a0a23a2b0a58cf9b218c358deae1d6056ed21b2debb3a4396ba287911cc36b6a16ca0614787aee94195323431eda889b142059050c8b24a1dc3968643b239b7d910457c165c0f420454dc26316c046bf9e877df39afdc264f9976b479cb35d942e02329f607bcb07d4ffae96f534845edea33ad9f655327e50db864ff48551af7e607a43f609d8992b6896d3fe1bd9e3b9e86d4ec50faeabe47e07c4e52ec81118a2b449b9e0ca3856ac39dcd8ef3f8b1472c0396e678f7b08605a46255d453f291b3ff83a29e831d62fb15a81b9141f9d8a72ced62d7c41c2be41043810eb97d91f8339c3bf0be9241c4040c10b7facf16c4b87e03592153556a2a869b1cfdd7afdd7449274f28f9d77a85958d9e9f4eb21f1ca9cdbd4cbd72d8a6f1cd1736f2b616da967161dad0eeaf0519d2da20a512ed2df777fad6dc0f6dd89133969815441006672345b5c8d00ccbb3193a5d8601376eb6e868f29dd34923864dbe74775275af38050b1d0fa1c18a84de9984c12a75d5a56a1e0d41f8beeb7a20f975bfea788ebdf9bd3082fa455233d48500851a222f3c32c1487b3f4475e2a343644d0154b2663d0f9b9833981c5d5c2acb6fdb977f01919b92c6a8f9a1f5b148809a61c171aa12226b7bbbf1041df9b21c6c67468214fe415bd284348a61729b0279910db06d96fdafd0f09152d65325d7344c2818b41369306ddbd3e98d1de0c9c8f0d4d47079f9600b2ccad5db4789e28f5c612b6600dd5d0acfeb80b97caf17ab5fef23600e06abaff8e"}) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000001a40)=@fragment={0x33, 0x0, 0x5, 0x1, 0x0, 0xd, 0x67}, 0x8) r5 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000001ac0)) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000001c00)={0x1, &(0x7f0000001bc0)=[{0x80, 0xaa, &(0x7f0000001b00)="ac7c58ac9477033db04197089046d8c5e10da86388b3b74c59d576585e1f71f3d5cb4e08e5242534f251ef801e793257dab83058d86be5208d2c18268f54df7267ace1f60e70d3a07792420e05c6304aa02641b85f2a277e4125be1646c2f00c6910075fa016881bbf7c17cefa5b2e437515f80b3b6c0b6feab217991788106a210e4f47bcae971b9e610d12d2bbf9b8c84435bf4cdf483facff5d5839c5abea8f0527cdc9647c212d78", 0x1, 0x1}]}) [ 69.286202] audit: type=1400 audit(1663849019.182:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:16:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = accept4(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0xc0800) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x9, @none, 0x8, 0x1}, 0xe) accept4(r0, &(0x7f0000000140)=@in={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x80, 0x800) recvmmsg$unix(r1, &(0x7f00000018c0)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/119, 0x77}], 0x7, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/243, 0xf3}], 0x2, &(0x7f0000001780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}], 0x2, 0x12002, &(0x7f0000001940)) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000001980)=0x71, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r6, {0x40, 0x671}}, './file0\x00'}) bind$bt_l2cap(r11, &(0x7f0000001b80)={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff00, 0x1}, 0xe) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r12 = accept4$bt_l2cap(r10, &(0x7f0000001c00)={0x1f, 0x0, @fixed}, &(0x7f0000001c40)=0xe, 0x100000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r12, {0x6}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000001cc0), &(0x7f0000001d00)=0x40) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000001d40)={0x80000000, 0x7, 0x1000, 0x80000001, 0xfffffffc, 0x8}) setsockopt$bt_l2cap_L2CAP_LM(r12, 0x6, 0x3, &(0x7f0000001d80), 0x4) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{&(0x7f0000001dc0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002000)=[{&(0x7f0000001e00)="20ed9c5666633daec15003d17643aa856be2ac2cd7a4de85705ef297c1b98c9ff8db910c041327b1ceb9cf145db193f7a6f8b2acb3dac1780b04bd84c89c760ae1e8ceb3a4e8f2d50d4d537055227d1296173d7e6c8055551e42ddd9efe6e4793364ee2fa87441d3ed170c93d60b9c693a24317a4b5df028e4183f4789da4d2c9705c20eeff23d571ad6f62618af7af40d1e66e96d7ab381640a97f926e5b548f8d7d91aecaf3e562cd5e3f5e1e8995ec0443c1bd1f83b59a3fb06d73546732219df24220a0896b5ba2d", 0xca}, {&(0x7f0000001f00)="0d91277d2d0f7e769b5acb065434fc9f4f4a56885be505ceb680f754d44b2e1f1e3099387011ff6155d9a41ac3e011931f", 0x31}, {&(0x7f0000001f40)="8fde1c3d247e136d5f0953dce28839a7113bb0e865829d652a013e682dfc9de3265d016177e5a7a464409d3158", 0x2d}, {&(0x7f0000001f80)="251bc7239c8137de64ac9dd28ae63d097be6d0c974b32c224d608e8a6110ee8be4a82d5f67eb96d5c50fd7fbc81d84c3", 0x30}, {&(0x7f0000001fc0)="580fd8c52c923886c6e373bb03d15b929bc244f73827a8563bb290bf51", 0x1d}], 0x5, &(0x7f0000002080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}}], 0x1, 0x40000) getsockopt$IP_VS_SO_GET_SERVICE(r10, 0x0, 0x483, &(0x7f0000002100), &(0x7f0000002180)=0x68) recvfrom(0xffffffffffffffff, &(0x7f00000021c0)=""/51, 0x33, 0x1, &(0x7f0000002200)=@ll={0x11, 0xf7, 0x0, 0x1, 0x7, 0x6, @link_local}, 0x80) 12:16:59 executing program 3: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x0, 0x9, 0x0, 0x1ff, 0xffffffffffffd350, 0x9, 0x37ee, 0x56fa}, 0x0) r0 = gettid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10, 0x11b1223b, 0x5, 0x4, 0x401, 0x1, 0x9, 0x1}, 0x0) rt_tgsigqueueinfo(r0, r0, 0x3a, &(0x7f0000000080)={0x18, 0x1, 0x20}) r1 = gettid() sched_setattr(r1, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xffffffff, 0x4, 0x5, 0x6, 0x846, 0x5, 0x6}, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x29, &(0x7f0000000140)={0x2a, 0x7, 0x2}, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000001c0)='net/icmp\x00') sched_setattr(r1, &(0x7f0000000200)={0x38, 0x0, 0x4, 0x9, 0x40, 0xfff, 0x3, 0x0, 0x80000000, 0x3}, 0x0) r3 = openat(r2, &(0x7f0000000240)='./file0\x00', 0x200100, 0x111) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000280)={0x2, 0x96, "f479c0d17cf97a18c86381b255abffefaedfc01fec818ad8268472535a4181b4d1bb29fdfbaf05a0d855e501ccafccaeeeb8e7626adfc5ed582e0ae6be79a9a99e8f8be3e9e65e2c4037ff5355ccdaaf5aa5bb27baed2b89515264284781b11756c649c35e54e2bcb8edfc407779aa7bbf767746181a0e51301d76161940e66a1e4cc6895f14cd409e8fbc968f91f86b78160b467d36"}) sched_setattr(r0, &(0x7f0000000340)={0x38, 0x1, 0x1000000f, 0xcd8, 0x1, 0xf2, 0x5, 0x1000, 0x9, 0x7}, 0x0) sched_setattr(r1, &(0x7f0000000380)={0x38, 0x1, 0x10, 0xfc, 0xffff, 0xffff, 0x1, 0x2, 0x4, 0x1}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000400)={r5, 0x0, 0x3}) sched_setattr(r0, &(0x7f0000000440)={0x38, 0x5, 0x10000000, 0x7, 0x1, 0xc3, 0x0, 0x0, 0x4e, 0x5}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000480)={{r3}, 0x0, 0xc, @unused=[0x1ff, 0x42e, 0xffffffffffffffff, 0xfcd], @devid}) sched_setattr(r1, &(0x7f0000001480)={0x38, 0x3, 0x1, 0xfffffc00, 0x4e, 0x2, 0x4, 0x6, 0x7fffffff, 0x3}, 0x0) write(r2, &(0x7f00000014c0)="ddee0af6297da1f84e7322cdd13f5cb758972970abdacc1cac8e63f3055e8e6f7e1b90fb2de8b8bdded902596038a776fa3343c005ca6135a9e75c4d3f21cb82dc270f8c8008c0c4322824827dc780c752c1f763fc2ba273d748d913d6bb28019e2083c9f3f74a", 0x67) 12:16:59 executing program 5: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40b0) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4bc609a8ad72f19f}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x40800) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4c040) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x188, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a460a0f596e909c6212c9603ba9b1619f8e2ed40894fc01e7995c02fb89970e7"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "adaadb006825d0a7e5b5f0d5330185a1"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "16c3f68edfef7a4738a3b2efc017a73f240df71eca105ab01460400e84a32825"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b5ea0789919da947fd4136ed8c696e29"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f1d4b0d1ab7b105941cc2ec2c53f0b1e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "36492fc82c44ad8fa053643cdc37987af16a1dc3954266e540d6f24dc83b588e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3f4bc6c9841b0c65f52ab504eaa36ee8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xbe}]}, @NL802154_ATTR_SEC_KEY={0xa4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a59843b91fb3acdfb3111e6a277efad7"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4e4acb845c60fde21f470dc8f33a471d"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "62d308c010b3e7abad7013070ade690c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a4039af7cbc031c0c977ed6fcab4bf15"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f4ceb9d48c4e9db67294bf603a5d467fa317f4df6b6c2cd8a37163f2109834ad"}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000024}, 0x44000) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000c0}, 0x4080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000f00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x36c, 0x0, 0x4ec0cd7708cf36b7, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2468}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6027d90}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93000000}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf728c17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x423fdd44}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27492490}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcffb}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeba3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69fb6618}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb47}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5874}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xafb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x478e51a9}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x170a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e2bc4c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f0ef6d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf38f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca4b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2274}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ba4dcc3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x637bc961}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd27f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73977538}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x916a2a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9570}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54ca6085}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ef45dbe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c4}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e5abdec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x262c02b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62036877}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a35a237}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57c27d70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75836afd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4111ac48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64d6db56}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c11ace4}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55945a90}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f35bb7b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72171e33}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f50d62c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ca7670f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x691e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xec, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xade5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6984}]}, {0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a759e85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9079}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf91a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54e8294}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x767d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e2f61de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8787}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x628f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39dac657}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x986a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3df38ab2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a40ccc6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5231}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20aa9b67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25006c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2496}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e730f75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba9d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x359792fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15ec92e2}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001000), 0x4000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x48, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0xc}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10e}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40950) 12:16:59 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="9581aff9ef923464c52fae03ea3c1d1f8702f5c6f5291879149cd848947ba265a44dc23ee3b283c842154fbe7c1546b089e0ec97501e1f196c8ce94be5f461bb68e8b0e4a26e29f6702d41350034669bb99b6d9bfd070e97b47a4c4637b65b4349860176335977caa42fef75fb9890dbfadfded1fe75a573f7f6ef77a44294af676309e5fd57e98792e3e7092ec87a6bcab1fdf775fe6769ec8f5955504612bbb31dc6fdcfaaca4aa885d764e3db335ba503360720ba0e3fdc85669d2172356dea", 0xc1}, {&(0x7f0000000140)="a0f4d6100c5323172d6efca028838d82bcba92d63b16f36d768509e123b7d0110db27c405248dd7f705f157be2a984c057dec8d0b6ef5ad90db16139c9210cc0b2f0b006c84b3ef65f5a0320121781c21c7a9d841ad7fe02e329e772cebebeefa263a9464273914e2d06117f8c3ca71b0bb689afaf5f1e6eb68bfa88348d0a24d7aea07ac5a5bfcf30d864eece9adb0a53bfb3eebc7300be627af56b79f1b021f6b3a9fc242e27b9c1497e28cbe4882f7403e898c190e42077f347b455eff85875726766e39fefd2515ae9ad65c644903f09ff47c495127357282ad8a2a991", 0xdf}, {&(0x7f0000000240)="c2ac2d96015b316030655a45547b6a11b90330ccb66deeaecb20a96196708dbd1ceac8852950293c0e61d8fc4a0da60c9d1d69a09c40d38aa9f4e2d18a7fd0b49d1afb958b4528a7affc13a5bb786ba414279bced323afbd3646aadd791b9c46a9094b8f", 0x64}, {&(0x7f00000002c0)="6a13e261c9717c512185d580b08313e7c99d28619f7e6aed4c57d468dfb240d9cce3586999931d7529bf56b10b1712d4b659d65e490e596b5a929067b0cebe82b418c27c7f6efc9713dab4cfa4", 0x4d}], 0x4, 0x4, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) bind$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0', [{0x20, ',,$!'}, {0x20, '\'@@'}, {}, {0x20, '/dev/bsg\x00'}, {0x20, '/dev/bsg\x00'}, {0x20, '/dev/bsg\x00'}, {0x20, 'E)'}, {0x20, '/dev/bsg\x00'}, {0x20, '/dev/bsg\x00'}], 0xa, "a37aec5bbb88d4e1dc5d322041b1057e8ac600883395e5333113e1b7fccd92beeb75c5e2e248658f932f0151a9cb084ef674a6dfc9007d381e8aaa55eadb8c3b636319d9a38b2335efbcac7233b7fee319db4ae1e59ad5ab85868fb22de9f783d8fe883ea8127027329228a4c8b082e469c5abee213a24802292eb5c4d29c5e3ae07103aaba1cff269129e8f8a"}, 0xd7) r3 = open(&(0x7f0000000540)='./file0\x00', 0x224000, 0x1e) bind$unix(r3, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e) fcntl$dupfd(r3, 0x406, r0) r4 = signalfd(r2, &(0x7f0000000600)={[0x3ff]}, 0x8) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept4$bt_l2cap(r1, &(0x7f0000000680)={0x1f, 0x0, @fixed}, &(0x7f00000006c0)=0xe, 0x100800) close(r6) bind$unix(r6, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) r7 = syz_open_dev$rtc(&(0x7f0000000780), 0xe3, 0x0) dup2(0xffffffffffffffff, r7) r8 = creat(&(0x7f00000007c0)='./file0\x00', 0x18f) getsockopt$inet6_tcp_buf(r8, 0x6, 0xb, &(0x7f0000000800)=""/76, &(0x7f0000000880)=0x4c) r9 = signalfd4(r5, &(0x7f00000008c0)={[0x3]}, 0x8, 0x0) ioctl$TCFLSH(r9, 0x540b, 0x1) 12:16:59 executing program 7: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)="96cb710957df6a7cb8eb6293d82e711f245aff4680e77838e6068a421ff2e3b809bd4d62f9a838d7a47682fa27af999f716f489479d593879ab8bcfedc814e8357a980cdc0caea92b63a4da5b63756b813d99f3f72821bda08630992c84a414b6486f832f1dbb1cdaae22390278bfd278d9970d0cc6fcfc3b1b0ededf8f5c0527da76e22fd01fb58b56c786b3448e4d7a5b11a156df42a8f2cdbc3e9508e697b588dfaf77dfcb2ada4e82a614b09454447763cfbf77a9aad6f17539296cd894a", 0xc0}, 0x68) getsockname$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) r0 = fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) readahead(r0, 0x58, 0x5) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0xffffffff, 0xf7a}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") r1 = syz_io_uring_complete(0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000340), &(0x7f0000000380)={'L-', 0x1}, 0x16, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x15d) r2 = syz_open_dev$mouse(&(0x7f00000003c0), 0x8, 0x12100) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000400)={0x0, [0x2, 0xa2a]}, 0x10) io_uring_setup(0x3148, &(0x7f0000000440)={0x0, 0xe46b, 0x1, 0x1, 0x183, 0x0, r2}) write$binfmt_aout(r0, &(0x7f00000004c0)={{0x10b, 0x3, 0x3, 0x112, 0x11b, 0x1, 0x1d3, 0x5}, "ef1734bd73eb71ae59f26c055a9c2dc9c333dfc6eeace80f3fe88111a930b613a3167ef630e9100a60d5d0e0dc20a2df3ddedf7c2ad15a1795a67bcfa45022ace872cd6fc50e987825a0b823bbc605c29434bb337640ee9816190efdea6bdbf179c9aaf526db9f7910273ad9dc4b06ae58ae8772cb823fb6736c39e14f5440fafa1b36da1953d2bc2a22d2d6d560bc4e3de8326b9ea102318adfae89a24ec1da826e9d80a67dbfe84da5d8621e20484625376a51fdc4dd93ddea1128b7da8c47d61d301a05f496524952ce19868d39895e5566c5a84c313ff8ba213bb0aa232e236bd41ccd48f25c427ca42a96301c", ['\x00', '\x00']}, 0x30f) ftruncate(0xffffffffffffffff, 0x9) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000800)={0xf02, 0x100, 0x3, 0x0, 0x1, "d823d416a96327ac"}) r4 = accept4(r2, &(0x7f0000000840)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000008c0)=0x80, 0x100000) getsockname$unix(r4, &(0x7f0000000900)=@abs, &(0x7f0000000980)=0x6e) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000a80)={{}, "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"}) [ 70.594926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.597235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.598511] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.602251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.604137] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.606523] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.611779] Bluetooth: hci0: HCI_REQ-0x0c1a [ 70.716545] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.718817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.722188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.723272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.725497] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.727630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.739271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.740471] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.745933] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.747396] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.748659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.753477] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.766654] Bluetooth: hci2: HCI_REQ-0x0c1a [ 70.766915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.769588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.773562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.778635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.785938] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.787303] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.790346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.791517] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 70.794892] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 70.800118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 70.802153] Bluetooth: hci3: HCI_REQ-0x0c1a [ 70.809505] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 70.811550] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.816860] Bluetooth: hci6: HCI_REQ-0x0c1a [ 70.869278] Bluetooth: hci1: HCI_REQ-0x0c1a [ 70.889407] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.891078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.893133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.898813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.901320] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.902574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.910306] Bluetooth: hci4: HCI_REQ-0x0c1a [ 72.679734] Bluetooth: hci0: command 0x0409 tx timeout [ 72.808083] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 72.809266] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 72.871768] Bluetooth: hci2: command 0x0409 tx timeout [ 72.872419] Bluetooth: hci6: command 0x0409 tx timeout [ 72.873117] Bluetooth: hci3: command 0x0409 tx timeout [ 72.935132] Bluetooth: hci1: command 0x0409 tx timeout [ 72.999161] Bluetooth: hci4: command 0x0409 tx timeout [ 74.727113] Bluetooth: hci0: command 0x041b tx timeout [ 74.920165] Bluetooth: hci3: command 0x041b tx timeout [ 74.920735] Bluetooth: hci6: command 0x041b tx timeout [ 74.921290] Bluetooth: hci2: command 0x041b tx timeout [ 74.984074] Bluetooth: hci1: command 0x041b tx timeout [ 75.048068] Bluetooth: hci4: command 0x041b tx timeout [ 76.504256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.505896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.506929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.552300] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.562357] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 76.563650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.594386] Bluetooth: hci5: HCI_REQ-0x0c1a [ 76.617047] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 76.619157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 76.693183] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 76.696633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 76.697514] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 76.698254] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 76.703525] Bluetooth: hci7: HCI_REQ-0x0c1a [ 76.776054] Bluetooth: hci0: command 0x040f tx timeout [ 76.968079] Bluetooth: hci2: command 0x040f tx timeout [ 76.968526] Bluetooth: hci6: command 0x040f tx timeout [ 76.968924] Bluetooth: hci3: command 0x040f tx timeout [ 77.032059] Bluetooth: hci1: command 0x040f tx timeout [ 77.096071] Bluetooth: hci4: command 0x040f tx timeout [ 78.632125] Bluetooth: hci5: command 0x0409 tx timeout [ 78.759300] Bluetooth: hci7: command 0x0409 tx timeout [ 78.824083] Bluetooth: hci0: command 0x0419 tx timeout [ 79.016114] Bluetooth: hci3: command 0x0419 tx timeout [ 79.016582] Bluetooth: hci6: command 0x0419 tx timeout [ 79.017004] Bluetooth: hci2: command 0x0419 tx timeout [ 79.080150] Bluetooth: hci1: command 0x0419 tx timeout [ 79.144133] Bluetooth: hci4: command 0x0419 tx timeout [ 80.680775] Bluetooth: hci5: command 0x041b tx timeout [ 80.808177] Bluetooth: hci7: command 0x041b tx timeout [ 82.728061] Bluetooth: hci5: command 0x040f tx timeout [ 82.856117] Bluetooth: hci7: command 0x040f tx timeout [ 84.775170] Bluetooth: hci5: command 0x0419 tx timeout [ 84.904123] Bluetooth: hci7: command 0x0419 tx timeout 12:17:56 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x80010, r1, 0x10000000) [ 126.208252] loop3: detected capacity change from 0 to 40 [ 126.278721] audit: type=1400 audit(1663849076.175:7): avc: denied { open } for pid=3812 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.280169] audit: type=1400 audit(1663849076.175:8): avc: denied { kernel } for pid=3812 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.288466] ------------[ cut here ]------------ [ 126.288486] [ 126.288489] ====================================================== [ 126.288492] WARNING: possible circular locking dependency detected [ 126.288496] 6.0.0-rc6-next-20220921 #1 Not tainted [ 126.288503] ------------------------------------------------------ [ 126.288506] syz-executor.3/3814 is trying to acquire lock: [ 126.288513] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 126.288554] [ 126.288554] but task is already holding lock: [ 126.288557] ffff88800f427c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.288586] [ 126.288586] which lock already depends on the new lock. [ 126.288586] [ 126.288590] [ 126.288590] the existing dependency chain (in reverse order) is: [ 126.288594] [ 126.288594] -> #3 (&ctx->lock){....}-{2:2}: [ 126.288608] _raw_spin_lock+0x2a/0x40 [ 126.288628] __perf_event_task_sched_out+0x53b/0x18d0 [ 126.288642] __schedule+0xedd/0x2470 [ 126.288655] preempt_schedule_common+0x45/0xc0 [ 126.288670] __cond_resched+0x17/0x30 [ 126.288684] __mutex_lock+0xa3/0x14d0 [ 126.288699] __do_sys_perf_event_open+0x1eec/0x32c0 [ 126.288713] do_syscall_64+0x3b/0x90 [ 126.288731] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.288743] [ 126.288743] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 126.288758] _raw_spin_lock_nested+0x30/0x40 [ 126.288777] raw_spin_rq_lock_nested+0x1e/0x30 [ 126.288792] task_fork_fair+0x63/0x4d0 [ 126.288810] sched_cgroup_fork+0x3d0/0x540 [ 126.288826] copy_process+0x4183/0x6e20 [ 126.288837] kernel_clone+0xe7/0x890 [ 126.288847] user_mode_thread+0xad/0xf0 [ 126.288858] rest_init+0x24/0x250 [ 126.288869] arch_call_rest_init+0xf/0x14 [ 126.288887] start_kernel+0x4c1/0x4e6 [ 126.288901] secondary_startup_64_no_verify+0xe0/0xeb [ 126.288916] [ 126.288916] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 126.288931] _raw_spin_lock_irqsave+0x39/0x60 [ 126.288950] try_to_wake_up+0xab/0x1930 [ 126.288965] up+0x75/0xb0 [ 126.288979] __up_console_sem+0x6e/0x80 [ 126.288997] console_unlock+0x46a/0x590 [ 126.289017] vt_ioctl+0x2822/0x2ca0 [ 126.289030] tty_ioctl+0x7c4/0x1700 [ 126.289043] __x64_sys_ioctl+0x19a/0x210 [ 126.289060] do_syscall_64+0x3b/0x90 [ 126.289077] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.289089] [ 126.289089] -> #0 ((console_sem).lock){....}-{2:2}: [ 126.289104] __lock_acquire+0x2a02/0x5e70 [ 126.289122] lock_acquire+0x1a2/0x530 [ 126.289140] _raw_spin_lock_irqsave+0x39/0x60 [ 126.289159] down_trylock+0xe/0x70 [ 126.289175] __down_trylock_console_sem+0x3b/0xd0 [ 126.289192] vprintk_emit+0x16b/0x560 [ 126.289210] vprintk+0x84/0xa0 [ 126.289228] _printk+0xba/0xf1 [ 126.289239] report_bug.cold+0x72/0xab [ 126.289256] handle_bug+0x3c/0x70 [ 126.289273] exc_invalid_op+0x14/0x50 [ 126.289290] asm_exc_invalid_op+0x16/0x20 [ 126.289302] group_sched_out.part.0+0x2c7/0x460 [ 126.289313] ctx_sched_out+0x8f1/0xc10 [ 126.289323] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.289336] __schedule+0xedd/0x2470 [ 126.289350] preempt_schedule_common+0x45/0xc0 [ 126.289365] __cond_resched+0x17/0x30 [ 126.289379] __mutex_lock+0xa3/0x14d0 [ 126.289394] __do_sys_perf_event_open+0x1eec/0x32c0 [ 126.289407] do_syscall_64+0x3b/0x90 [ 126.289425] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.289436] [ 126.289436] other info that might help us debug this: [ 126.289436] [ 126.289439] Chain exists of: [ 126.289439] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 126.289439] [ 126.289455] Possible unsafe locking scenario: [ 126.289455] [ 126.289458] CPU0 CPU1 [ 126.289460] ---- ---- [ 126.289463] lock(&ctx->lock); [ 126.289469] lock(&rq->__lock); [ 126.289476] lock(&ctx->lock); [ 126.289483] lock((console_sem).lock); [ 126.289489] [ 126.289489] *** DEADLOCK *** [ 126.289489] [ 126.289491] 2 locks held by syz-executor.3/3814: [ 126.289498] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 126.289528] #1: ffff88800f427c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.289558] [ 126.289558] stack backtrace: [ 126.289561] CPU: 1 PID: 3814 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220921 #1 [ 126.289574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.289583] Call Trace: [ 126.289586] [ 126.289590] dump_stack_lvl+0x8b/0xb3 [ 126.289609] check_noncircular+0x263/0x2e0 [ 126.289628] ? format_decode+0x26c/0xb50 [ 126.289645] ? print_circular_bug+0x450/0x450 [ 126.289663] ? enable_ptr_key_workfn+0x20/0x20 [ 126.289679] ? __lockdep_reset_lock+0x180/0x180 [ 126.289698] ? format_decode+0x26c/0xb50 [ 126.289716] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 126.289735] __lock_acquire+0x2a02/0x5e70 [ 126.289758] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.289782] lock_acquire+0x1a2/0x530 [ 126.289801] ? down_trylock+0xe/0x70 [ 126.289818] ? lock_release+0x750/0x750 [ 126.289837] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.289860] ? vprintk+0x84/0xa0 [ 126.289879] _raw_spin_lock_irqsave+0x39/0x60 [ 126.289900] ? down_trylock+0xe/0x70 [ 126.289916] down_trylock+0xe/0x70 [ 126.289932] ? vprintk+0x84/0xa0 [ 126.289951] __down_trylock_console_sem+0x3b/0xd0 [ 126.289970] vprintk_emit+0x16b/0x560 [ 126.289988] ? lock_downgrade+0x6d0/0x6d0 [ 126.290008] vprintk+0x84/0xa0 [ 126.290028] _printk+0xba/0xf1 [ 126.290039] ? record_print_text.cold+0x16/0x16 [ 126.290053] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 126.290068] ? lock_downgrade+0x6d0/0x6d0 [ 126.290087] ? report_bug.cold+0x66/0xab [ 126.290105] ? group_sched_out.part.0+0x2c7/0x460 [ 126.290117] report_bug.cold+0x72/0xab [ 126.290137] handle_bug+0x3c/0x70 [ 126.290155] exc_invalid_op+0x14/0x50 [ 126.290174] asm_exc_invalid_op+0x16/0x20 [ 126.290186] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.290201] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.290213] RSP: 0018:ffff88803ee07978 EFLAGS: 00010006 [ 126.290222] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.290230] RDX: ffff88801d6b3580 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 126.290239] RBP: ffff888015de8000 R08: 0000000000000005 R09: 0000000000000001 [ 126.290247] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f427c00 [ 126.290255] R13: ffff88806cf3d140 R14: ffffffff8547c8e0 R15: 0000000000000002 [ 126.290266] ? group_sched_out.part.0+0x2c7/0x460 [ 126.290280] ? group_sched_out.part.0+0x2c7/0x460 [ 126.290294] ctx_sched_out+0x8f1/0xc10 [ 126.290307] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.290324] ? lock_is_held_type+0xd7/0x130 [ 126.290337] ? __perf_cgroup_move+0x160/0x160 [ 126.290350] ? set_next_entity+0x304/0x550 [ 126.290369] ? update_curr+0x267/0x740 [ 126.290390] ? lock_is_held_type+0xd7/0x130 [ 126.290403] __schedule+0xedd/0x2470 [ 126.290420] ? io_schedule_timeout+0x150/0x150 [ 126.290435] ? find_held_lock+0x2c/0x110 [ 126.290453] ? lock_is_held_type+0xd7/0x130 [ 126.290465] ? __cond_resched+0x17/0x30 [ 126.290481] preempt_schedule_common+0x45/0xc0 [ 126.290497] __cond_resched+0x17/0x30 [ 126.290512] __mutex_lock+0xa3/0x14d0 [ 126.290529] ? lock_is_held_type+0xd7/0x130 [ 126.290541] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 126.290557] ? mutex_lock_io_nested+0x1310/0x1310 [ 126.290574] ? lock_release+0x3b2/0x750 [ 126.290593] ? __up_read+0x192/0x730 [ 126.290609] ? up_write+0x520/0x520 [ 126.290627] __do_sys_perf_event_open+0x1eec/0x32c0 [ 126.290645] ? perf_compat_ioctl+0x130/0x130 [ 126.290659] ? xfd_validate_state+0x59/0x180 [ 126.290684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.290697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.290712] do_syscall_64+0x3b/0x90 [ 126.290731] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.290743] RIP: 0033:0x7f88df86eb19 [ 126.290752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.290763] RSP: 002b:00007f88dcde4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 126.290775] RAX: ffffffffffffffda RBX: 00007f88df981f60 RCX: 00007f88df86eb19 [ 126.290783] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 126.290791] RBP: 00007f88df8c8f6d R08: 000000000000000b R09: 0000000000000000 [ 126.290799] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 126.290807] R13: 00007ffd6ab1e13f R14: 00007f88dcde4300 R15: 0000000000022000 [ 126.290820] [ 126.350046] WARNING: CPU: 1 PID: 3814 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 126.350739] Modules linked in: [ 126.350987] CPU: 1 PID: 3814 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220921 #1 [ 126.351589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.352438] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.352840] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.354156] RSP: 0018:ffff88803ee07978 EFLAGS: 00010006 [ 126.354554] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.355083] RDX: ffff88801d6b3580 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 126.355602] RBP: ffff888015de8000 R08: 0000000000000005 R09: 0000000000000001 [ 126.356135] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f427c00 [ 126.356664] R13: ffff88806cf3d140 R14: ffffffff8547c8e0 R15: 0000000000000002 [ 126.357199] FS: 00007f88dcde4700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 126.357794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.358226] CR2: 00007f640f9dcae0 CR3: 000000003d344000 CR4: 0000000000350ee0 [ 126.358758] Call Trace: [ 126.358951] [ 126.359127] ctx_sched_out+0x8f1/0xc10 [ 126.359434] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.359822] ? lock_is_held_type+0xd7/0x130 [ 126.360152] ? __perf_cgroup_move+0x160/0x160 [ 126.360493] ? set_next_entity+0x304/0x550 [ 126.360825] ? update_curr+0x267/0x740 [ 126.361132] ? lock_is_held_type+0xd7/0x130 [ 126.361456] __schedule+0xedd/0x2470 [ 126.361747] ? io_schedule_timeout+0x150/0x150 [ 126.362095] ? find_held_lock+0x2c/0x110 [ 126.362413] ? lock_is_held_type+0xd7/0x130 [ 126.362734] ? __cond_resched+0x17/0x30 [ 126.363037] preempt_schedule_common+0x45/0xc0 [ 126.363388] __cond_resched+0x17/0x30 [ 126.363684] __mutex_lock+0xa3/0x14d0 [ 126.363980] ? lock_is_held_type+0xd7/0x130 [ 126.364311] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 126.364701] ? mutex_lock_io_nested+0x1310/0x1310 [ 126.365074] ? lock_release+0x3b2/0x750 [ 126.365390] ? __up_read+0x192/0x730 [ 126.365679] ? up_write+0x520/0x520 [ 126.365966] __do_sys_perf_event_open+0x1eec/0x32c0 [ 126.366353] ? perf_compat_ioctl+0x130/0x130 [ 126.366690] ? xfd_validate_state+0x59/0x180 [ 126.367037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.367426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.367816] do_syscall_64+0x3b/0x90 [ 126.368108] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.368494] RIP: 0033:0x7f88df86eb19 [ 126.368772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.370105] RSP: 002b:00007f88dcde4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 126.370665] RAX: ffffffffffffffda RBX: 00007f88df981f60 RCX: 00007f88df86eb19 [ 126.371196] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 126.371730] RBP: 00007f88df8c8f6d R08: 000000000000000b R09: 0000000000000000 [ 126.372263] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 126.372789] R13: 00007ffd6ab1e13f R14: 00007f88dcde4300 R15: 0000000000022000 [ 126.373320] [ 126.373501] irq event stamp: 3572 [ 126.373759] hardirqs last enabled at (3571): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 126.374482] hardirqs last disabled at (3572): [] __schedule+0x1225/0x2470 [ 126.375105] softirqs last enabled at (3570): [] __irq_exit_rcu+0x11b/0x180 [ 126.375743] softirqs last disabled at (3549): [] __irq_exit_rcu+0x11b/0x180 [ 126.376388] ---[ end trace 0000000000000000 ]--- [ 126.394297] syz-executor.3: attempt to access beyond end of device [ 126.394297] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.395319] Buffer I/O error on dev loop3, logical block 10, lost async page write 12:17:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsync(r4) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x7, 0x81, 0x8, 0x0, 0x1ff, 0x10000, 0x1c, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x4080, 0x73dd, 0x1ff, 0x8, 0x1, 0x800, 0xffff, 0x0, 0x5}, 0xffffffffffffffff, 0x6, r4, 0x2) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'bridge_slave_1\x00'}) signalfd4(r2, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) [ 126.459520] audit: type=1400 audit(1663849076.356:9): avc: denied { tracepoint } for pid=3832 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:17:56 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x7, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_setup(0x6d1c, &(0x7f0000001400)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) 12:17:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000200)=0x6, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) pwritev(r0, &(0x7f0000000000), 0x0, 0x7fffff8, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x119) 12:17:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsync(r4) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x7, 0x81, 0x8, 0x0, 0x1ff, 0x10000, 0x1c, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x4080, 0x73dd, 0x1ff, 0x8, 0x1, 0x800, 0xffff, 0x0, 0x5}, 0xffffffffffffffff, 0x6, r4, 0x2) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'bridge_slave_1\x00'}) signalfd4(r2, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) 12:17:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000200)=0x6, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) pwritev(r0, &(0x7f0000000000), 0x0, 0x7fffff8, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x119) VM DIAGNOSIS: 12:17:56 Registers: info registers vcpu 0 RAX=1ffffffff0b77428 RBX=ffffffff85bba144 RCX=ffffffff8178694d RDX=0000000000000000 RSI=ffffffff85edcda6 RDI=ffffffff85bba130 RBP=ffffffff85bba140 RSP=ffff88801d8ef580 R8 =ffffffff85edcda6 R9 =ffffffff85e7cda4 R10=ffffed1003b1ded6 R11=000000000003603d R12=ffffffff85bba14c R13=ffffffff85bba130 R14=ffffffff85bba13c R15=dffffc0000000000 RIP=ffffffff8111ab9f RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc45d91f18 CR3=000000000da74000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1c91 RDI=ffffffff87645ba0 RBP=ffffffff87645b60 RSP=ffff88803ee073c8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000000a R13=ffffffff87645b60 R14=0000000000000010 R15=ffffffff822b1c80 RIP=ffffffff822b1ce9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f88dcde4700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f640f9dcae0 CR3=000000003d344000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 802e60f70b7d10a5 9b4e70dd53e44346 YMM02=0000000000000000 0000000000000000 70f743d79405406d 0000000000110f48 YMM03=0000000000000000 0000000000000000 aabf2c55a4f4e763 000000000012a210 YMM04=0000000000000000 0000000000000000 bcd6a2285ca51349 00000000000ae988 YMM05=0000000000000000 0000000000000000 c8a54713b07d5f7b 00000000001372c8 YMM06=0000000000000000 0000000000000000 fb16062efa30068e 0000000000136fa8 YMM07=0000000000000000 0000000000000000 86d066493c46f526 0000000000136da0 YMM08=0000000000000000 0000000000000000 d6ad57d02453f0d2 000000000012a4b8 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0020000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000