Warning: Permanently added '[localhost]:34309' (ECDSA) to the list of known hosts. 2022/09/25 22:27:28 fuzzer started 2022/09/25 22:27:28 dialing manager at localhost:38881 syzkaller login: [ 41.171950] cgroup: Unknown subsys name 'net' [ 41.262702] cgroup: Unknown subsys name 'rlimit' 2022/09/25 22:27:41 syscalls: 2215 2022/09/25 22:27:41 code coverage: enabled 2022/09/25 22:27:41 comparison tracing: enabled 2022/09/25 22:27:41 extra coverage: enabled 2022/09/25 22:27:41 setuid sandbox: enabled 2022/09/25 22:27:41 namespace sandbox: enabled 2022/09/25 22:27:41 Android sandbox: enabled 2022/09/25 22:27:41 fault injection: enabled 2022/09/25 22:27:41 leak checking: enabled 2022/09/25 22:27:41 net packet injection: enabled 2022/09/25 22:27:41 net device setup: enabled 2022/09/25 22:27:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/25 22:27:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/25 22:27:41 USB emulation: enabled 2022/09/25 22:27:41 hci packet injection: enabled 2022/09/25 22:27:41 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/25 22:27:41 802.15.4 emulation: enabled 2022/09/25 22:27:42 fetching corpus: 50, signal 20985/22812 (executing program) 2022/09/25 22:27:42 fetching corpus: 100, signal 39320/42683 (executing program) 2022/09/25 22:27:42 fetching corpus: 150, signal 46349/51258 (executing program) 2022/09/25 22:27:42 fetching corpus: 200, signal 54581/60895 (executing program) 2022/09/25 22:27:42 fetching corpus: 250, signal 60712/68384 (executing program) 2022/09/25 22:27:42 fetching corpus: 300, signal 65852/74836 (executing program) 2022/09/25 22:27:42 fetching corpus: 350, signal 70371/80615 (executing program) 2022/09/25 22:27:42 fetching corpus: 400, signal 74039/85492 (executing program) 2022/09/25 22:27:43 fetching corpus: 450, signal 78369/90994 (executing program) 2022/09/25 22:27:43 fetching corpus: 500, signal 80140/93993 (executing program) 2022/09/25 22:27:43 fetching corpus: 550, signal 84048/98968 (executing program) 2022/09/25 22:27:43 fetching corpus: 600, signal 88121/104020 (executing program) 2022/09/25 22:27:43 fetching corpus: 650, signal 90261/107236 (executing program) 2022/09/25 22:27:43 fetching corpus: 700, signal 91914/110027 (executing program) 2022/09/25 22:27:43 fetching corpus: 750, signal 94945/114034 (executing program) 2022/09/25 22:27:44 fetching corpus: 800, signal 97888/117896 (executing program) 2022/09/25 22:27:44 fetching corpus: 850, signal 99546/120610 (executing program) 2022/09/25 22:27:44 fetching corpus: 900, signal 101838/123814 (executing program) 2022/09/25 22:27:44 fetching corpus: 950, signal 102851/125954 (executing program) 2022/09/25 22:27:44 fetching corpus: 1000, signal 105137/129143 (executing program) 2022/09/25 22:27:44 fetching corpus: 1050, signal 106482/131491 (executing program) 2022/09/25 22:27:44 fetching corpus: 1100, signal 108740/134545 (executing program) 2022/09/25 22:27:44 fetching corpus: 1150, signal 110678/137358 (executing program) 2022/09/25 22:27:44 fetching corpus: 1200, signal 112315/139838 (executing program) 2022/09/25 22:27:45 fetching corpus: 1250, signal 113865/142262 (executing program) 2022/09/25 22:27:45 fetching corpus: 1300, signal 116023/145151 (executing program) 2022/09/25 22:27:45 fetching corpus: 1350, signal 117482/147420 (executing program) 2022/09/25 22:27:45 fetching corpus: 1400, signal 119181/149876 (executing program) 2022/09/25 22:27:45 fetching corpus: 1450, signal 121610/152918 (executing program) 2022/09/25 22:27:45 fetching corpus: 1500, signal 123027/155022 (executing program) 2022/09/25 22:27:45 fetching corpus: 1550, signal 124302/157046 (executing program) 2022/09/25 22:27:45 fetching corpus: 1600, signal 126166/159518 (executing program) 2022/09/25 22:27:45 fetching corpus: 1650, signal 128057/161952 (executing program) 2022/09/25 22:27:46 fetching corpus: 1700, signal 129545/164073 (executing program) 2022/09/25 22:27:46 fetching corpus: 1750, signal 130507/165800 (executing program) 2022/09/25 22:27:46 fetching corpus: 1800, signal 131713/167684 (executing program) 2022/09/25 22:27:46 fetching corpus: 1850, signal 134471/170611 (executing program) 2022/09/25 22:27:46 fetching corpus: 1900, signal 135703/172437 (executing program) 2022/09/25 22:27:46 fetching corpus: 1950, signal 137173/174496 (executing program) 2022/09/25 22:27:46 fetching corpus: 2000, signal 138807/176542 (executing program) 2022/09/25 22:27:46 fetching corpus: 2050, signal 139841/178179 (executing program) 2022/09/25 22:27:47 fetching corpus: 2100, signal 141524/180244 (executing program) 2022/09/25 22:27:47 fetching corpus: 2150, signal 142672/181924 (executing program) 2022/09/25 22:27:47 fetching corpus: 2200, signal 143396/183291 (executing program) 2022/09/25 22:27:47 fetching corpus: 2250, signal 144973/185214 (executing program) 2022/09/25 22:27:47 fetching corpus: 2300, signal 146238/186917 (executing program) 2022/09/25 22:27:47 fetching corpus: 2350, signal 147287/188463 (executing program) 2022/09/25 22:27:47 fetching corpus: 2400, signal 148698/190248 (executing program) 2022/09/25 22:27:47 fetching corpus: 2450, signal 149886/191883 (executing program) 2022/09/25 22:27:47 fetching corpus: 2500, signal 151181/193553 (executing program) 2022/09/25 22:27:48 fetching corpus: 2550, signal 152326/195114 (executing program) 2022/09/25 22:27:48 fetching corpus: 2600, signal 153390/196614 (executing program) 2022/09/25 22:27:48 fetching corpus: 2650, signal 154191/197915 (executing program) 2022/09/25 22:27:48 fetching corpus: 2700, signal 155374/199378 (executing program) 2022/09/25 22:27:48 fetching corpus: 2750, signal 156792/201012 (executing program) 2022/09/25 22:27:48 fetching corpus: 2800, signal 157293/202104 (executing program) 2022/09/25 22:27:48 fetching corpus: 2850, signal 158448/203571 (executing program) 2022/09/25 22:27:48 fetching corpus: 2900, signal 159261/204824 (executing program) 2022/09/25 22:27:49 fetching corpus: 2950, signal 160978/206552 (executing program) 2022/09/25 22:27:49 fetching corpus: 3000, signal 161783/207773 (executing program) 2022/09/25 22:27:49 fetching corpus: 3050, signal 162897/209153 (executing program) 2022/09/25 22:27:49 fetching corpus: 3100, signal 163552/210225 (executing program) 2022/09/25 22:27:49 fetching corpus: 3150, signal 164533/211439 (executing program) 2022/09/25 22:27:49 fetching corpus: 3200, signal 165805/212816 (executing program) 2022/09/25 22:27:49 fetching corpus: 3250, signal 166617/213971 (executing program) 2022/09/25 22:27:50 fetching corpus: 3300, signal 167545/215169 (executing program) 2022/09/25 22:27:50 fetching corpus: 3350, signal 168262/216229 (executing program) 2022/09/25 22:27:50 fetching corpus: 3400, signal 168805/217171 (executing program) 2022/09/25 22:27:50 fetching corpus: 3450, signal 171124/218967 (executing program) 2022/09/25 22:27:50 fetching corpus: 3500, signal 171695/219935 (executing program) 2022/09/25 22:27:50 fetching corpus: 3550, signal 172492/221030 (executing program) 2022/09/25 22:27:50 fetching corpus: 3600, signal 173688/222268 (executing program) 2022/09/25 22:27:50 fetching corpus: 3650, signal 174285/223225 (executing program) 2022/09/25 22:27:51 fetching corpus: 3700, signal 174890/224158 (executing program) 2022/09/25 22:27:51 fetching corpus: 3750, signal 175864/225203 (executing program) 2022/09/25 22:27:51 fetching corpus: 3800, signal 176193/225965 (executing program) 2022/09/25 22:27:51 fetching corpus: 3850, signal 176708/226839 (executing program) 2022/09/25 22:27:51 fetching corpus: 3900, signal 177266/227714 (executing program) 2022/09/25 22:27:51 fetching corpus: 3950, signal 178133/228695 (executing program) 2022/09/25 22:27:51 fetching corpus: 4000, signal 178889/229657 (executing program) 2022/09/25 22:27:51 fetching corpus: 4050, signal 179261/230380 (executing program) 2022/09/25 22:27:51 fetching corpus: 4100, signal 179551/231099 (executing program) 2022/09/25 22:27:52 fetching corpus: 4150, signal 180074/231938 (executing program) 2022/09/25 22:27:52 fetching corpus: 4200, signal 180364/232710 (executing program) 2022/09/25 22:27:52 fetching corpus: 4250, signal 181693/233793 (executing program) 2022/09/25 22:27:52 fetching corpus: 4300, signal 182202/234615 (executing program) 2022/09/25 22:27:52 fetching corpus: 4350, signal 182571/235330 (executing program) 2022/09/25 22:27:52 fetching corpus: 4400, signal 183319/236227 (executing program) 2022/09/25 22:27:52 fetching corpus: 4450, signal 183890/237012 (executing program) 2022/09/25 22:27:52 fetching corpus: 4500, signal 184657/237870 (executing program) 2022/09/25 22:27:52 fetching corpus: 4550, signal 185128/238709 (executing program) 2022/09/25 22:27:53 fetching corpus: 4600, signal 186134/239624 (executing program) 2022/09/25 22:27:53 fetching corpus: 4650, signal 186689/240333 (executing program) 2022/09/25 22:27:53 fetching corpus: 4700, signal 187522/241161 (executing program) 2022/09/25 22:27:53 fetching corpus: 4750, signal 188349/241916 (executing program) 2022/09/25 22:27:53 fetching corpus: 4800, signal 189453/242769 (executing program) 2022/09/25 22:27:53 fetching corpus: 4850, signal 190180/243479 (executing program) 2022/09/25 22:27:53 fetching corpus: 4900, signal 190562/244111 (executing program) 2022/09/25 22:27:53 fetching corpus: 4950, signal 191271/244828 (executing program) 2022/09/25 22:27:54 fetching corpus: 5000, signal 192022/245560 (executing program) 2022/09/25 22:27:54 fetching corpus: 5050, signal 192685/246271 (executing program) 2022/09/25 22:27:54 fetching corpus: 5100, signal 193928/247036 (executing program) 2022/09/25 22:27:54 fetching corpus: 5150, signal 194519/247642 (executing program) 2022/09/25 22:27:54 fetching corpus: 5200, signal 194874/248218 (executing program) 2022/09/25 22:27:54 fetching corpus: 5250, signal 195819/248911 (executing program) 2022/09/25 22:27:54 fetching corpus: 5300, signal 196374/249541 (executing program) 2022/09/25 22:27:54 fetching corpus: 5350, signal 197193/250202 (executing program) 2022/09/25 22:27:54 fetching corpus: 5400, signal 197853/250820 (executing program) 2022/09/25 22:27:55 fetching corpus: 5450, signal 198498/251429 (executing program) 2022/09/25 22:27:55 fetching corpus: 5500, signal 199518/252094 (executing program) 2022/09/25 22:27:55 fetching corpus: 5550, signal 199975/252663 (executing program) 2022/09/25 22:27:55 fetching corpus: 5600, signal 200440/253216 (executing program) 2022/09/25 22:27:55 fetching corpus: 5650, signal 200980/253748 (executing program) 2022/09/25 22:27:55 fetching corpus: 5700, signal 201216/254312 (executing program) 2022/09/25 22:27:55 fetching corpus: 5750, signal 201785/254837 (executing program) 2022/09/25 22:27:55 fetching corpus: 5800, signal 202430/255521 (executing program) 2022/09/25 22:27:55 fetching corpus: 5850, signal 203052/256003 (executing program) 2022/09/25 22:27:56 fetching corpus: 5900, signal 203489/256512 (executing program) 2022/09/25 22:27:56 fetching corpus: 5950, signal 204456/257030 (executing program) 2022/09/25 22:27:56 fetching corpus: 6000, signal 204765/257485 (executing program) 2022/09/25 22:27:56 fetching corpus: 6050, signal 205457/257984 (executing program) 2022/09/25 22:27:56 fetching corpus: 6100, signal 205884/258468 (executing program) 2022/09/25 22:27:56 fetching corpus: 6150, signal 206528/258924 (executing program) 2022/09/25 22:27:56 fetching corpus: 6200, signal 207192/259389 (executing program) 2022/09/25 22:27:56 fetching corpus: 6250, signal 207663/259819 (executing program) 2022/09/25 22:27:57 fetching corpus: 6300, signal 208041/260302 (executing program) 2022/09/25 22:27:57 fetching corpus: 6350, signal 208251/260756 (executing program) 2022/09/25 22:27:57 fetching corpus: 6400, signal 208705/261169 (executing program) 2022/09/25 22:27:57 fetching corpus: 6450, signal 209303/261610 (executing program) 2022/09/25 22:27:57 fetching corpus: 6500, signal 210001/261659 (executing program) 2022/09/25 22:27:57 fetching corpus: 6550, signal 210376/261668 (executing program) 2022/09/25 22:27:57 fetching corpus: 6600, signal 211268/261669 (executing program) 2022/09/25 22:27:57 fetching corpus: 6650, signal 211861/261669 (executing program) 2022/09/25 22:27:57 fetching corpus: 6700, signal 212414/261671 (executing program) 2022/09/25 22:27:58 fetching corpus: 6750, signal 213030/261677 (executing program) 2022/09/25 22:27:58 fetching corpus: 6800, signal 213488/261677 (executing program) 2022/09/25 22:27:58 fetching corpus: 6850, signal 213938/261702 (executing program) 2022/09/25 22:27:58 fetching corpus: 6900, signal 214373/261703 (executing program) 2022/09/25 22:27:58 fetching corpus: 6950, signal 215137/261712 (executing program) 2022/09/25 22:27:58 fetching corpus: 7000, signal 215736/261720 (executing program) 2022/09/25 22:27:58 fetching corpus: 7033, signal 216486/261751 (executing program) 2022/09/25 22:27:58 fetching corpus: 7033, signal 216486/261751 (executing program) 2022/09/25 22:28:01 starting 8 fuzzer processes 22:28:01 executing program 0: sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048801}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}]}, 0x64}, 0x1, 0x0, 0x0, 0x8854}, 0x20008000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="10c0d04d2f67"}, @NL80211_ATTR_IE={0x52, 0x2a, [@measure_req={0x26, 0x44, {0x20, 0x81, 0x7f, "99ee3a5f2bb9046db8b85c03cef85c5b98d3283f59fac82319ee67ecb34b0f269e8f051d70c7f57a7cc3dbef63a78775c63bdacb0b2f85e60e8126f3ddeab3dcfc"}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa8, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x70, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x45}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "77d718483ff866b13d76af445077063910104955456705a952dfc0b2f8154816"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5595610216ddf6c9df5cd6483f6abe0019b7d955ed0a6c661c78b4b01e43e347"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}]}, @NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}]}, 0xa8}}, 0x20000000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb2c5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004015}, 0x80) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000780)='net/udplite\x00') r5 = syz_genetlink_get_family_id$team(&(0x7f0000000800), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x2f, 0x9, 0x4, 0x4, 0x12, @private0, @empty, 0x80, 0x1, 0x2, 0xffff803c}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000900)={0x380, r5, 0xc, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x67f5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3bc4c5f4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfae}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x380}, 0x1, 0x0, 0x0, 0xe4b86d5c4d1c69cc}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x70, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, ',-q\xb9\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008001}, 0x400c004) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xac, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1f, 0x32}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x2}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "96f4570154044d9adf2ec6a613734be2077766dfe61a0893"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0xac}, 0x1, 0x0, 0x0, 0x400}, 0x1) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000fc0), 0x10800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000001340)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f0000001080)={0x260, r1, 0x304, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_IE={0xa7, 0x2a, [@random={0x3f, 0x63, "a124e3bafaf2595ef77e36723bd8df80ff50870ef7b8ca3f45c6597bc11a3c31e4a05837c9a390a55ab20bb66f7f5a5f8249140ca81926f50a01da0bed74d11823f9e872ce776a888e443dff4054bec6be9f9db31902639c1e2e46fdac02b9a84743e9"}, @perr={0x84, 0x36, {0xc8, 0x4, [@not_ext={{}, @device_a, 0x400, "", 0x1f}, @not_ext={{}, @broadcast, 0xfffffffe, "", 0x4}, @not_ext={{}, @device_b, 0x2, "", 0x1a}, @not_ext={{}, @device_b, 0x5, "", 0x10}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x1, 0x1}}]}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x17, {0x1, 0xa7d7, 0x5, 0x3}}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="c9c6c87a5baa"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac03, 0xfac13]}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac08, 0xfac12, 0xfac02, 0xfac01]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="d99dfa15d91a"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x0, 0x4, 0x0, {0x2, 0x1, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0xfffffff8, 0x51}}]}, 0x260}}, 0x84) 22:28:01 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x80000) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)={0x3e, "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"}) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x80040, 0x0) tee(r1, r0, 0x2, 0xe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x80000001, 0x50}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x200080c0}, 0x40) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TIOCEXCL(r0, 0x540c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000500)="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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000600)) r4 = dup2(r0, r0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000c00)={0x1f4, 0x19, &(0x7f0000000800)}) ioctl$TIOCNOTTY(r0, 0x5422) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c40), 0x200001, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) fcntl$dupfd(r3, 0x406, r1) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c80), 0x20100, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000cc0)={0x5, 0x1ff, 0x0, 0x100, 0x8000}) 22:28:01 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x204242, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x8041) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2000001) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000280)={0x0, 0x5, @status={[0x1e, 0x5, 0x0, 0xfffffffffffeffff, 0x7f]}, [0x2, 0xffffffffffffff7f, 0x56, 0x4, 0xfffffffffffffffa, 0x9, 0xc85, 0x7fffffff, 0x9, 0xd, 0x6, 0x7fff, 0x7d, 0x1000, 0x0, 0x6, 0xc8, 0x40, 0x9, 0xffff, 0x200, 0x4, 0x0, 0x0, 0x7, 0xce, 0x5, 0x8, 0x7, 0xfffffffffffffffc, 0x4, 0x401, 0x6, 0x0, 0x5, 0x200, 0xfffffffffffffff9, 0x0, 0x7fffffff, 0x81a8, 0x7, 0x4, 0x0, 0x7fff, 0x3, 0x0, 0x8, 0x5, 0x6, 0xaccf, 0x2, 0x8, 0x9, 0xfffffffffffffe2b, 0x8000, 0x8, 0x4, 0x8, 0x1, 0x5, 0x5, 0xffffffff, 0x800, 0x800]}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000d00)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000e00)=0xe8) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1480000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xac, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x94, 0x14, 0x300, 0x70bd25, 0x25dfdbfb, {0x3}, [@nested={0xc, 0x3a, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @uid=r3}]}, @generic="10dd47010445a5ebd07e69f7e1524569d452f2ce86667c0bebdb63ed5aef5b9387f17237616ed9d442de8cc394fa8a0d4a1fd580a002", @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0}, @generic="47ddf96774a0f99a2e6be7ccf14dea64835ef48c4dd27c4e0acc6e72ff15d12830ebd1599c35e1"]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001200)={&(0x7f0000001100), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x40, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, r1, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x4c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r5, @in_args={0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x33}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001500), 0xc, &(0x7f0000001a00)={&(0x7f0000001540)={0x49c, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x435, 0x33, @reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xf12}, @device_b, @broadcast, @initial, {0x0, 0x4cc}}, @ver_80211n={0x0, 0x9, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x2, 0x6, @device_a, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x6, [{0xc, 0x1}, {0x12, 0x1}, {0x12, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x36}]}, @void, [{0xdd, 0x9, "6f7f374e049cd105cb"}, {0xdd, 0xd2, "4f7762bcc52276c0f2b76a58bde94966c13e8bc928ee3197067b709514a016c5b4e4f328323611e982943a97840737ae5240dbe0b3e4ca8623ae88dfdc577b335c5a6e0a309586cfdf241f0aee2928a6f4b9d4d26f333a32ff2a5ba4bdda02de2da1693ad9ff328ccb1ccccb7cc66c0b8860c019b36dd3269266871e5317111dd7014aa5fbb2d0e485af9b81cfad6ee404121a980dd6355893a5e65a3516f6fe48e06870d371ea137d7f7b999fd1c3280d061f086a345bdd4259a20b34d39599b2e1a76b954ac36922ae3fecefffde06672a"}, {0xdd, 0xf1, "75dc2c639bc1a267c350a68129c0aff1064cb426daa0d3ef53a5f26e55af06a2e79835d0f70c231a007106b0d60d48fa20cd181db26c7e45b0b2534f1c2436b58022a2fcb40d42bb484c9450ab83d89596300fefc4615418ed05ea3a52dfe7cbe6479f391591072272ecc9f7274bd6b90d5c1985ab2ccb93a634f37f46f660951f2ea1045763318418635dab293e68533f2a307851162d48b25ed660a806abaaffdd6c324b948a2086f06a9345d531b007b8560d5c6f64b56c77aa450b0b1d30a7b2740c305e56bbaa8eda0578769fc97cd877d3bdd86fa241394f49dbd5dc9da4500fb354179afe2fbd4d31100a4b050b"}, {0xdd, 0x9c, "f1e4af913689b2a514a830894157a1ef604ba5dc43b1d128c9c78194121f9f0f906034c4e78e60b9e79b38b1b2ada77efd18ffad4b6f8e2df5e7085889a0c3705af2234383ccd5717c582c812644525c5b39106f6223dbbb5f72e055ce11a36d3affc726601c87130eba2bca852b723cb9d60308b1260ea9c46001224c94bfa129a1280318479d4c8ee7ba56f05b61b556b1f71913df836ae103bc83"}, {0xdd, 0xc0, "586faf201bce7e249c36f3675685d630ace8e72ace5e7813bb54d039e1bbe95f016ce31991583543aa6f2688157b8edc04963b4cbb319fd305b4163bb2b67692992c3b4d80e3508393d94be6d203aed8a22f629649a52067f0b215afdccf311c2b801f93616b3a46adf229bdb9d832333cdc0f38c7a25461b3f0b9a4e35a26dc518be21a524a28b5e44261d457ca6ab245f5ea964abae6d64022586faa9bc52b26f996b8d171737c954dfe523db366e21d136526f6d91d7fb618e8ed76459067"}, {0xdd, 0xbe, "29104d688a062437e05532fb753f2fdc678b76069eb0d4bdac32163a514cdd8cc557ada3946458cb02e9bb8165b6ae4dbc28741ff8745ad7e2db2308781322d5f6a8cb672e9f8f18b93ca5aedcd566b16b686762ced0200f89fd8794c6f50d3c0017d349b3659b3b9c20285a22759274058b7d222c6af645df96719513873161cff3ef241f1afc15ac5be1587ae9fc5ebf65e341fcadd2429f25fc342629b85daa48a87b810ff75ebfaeba3c6467c00a401952d5ce8c8223dac5722e4090"}, {0xdd, 0x7, "a53e4d9a6cbf0d"}]}}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa16}, @NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x81}, @broadcast, @broadcast, @from_mac=@device_b, {0x6, 0x7}}, 0x5, @val={0x8c, 0x10, {0x494, "e0beb84f65dd", @short="d18a4c61248b897f"}}}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x2600cc01}, 0x20000040) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x38, r1, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x8) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001bc0), r6) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001d00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x94, r7, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4e739051}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4000}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x24004800) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001d40), 0x40d00, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40890}, 0x4801) 22:28:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40805}, 0x881) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000015c0), 0x8302, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x880) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001700)={{0x1, 0x1, 0x18, r5, {0x10001}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001880), r2) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c801}, 0x4044804) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000019c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) fcntl$dupfd(r7, 0x0, r8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x70, r9, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2c044010}, 0x4000084) [ 74.063504] audit: type=1400 audit(1664144881.591:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:28:01 executing program 4: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x20040845) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010009}, 0x4040004) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1f8, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x77d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c0000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x60000}]}, @TIPC_NLA_NODE={0x194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "5854faf4113fab13951a8883f1db749b85218dc5d532bd45c470"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "71266e1dc0ebe584445f57b60ff4aaf2766a7636"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "e1d501bc226a38e986fb583e8ba41c21d132b173fa4f060d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x68, 0x3, "0658865ab8e9af426fc697832b487c455d22c120d5530484d8ee584fa1af85f79c9643a5ccdf04e1bc25bb9bf803628478e5127d51a0a1f73784d50b5bd3fbc04612469a6895531f95fb69380d5fc1f1f60a4b7c73d41c91ec725a5a812946b3cd229773"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x59, 0x3, "680950ee69c0c86536f4774f98f9ee125147262aa865f0fe6f2b9f692a26f2bda62ddc3a407aeaa7ff1c00ddad5dac9c7a9757f541aaaf69461cea2c6615c607a7d8a6b79717bca4d70a792767ef076d92184dfc09"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x1}, 0x20000) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb4, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x64fb}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa00, 0x1f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20400000, 0x3}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, 0x0, 0x800, 0x20, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb8, 0x11}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000880}, 0x4001) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xac, r4, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x304}, {0x8, 0xb, 0xd6f}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3f}, {0x6, 0x16, 0xbbb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0xff}}]}, 0xac}, 0x1, 0x0, 0x0, 0x24000000}, 0x200408d0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x45800000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000e80)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xa8, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0xa8}}, 0x41) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8020}, 0x20048010) 22:28:01 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x1ba, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200c80, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'bridge_slave_1\x00', 0x3}, 0x18) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x20, 0xcd, 0x63, 0x0, 0x7fff, 0x800, 0x1869fc108b9a684b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2000, 0x7ff, 0x0, 0x7, 0x10001, 0x2, 0x6, 0x0, 0x4, 0x0, 0x2}, r2, 0xc, r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x99, 0x81, 0x4, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, @mcast1, 0x700, 0x10, 0x2, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000300)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x3, {0x0, r0}, 0x0, 0xe, 0x1}, 0x40) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) r8 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xb9, 0x0, 0x81, 0x4d, 0x0, 0x1000, 0x91861, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={&(0x7f0000000380), 0x1}, 0x10404, 0x4, 0x3, 0x2, 0x0, 0x8bf5, 0x4d1, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r7, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x5) r9 = fcntl$dupfd(r8, 0x406, r3) syz_io_uring_setup(0x5990, &(0x7f00000004c0)={0x0, 0x6a85, 0x0, 0x0, 0x87, 0x0, r9}, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000005c0)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2004, @fd_index=0x5, 0xfffffffffffffff7, 0xd12a, 0xfff, 0x15, 0x1, {0x3, r1}}, 0x5) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x8, 0x9, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x7800, 0x8000, 0xf9e, 0xa4}}) 22:28:01 executing program 6: ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000000)=0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x3) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0xb8, 0x3, "f7ee0dcdcfc385cb3ba8d9e674e535bf245cb9f0eb0007f6f08c048d8691dbfea047ba591a5c7b3c135b9559e3f34278b3a7e2c5550a0b300ffdc5fcf65dab320cce0132a2043a7011f3891df1210bbc7767a7a206756df2a1bf5b8131e4ecefb47c47120811b7b2f9721d6072df224c111a66887dabf379fa5a2d78c73bef6474ea7ba9d5901c7cb8741196149fcc792ee3f040b44edf3b5d7c137e1201f4b307c6e4fad58373c57ca4f044892619ebc2816e45"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0xe4}}, 0x20004840) r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x80, 0x79, 0x2, 0x8, 0x0, 0x2bee, 0x10, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x4, 0x80000000000000}, 0x1500, 0x81, 0x800, 0x6, 0x585, 0x958, 0x1, 0x0, 0x1ff, 0x0, 0x38}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000002c0)={0x8, 0x3}) write(r0, &(0x7f0000000300)="12793ca92417deb273ff4dd9", 0xc) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4000010, 0xffffffffffffffff, 0x5) ioctl$int_in(r0, 0x5421, &(0x7f0000000340)=0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000380), &(0x7f00000003c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x40, 0x2, 0x6, 0x6, 0x0, 0xfffffffffffffff7, 0x10420, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x4, 0x1}, 0x102, 0x5, 0xcc, 0x3, 0x8, 0x2, 0x100, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x6, r1, 0x1) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x2, 0x40, 0x7, 0x0, 0x5, 0x10020, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000004c0)}, 0x15064, 0x7, 0x4, 0x8, 0x3, 0x3ff, 0x7f, 0x0, 0xfff, 0x0, 0xfffffffffffffff9}, 0x0, 0xd, r1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) r2 = syz_io_uring_setup(0x2814, &(0x7f00000005c0)={0x0, 0x6818, 0x8, 0x3, 0x34c, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000006c0)={0xda000, 0x7, 0x8, 0xb8f, 0xffffffff}) flistxattr(r2, &(0x7f0000000700)=""/247, 0xf7) syz_io_uring_setup(0x213c, &(0x7f0000000800)={0x0, 0x579e, 0x4, 0x2, 0x1ca, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000880), &(0x7f00000008c0)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/class/wakeup', 0x0, 0x140) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r5, &(0x7f0000000940)={0x2102, 0x108, 0xd}, &(0x7f0000000980)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0x80) 22:28:01 executing program 7: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0xffffffff00000001, 0x0, [0x6, 0x1ff, 0xfffffffffffffffb, 0x40, 0x8], [0x0, 0x2, 0x1, 0xe223, 0x21, 0x7, 0x1, 0x7, 0xffffffff, 0x5, 0x4, 0x8, 0x3, 0x7, 0xe3, 0x89c, 0xfff, 0x3, 0x0, 0x3, 0x1f, 0x4, 0x95c, 0x2, 0x2, 0x2, 0x2e2, 0x8, 0x5, 0x9, 0x7, 0xfff, 0x1, 0x8a9, 0xb7, 0xfffffffffffffffd, 0x0, 0x7, 0x0, 0x5, 0x915, 0x10000, 0x8, 0x2758, 0x2, 0x6, 0xcb, 0x7, 0xfffffffffffffe3c, 0x9, 0x8001, 0x249, 0x6, 0xfff, 0xfffffffffffffc00, 0x100000001, 0xd788, 0x1, 0xffffffff80000000, 0xffff, 0xa9, 0x80000001, 0x0, 0x0, 0x9, 0x7, 0x8, 0x2, 0x7, 0x2, 0xfff, 0x3, 0x9, 0x1f, 0x6, 0x4, 0x5, 0x2, 0xfffffffffffffffd, 0x1cc, 0x7, 0x40, 0x2, 0xffffffff, 0x3f, 0x4, 0x4, 0x2, 0x5, 0x1, 0x7, 0x6, 0x556, 0xf47, 0x9, 0x7a, 0x905, 0x4, 0xffff, 0xa89, 0xbd, 0x5, 0x101, 0x100000001, 0x3, 0xa86, 0x4, 0x3, 0x4aa1, 0xb385, 0x1, 0x77f, 0x100000001, 0x8, 0x10001, 0x1f, 0x400, 0x6, 0x5, 0x4, 0x100000000]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0x80000001}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001980)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000001a80)=0xe8) syz_mount_image$nfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0xd0f5, 0x6, &(0x7f00000018c0)=[{&(0x7f00000005c0)="a67411d1bfe7bed62cf9af07417a7e60d555e6ed64", 0x15, 0x3}, {&(0x7f0000000600)="27b8cd31b2a7fb6aa22eb85598b19e7240684e8f49676482966606e44d9cb5ea08a87af914f14d736fbee024c31f96236c13a8dad8ee3963210cffac3ec9df610773092326783981f761dc60a085ea56af91ab57db7c94ffd5f30f3bdeddacb0bcbc100295fbeb35", 0x68, 0x9def}, {&(0x7f0000000680)="36c59e8245aa3108c492dda59a66f232a6d8c2900fb31c9e4d4231238e3d5cbca817b0996cbd5d08d9109e9a34fb3251227761acca69fc6cf24e9ecbf644a9007a6575b296f0147f3d35eab2ddbc00cbb8dde4a2c09eba20879cab5aa903a02d9d31b0731b9f5ab0", 0x68, 0x7}, {&(0x7f0000000700)="7cf0e29c6d74ee455eb1f11575475150445a9c267df72c1a14cb58ee22a1837bf064a3ba2d545d1c8c21452560593de12e8a787fcaa30a94adbd345606125a9f36706a6eb6ebaa544a7df879b6010dd4504bdabff61ae5a0c7c7d737c87ef75362dae5b5e491480ed86d83596b1f49f69119d2869a989d67aaadade0c01d248a896a2d56f51a8b7965ccd490c9d47df35865a79c58784c8bc98c0f5fd3a4fa37462ced52615a", 0xa6, 0x9fc7}, {&(0x7f00000007c0)="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", 0x1000, 0xff}, {&(0x7f00000017c0)="51f226e48ad1dae5fbb02248ec71ab5795ac2c92235b806c884b8e34ce040823ac0a90bcd8da6d6ab1ebb9f62649fb969120917e1c5f11d4386ae30eea3cf2bf9a2c501e9c8203525bf8c503e9a225c9083766bfcd257321a809cefc756f288633a5395811bbd57fdfe14fd26752edb728affaad7c8222a8c122c688fdeaab4b1507399ac9540e2e3e635440d206c32f84a3f3c543f148fc5eae059505942988bc97e8f8d3de25f2e97f6c8c65ed9894cbdb68bf43400f7b3b589df96b80e014e8", 0xc1, 0x4}], 0x10, &(0x7f0000001ac0)={[{'$!-#G[)/$%,.:)'}, {}, {'^'}], [{@euid_eq}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x30, 0x63, 0x62, 0x64, 0x66, 0x61], 0x2d, [0x66, 0x61, 0x30, 0x39], 0x2d, [0x65, 0x62, 0x33, 0x79], 0x2d, [0x38, 0x30, 0x38], 0x2d, [0x30, 0x38, 0x34, 0x63, 0x62, 0x33, 0x0, 0x39]}}}, {@uid_lt={'uid<', r5}}]}) fallocate(r1, 0x18, 0x80000000, 0xcafd) r6 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001b40), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000001b80)) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001bc0), 0x324181, 0x0) clock_gettime(0x0, &(0x7f00000058c0)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000005700)=[{{&(0x7f0000001c00)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001c80)}, {&(0x7f0000001cc0)=""/182, 0xb6}, {&(0x7f0000001d80)=""/201, 0xc9}, {&(0x7f0000001e80)=""/83, 0x53}, {&(0x7f0000001f00)=""/46, 0x2e}, {&(0x7f0000001f40)=""/61, 0x3d}, {&(0x7f0000001f80)=""/165, 0xa5}, {&(0x7f0000002040)=""/254, 0xfe}, {&(0x7f0000002140)=""/86, 0x56}, {&(0x7f00000021c0)=""/197, 0xc5}], 0xa}, 0x1ff}, {{&(0x7f0000002380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002400)=""/38, 0x26}, {&(0x7f0000002440)=""/68, 0x44}, {&(0x7f00000024c0)=""/101, 0x65}], 0x3, &(0x7f0000002580)=""/4, 0x4}, 0xfffffc00}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000025c0)=""/220, 0xdc}, {&(0x7f00000026c0)=""/167, 0xa7}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/13, 0xd}, {&(0x7f00000037c0)=""/109, 0x6d}, {&(0x7f0000003840)=""/85, 0x55}, {&(0x7f00000038c0)=""/153, 0x99}], 0x7, &(0x7f0000003a00)}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003a40)=""/145, 0x91}, {&(0x7f0000003b00)=""/35, 0x23}], 0x2, &(0x7f0000003b80)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004b80)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000004c00), 0x0, &(0x7f0000004c40)=""/250, 0xfa}, 0x7fffffff}, {{&(0x7f0000004d40)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004dc0)=""/185, 0xb9}], 0x1, &(0x7f0000004ec0)=""/195, 0xc3}, 0x33000000}, {{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000004fc0)=""/213, 0xd5}, {&(0x7f00000050c0)=""/48, 0x30}, {&(0x7f0000005100)=""/5, 0x5}, {&(0x7f0000005140)=""/225, 0xe1}, {&(0x7f0000005240)=""/204, 0xcc}, {&(0x7f0000005340)=""/184, 0xb8}, {&(0x7f0000005400)=""/77, 0x4d}, {&(0x7f0000005480)=""/252, 0xfc}, {&(0x7f0000005580)=""/174, 0xae}], 0x9}, 0x6}], 0x7, 0x2, &(0x7f0000005900)={r8, r9+10000000}) io_setup(0x9f, &(0x7f0000005940)=0x0) io_getevents(r10, 0x85, 0x2, &(0x7f0000005980)=[{}, {}], &(0x7f00000059c0)) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000005a00)=@req={0x80, 0x8, 0xf7d, 0xffffff59}, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000005b00)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x1442a08}, 0xc, &(0x7f0000005ac0)={&(0x7f0000005a80)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004851}, 0x80) syz_io_uring_setup(0x3167, &(0x7f0000005b40)={0x0, 0x426b, 0x2, 0x0, 0x21d, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000005bc0)=0x0, &(0x7f0000005c00)) syz_io_uring_setup(0x4924, &(0x7f0000005c40)={0x0, 0xfb44, 0x0, 0x1, 0x288, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000005cc0), &(0x7f0000005d00)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000005d40)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x60, 0x1}, 0x4) [ 75.415386] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.417344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.418767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.427418] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.429920] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.432866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.438428] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.490034] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.492464] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.494723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.496204] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.497834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.499589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.501199] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.502307] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.503810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.504879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.506063] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.507140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.508382] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.509439] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.510854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.512456] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.513513] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.514620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.515927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.518414] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.523477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.524675] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.526131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.527266] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.528597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.529942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.531417] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.532507] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.534025] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.535129] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.536298] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.538321] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.539423] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.540582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.541564] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.542735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.544685] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.547264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.556011] Bluetooth: hci1: HCI_REQ-0x0c1a [ 75.558987] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.562935] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.564078] Bluetooth: hci5: HCI_REQ-0x0c1a [ 75.564835] Bluetooth: hci6: HCI_REQ-0x0c1a [ 75.565677] Bluetooth: hci4: HCI_REQ-0x0c1a [ 75.583535] Bluetooth: hci3: HCI_REQ-0x0c1a [ 75.615162] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.625291] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.627063] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.649299] Bluetooth: hci7: HCI_REQ-0x0c1a [ 77.500731] Bluetooth: hci0: command 0x0409 tx timeout [ 77.628688] Bluetooth: hci3: command 0x0409 tx timeout [ 77.628746] Bluetooth: hci2: command 0x0409 tx timeout [ 77.629625] Bluetooth: hci5: command 0x0409 tx timeout [ 77.630489] Bluetooth: hci6: command 0x0409 tx timeout [ 77.631007] Bluetooth: hci4: command 0x0409 tx timeout [ 77.631951] Bluetooth: hci1: command 0x0409 tx timeout [ 77.692277] Bluetooth: hci7: command 0x0409 tx timeout [ 79.548268] Bluetooth: hci0: command 0x041b tx timeout [ 79.676309] Bluetooth: hci1: command 0x041b tx timeout [ 79.676434] Bluetooth: hci4: command 0x041b tx timeout [ 79.677076] Bluetooth: hci6: command 0x041b tx timeout [ 79.677940] Bluetooth: hci5: command 0x041b tx timeout [ 79.678620] Bluetooth: hci2: command 0x041b tx timeout [ 79.679417] Bluetooth: hci3: command 0x041b tx timeout [ 79.741253] Bluetooth: hci7: command 0x041b tx timeout [ 81.596231] Bluetooth: hci0: command 0x040f tx timeout [ 81.724262] Bluetooth: hci3: command 0x040f tx timeout [ 81.725945] Bluetooth: hci2: command 0x040f tx timeout [ 81.725969] Bluetooth: hci5: command 0x040f tx timeout [ 81.726564] Bluetooth: hci6: command 0x040f tx timeout [ 81.726581] Bluetooth: hci4: command 0x040f tx timeout [ 81.726597] Bluetooth: hci1: command 0x040f tx timeout [ 81.789264] Bluetooth: hci7: command 0x040f tx timeout [ 83.645226] Bluetooth: hci0: command 0x0419 tx timeout [ 83.772269] Bluetooth: hci5: command 0x0419 tx timeout [ 83.773229] Bluetooth: hci1: command 0x0419 tx timeout [ 83.773623] Bluetooth: hci4: command 0x0419 tx timeout [ 83.774005] Bluetooth: hci6: command 0x0419 tx timeout [ 83.774441] Bluetooth: hci2: command 0x0419 tx timeout [ 83.774831] Bluetooth: hci3: command 0x0419 tx timeout [ 83.836312] Bluetooth: hci7: command 0x0419 tx timeout [ 128.763966] loop7: detected capacity change from 0 to 159 [ 128.769023] nfs: Unknown parameter '$!-#G[)/$%' [ 128.855349] loop7: detected capacity change from 0 to 159 [ 128.856291] nfs: Unknown parameter '$!-#G[)/$%' 22:28:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x103202, 0x185) sendfile(r0, r1, &(0x7f0000000140)=0x7ff, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x109201, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)={0xa0002000}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf25050000004c0004800900010073797a31000000000900010073797a30000000000900010073797a30000000001300010062726f6164636173742d6c696e6b0000040007800900010073797a30000000000c00098008000100220a00000c00038008000100ff0100002c00038008000200000001000800010009000000080003003f0000000800010001000100080002000600000024000380080001000800000008000100020000000800030009000000080003000000000004000280"], 0xcc}, 0x1, 0x0, 0x0, 0x40001}, 0x4020) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) dup2(r5, r0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000000)=0x8000) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000300)) r6 = gettid() rt_sigqueueinfo(r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffa}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0x3, 0x40, 0x46, 0x0, 0x6a, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_config_ext={0x367f}, 0x44393, 0x1, 0x7, 0x1, 0x6, 0x7ff, 0x0, 0x0, 0x7fff, 0x0, 0x4}, r6, 0x4, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8, 0x800) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) [ 129.049636] audit: type=1400 audit(1664144936.578:7): avc: denied { open } for pid=3839 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.051227] audit: type=1400 audit(1664144936.578:8): avc: denied { kernel } for pid=3839 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.065871] ------------[ cut here ]------------ [ 129.065890] [ 129.065893] ====================================================== [ 129.065896] WARNING: possible circular locking dependency detected [ 129.065900] 6.0.0-rc6-next-20220923 #1 Not tainted [ 129.065907] ------------------------------------------------------ [ 129.065910] syz-executor.7/3841 is trying to acquire lock: [ 129.065916] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 129.065953] [ 129.065953] but task is already holding lock: [ 129.065956] ffff888009b7d820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.065984] [ 129.065984] which lock already depends on the new lock. [ 129.065984] [ 129.065987] [ 129.065987] the existing dependency chain (in reverse order) is: [ 129.065990] [ 129.065990] -> #3 (&ctx->lock){....}-{2:2}: [ 129.066003] _raw_spin_lock+0x2a/0x40 [ 129.066021] __perf_event_task_sched_out+0x53b/0x18d0 [ 129.066034] __schedule+0xedd/0x2470 [ 129.066047] schedule+0xda/0x1b0 [ 129.066059] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.066071] syscall_exit_to_user_mode+0x19/0x40 [ 129.066083] do_syscall_64+0x48/0x90 [ 129.066100] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.066112] [ 129.066112] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 129.066125] _raw_spin_lock_nested+0x30/0x40 [ 129.066143] raw_spin_rq_lock_nested+0x1e/0x30 [ 129.066156] task_fork_fair+0x63/0x4d0 [ 129.066175] sched_cgroup_fork+0x3d0/0x540 [ 129.066188] copy_process+0x4183/0x6e20 [ 129.066198] kernel_clone+0xe7/0x890 [ 129.066208] user_mode_thread+0xad/0xf0 [ 129.066217] rest_init+0x24/0x250 [ 129.066228] arch_call_rest_init+0xf/0x14 [ 129.066246] start_kernel+0x4c1/0x4e6 [ 129.066261] secondary_startup_64_no_verify+0xe0/0xeb [ 129.066274] [ 129.066274] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 129.066288] _raw_spin_lock_irqsave+0x39/0x60 [ 129.066306] try_to_wake_up+0xab/0x1930 [ 129.066319] up+0x75/0xb0 [ 129.066332] __up_console_sem+0x6e/0x80 [ 129.066347] console_unlock+0x46a/0x590 [ 129.066362] vprintk_emit+0x1bd/0x560 [ 129.066378] vprintk+0x84/0xa0 [ 129.066393] _printk+0xba/0xf1 [ 129.066404] kauditd_hold_skb.cold+0x3f/0x4e [ 129.066421] kauditd_send_queue+0x233/0x290 [ 129.066435] kauditd_thread+0x5da/0x9a0 [ 129.066449] kthread+0x2ed/0x3a0 [ 129.066463] ret_from_fork+0x22/0x30 [ 129.066475] [ 129.066475] -> #0 ((console_sem).lock){....}-{2:2}: [ 129.066488] __lock_acquire+0x2a02/0x5e70 [ 129.066505] lock_acquire+0x1a2/0x530 [ 129.066520] _raw_spin_lock_irqsave+0x39/0x60 [ 129.066538] down_trylock+0xe/0x70 [ 129.066552] __down_trylock_console_sem+0x3b/0xd0 [ 129.066568] vprintk_emit+0x16b/0x560 [ 129.066583] vprintk+0x84/0xa0 [ 129.066599] _printk+0xba/0xf1 [ 129.066608] report_bug.cold+0x72/0xab [ 129.066624] handle_bug+0x3c/0x70 [ 129.066640] exc_invalid_op+0x14/0x50 [ 129.066656] asm_exc_invalid_op+0x16/0x20 [ 129.066667] group_sched_out.part.0+0x2c7/0x460 [ 129.066678] ctx_sched_out+0x8f1/0xc10 [ 129.066688] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.066700] __schedule+0xedd/0x2470 [ 129.066713] schedule+0xda/0x1b0 [ 129.066725] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.066736] syscall_exit_to_user_mode+0x19/0x40 [ 129.066747] do_syscall_64+0x48/0x90 [ 129.066763] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.066775] [ 129.066775] other info that might help us debug this: [ 129.066775] [ 129.066778] Chain exists of: [ 129.066778] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 129.066778] [ 129.066792] Possible unsafe locking scenario: [ 129.066792] [ 129.066795] CPU0 CPU1 [ 129.066797] ---- ---- [ 129.066799] lock(&ctx->lock); [ 129.066804] lock(&rq->__lock); [ 129.066810] lock(&ctx->lock); [ 129.066817] lock((console_sem).lock); [ 129.066822] [ 129.066822] *** DEADLOCK *** [ 129.066822] [ 129.066824] 2 locks held by syz-executor.7/3841: [ 129.066831] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 129.066859] #1: ffff888009b7d820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.066886] [ 129.066886] stack backtrace: [ 129.066889] CPU: 1 PID: 3841 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1 [ 129.066901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.066909] Call Trace: [ 129.066912] [ 129.066917] dump_stack_lvl+0x8b/0xb3 [ 129.066934] check_noncircular+0x263/0x2e0 [ 129.066950] ? format_decode+0x26c/0xb50 [ 129.066967] ? print_circular_bug+0x450/0x450 [ 129.066983] ? enable_ptr_key_workfn+0x20/0x20 [ 129.066999] ? format_decode+0x26c/0xb50 [ 129.067016] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 129.067033] __lock_acquire+0x2a02/0x5e70 [ 129.067055] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 129.067077] lock_acquire+0x1a2/0x530 [ 129.067093] ? down_trylock+0xe/0x70 [ 129.067109] ? lock_release+0x750/0x750 [ 129.067129] ? vprintk+0x84/0xa0 [ 129.067147] _raw_spin_lock_irqsave+0x39/0x60 [ 129.067166] ? down_trylock+0xe/0x70 [ 129.067181] down_trylock+0xe/0x70 [ 129.067197] ? vprintk+0x84/0xa0 [ 129.067213] __down_trylock_console_sem+0x3b/0xd0 [ 129.067230] vprintk_emit+0x16b/0x560 [ 129.067248] vprintk+0x84/0xa0 [ 129.067265] _printk+0xba/0xf1 [ 129.067276] ? record_print_text.cold+0x16/0x16 [ 129.067292] ? report_bug.cold+0x66/0xab [ 129.067309] ? group_sched_out.part.0+0x2c7/0x460 [ 129.067321] report_bug.cold+0x72/0xab [ 129.067339] handle_bug+0x3c/0x70 [ 129.067355] exc_invalid_op+0x14/0x50 [ 129.067373] asm_exc_invalid_op+0x16/0x20 [ 129.067385] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.067399] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.067410] RSP: 0018:ffff88801b157c48 EFLAGS: 00010006 [ 129.067419] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.067426] RDX: ffff8880180e0000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 129.067434] RBP: ffff8880410b8000 R08: 0000000000000005 R09: 0000000000000001 [ 129.067441] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff888009b7d800 [ 129.067449] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 129.067459] ? group_sched_out.part.0+0x2c7/0x460 [ 129.067473] ? group_sched_out.part.0+0x2c7/0x460 [ 129.067486] ctx_sched_out+0x8f1/0xc10 [ 129.067498] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.067514] ? lock_is_held_type+0xd7/0x130 [ 129.067527] ? __perf_cgroup_move+0x160/0x160 [ 129.067539] ? set_next_entity+0x304/0x550 [ 129.067556] ? update_curr+0x267/0x740 [ 129.067574] ? lock_is_held_type+0xd7/0x130 [ 129.067588] __schedule+0xedd/0x2470 [ 129.067604] ? io_schedule_timeout+0x150/0x150 [ 129.067620] ? rcu_read_lock_sched_held+0x3e/0x80 [ 129.067640] schedule+0xda/0x1b0 [ 129.067654] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.067666] syscall_exit_to_user_mode+0x19/0x40 [ 129.067679] do_syscall_64+0x48/0x90 [ 129.067696] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.067709] RIP: 0033:0x7fea64c15b19 [ 129.067717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.067727] RSP: 002b:00007fea6218b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.067738] RAX: 0000000000000001 RBX: 00007fea64d28f68 RCX: 00007fea64c15b19 [ 129.067745] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fea64d28f6c [ 129.067753] RBP: 00007fea64d28f60 R08: 000000000000000e R09: 0000000000000000 [ 129.067760] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fea64d28f6c [ 129.067767] R13: 00007ffc644b21ff R14: 00007fea6218b300 R15: 0000000000022000 [ 129.067780] [ 129.123398] WARNING: CPU: 1 PID: 3841 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 129.124064] Modules linked in: [ 129.124307] CPU: 1 PID: 3841 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1 [ 129.124889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.125694] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.126087] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.127405] RSP: 0018:ffff88801b157c48 EFLAGS: 00010006 [ 129.127786] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.128293] RDX: ffff8880180e0000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 129.128824] RBP: ffff8880410b8000 R08: 0000000000000005 R09: 0000000000000001 [ 129.129332] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff888009b7d800 [ 129.129838] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 129.130351] FS: 00007fea6218b700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 129.130927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.131353] CR2: 00007f908abcc028 CR3: 0000000020560000 CR4: 0000000000350ee0 [ 129.131869] Call Trace: [ 129.132058] [ 129.132228] ctx_sched_out+0x8f1/0xc10 [ 129.132519] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.132900] ? lock_is_held_type+0xd7/0x130 [ 129.133222] ? __perf_cgroup_move+0x160/0x160 [ 129.133553] ? set_next_entity+0x304/0x550 [ 129.133866] ? update_curr+0x267/0x740 [ 129.134161] ? lock_is_held_type+0xd7/0x130 [ 129.134484] __schedule+0xedd/0x2470 [ 129.134769] ? io_schedule_timeout+0x150/0x150 [ 129.135109] ? rcu_read_lock_sched_held+0x3e/0x80 [ 129.135483] schedule+0xda/0x1b0 [ 129.135736] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.136093] syscall_exit_to_user_mode+0x19/0x40 [ 129.136441] do_syscall_64+0x48/0x90 [ 129.136737] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.137114] RIP: 0033:0x7fea64c15b19 [ 129.137383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.138669] RSP: 002b:00007fea6218b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.139213] RAX: 0000000000000001 RBX: 00007fea64d28f68 RCX: 00007fea64c15b19 [ 129.139721] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fea64d28f6c [ 129.140232] RBP: 00007fea64d28f60 R08: 000000000000000e R09: 0000000000000000 [ 129.140754] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fea64d28f6c [ 129.141273] R13: 00007ffc644b21ff R14: 00007fea6218b300 R15: 0000000000022000 [ 129.141792] [ 129.141966] irq event stamp: 756 [ 129.142214] hardirqs last enabled at (755): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 129.142884] hardirqs last disabled at (756): [] __schedule+0x1225/0x2470 [ 129.143490] softirqs last enabled at (514): [] __irq_exit_rcu+0x11b/0x180 [ 129.144108] softirqs last disabled at (371): [] __irq_exit_rcu+0x11b/0x180 [ 129.144732] ---[ end trace 0000000000000000 ]--- 22:28:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000440)=0xae73, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) syz_io_uring_setup(0x1572, &(0x7f0000000180)={0x0, 0x4c3b, 0x4, 0x2, 0x1ab, 0x0, r5}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x431d, &(0x7f0000000300)={0x0, 0xb62e, 0xe, 0x2, 0x142, 0x0, r5}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r8 = socket$inet(0x2, 0x6, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r8, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/133, 0x85}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f0000000400)=""/24, 0x18}, {&(0x7f00000006c0)=""/19, 0x13}], 0x5, &(0x7f0000000780)=""/59, 0x3b}, 0x0, 0x40000000, 0x0, {0x2}}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40404, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) [ 129.300850] audit: type=1400 audit(1664144936.829:9): avc: denied { create } for pid=3857 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 129.498798] audit: type=1400 audit(1664144937.027:10): avc: denied { block_suspend } for pid=3839 comm="syz-executor.7" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 22:28:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000440)=0xae73, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) syz_io_uring_setup(0x1572, &(0x7f0000000180)={0x0, 0x4c3b, 0x4, 0x2, 0x1ab, 0x0, r5}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x431d, &(0x7f0000000300)={0x0, 0xb62e, 0xe, 0x2, 0x142, 0x0, r5}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r8 = socket$inet(0x2, 0x6, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r8, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/133, 0x85}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f0000000400)=""/24, 0x18}, {&(0x7f00000006c0)=""/19, 0x13}], 0x5, &(0x7f0000000780)=""/59, 0x3b}, 0x0, 0x40000000, 0x0, {0x2}}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40404, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 22:28:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r5, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x1}}, './file1\x00'}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x10001) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x6, 0x5, 0xff, 0x6, 0x0, 0x2, 0xa0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x1, 0x200}, 0x2001, 0x881, 0x2369, 0x0, 0x4, 0x0, 0x7, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) r6 = fcntl$dupfd(r4, 0x0, r2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) dup3(r6, r7, 0x80000) 22:28:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x103202, 0x185) sendfile(r0, r1, &(0x7f0000000140)=0x7ff, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x109201, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)={0xa0002000}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf25050000004c0004800900010073797a31000000000900010073797a30000000000900010073797a30000000001300010062726f6164636173742d6c696e6b0000040007800900010073797a30000000000c00098008000100220a00000c00038008000100ff0100002c00038008000200000001000800010009000000080003003f0000000800010001000100080002000600000024000380080001000800000008000100020000000800030009000000080003000000000004000280"], 0xcc}, 0x1, 0x0, 0x0, 0x40001}, 0x4020) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) dup2(r5, r0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000000)=0x8000) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000300)) r6 = gettid() rt_sigqueueinfo(r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffa}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0x3, 0x40, 0x46, 0x0, 0x6a, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_config_ext={0x367f}, 0x44393, 0x1, 0x7, 0x1, 0x6, 0x7ff, 0x0, 0x0, 0x7fff, 0x0, 0x4}, r6, 0x4, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8, 0x800) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) [ 129.732185] hrtimer: interrupt took 18414 ns 22:28:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000440)=0xae73, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) syz_io_uring_setup(0x1572, &(0x7f0000000180)={0x0, 0x4c3b, 0x4, 0x2, 0x1ab, 0x0, r5}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x431d, &(0x7f0000000300)={0x0, 0xb62e, 0xe, 0x2, 0x142, 0x0, r5}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r8 = socket$inet(0x2, 0x6, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r8, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/133, 0x85}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f0000000400)=""/24, 0x18}, {&(0x7f00000006c0)=""/19, 0x13}], 0x5, &(0x7f0000000780)=""/59, 0x3b}, 0x0, 0x40000000, 0x0, {0x2}}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40404, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 22:28:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x103202, 0x185) sendfile(r0, r1, &(0x7f0000000140)=0x7ff, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x109201, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)={0xa0002000}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf25050000004c0004800900010073797a31000000000900010073797a30000000000900010073797a30000000001300010062726f6164636173742d6c696e6b0000040007800900010073797a30000000000c00098008000100220a00000c00038008000100ff0100002c00038008000200000001000800010009000000080003003f0000000800010001000100080002000600000024000380080001000800000008000100020000000800030009000000080003000000000004000280"], 0xcc}, 0x1, 0x0, 0x0, 0x40001}, 0x4020) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) dup2(r5, r0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000000)=0x8000) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000300)) r6 = gettid() rt_sigqueueinfo(r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffa}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0x3, 0x40, 0x46, 0x0, 0x6a, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_config_ext={0x367f}, 0x44393, 0x1, 0x7, 0x1, 0x6, 0x7ff, 0x0, 0x0, 0x7fff, 0x0, 0x4}, r6, 0x4, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8, 0x800) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) 22:28:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x103202, 0x185) sendfile(r0, r1, &(0x7f0000000140)=0x7ff, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x109201, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)={0xa0002000}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf25050000004c0004800900010073797a31000000000900010073797a30000000000900010073797a30000000001300010062726f6164636173742d6c696e6b0000040007800900010073797a30000000000c00098008000100220a00000c00038008000100ff0100002c00038008000200000001000800010009000000080003003f0000000800010001000100080002000600000024000380080001000800000008000100020000000800030009000000080003000000000004000280"], 0xcc}, 0x1, 0x0, 0x0, 0x40001}, 0x4020) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) dup2(r5, r0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000000)=0x8000) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000300)) r6 = gettid() rt_sigqueueinfo(r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffa}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0x3, 0x40, 0x46, 0x0, 0x6a, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_config_ext={0x367f}, 0x44393, 0x1, 0x7, 0x1, 0x6, 0x7ff, 0x0, 0x0, 0x7fff, 0x0, 0x4}, r6, 0x4, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8, 0x800) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) [ 130.505813] audit: type=1400 audit(1664144938.034:11): avc: denied { write } for pid=3957 comm="syz-executor.1" name="task" dev="proc" ino=13704 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 130.508722] audit: type=1400 audit(1664144938.037:12): avc: denied { add_name } for pid=3957 comm="syz-executor.1" name="3958" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 130.512765] audit: type=1400 audit(1664144938.041:13): avc: denied { create } for pid=3957 comm="syz-executor.1" name="3958" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 VM DIAGNOSIS: 22:28:56 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000001 RDI=ffffffff85ec25ba RBP=ffff888017dafec8 RSP=ffff888017daf3a8 R8 =ffffffff85ec25b8 R9 =ffffffff85ec25bc R10=ffffed1002fb5e92 R11=ffff888017daf468 R12=ffff888017daf469 R13=ffff888017daf488 R14=ffff888017daf428 R15=0000000000000005 RIP=ffffffff8111b756 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd610d7a8e0 CR3=0000000040450000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88801b157698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000062 R11=0000000000000001 R12=0000000000000062 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fea6218b700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f908abcc028 CR3=0000000020560000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fea64cfc7c0 00007fea64cfc7c8 YMM02=0000000000000000 0000000000000000 00007fea64cfc7e0 00007fea64cfc7c0 YMM03=0000000000000000 0000000000000000 00007fea64cfc7c8 00007fea64cfc7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000