Warning: Permanently added '[localhost]:3415' (ECDSA) to the list of known hosts. 2022/09/27 01:35:12 fuzzer started 2022/09/27 01:35:12 dialing manager at localhost:38881 syzkaller login: [ 36.675042] cgroup: Unknown subsys name 'net' [ 36.741030] cgroup: Unknown subsys name 'rlimit' 2022/09/27 01:35:26 syscalls: 2215 2022/09/27 01:35:26 code coverage: enabled 2022/09/27 01:35:26 comparison tracing: enabled 2022/09/27 01:35:26 extra coverage: enabled 2022/09/27 01:35:26 setuid sandbox: enabled 2022/09/27 01:35:26 namespace sandbox: enabled 2022/09/27 01:35:26 Android sandbox: enabled 2022/09/27 01:35:26 fault injection: enabled 2022/09/27 01:35:26 leak checking: enabled 2022/09/27 01:35:26 net packet injection: enabled 2022/09/27 01:35:26 net device setup: enabled 2022/09/27 01:35:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/27 01:35:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/27 01:35:26 USB emulation: enabled 2022/09/27 01:35:26 hci packet injection: enabled 2022/09/27 01:35:26 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/27 01:35:26 802.15.4 emulation: enabled 2022/09/27 01:35:26 fetching corpus: 50, signal 24390/26202 (executing program) 2022/09/27 01:35:26 fetching corpus: 100, signal 34630/38130 (executing program) 2022/09/27 01:35:26 fetching corpus: 150, signal 46005/51012 (executing program) 2022/09/27 01:35:26 fetching corpus: 200, signal 51215/57702 (executing program) 2022/09/27 01:35:26 fetching corpus: 250, signal 55177/63149 (executing program) 2022/09/27 01:35:26 fetching corpus: 300, signal 59550/68938 (executing program) 2022/09/27 01:35:26 fetching corpus: 350, signal 61911/72719 (executing program) 2022/09/27 01:35:27 fetching corpus: 400, signal 65667/77789 (executing program) 2022/09/27 01:35:27 fetching corpus: 450, signal 69246/82639 (executing program) 2022/09/27 01:35:27 fetching corpus: 500, signal 72941/87571 (executing program) 2022/09/27 01:35:27 fetching corpus: 550, signal 77387/93114 (executing program) 2022/09/27 01:35:27 fetching corpus: 600, signal 79457/96447 (executing program) 2022/09/27 01:35:27 fetching corpus: 650, signal 81625/99801 (executing program) 2022/09/27 01:35:27 fetching corpus: 700, signal 83212/102636 (executing program) 2022/09/27 01:35:27 fetching corpus: 750, signal 86392/106900 (executing program) 2022/09/27 01:35:27 fetching corpus: 800, signal 89639/111164 (executing program) 2022/09/27 01:35:28 fetching corpus: 850, signal 91461/114117 (executing program) 2022/09/27 01:35:28 fetching corpus: 900, signal 95992/119420 (executing program) 2022/09/27 01:35:28 fetching corpus: 950, signal 98353/122750 (executing program) 2022/09/27 01:35:28 fetching corpus: 1000, signal 99721/125253 (executing program) 2022/09/27 01:35:28 fetching corpus: 1050, signal 101664/128205 (executing program) 2022/09/27 01:35:28 fetching corpus: 1100, signal 105641/132815 (executing program) 2022/09/27 01:35:28 fetching corpus: 1150, signal 108239/136175 (executing program) 2022/09/27 01:35:28 fetching corpus: 1200, signal 111187/139835 (executing program) 2022/09/27 01:35:29 fetching corpus: 1250, signal 112782/142303 (executing program) 2022/09/27 01:35:29 fetching corpus: 1300, signal 115073/145367 (executing program) 2022/09/27 01:35:29 fetching corpus: 1350, signal 116260/147514 (executing program) 2022/09/27 01:35:29 fetching corpus: 1400, signal 118790/150621 (executing program) 2022/09/27 01:35:29 fetching corpus: 1450, signal 120930/153515 (executing program) 2022/09/27 01:35:29 fetching corpus: 1500, signal 122320/155735 (executing program) 2022/09/27 01:35:29 fetching corpus: 1550, signal 123577/157793 (executing program) 2022/09/27 01:35:29 fetching corpus: 1600, signal 125000/159966 (executing program) 2022/09/27 01:35:30 fetching corpus: 1650, signal 127415/162873 (executing program) 2022/09/27 01:35:30 fetching corpus: 1700, signal 128646/164825 (executing program) 2022/09/27 01:35:30 fetching corpus: 1750, signal 129314/166392 (executing program) 2022/09/27 01:35:30 fetching corpus: 1800, signal 130852/168599 (executing program) 2022/09/27 01:35:30 fetching corpus: 1850, signal 132184/170652 (executing program) 2022/09/27 01:35:30 fetching corpus: 1900, signal 133312/172496 (executing program) 2022/09/27 01:35:30 fetching corpus: 1950, signal 134811/174610 (executing program) 2022/09/27 01:35:30 fetching corpus: 2000, signal 136451/176780 (executing program) 2022/09/27 01:35:30 fetching corpus: 2050, signal 139101/179562 (executing program) 2022/09/27 01:35:30 fetching corpus: 2100, signal 139866/181039 (executing program) 2022/09/27 01:35:31 fetching corpus: 2150, signal 141487/183094 (executing program) 2022/09/27 01:35:31 fetching corpus: 2200, signal 142604/184855 (executing program) 2022/09/27 01:35:31 fetching corpus: 2250, signal 144330/186944 (executing program) 2022/09/27 01:35:31 fetching corpus: 2300, signal 145889/188903 (executing program) 2022/09/27 01:35:31 fetching corpus: 2350, signal 146856/190506 (executing program) 2022/09/27 01:35:31 fetching corpus: 2400, signal 148053/192164 (executing program) 2022/09/27 01:35:31 fetching corpus: 2450, signal 149390/193980 (executing program) 2022/09/27 01:35:32 fetching corpus: 2500, signal 151263/196042 (executing program) 2022/09/27 01:35:32 fetching corpus: 2550, signal 153264/198207 (executing program) 2022/09/27 01:35:32 fetching corpus: 2600, signal 155618/200575 (executing program) 2022/09/27 01:35:32 fetching corpus: 2650, signal 156487/201940 (executing program) 2022/09/27 01:35:32 fetching corpus: 2700, signal 156985/203156 (executing program) 2022/09/27 01:35:32 fetching corpus: 2750, signal 158316/204774 (executing program) 2022/09/27 01:35:32 fetching corpus: 2800, signal 159095/206060 (executing program) 2022/09/27 01:35:32 fetching corpus: 2850, signal 159591/207198 (executing program) 2022/09/27 01:35:32 fetching corpus: 2900, signal 160408/208418 (executing program) 2022/09/27 01:35:33 fetching corpus: 2950, signal 161112/209680 (executing program) 2022/09/27 01:35:33 fetching corpus: 3000, signal 161723/210864 (executing program) 2022/09/27 01:35:33 fetching corpus: 3050, signal 162436/212075 (executing program) 2022/09/27 01:35:33 fetching corpus: 3100, signal 164333/213938 (executing program) 2022/09/27 01:35:33 fetching corpus: 3150, signal 164996/215086 (executing program) 2022/09/27 01:35:33 fetching corpus: 3200, signal 165698/216268 (executing program) 2022/09/27 01:35:33 fetching corpus: 3250, signal 167012/217772 (executing program) 2022/09/27 01:35:33 fetching corpus: 3300, signal 167706/218911 (executing program) 2022/09/27 01:35:33 fetching corpus: 3350, signal 168420/220055 (executing program) 2022/09/27 01:35:34 fetching corpus: 3400, signal 169113/221172 (executing program) 2022/09/27 01:35:34 fetching corpus: 3450, signal 169492/222116 (executing program) 2022/09/27 01:35:34 fetching corpus: 3500, signal 170500/223394 (executing program) 2022/09/27 01:35:34 fetching corpus: 3550, signal 171039/224424 (executing program) 2022/09/27 01:35:34 fetching corpus: 3600, signal 171494/225362 (executing program) 2022/09/27 01:35:34 fetching corpus: 3650, signal 171894/226285 (executing program) 2022/09/27 01:35:34 fetching corpus: 3700, signal 172498/227302 (executing program) 2022/09/27 01:35:34 fetching corpus: 3750, signal 173197/228300 (executing program) 2022/09/27 01:35:34 fetching corpus: 3800, signal 174284/229503 (executing program) 2022/09/27 01:35:34 fetching corpus: 3850, signal 175087/230553 (executing program) 2022/09/27 01:35:35 fetching corpus: 3900, signal 175569/231481 (executing program) 2022/09/27 01:35:35 fetching corpus: 3950, signal 176955/232761 (executing program) 2022/09/27 01:35:35 fetching corpus: 4000, signal 177841/233813 (executing program) 2022/09/27 01:35:35 fetching corpus: 4050, signal 178799/234938 (executing program) 2022/09/27 01:35:35 fetching corpus: 4100, signal 179456/235881 (executing program) 2022/09/27 01:35:35 fetching corpus: 4150, signal 180392/237025 (executing program) 2022/09/27 01:35:35 fetching corpus: 4200, signal 180782/237871 (executing program) 2022/09/27 01:35:35 fetching corpus: 4250, signal 181634/238868 (executing program) 2022/09/27 01:35:35 fetching corpus: 4300, signal 182720/239901 (executing program) 2022/09/27 01:35:36 fetching corpus: 4350, signal 183227/240752 (executing program) 2022/09/27 01:35:36 fetching corpus: 4400, signal 183714/241566 (executing program) 2022/09/27 01:35:36 fetching corpus: 4450, signal 184247/242446 (executing program) 2022/09/27 01:35:36 fetching corpus: 4500, signal 184869/243302 (executing program) 2022/09/27 01:35:36 fetching corpus: 4550, signal 185508/244184 (executing program) 2022/09/27 01:35:36 fetching corpus: 4600, signal 185812/244923 (executing program) 2022/09/27 01:35:36 fetching corpus: 4650, signal 186960/245878 (executing program) 2022/09/27 01:35:36 fetching corpus: 4700, signal 188182/247035 (executing program) 2022/09/27 01:35:36 fetching corpus: 4750, signal 188845/247844 (executing program) 2022/09/27 01:35:37 fetching corpus: 4800, signal 189233/248602 (executing program) 2022/09/27 01:35:37 fetching corpus: 4850, signal 189687/249375 (executing program) 2022/09/27 01:35:37 fetching corpus: 4900, signal 190422/250184 (executing program) 2022/09/27 01:35:37 fetching corpus: 4950, signal 191521/251140 (executing program) 2022/09/27 01:35:37 fetching corpus: 5000, signal 192150/251887 (executing program) 2022/09/27 01:35:37 fetching corpus: 5050, signal 192617/252594 (executing program) 2022/09/27 01:35:37 fetching corpus: 5100, signal 193147/253321 (executing program) 2022/09/27 01:35:37 fetching corpus: 5150, signal 193566/254028 (executing program) 2022/09/27 01:35:37 fetching corpus: 5200, signal 194250/254800 (executing program) 2022/09/27 01:35:38 fetching corpus: 5250, signal 194659/255457 (executing program) 2022/09/27 01:35:38 fetching corpus: 5300, signal 195041/256134 (executing program) 2022/09/27 01:35:38 fetching corpus: 5350, signal 195659/256883 (executing program) 2022/09/27 01:35:38 fetching corpus: 5400, signal 196482/257590 (executing program) 2022/09/27 01:35:38 fetching corpus: 5450, signal 197095/258246 (executing program) 2022/09/27 01:35:38 fetching corpus: 5500, signal 197472/258906 (executing program) 2022/09/27 01:35:38 fetching corpus: 5550, signal 197945/259577 (executing program) 2022/09/27 01:35:38 fetching corpus: 5600, signal 198451/260221 (executing program) 2022/09/27 01:35:38 fetching corpus: 5650, signal 198947/260920 (executing program) 2022/09/27 01:35:38 fetching corpus: 5700, signal 199288/261521 (executing program) 2022/09/27 01:35:39 fetching corpus: 5750, signal 199774/262202 (executing program) 2022/09/27 01:35:39 fetching corpus: 5800, signal 200566/262854 (executing program) 2022/09/27 01:35:39 fetching corpus: 5850, signal 201237/263491 (executing program) 2022/09/27 01:35:39 fetching corpus: 5900, signal 201488/264090 (executing program) 2022/09/27 01:35:39 fetching corpus: 5950, signal 202340/264732 (executing program) 2022/09/27 01:35:39 fetching corpus: 6000, signal 202948/265348 (executing program) 2022/09/27 01:35:39 fetching corpus: 6050, signal 203215/265924 (executing program) 2022/09/27 01:35:39 fetching corpus: 6100, signal 203872/266524 (executing program) 2022/09/27 01:35:39 fetching corpus: 6150, signal 204786/267145 (executing program) 2022/09/27 01:35:40 fetching corpus: 6200, signal 205349/267673 (executing program) 2022/09/27 01:35:40 fetching corpus: 6250, signal 205838/268240 (executing program) 2022/09/27 01:35:40 fetching corpus: 6300, signal 206205/268772 (executing program) 2022/09/27 01:35:40 fetching corpus: 6350, signal 206691/269266 (executing program) 2022/09/27 01:35:40 fetching corpus: 6400, signal 207008/269766 (executing program) 2022/09/27 01:35:40 fetching corpus: 6450, signal 207431/270276 (executing program) 2022/09/27 01:35:40 fetching corpus: 6500, signal 207923/270783 (executing program) 2022/09/27 01:35:40 fetching corpus: 6550, signal 208499/271279 (executing program) 2022/09/27 01:35:40 fetching corpus: 6600, signal 209311/271779 (executing program) 2022/09/27 01:35:41 fetching corpus: 6650, signal 209732/272261 (executing program) 2022/09/27 01:35:41 fetching corpus: 6700, signal 210330/272746 (executing program) 2022/09/27 01:35:41 fetching corpus: 6750, signal 210881/273173 (executing program) 2022/09/27 01:35:41 fetching corpus: 6800, signal 211263/273173 (executing program) 2022/09/27 01:35:41 fetching corpus: 6850, signal 212423/273177 (executing program) 2022/09/27 01:35:41 fetching corpus: 6900, signal 212970/273177 (executing program) 2022/09/27 01:35:41 fetching corpus: 6950, signal 213496/273177 (executing program) 2022/09/27 01:35:41 fetching corpus: 7000, signal 213934/273181 (executing program) 2022/09/27 01:35:42 fetching corpus: 7050, signal 214396/273181 (executing program) 2022/09/27 01:35:42 fetching corpus: 7100, signal 214926/273185 (executing program) 2022/09/27 01:35:42 fetching corpus: 7150, signal 215211/273193 (executing program) 2022/09/27 01:35:42 fetching corpus: 7200, signal 215713/273195 (executing program) 2022/09/27 01:35:42 fetching corpus: 7250, signal 216145/273197 (executing program) 2022/09/27 01:35:42 fetching corpus: 7300, signal 216493/273197 (executing program) 2022/09/27 01:35:42 fetching corpus: 7350, signal 216977/273199 (executing program) 2022/09/27 01:35:42 fetching corpus: 7400, signal 217387/273200 (executing program) 2022/09/27 01:35:42 fetching corpus: 7432, signal 217638/273211 (executing program) 2022/09/27 01:35:42 fetching corpus: 7432, signal 217638/273211 (executing program) 2022/09/27 01:35:45 starting 8 fuzzer processes 01:35:45 executing program 1: prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) 01:35:45 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) fstatfs(r0, &(0x7f0000000000)=""/244) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000100)={0x2, 0x1f, 0xa424}) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0xabf, 0x200000) r2 = getpid() r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000700), 0x4800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x113001, 0xa) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) sendmsg$netlink(r1, &(0x7f0000000880)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)=[{&(0x7f00000001c0)={0x1b4, 0x30, 0x0, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x110, 0x67, 0x0, 0x1, [@typed={0xc, 0x82, 0x0, 0x0, @u64=0x8}, @generic="8633ba5ed2e7c1ef26d4e61ce7fb17c65d7d0896ea2ebd2c1cc5c35e26eb0782701ed796f54112a3f86b8a6fd375b261ff75309fa27139c911e7ad081648dd51eddf01377107c81758803639d7cbee05114760e8ab59078c4dd67c6f09001e7b31dcbf0acb984d2541b1cb29751fba3198d3bc318dc2c2e9345e278d18f907", @generic="62a85f6a360ecb3a5682ea6079fd956368e9ba404836ba74140067d03c32140e25aaf078def204912120f26aa432635fb861dbbb8d35428d7f3fa37e67252f089163138550011975e1b21ff118743714296eba7f01b7b91829ca57967c0d3b24616b0d6a41ff20025979ceaa3c50074745301a7726ccf5122aeaec48121553b68d"]}, @typed={0x8, 0x8a, 0x0, 0x0, @fd=r0}, @generic="5b75958fabd9a45e5bf2fb07f9e466e6fbe0b94369e5c3389c1e0fa96d0170dedbfb509ef796dedb82a6e7130a02e7b6e75acb42b9535cb1cbf3188ff56ab179ca3e4525c089edaa", @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x46, 0x0, 0x0, @fd=r0}, @nested={0x14, 0x7e, 0x0, 0x1, [@generic, @typed={0x8, 0xb, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x65, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x8, 0x2e, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0x9}]}, 0x1b4}, {&(0x7f0000000380)={0x2d8, 0x13, 0x10, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0xa, 0x0, 0x0, @ipv4=@remote}, @typed={0xe, 0x54, 0x0, 0x0, @str='-\xf1&(^(l(*\x00'}, @nested={0x80, 0x67, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x401}, @generic="1283b9f48986dd82a439770763beb1691d2877256816dd61592cd2e2e48651eb77b65ad74eb05a2c21d74f4b28505789b938eb5ce4311c9d8d5eb6ae25b97221a5cd45575ac8f67ca006549aef455548b712ea4687afca8b6dde483364b468058a2365f2c9decc43e89e30ecae3c6d99", @typed={0x4, 0x63}]}, @nested={0x225, 0x1e, 0x0, 0x1, [@typed={0x8, 0x62, 0x0, 0x0, @u32=0x5}, @generic="6862fe9a99b3db8ccf33a06a61e54c5e8cb84128cb51427204e35073e12b35f491420a624dd94e9f7f49fac49ed509f31bd0edbfb630f40b10c659754ef24196ba5eb0be4e24b01d2222964462967abb77db666a771053cd0fa621ff07a788516c650c62ac78a486d9aba11f0162e4e8384faf07b370cacab64ecabdf1cef72927a58575e8a7ed8314c3c38a91ebef738efeb54de43f0606c635ab3e2357516d1f1e", @generic="748582509752cc3562e02215ab2153ab67ee137ee1d640d7585f4a9ec9d2a053f284dfca9014277d445d6f3c9c2f310e048cccd54878ae4dc7e85723e4ee9a312a3fc2cf259be9e1794c5ecfd4888a6e938fa039dd8f6be0ebfe8b1ee9013fcec1cc40145cc016b277e7623cb10a9106b6630667370e2558eaa440ed70c5baae5d50814ddd3ad863b9c35ab5a5df1c9acd8297bce732eea0c55c1f3c1645", @generic="006350ad573d2a862496c81aa1e0af7a7ae629291a93d681d9fd432b92b74519d8050a7463a144835bd8573d91c5bee253bb1d3d91164d39f17f936a86a058411a6bf4230b5aeb023854c07011f70714b19ae244fcea4bcd611321e14dfb491cd2a0eba1dbe7b90b83b7597f72e5127a11e11d29538496a57463dc0935a8312d0b278a854495f2407688", @typed={0x4, 0x1c}, @typed={0x8, 0x58, 0x0, 0x0, @uid}, @generic="7fc91fb6cfb79e787e4a555b031e19a4262f5180eb3395f5d4ccd4c128a210756471b10a5a2fab8847c1747fb7020ac82e7be85d499e013654e54a92f2cd6ac1c92b4e"]}, @typed={0x8, 0xd, 0x0, 0x0, @u32=0x89}]}, 0x2d8}], 0x2, &(0x7f0000000800)=[@rights={{0x18, 0x1, 0x1, [r3, r4]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, r7, r8, r0]}}], 0x50, 0x10}, 0x40880) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3fb, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4020803}, 0x11) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xe4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xd0, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0xaa4acd3596e41f0a}, 0x11) clone3(&(0x7f0000000dc0)={0x10000, &(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00), {0x27}, &(0x7f0000000c40)=""/39, 0x27, &(0x7f0000000c80)=""/230, &(0x7f0000000d80)=[r2, r2], 0x2, {r1}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$hidraw(r9, &(0x7f0000000e80)="c18b4f3dee7b5fe0d73416ce8dcaae848278352a4dc1edbce54aa24275fcb6765f993b7edcfd5ad18ff29b3e9f59f86116c3932dcfe1485cc16b8577248747d6d3793a2d583e5afc932b0302d26b86e291a92f7ade365db4da538f4fe486a700850cdf7af1c4f14e", 0x68) r10 = syz_open_dev$mouse(&(0x7f0000000f00), 0x7fff, 0x80801) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) 01:35:45 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast2, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="12e84298c1a3789fa89a3bec08352d0384fde19e4608818caaa64b853338cabcd1626e7d2146d446649f46514d", 0x2d}, {&(0x7f0000000080)="9b6ce71065e8ddf3a343b8c615ee1d529a2cfe923343dda3ba6aac23b017be97f7688ea568920779ac7151dfe009777827c3feb9a40457145e8a131f2532e51fe4f39fa800feff2c281bc6ef9fd41a2f9877354b68ebf029b1371b10e77271410c99d6a98e205b64d07074c38d9f88672d388bd37cf462ce6b3d1480f03dc2cd67f35f8d36ecb35e82907eb65c8e7c52aa31facbcd8c7af8b36c147a5f1769ac7b276212d01038dc896fc0310c8f846562fad9a958d269aaad550f9d8e4f551dd6ac7424655fc22458999ba1516bf411fa5a37e7a9f37329e212b6fffb99143c25237e5e37945a3b2c00984dac1b47b22bc1d6fd6ac2baf6", 0xf8}], 0x2}}], 0x1, 0x800) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0xa, 0x4e22, 0x10000, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="e027645ec658866510b341e218faf33db1cfd413530379d8146e0e1f166789db8b28", 0x22}, {&(0x7f0000000280)="06999a4c8f28cc2f843714974ede6a4c65", 0x11}, {&(0x7f00000002c0)="ad3504b0d913e59fed365dc2a74c37076fb14b550126785a4b26d3c563d64327740ae287783823e0570013fddc7b08336eb5af62bf49a01f753df0ea692b3e5dded094d9c0ea02bacee3205a133f8ca95cec7bd0e85ac63c054d600da5202058b30385ae714ce38e305464c3555234", 0x6f}, {&(0x7f0000000340)="4fef80a9ef61c67ee6b0df668394e51e5b120da2cea448c0e87e1436ddc2559def04db70ab4817e5c733d2d6c93a5a7ce212cca41f0fa1140380d7b5aed7a4bad737f5ff76f38ce40a0866f93c5b919e93e125e5aeda1868f59200a8d9dcd1671de4e5c39a5ecc30998bc9dc8346affa4964a4a49a8936020ddd10d5dc46928f55f45ccb2821dc751a550aa106825df411a923277acc5e63cc879fff242901e179e154937d91c39e4e1c5a9eb5c6acd74353cfae97ca3a2b304b3e8b9a42e1190e3a9cd6c336ff7d33f81cc16ea7dc6eb3af8ee764660f14110b1902a274a946bb850372", 0xe4}], 0x4, &(0x7f0000000480)=[@hopopts={{0x28, 0x29, 0x36, {0x11, 0x1, '\x00', [@ra={0x5, 0x2, 0xf75}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x3ff}]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x0, 0x7, '\x00', [@enc_lim, @ra={0x5, 0x2, 0x3}, @ra, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x2, 0x6, [0x8, 0x2, 0x8001, 0x8]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @dstopts={{0x40, 0x29, 0x37, {0x1d, 0x4, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x110}, 0x40000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x20000, 0x0) pwrite64(r0, &(0x7f0000000640)="035a404fd6838543977d440a817cd0600e2759756e935cdd9089bf0f369192a6e7fee0357671613663773938c9a36d2895e17673a5f62165a6a2c0af68078fef3d460d5f669e4d7f33c5179f0851012f75c37762eb883b8e3992b70dfdd0a89e38e7a27fb24479617702457150a9aef69499e8110f542879fddfd32748139e400ffdae131661d25850bfb8fbccb60db77020a0bee2f9221e6da299f1b449a369904cee23afab080d758e41e7764df48c6ac00c7addc63f03eb91b739", 0xbc, 0x9) r1 = dup(r0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000700)={0x31, 0x2d, 0x6, 0x6, 0x0, 0x80, 0x4, 0xfc, 0xffffffffffffffff}) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000740)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{0x1000, 0x5, 0x5, 0xfffffeff}]}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000800)={0x0, r1, 0x20, 0x7, 0x3, 0xda}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_freezer_state(r1, &(0x7f0000000880), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000008c0)={0x0, r3, 0x9, 0x7, 0x7, 0x81}) r5 = dup2(r2, r0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000940)={{r6}, "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"}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x98, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xc524}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xedd}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x401}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24048804}, 0x40814) pipe2(&(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000001b00)=0x7, &(0x7f0000001b40)=0x1) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000001b80)={@local, 0x0}, &(0x7f0000001bc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001c80)={'ip6_vti0\x00', &(0x7f0000001c00)={'ip6tnl0\x00', r9, 0x29, 0x4, 0x7, 0x47, 0x18, @dev={0xfe, 0x80, '\x00', 0x36}, @local, 0x7, 0x10, 0x3, 0x6}}) 01:35:45 executing program 3: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x34400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x248, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39c9b64b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8001, @local, 0x1f}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffcb2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec5}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x800}, 0x8801) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x6, 0x7, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x1, 0x10, 0x7}}) recvmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/212, 0xd4}, {&(0x7f00000005c0)=""/125, 0x7d}, {&(0x7f0000000640)=""/151, 0x97}], 0x3, &(0x7f0000000740)=""/35, 0x23}, 0x10000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'erspan0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x6, 0x3, {{0xd, 0x4, 0x2, 0x0, 0x34, 0x65, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x6f, 0x3, 0x7, [{@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xcd}, {@private=0xa010102, 0x6}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'tunl0\x00', &(0x7f0000000940)={'gre0\x00', 0x0, 0x1, 0x8, 0x0, 0x4, {{0x2f, 0x4, 0x2, 0x1, 0xbc, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @empty, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x32, 0x3, [{0x7, 0x7, "be4ae27280"}, {0x2, 0x3, "a4"}, {0x7, 0xf, "55d74c93b569fec8906b994111"}, {0x1, 0xc, "8af7a0127bbbf968f413"}, {0x6, 0x3, "e6"}, {0x5, 0x4, "bbbd"}]}, @cipso={0x86, 0x1a, 0x3, [{0x2, 0x11, "5a800f4f2d03e08c88fea2c1ac52da"}, {0x5, 0x3, '\a'}]}, @ssrr={0x89, 0x1b, 0x6b, [@broadcast, @private=0xa010100, @private=0xa010100, @loopback, @broadcast, @local]}, @timestamp_addr={0x44, 0x3c, 0xfe, 0x1, 0x8, [{@remote, 0xd3}, {@private=0xa010102, 0x3}, {@private=0xa010101, 0x6}, {@rand_addr=0x64010102, 0x3}, {@multicast2}, {@loopback, 0x9fd}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6gre0\x00', 0x0, 0x29, 0xfc, 0x4, 0x4, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x40, 0x3f, 0x2}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x1a0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x44000}, 0x20000014) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000e00)={'syztnl0\x00', &(0x7f0000000d80)={'sit0\x00', r1, 0x29, 0x7, 0x7d, 0x7ff, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x40, 0x6, 0x7}}) r6 = openat(0xffffffffffffffff, &(0x7f0000000e40)='./file0\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, r7, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x70}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000fc0)={'ip6gre0\x00', r5, 0x29, 0x6, 0x3, 0xaed, 0xe, @mcast1, @private2, 0x8, 0x7800, 0x81, 0x3}}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000001080)={@private1, 0x0}, &(0x7f00000010c0)=0x14) r11 = open(&(0x7f0000001100)='./file0\x00', 0x711202, 0x132) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000001180), r6) sendmsg$SMC_PNETID_ADD(r11, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x20, r12, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4400c000) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r11, 0x89fa, &(0x7f0000001340)={'syztnl1\x00', &(0x7f00000012c0)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xee, 0x3, 0x8, @mcast1, @empty, 0x80, 0x20, 0x9, 0xa64}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001400)={'ip6tnl0\x00', &(0x7f0000001380)={'sit0\x00', r3, 0x0, 0xc5, 0x3, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x8000, 0x40, 0x44c, 0xfffffff8}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001640)={0x198, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8010}, 0x4040010) [ 69.721375] audit: type=1400 audit(1664242545.804:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:35:45 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = clone3(&(0x7f0000000540)={0x10180000, &(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, {0xa}, &(0x7f0000000440)=""/88, 0x58, &(0x7f00000004c0)=""/51, &(0x7f0000000500)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) getresgid(&(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000680), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000700)=""/11, 0xb}, {&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/160, 0xa0}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000a00)=""/181, 0xb5}, {&(0x7f0000000ac0)=""/103, 0x67}, {&(0x7f0000000b40)=""/136, 0x88}, {&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/207, 0xcf}], 0xa, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xc8}, 0x12063) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40, 0xfff}}, './file0\x00'}) r15 = clone3(&(0x7f0000002240)={0x80000, &(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0, {0x2d}, &(0x7f0000001180)=""/110, 0x6e, &(0x7f0000001200)=""/4096, &(0x7f0000002200)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r18 = getuid() stat(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000002480)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000080)={0x1ac, 0x1a, 0x200, 0x70bd2a, 0x25dfdbff, "", [@typed={0xc, 0x83, 0x0, 0x0, @str=',^\'--/:\x00'}, @nested={0x190, 0x2c, 0x0, 0x1, [@generic="40bb6661762c0c0872b9f239c93e6fbe55698bdd54bb3c2c42dc67a92d26e0a208671bf606a099b1b97c7bb9d06eab169ccc2b8d4be40b131bf5372f0d48db0247c4280b5423cf0c7aa82eb79f65d2a6fea0ffe9a35fb20335f9ecf7ec90d0999d1d3dbe453908248cb03dd11a9e826eb31bf24be2816af6381e31a0fa5f4a25495fa389f203387bff4424c5944da704c0789d90863c8a97bc41150c0364691649d457af3aef3096013cbb5bcb632d060faa36e94724cb57ef0d45ff6ea020fc979c0b7301d9fb872a526a34", @generic="5ea477c018215d8da59051806ef533051db1328e280e784afc542c24a90ac2756f5f4e172484312ab821aa43f27c6a292271885d30c10f659d816316818495b34038f315cf146535048004c25fc1337f66e28db1b52fca8cb4ddf626107108e28bd084c1694c13601a2056074f4f26c8fd17355c028f533d7c897c27145690ea92323465271c31282cb13e53020bea429a06d5907024feca623d022e3e8b88e51e038120ebabac980f6fc7b7e460b7f291037bdd7d9ae5780467c2a23b88b3a6"]}]}, 0x1ac}, {&(0x7f0000000240)={0xd4, 0x32, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x5a, 0x0, 0x0, @uid}, @nested={0xbb, 0x92, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='#\x00'}, @typed={0x8, 0x20, 0x0, 0x0, @fd}, @generic="0048f171035b6d103c7b496935f3c2411dc3c17085b8419b8fa900e2f8296eda418ccf6c8dbb366cc1b4a728719f7c0cbf7fe96905ae422125896e149ea56e02d4af9bb67dc944ea8608cf9d9105075152", @typed={0x8, 0x40, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @typed={0x6, 0x93, 0x0, 0x0, @str='@\x00'}, @generic="9ae6a4771c417ba9980392b3e52c602a0c3fa4ab5b656c2bee861e78278c455d528beb8187530bcd8e5d2e082862a5f893fa9ff1af8463b5eec5", @typed={0xc, 0x66, 0x0, 0x0, @u64=0x7}]}]}, 0xd4}], 0x2, &(0x7f0000002380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r13}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r14, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r16, r18}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r19, 0xee01}}}], 0xd8}, 0x6000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002540)={{0x1, 0x1, 0x18, r9, {r19, r4}}, './file0\x00'}) lchown(&(0x7f00000024c0)='./file0\x00', r12, r21) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000002580)={0x3f, 0x94bb, 0x2, 0x7, 0x2, 0x1}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000002740)={0x0}, &(0x7f0000002780)=0xc) clone3(&(0x7f0000002800)={0x80800000, &(0x7f00000025c0), &(0x7f0000002600), &(0x7f0000002640), {0x1}, &(0x7f0000002680)=""/79, 0x4f, &(0x7f0000002700)=""/23, &(0x7f00000027c0)=[r6, r15, r22, r11, r17], 0x5, {r20}}, 0x58) r23 = getpid() clone3(&(0x7f0000002b80)={0x310002e00, &(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900), {0x3c}, &(0x7f0000002940)=""/250, 0xfa, &(0x7f0000002a40)=""/226, &(0x7f0000002b40)=[r6, r23, r3, r1], 0x4, {r0}}, 0x58) r24 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf32(r24, &(0x7f0000002c00)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x1, 0xd0, 0x1, 0x6, 0x3, 0x3, 0x1ff, 0x242, 0x38, 0x345, 0x7, 0x3, 0x20, 0x1, 0x8, 0x0, 0x400}, [{0x2, 0x80000001, 0x9, 0x0, 0x100, 0x0, 0x0, 0x3}, {0x6474e551, 0x8000, 0xffffffff, 0xe9, 0x3, 0x6, 0x7, 0x4}], "a9e86148f864240ec4b9e27db34ed54ff3670d3e1db5ce2d37f662e0687397b432957db9fb2be7ec115a6e0d4637d0f8b4f8895eb730b0d41c4a89173ab1f27b8108fe82f55f1d23d311e93b078e9c430eacffdd3d447a846d1f7efa6f36809e7e895438145e1a180d19327937c79dbaee6bbc5c9c9029174f0bfaeb75f44b90489a2d74ec5d2b8da5908fcbc03d2f8f6caa4a35ca61a23baae6f1d4d6c705067a7f918f0b23ab1a0d3612a26b88050d1a6a21c94cc6174764", ['\x00', '\x00']}, 0x331) waitid$P_PIDFD(0x3, r10, &(0x7f0000002f40), 0x8, &(0x7f0000002fc0)) 01:35:45 executing program 5: prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) 01:35:45 executing program 6: r0 = syz_io_uring_setup(0x6ec7, &(0x7f0000000000)={0x0, 0x93cc, 0x8, 0x2, 0x67}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x4000}, 0x1}, 0x1) io_uring_enter(r0, 0x705, 0x210a, 0x1, &(0x7f0000000140)={[0x3]}, 0x8) r3 = syz_io_uring_setup(0x581d, &(0x7f0000000180)={0x0, 0x5633, 0x4, 0x0, 0x1b4, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='tracefs\x00', 0x40, &(0x7f0000000340)='\x00') r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x6, 0x4000, @fd=r3, 0x10000000000, 0x3b6, 0x5, 0x12, 0x1, {0x3, r5}}, 0x9) r6 = syz_mount_image$nfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x1, &(0x7f0000000500)=[{&(0x7f0000000440)="4dce331f2381e28f260e4c754cf2f661c76c9bc19aa0ef82a58ec2b98040b14e049ddf86496b535b31a31154b760f9e80ae4295a39497dd505a0adbf9198dd54d5f600e99fb823c70ab43846314a4f24bd0c8b8e5001f9cf110ae42e0eb013f8691d75c9d1daf4812264f8800995630a74cbd8c16707e2f42007eaa8abf65b9f27875bd951a707fad9a0", 0x8a, 0x7}], 0x2058020, &(0x7f0000000540)={[{'tracefs\x00'}, {'--:.\''}, {'\x00'}, {'\xd0'}, {'\\-\'\'&)-[@'}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, '$\\+&##/'}}]}) r7 = openat2(r6, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x42000, 0x100, 0x5}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x2}}, './file0\x00'}) bind$unix(r8, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffd) ioctl$FIOCLEX(r9, 0x5451) ioctl$int_in(r6, 0x5421, &(0x7f0000000700)=0xfffffffffffffff8) accept4$unix(r7, &(0x7f0000000740)=@abs, &(0x7f00000007c0)=0x6e, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r10, 0x80106720, &(0x7f0000001880)={0x1, &(0x7f0000001840)=[{0x100, 0x1000, &(0x7f0000000840)="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", 0x1}]}) fsync(r10) lgetxattr(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)=@known='system.advise\x00', &(0x7f0000001940)=""/236, 0xec) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000001a40)={0x1, 0x9, 0x7fffffff, {0xfff, 0x8}, 0x1000000, 0x9c9c}) 01:35:45 executing program 7: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x8, 0x1, 0x1, 0x0, 0x4, 0x8, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x1adc, 0x5}, 0x40, 0x8, 0x6, 0x1, 0xe3e, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x1) r0 = getpid() r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x1c800) r2 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x1, 0x7f, 0x8, 0x7b, 0x0, 0x5, 0x60100, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x5, 0x1}, 0x4081c, 0x1000, 0x4, 0x0, 0x7, 0x80, 0x9, 0x0, 0x1, 0x0, 0x22}, r0, 0x9, r1, 0x1) r3 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2, 0x3, 0x1, 0x20, 0x0, 0x8001, 0x182, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff890e, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x8200, 0x1, 0x5, 0x0, 0xf5bee16, 0x7ff, 0x8, 0x0, 0x0, 0x0, 0x5}, r0, 0x9, 0xffffffffffffffff, 0x2) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000240)=0xf2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000002c0), 0x8) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000300)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$int_in(r5, 0x5421, &(0x7f0000000340)=0xffffffff) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000380), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x7ff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0xe}, @remote, 0xff000000, 0xff000000, 0xc, 0x4, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x7, 0x100, 0x8001, 0x5, 0x200, 0x1, 'wg0\x00', 'gretap0\x00', {0xff}, {}, 0x0, 0x21}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @remote, @multicast1, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @multicast2, @private=0xa010101, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000800)) r6 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000880)=0xffffffffffffffff) perf_event_open(&(0x7f0000000900)={0x3, 0x80, 0x1, 0x5, 0x8, 0xdd, 0x0, 0x4, 0x20000, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000008c0), 0x8}, 0x40000, 0x0, 0x7, 0x0, 0x2, 0x10000, 0x1ff, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0) [ 71.057761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.059692] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.062747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.066323] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.072337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.075810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.080532] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.133437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.135359] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.137246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.139629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.142328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.147868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.149313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.149384] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.152734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.165117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.166733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.168032] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.170607] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.172149] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.173586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.178019] Bluetooth: hci3: HCI_REQ-0x0c1a [ 71.178019] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.179879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.180354] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.181164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.184961] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.191874] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.193196] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.196248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.198312] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.199385] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.201037] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.202313] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.203559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.204522] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.207702] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.213909] Bluetooth: hci7: HCI_REQ-0x0c1a [ 71.231115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.232347] Bluetooth: hci2: HCI_REQ-0x0c1a [ 71.233883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.239871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.241807] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.243346] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.250636] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.310946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.313340] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.325655] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.327476] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.329254] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.343712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.345117] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.354329] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.381144] Bluetooth: hci4: HCI_REQ-0x0c1a [ 71.381997] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.141986] Bluetooth: hci0: command 0x0409 tx timeout [ 73.206540] Bluetooth: hci3: command 0x0409 tx timeout [ 73.269551] Bluetooth: hci2: command 0x0409 tx timeout [ 73.269587] Bluetooth: hci7: command 0x0409 tx timeout [ 73.270863] Bluetooth: hci1: command 0x0409 tx timeout [ 73.271723] Bluetooth: hci6: command 0x0409 tx timeout [ 73.397514] Bluetooth: hci4: command 0x0409 tx timeout [ 73.462527] Bluetooth: hci5: command 0x0409 tx timeout [ 75.189511] Bluetooth: hci0: command 0x041b tx timeout [ 75.253577] Bluetooth: hci3: command 0x041b tx timeout [ 75.317746] Bluetooth: hci6: command 0x041b tx timeout [ 75.319796] Bluetooth: hci1: command 0x041b tx timeout [ 75.320223] Bluetooth: hci7: command 0x041b tx timeout [ 75.320789] Bluetooth: hci2: command 0x041b tx timeout [ 75.445486] Bluetooth: hci4: command 0x041b tx timeout [ 75.509449] Bluetooth: hci5: command 0x041b tx timeout [ 77.237534] Bluetooth: hci0: command 0x040f tx timeout [ 77.301595] Bluetooth: hci3: command 0x040f tx timeout [ 77.365464] Bluetooth: hci2: command 0x040f tx timeout [ 77.365928] Bluetooth: hci7: command 0x040f tx timeout [ 77.366329] Bluetooth: hci1: command 0x040f tx timeout [ 77.366802] Bluetooth: hci6: command 0x040f tx timeout [ 77.493446] Bluetooth: hci4: command 0x040f tx timeout [ 77.557457] Bluetooth: hci5: command 0x040f tx timeout [ 79.288020] Bluetooth: hci0: command 0x0419 tx timeout [ 79.349787] Bluetooth: hci3: command 0x0419 tx timeout [ 79.413536] Bluetooth: hci6: command 0x0419 tx timeout [ 79.414279] Bluetooth: hci1: command 0x0419 tx timeout [ 79.415227] Bluetooth: hci7: command 0x0419 tx timeout [ 79.415974] Bluetooth: hci2: command 0x0419 tx timeout [ 79.541477] Bluetooth: hci4: command 0x0419 tx timeout [ 79.605614] Bluetooth: hci5: command 0x0419 tx timeout [ 125.472596] ======================================================= [ 125.472596] WARNING: The mand mount option has been deprecated and [ 125.472596] and is ignored by this kernel. Remove the mand [ 125.472596] option from the mount to silence this warning. [ 125.472596] ======================================================= 01:36:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x80, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) clone3(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4c6182, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) epoll_create(0x4) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 125.629851] audit: type=1400 audit(1664242601.713:7): avc: denied { open } for pid=3895 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.631648] audit: type=1400 audit(1664242601.713:8): avc: denied { kernel } for pid=3895 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.655589] ------------[ cut here ]------------ [ 125.655611] [ 125.655615] ====================================================== [ 125.655618] WARNING: possible circular locking dependency detected [ 125.655622] 6.0.0-rc6-next-20220923 #1 Not tainted [ 125.655629] ------------------------------------------------------ [ 125.655632] syz-executor.6/3896 is trying to acquire lock: [ 125.655638] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 125.655676] [ 125.655676] but task is already holding lock: [ 125.655679] ffff88800d3a4c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.655706] [ 125.655706] which lock already depends on the new lock. [ 125.655706] [ 125.655709] [ 125.655709] the existing dependency chain (in reverse order) is: [ 125.655712] [ 125.655712] -> #3 (&ctx->lock){....}-{2:2}: [ 125.655726] _raw_spin_lock+0x2a/0x40 [ 125.655744] __perf_event_task_sched_out+0x53b/0x18d0 [ 125.655756] __schedule+0xedd/0x2470 [ 125.655769] schedule+0xda/0x1b0 [ 125.655782] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.655794] syscall_exit_to_user_mode+0x19/0x40 [ 125.655805] do_syscall_64+0x48/0x90 [ 125.655822] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.655834] [ 125.655834] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 125.655847] _raw_spin_lock_nested+0x30/0x40 [ 125.655865] raw_spin_rq_lock_nested+0x1e/0x30 [ 125.655878] task_fork_fair+0x63/0x4d0 [ 125.655893] sched_cgroup_fork+0x3d0/0x540 [ 125.655907] copy_process+0x4183/0x6e20 [ 125.655917] kernel_clone+0xe7/0x890 [ 125.655926] user_mode_thread+0xad/0xf0 [ 125.655936] rest_init+0x24/0x250 [ 125.655947] arch_call_rest_init+0xf/0x14 [ 125.655964] start_kernel+0x4c1/0x4e6 [ 125.655979] secondary_startup_64_no_verify+0xe0/0xeb [ 125.655993] [ 125.655993] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 125.656006] _raw_spin_lock_irqsave+0x39/0x60 [ 125.656024] try_to_wake_up+0xab/0x1930 [ 125.656037] up+0x75/0xb0 [ 125.656050] __up_console_sem+0x6e/0x80 [ 125.656065] console_unlock+0x46a/0x590 [ 125.656080] vt_ioctl+0x2822/0x2ca0 [ 125.656093] tty_ioctl+0x7c4/0x1700 [ 125.656104] __x64_sys_ioctl+0x19a/0x210 [ 125.656119] do_syscall_64+0x3b/0x90 [ 125.656135] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.656147] [ 125.656147] -> #0 ((console_sem).lock){....}-{2:2}: [ 125.656160] __lock_acquire+0x2a02/0x5e70 [ 125.656176] lock_acquire+0x1a2/0x530 [ 125.656191] _raw_spin_lock_irqsave+0x39/0x60 [ 125.656209] down_trylock+0xe/0x70 [ 125.656224] __down_trylock_console_sem+0x3b/0xd0 [ 125.656239] vprintk_emit+0x16b/0x560 [ 125.656255] vprintk+0x84/0xa0 [ 125.656270] _printk+0xba/0xf1 [ 125.656281] report_bug.cold+0x72/0xab [ 125.656296] handle_bug+0x3c/0x70 [ 125.656312] exc_invalid_op+0x14/0x50 [ 125.656328] asm_exc_invalid_op+0x16/0x20 [ 125.656339] group_sched_out.part.0+0x2c7/0x460 [ 125.656350] ctx_sched_out+0x8f1/0xc10 [ 125.656359] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.656372] __schedule+0xedd/0x2470 [ 125.656384] schedule+0xda/0x1b0 [ 125.656397] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.656408] syscall_exit_to_user_mode+0x19/0x40 [ 125.656419] do_syscall_64+0x48/0x90 [ 125.656435] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.656447] [ 125.656447] other info that might help us debug this: [ 125.656447] [ 125.656450] Chain exists of: [ 125.656450] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 125.656450] [ 125.656464] Possible unsafe locking scenario: [ 125.656464] [ 125.656466] CPU0 CPU1 [ 125.656469] ---- ---- [ 125.656471] lock(&ctx->lock); [ 125.656476] lock(&rq->__lock); [ 125.656482] lock(&ctx->lock); [ 125.656488] lock((console_sem).lock); [ 125.656494] [ 125.656494] *** DEADLOCK *** [ 125.656494] [ 125.656496] 2 locks held by syz-executor.6/3896: [ 125.656502] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 125.656531] #1: ffff88800d3a4c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.656558] [ 125.656558] stack backtrace: [ 125.656560] CPU: 0 PID: 3896 Comm: syz-executor.6 Not tainted 6.0.0-rc6-next-20220923 #1 [ 125.656573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.656581] Call Trace: [ 125.656584] [ 125.656589] dump_stack_lvl+0x8b/0xb3 [ 125.656606] check_noncircular+0x263/0x2e0 [ 125.656622] ? format_decode+0x26c/0xb50 [ 125.656638] ? print_circular_bug+0x450/0x450 [ 125.656655] ? enable_ptr_key_workfn+0x20/0x20 [ 125.656669] ? __lockdep_reset_lock+0x180/0x180 [ 125.656686] ? format_decode+0x26c/0xb50 [ 125.656702] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 125.656720] __lock_acquire+0x2a02/0x5e70 [ 125.656741] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 125.656763] lock_acquire+0x1a2/0x530 [ 125.656779] ? down_trylock+0xe/0x70 [ 125.656795] ? lock_release+0x750/0x750 [ 125.656813] ? find_held_lock+0x2c/0x110 [ 125.656829] ? vprintk+0x84/0xa0 [ 125.656847] _raw_spin_lock_irqsave+0x39/0x60 [ 125.656865] ? down_trylock+0xe/0x70 [ 125.656881] down_trylock+0xe/0x70 [ 125.656896] ? vprintk+0x84/0xa0 [ 125.656912] __down_trylock_console_sem+0x3b/0xd0 [ 125.656929] vprintk_emit+0x16b/0x560 [ 125.656948] vprintk+0x84/0xa0 [ 125.656964] _printk+0xba/0xf1 [ 125.656975] ? record_print_text.cold+0x16/0x16 [ 125.656989] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 125.657002] ? lock_downgrade+0x6d0/0x6d0 [ 125.657019] ? report_bug.cold+0x66/0xab [ 125.657037] ? group_sched_out.part.0+0x2c7/0x460 [ 125.657048] report_bug.cold+0x72/0xab [ 125.657066] handle_bug+0x3c/0x70 [ 125.657083] exc_invalid_op+0x14/0x50 [ 125.657100] asm_exc_invalid_op+0x16/0x20 [ 125.657112] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.657126] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.657137] RSP: 0018:ffff888019ea7c48 EFLAGS: 00010006 [ 125.657146] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.657153] RDX: ffff888040d18000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 125.657161] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001 [ 125.657168] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d3a4c00 [ 125.657175] R13: ffff88806ce3d140 R14: ffffffff8547d1a0 R15: 0000000000000002 [ 125.657186] ? group_sched_out.part.0+0x2c7/0x460 [ 125.657199] ? group_sched_out.part.0+0x2c7/0x460 [ 125.657212] ctx_sched_out+0x8f1/0xc10 [ 125.657225] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.657240] ? lock_is_held_type+0xd7/0x130 [ 125.657253] ? __perf_cgroup_move+0x160/0x160 [ 125.657265] ? set_next_entity+0x304/0x550 [ 125.657282] ? update_curr+0x267/0x740 [ 125.657300] ? lock_is_held_type+0xd7/0x130 [ 125.657313] __schedule+0xedd/0x2470 [ 125.657330] ? io_schedule_timeout+0x150/0x150 [ 125.657345] ? __x64_sys_futex_time32+0x480/0x480 [ 125.657359] schedule+0xda/0x1b0 [ 125.657373] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.657385] syscall_exit_to_user_mode+0x19/0x40 [ 125.657400] do_syscall_64+0x48/0x90 [ 125.657420] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.657432] RIP: 0033:0x7fbae5f9db19 [ 125.657441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.657451] RSP: 002b:00007fbae3513218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.657462] RAX: 0000000000000001 RBX: 00007fbae60b0f68 RCX: 00007fbae5f9db19 [ 125.657470] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbae60b0f6c [ 125.657477] RBP: 00007fbae60b0f60 R08: 000000000000000e R09: 0000000000000000 [ 125.657484] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fbae60b0f6c [ 125.657491] R13: 00007ffd6c1bdb6f R14: 00007fbae3513300 R15: 0000000000022000 [ 125.657504] [ 125.711292] WARNING: CPU: 0 PID: 3896 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 125.712208] Modules linked in: [ 125.712533] CPU: 0 PID: 3896 Comm: syz-executor.6 Not tainted 6.0.0-rc6-next-20220923 #1 [ 125.713331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.714443] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.714990] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.716811] RSP: 0018:ffff888019ea7c48 EFLAGS: 00010006 [ 125.717337] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.718038] RDX: ffff888040d18000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 125.718735] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001 [ 125.719453] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d3a4c00 [ 125.720123] R13: ffff88806ce3d140 R14: ffffffff8547d1a0 R15: 0000000000000002 [ 125.720828] FS: 00007fbae3513700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 125.721625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.722201] CR2: 00007fbae60ad000 CR3: 0000000017d7c000 CR4: 0000000000350ef0 [ 125.722902] Call Trace: [ 125.723165] [ 125.723416] ctx_sched_out+0x8f1/0xc10 [ 125.723811] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.724333] ? lock_is_held_type+0xd7/0x130 [ 125.724774] ? __perf_cgroup_move+0x160/0x160 [ 125.725229] ? set_next_entity+0x304/0x550 [ 125.725664] ? update_curr+0x267/0x740 [ 125.726071] ? lock_is_held_type+0xd7/0x130 [ 125.726508] __schedule+0xedd/0x2470 [ 125.726891] ? io_schedule_timeout+0x150/0x150 [ 125.727367] ? __x64_sys_futex_time32+0x480/0x480 [ 125.727830] schedule+0xda/0x1b0 [ 125.728181] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.728679] syscall_exit_to_user_mode+0x19/0x40 [ 125.729150] do_syscall_64+0x48/0x90 [ 125.729538] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.730062] RIP: 0033:0x7fbae5f9db19 [ 125.730434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.732216] RSP: 002b:00007fbae3513218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.732972] RAX: 0000000000000001 RBX: 00007fbae60b0f68 RCX: 00007fbae5f9db19 [ 125.733683] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbae60b0f6c [ 125.734384] RBP: 00007fbae60b0f60 R08: 000000000000000e R09: 0000000000000000 [ 125.735085] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fbae60b0f6c [ 125.735801] R13: 00007ffd6c1bdb6f R14: 00007fbae3513300 R15: 0000000000022000 [ 125.736516] [ 125.736758] irq event stamp: 1084 [ 125.737100] hardirqs last enabled at (1083): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 125.738024] hardirqs last disabled at (1084): [] __schedule+0x1225/0x2470 [ 125.738845] softirqs last enabled at (354): [] __irq_exit_rcu+0x11b/0x180 [ 125.739706] softirqs last disabled at (343): [] __irq_exit_rcu+0x11b/0x180 [ 125.740537] ---[ end trace 0000000000000000 ]--- 01:36:42 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/36) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x48901) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f000075a000/0x3000)=nil, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r3 = fork() ptrace$setopts(0x4200, r3, 0x80000000, 0x20) rt_tgsigqueueinfo(0x0, r3, 0x2c, &(0x7f0000000000)={0xa, 0x2, 0x7}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="63ef5cd9aecbc75e2f17916474a7101316efcae531c80453d14e334223d0aa0dd084b101600aa49b9dd14599c308cf7bdc551d345b3591e7381261f918ab3b29a54245d73309000000de941b"], 0xf8}, 0x1, 0x0, 0x0, 0x40080}, 0x40001) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4, 0x8, 0x8, 0x2, 0x7, r3}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0116f91f4977462c55f2776700000001000000180000001b", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653001303dc70a6cf4ae7c0f940067b31e9c1fa015b8615876b6089c9e25"]) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x81) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/121) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r6 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r6, &(0x7f000075c000/0x1000)=nil, 0x5000) shmat(r5, &(0x7f000075a000/0x3000)=nil, 0x0) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000600)=""/4096) 01:36:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x80, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) clone3(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4c6182, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) epoll_create(0x4) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:36:42 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_io_uring_complete(0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000480)) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x624042, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) write$cgroup_pid(r2, &(0x7f0000000000)=0xffffffffffffffff, 0x12) 01:36:42 executing program 0: socket$inet(0x2, 0x3, 0x8e23) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x624042, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x60, {0x2, 0x4e22, @remote}, 'macsec0\x00'}) [ 126.325804] audit: type=1400 audit(1664242602.409:9): avc: denied { write } for pid=3949 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.464408] hrtimer: interrupt took 19387 ns VM DIAGNOSIS: 01:36:42 Registers: info registers vcpu 0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff888019ea7698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000074 R11=0000000000000001 R12=0000000000000074 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbae3513700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbae60ad000 CR3=0000000017d7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fbae60847c0 00007fbae60847c8 YMM02=0000000000000000 0000000000000000 00007fbae60847e0 00007fbae60847c0 YMM03=0000000000000000 0000000000000000 00007fbae60847c8 00007fbae60847c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=dffffc0000000000 RCX=0000000000000000 RDX=ffff888040fe1ac0 RSI=ffffffff811d5e9e RDI=ffff888040fe2358 RBP=ffff888040fe2358 RSP=ffff888019cdfe48 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888040fe22c0 R13=ffff888040fe1ac0 R14=0000000000000001 R15=ffff888040c86780 RIP=ffffffff842709a1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb560c0d8c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005648cd8d5708 CR3=000000004116a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffff0000000000ff 0000000000000000 YMM02=0000000000000000 0000000000000000 00007fb56118cbe0 00007fb56118cbe0 YMM03=0000000000000000 0000000000000000 00007fb56118cc00 736563697665642f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0100ff00ff010100 0000000100000004 YMM06=0000000000000000 0000000000000000 0000000000000002 00005648cd891b90 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 610064253a64252f 6b636f6c622f7665 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000