Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:20643' (ECDSA) to the list of known hosts. 2022/09/27 10:01:50 fuzzer started 2022/09/27 10:01:50 dialing manager at localhost:38881 syzkaller login: [ 36.277730] cgroup: Unknown subsys name 'net' [ 36.389140] cgroup: Unknown subsys name 'rlimit' 2022/09/27 10:02:04 syscalls: 2215 2022/09/27 10:02:04 code coverage: enabled 2022/09/27 10:02:04 comparison tracing: enabled 2022/09/27 10:02:04 extra coverage: enabled 2022/09/27 10:02:04 setuid sandbox: enabled 2022/09/27 10:02:04 namespace sandbox: enabled 2022/09/27 10:02:04 Android sandbox: enabled 2022/09/27 10:02:04 fault injection: enabled 2022/09/27 10:02:04 leak checking: enabled 2022/09/27 10:02:04 net packet injection: enabled 2022/09/27 10:02:04 net device setup: enabled 2022/09/27 10:02:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/27 10:02:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/27 10:02:04 USB emulation: enabled 2022/09/27 10:02:04 hci packet injection: enabled 2022/09/27 10:02:04 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/27 10:02:04 802.15.4 emulation: enabled 2022/09/27 10:02:04 fetching corpus: 50, signal 22991/24805 (executing program) 2022/09/27 10:02:04 fetching corpus: 100, signal 32717/36234 (executing program) 2022/09/27 10:02:04 fetching corpus: 150, signal 42272/47344 (executing program) 2022/09/27 10:02:05 fetching corpus: 200, signal 50462/56994 (executing program) 2022/09/27 10:02:05 fetching corpus: 250, signal 53556/61594 (executing program) 2022/09/27 10:02:05 fetching corpus: 300, signal 57498/66996 (executing program) 2022/09/27 10:02:05 fetching corpus: 350, signal 61380/72276 (executing program) 2022/09/27 10:02:05 fetching corpus: 400, signal 65507/77726 (executing program) 2022/09/27 10:02:05 fetching corpus: 450, signal 69290/82767 (executing program) 2022/09/27 10:02:05 fetching corpus: 500, signal 71625/86427 (executing program) 2022/09/27 10:02:05 fetching corpus: 550, signal 75235/91259 (executing program) 2022/09/27 10:02:05 fetching corpus: 600, signal 79037/96153 (executing program) 2022/09/27 10:02:05 fetching corpus: 650, signal 83756/101906 (executing program) 2022/09/27 10:02:05 fetching corpus: 700, signal 85998/105318 (executing program) 2022/09/27 10:02:06 fetching corpus: 750, signal 89519/109827 (executing program) 2022/09/27 10:02:06 fetching corpus: 800, signal 91847/113274 (executing program) 2022/09/27 10:02:06 fetching corpus: 850, signal 93587/116122 (executing program) 2022/09/27 10:02:06 fetching corpus: 900, signal 95177/118799 (executing program) 2022/09/27 10:02:06 fetching corpus: 950, signal 96681/121421 (executing program) 2022/09/27 10:02:06 fetching corpus: 1000, signal 98162/124000 (executing program) 2022/09/27 10:02:06 fetching corpus: 1050, signal 99705/126602 (executing program) 2022/09/27 10:02:06 fetching corpus: 1100, signal 103691/131219 (executing program) 2022/09/27 10:02:07 fetching corpus: 1150, signal 105693/134143 (executing program) 2022/09/27 10:02:07 fetching corpus: 1200, signal 107773/137152 (executing program) 2022/09/27 10:02:07 fetching corpus: 1250, signal 109195/139584 (executing program) 2022/09/27 10:02:07 fetching corpus: 1300, signal 110703/141984 (executing program) 2022/09/27 10:02:07 fetching corpus: 1350, signal 113701/145594 (executing program) 2022/09/27 10:02:07 fetching corpus: 1400, signal 114670/147580 (executing program) 2022/09/27 10:02:07 fetching corpus: 1450, signal 116822/150495 (executing program) 2022/09/27 10:02:07 fetching corpus: 1500, signal 119927/154101 (executing program) 2022/09/27 10:02:07 fetching corpus: 1550, signal 122007/156846 (executing program) 2022/09/27 10:02:08 fetching corpus: 1600, signal 123087/158774 (executing program) 2022/09/27 10:02:08 fetching corpus: 1650, signal 124340/160796 (executing program) 2022/09/27 10:02:08 fetching corpus: 1700, signal 125472/162719 (executing program) 2022/09/27 10:02:08 fetching corpus: 1750, signal 128025/165652 (executing program) 2022/09/27 10:02:08 fetching corpus: 1800, signal 129282/167687 (executing program) 2022/09/27 10:02:08 fetching corpus: 1850, signal 130424/169574 (executing program) 2022/09/27 10:02:08 fetching corpus: 1900, signal 131913/171699 (executing program) 2022/09/27 10:02:08 fetching corpus: 1950, signal 133203/173681 (executing program) 2022/09/27 10:02:08 fetching corpus: 2000, signal 134641/175756 (executing program) 2022/09/27 10:02:09 fetching corpus: 2050, signal 135990/177737 (executing program) 2022/09/27 10:02:09 fetching corpus: 2100, signal 136544/179117 (executing program) 2022/09/27 10:02:09 fetching corpus: 2150, signal 138085/181177 (executing program) 2022/09/27 10:02:09 fetching corpus: 2200, signal 138979/182765 (executing program) 2022/09/27 10:02:09 fetching corpus: 2250, signal 142018/185792 (executing program) 2022/09/27 10:02:09 fetching corpus: 2300, signal 142516/187071 (executing program) 2022/09/27 10:02:09 fetching corpus: 2350, signal 143411/188621 (executing program) 2022/09/27 10:02:09 fetching corpus: 2400, signal 144588/190379 (executing program) 2022/09/27 10:02:09 fetching corpus: 2450, signal 145612/191982 (executing program) 2022/09/27 10:02:10 fetching corpus: 2500, signal 146799/193704 (executing program) 2022/09/27 10:02:10 fetching corpus: 2550, signal 148135/195547 (executing program) 2022/09/27 10:02:10 fetching corpus: 2600, signal 148721/196881 (executing program) 2022/09/27 10:02:10 fetching corpus: 2650, signal 150416/198888 (executing program) 2022/09/27 10:02:10 fetching corpus: 2700, signal 151679/200621 (executing program) 2022/09/27 10:02:10 fetching corpus: 2750, signal 153041/202358 (executing program) 2022/09/27 10:02:10 fetching corpus: 2800, signal 153840/203705 (executing program) 2022/09/27 10:02:10 fetching corpus: 2850, signal 155384/205508 (executing program) 2022/09/27 10:02:11 fetching corpus: 2900, signal 156851/207233 (executing program) 2022/09/27 10:02:11 fetching corpus: 2950, signal 158590/209072 (executing program) 2022/09/27 10:02:11 fetching corpus: 3000, signal 159616/210481 (executing program) 2022/09/27 10:02:11 fetching corpus: 3050, signal 160813/212005 (executing program) 2022/09/27 10:02:11 fetching corpus: 3100, signal 161947/213420 (executing program) 2022/09/27 10:02:11 fetching corpus: 3150, signal 162734/214680 (executing program) 2022/09/27 10:02:11 fetching corpus: 3200, signal 163626/216042 (executing program) 2022/09/27 10:02:12 fetching corpus: 3250, signal 164359/217265 (executing program) 2022/09/27 10:02:12 fetching corpus: 3300, signal 165080/218454 (executing program) 2022/09/27 10:02:12 fetching corpus: 3350, signal 166562/220008 (executing program) 2022/09/27 10:02:12 fetching corpus: 3400, signal 167361/221284 (executing program) 2022/09/27 10:02:12 fetching corpus: 3450, signal 168272/222540 (executing program) 2022/09/27 10:02:12 fetching corpus: 3500, signal 169079/223693 (executing program) 2022/09/27 10:02:12 fetching corpus: 3550, signal 169328/224588 (executing program) 2022/09/27 10:02:12 fetching corpus: 3600, signal 170062/225711 (executing program) 2022/09/27 10:02:12 fetching corpus: 3650, signal 170866/226862 (executing program) 2022/09/27 10:02:13 fetching corpus: 3700, signal 171823/228069 (executing program) 2022/09/27 10:02:13 fetching corpus: 3750, signal 172428/229092 (executing program) 2022/09/27 10:02:13 fetching corpus: 3800, signal 173516/230335 (executing program) 2022/09/27 10:02:13 fetching corpus: 3850, signal 174031/231281 (executing program) 2022/09/27 10:02:13 fetching corpus: 3900, signal 174613/232304 (executing program) 2022/09/27 10:02:13 fetching corpus: 3950, signal 175169/233284 (executing program) 2022/09/27 10:02:13 fetching corpus: 4000, signal 175672/234245 (executing program) 2022/09/27 10:02:13 fetching corpus: 4050, signal 176252/235214 (executing program) 2022/09/27 10:02:13 fetching corpus: 4100, signal 177230/236338 (executing program) 2022/09/27 10:02:13 fetching corpus: 4150, signal 178248/237466 (executing program) 2022/09/27 10:02:14 fetching corpus: 4200, signal 179062/238526 (executing program) 2022/09/27 10:02:14 fetching corpus: 4250, signal 180402/239760 (executing program) 2022/09/27 10:02:14 fetching corpus: 4300, signal 180884/240639 (executing program) 2022/09/27 10:02:14 fetching corpus: 4350, signal 181516/241563 (executing program) 2022/09/27 10:02:14 fetching corpus: 4400, signal 182261/242519 (executing program) 2022/09/27 10:02:14 fetching corpus: 4450, signal 182949/243436 (executing program) 2022/09/27 10:02:14 fetching corpus: 4500, signal 183770/244395 (executing program) 2022/09/27 10:02:14 fetching corpus: 4550, signal 184402/245232 (executing program) 2022/09/27 10:02:14 fetching corpus: 4600, signal 184773/246015 (executing program) 2022/09/27 10:02:15 fetching corpus: 4650, signal 185923/247046 (executing program) 2022/09/27 10:02:15 fetching corpus: 4700, signal 186410/247878 (executing program) 2022/09/27 10:02:15 fetching corpus: 4750, signal 186696/248637 (executing program) 2022/09/27 10:02:15 fetching corpus: 4800, signal 187145/249411 (executing program) 2022/09/27 10:02:15 fetching corpus: 4850, signal 187938/250290 (executing program) 2022/09/27 10:02:15 fetching corpus: 4900, signal 188540/251118 (executing program) 2022/09/27 10:02:15 fetching corpus: 4950, signal 189052/251880 (executing program) 2022/09/27 10:02:15 fetching corpus: 5000, signal 189282/252589 (executing program) 2022/09/27 10:02:15 fetching corpus: 5050, signal 189760/253338 (executing program) 2022/09/27 10:02:15 fetching corpus: 5100, signal 190218/254082 (executing program) 2022/09/27 10:02:16 fetching corpus: 5150, signal 191009/254906 (executing program) 2022/09/27 10:02:16 fetching corpus: 5200, signal 191282/255621 (executing program) 2022/09/27 10:02:16 fetching corpus: 5250, signal 192302/256461 (executing program) 2022/09/27 10:02:16 fetching corpus: 5300, signal 193019/257248 (executing program) 2022/09/27 10:02:16 fetching corpus: 5350, signal 193848/258051 (executing program) 2022/09/27 10:02:16 fetching corpus: 5400, signal 194233/258765 (executing program) 2022/09/27 10:02:16 fetching corpus: 5450, signal 194783/259515 (executing program) 2022/09/27 10:02:16 fetching corpus: 5500, signal 195734/260317 (executing program) 2022/09/27 10:02:17 fetching corpus: 5550, signal 196453/261084 (executing program) 2022/09/27 10:02:17 fetching corpus: 5600, signal 197336/261817 (executing program) 2022/09/27 10:02:17 fetching corpus: 5650, signal 198060/262469 (executing program) 2022/09/27 10:02:17 fetching corpus: 5700, signal 198720/263161 (executing program) 2022/09/27 10:02:17 fetching corpus: 5750, signal 199415/263860 (executing program) 2022/09/27 10:02:17 fetching corpus: 5800, signal 199996/264479 (executing program) 2022/09/27 10:02:17 fetching corpus: 5850, signal 200709/265164 (executing program) 2022/09/27 10:02:18 fetching corpus: 5900, signal 201299/265848 (executing program) 2022/09/27 10:02:18 fetching corpus: 5950, signal 201952/266536 (executing program) 2022/09/27 10:02:18 fetching corpus: 6000, signal 202697/267202 (executing program) 2022/09/27 10:02:18 fetching corpus: 6050, signal 203229/267779 (executing program) 2022/09/27 10:02:18 fetching corpus: 6100, signal 203599/268366 (executing program) 2022/09/27 10:02:18 fetching corpus: 6150, signal 204348/268974 (executing program) 2022/09/27 10:02:18 fetching corpus: 6200, signal 204938/269602 (executing program) 2022/09/27 10:02:18 fetching corpus: 6250, signal 205237/270170 (executing program) 2022/09/27 10:02:18 fetching corpus: 6300, signal 205630/270741 (executing program) 2022/09/27 10:02:19 fetching corpus: 6350, signal 206198/271280 (executing program) 2022/09/27 10:02:19 fetching corpus: 6400, signal 206786/271836 (executing program) 2022/09/27 10:02:19 fetching corpus: 6450, signal 207296/272390 (executing program) 2022/09/27 10:02:19 fetching corpus: 6500, signal 207765/272904 (executing program) 2022/09/27 10:02:19 fetching corpus: 6550, signal 208342/273457 (executing program) 2022/09/27 10:02:19 fetching corpus: 6600, signal 208939/274001 (executing program) 2022/09/27 10:02:19 fetching corpus: 6650, signal 209597/274524 (executing program) 2022/09/27 10:02:19 fetching corpus: 6700, signal 209924/275019 (executing program) 2022/09/27 10:02:20 fetching corpus: 6750, signal 210427/275515 (executing program) 2022/09/27 10:02:20 fetching corpus: 6800, signal 210805/275967 (executing program) 2022/09/27 10:02:20 fetching corpus: 6850, signal 211028/276181 (executing program) 2022/09/27 10:02:20 fetching corpus: 6900, signal 211773/276183 (executing program) 2022/09/27 10:02:20 fetching corpus: 6950, signal 212362/276217 (executing program) 2022/09/27 10:02:20 fetching corpus: 7000, signal 212791/276218 (executing program) 2022/09/27 10:02:20 fetching corpus: 7050, signal 213290/276222 (executing program) 2022/09/27 10:02:20 fetching corpus: 7100, signal 213626/276222 (executing program) 2022/09/27 10:02:21 fetching corpus: 7150, signal 214183/276224 (executing program) 2022/09/27 10:02:21 fetching corpus: 7200, signal 214506/276224 (executing program) 2022/09/27 10:02:21 fetching corpus: 7250, signal 215064/276224 (executing program) 2022/09/27 10:02:21 fetching corpus: 7300, signal 215492/276232 (executing program) 2022/09/27 10:02:21 fetching corpus: 7350, signal 215825/276243 (executing program) 2022/09/27 10:02:21 fetching corpus: 7400, signal 216475/276243 (executing program) 2022/09/27 10:02:21 fetching corpus: 7450, signal 216893/276252 (executing program) 2022/09/27 10:02:21 fetching corpus: 7500, signal 217247/276257 (executing program) 2022/09/27 10:02:21 fetching corpus: 7550, signal 217503/276263 (executing program) 2022/09/27 10:02:21 fetching corpus: 7600, signal 217783/276268 (executing program) 2022/09/27 10:02:21 fetching corpus: 7615, signal 218001/276268 (executing program) 2022/09/27 10:02:21 fetching corpus: 7615, signal 218001/276268 (executing program) 2022/09/27 10:02:24 starting 8 fuzzer processes 10:02:24 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000040)={0x0, 0x4, 0x1, [0x1, 0x101, 0x8, 0x7f, 0x8b], [0xce1, 0x4, 0x1, 0x5, 0x20, 0x5, 0x1, 0x1, 0x1400000000000000, 0x8, 0xffffffffffffff8c, 0x7e, 0x4, 0x45a, 0x8, 0x1f, 0x3, 0x8001, 0xffffffffffffcd56, 0x334, 0x9a4, 0x98f, 0x86e, 0x7, 0x4, 0xa0, 0x0, 0x3f, 0x23c1, 0x400000, 0x80, 0x8, 0x7, 0x7ff, 0x8, 0x8, 0x9, 0x401, 0x2, 0x7fff, 0x7fffffff, 0x24, 0x411, 0x6, 0x6, 0x10001, 0xe32, 0x1ff, 0x1, 0x7, 0x3599975d, 0xfff, 0x3, 0x2, 0x25b, 0x6, 0x8, 0x9, 0x138000000000, 0xffffffffffffff7a, 0x0, 0xb61, 0x0, 0x2, 0x100, 0x3, 0x1, 0x7, 0x4, 0x5, 0x3, 0x80, 0xabf6, 0x5, 0x7712401c, 0x5, 0x100000001, 0x100, 0x0, 0x9, 0x80000000, 0x3, 0x80000000, 0x7, 0x6, 0x1, 0x4c, 0x200, 0x1, 0x400, 0x5a3ef34f, 0x1a80, 0x1, 0x9, 0x7, 0x3f, 0x8001, 0x400, 0xfffffffffffffffc, 0x5b3, 0x9, 0xfffffffffffffff7, 0x8, 0x7f, 0x401, 0x6, 0x1, 0x100000001, 0x7, 0x10000, 0x6, 0x6, 0x10002, 0x3, 0x9, 0x7, 0x6, 0x200000, 0x524, 0x1, 0x2]}) r1 = pidfd_getfd(r0, r0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x700, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) r2 = dup2(r1, r0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000600)={[0x8e17]}, 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x10000}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd623, 0xb9}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48041) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x4, 0x1}}, './file0\x00'}) renameat(r6, &(0x7f00000008c0)='./file0\x00', r5, &(0x7f0000000900)='./file0\x00') getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000940), &(0x7f0000000980)=0x14) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000009c0), 0x100, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r5) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r8, 0x501, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r7) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r9, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x6a}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) 10:02:24 executing program 0: msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x9) r1 = shmget$private(0x0, 0x400000, 0x1008, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000c7e000/0x2000)=nil, 0x3000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/187) shmat(r0, &(0x7f0000d8b000/0x1000)=nil, 0x2000) mprotect(&(0x7f0000ec1000/0x4000)=nil, 0x4000, 0x4) move_pages(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000ea1000/0x2000)=nil, &(0x7f0000ddd000/0x1000)=nil, &(0x7f0000dc7000/0x2000)=nil, &(0x7f0000f93000/0x3000)=nil, &(0x7f0000d02000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ee2000/0x4000)=nil, &(0x7f0000c0a000/0x4000)=nil], &(0x7f0000000100)=[0x8, 0x6, 0x1ff, 0x1f, 0xb8, 0xdd], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) move_pages(0x0, 0x5, &(0x7f0000000180)=[&(0x7f0000f31000/0x3000)=nil, &(0x7f0000f4e000/0x2000)=nil, &(0x7f0000c0f000/0x3000)=nil, &(0x7f0000cf5000/0x3000)=nil, &(0x7f0000fb8000/0x2000)=nil], &(0x7f00000001c0)=[0xffff], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) r2 = shmget(0x1, 0x1000, 0x54000000, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000240)=""/123) move_pages(0x0, 0x7, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000d89000/0x3000)=nil, &(0x7f0000c02000/0x3000)=nil, &(0x7f0000dfc000/0x3000)=nil, &(0x7f0000c1f000/0x2000)=nil, &(0x7f0000f8f000/0x4000)=nil], &(0x7f0000000300)=[0x8001], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) move_pages(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000f66000/0x2000)=nil], &(0x7f00000003c0)=[0xfffffffc, 0xaf], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) shmget(0x1, 0x4000, 0x100, &(0x7f0000d4e000/0x4000)=nil) mremap(&(0x7f0000c65000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f0000e81000/0x1000)=nil) shmat(r1, &(0x7f0000c36000/0x3000)=nil, 0x5000) move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000440)=[&(0x7f0000cbe000/0x1000)=nil, &(0x7f0000c06000/0x2000)=nil], 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 10:02:24 executing program 7: sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rfcomm\x00') sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x72}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8881}, 0x4000000) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000280)=""/21) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7d}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x86a5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, 0x0, 0x2, 0x0, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}}, 0x4080000) socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000740)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2454dff0ff72deb8) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfadc}}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) openat2(r2, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x40000, 0x114, 0x15}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r2) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x16c, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20004880}, 0x81) socket$packet(0x11, 0x3, 0x300) 10:02:24 executing program 1: ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000000)=""/233, 0xe9}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x5, 0xc00) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000180)) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) write$P9_RRENAME(r0, &(0x7f00000001c0)={0x7, 0x15, 0x2}, 0x7) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x4010) recvmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/116, 0x74}], 0x1, &(0x7f0000000480)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x101) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r0) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r7, 0xd08, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8000}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x28880}, 0x20000800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000740)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r8, 0x32c, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xc2, 0x78}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff9, 0x39}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000880)="346611d1108312d7ee73045ead3001fadd", 0x11, r3}, 0x68) ioctl$TIOCNXCL(r4, 0x540d) ioctl$FIONCLEX(r4, 0x5450) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000940)={0xffff0001, 0x8, 0x9, 0x1, 0x40, "d6e2253903f1775f60107bd40b8d7299950c72", 0x6, 0x3}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000980), 0x80000, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5387, &(0x7f00000009c0)) [ 69.726264] audit: type=1400 audit(1664272944.246:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:02:24 executing program 2: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1c7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x80800}, 0x804) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x85) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1b8, 0x13, 0x100, 0x70bd25, 0x25dfdbff, {0xb, 0x3f, 0x1, 0x80, {0x4e23, 0x4e24, [0xe1, 0xb8bd, 0x9, 0x6], [0x2, 0xa6b5, 0x4, 0x7], 0x0, [0x5, 0x2]}, 0x5, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "32f179528efd0849df16cdad59c40b7b3f9f0398066cbc14faba1fdc5cb3489f989843c0a5b955a1ec811d2934"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "af2fd66a3698a693546bc7c8ea00f09ce9633f13e9822828e963f34aa493aaafe4c2e92a8a8060567700bdf4348c079814a35dd2175d328da828aef617abd33310d067aabcd6b8e0c6364400b685ea6cf56db324488ccfb7a30885617a6827213e2d584f94bd3972a6c9e136afe1417d61f9801bd38a22b8798038a67c7ebb68cb830d20c291a775d89ab68c23ee2f37388dae9c07b57933ffb23e"}, @INET_DIAG_REQ_BYTECODE={0x23, 0x1, "b051f95abf7e4654daa24b20722c603cd4e38656d8e0d072aea576e6307f85"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "7437382f54077338ff69a1bf6962be1bc17e7ba0a1739e3477fbb52cd963bf5b9d561b6dd82694dd888a73799dd15f286c6f148108e51e315d8c116713e545"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "e50059ab272e52fd89c568387512b7f69c18e5d3e6a974ed453279a3e1ab1b512becb1af80e47b5d29f8"}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000814) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x3fa, 0x200, 0x70bd28, 0x8, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000600)={0xdb8, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd5, 0x2a, [@perr={0x84, 0xcf, {0x5, 0xd, [@ext={{}, @device_a, 0x200, @device_a, 0x1f}, @not_ext={{}, @device_b, 0xd04b, "", 0xa}, @not_ext={{}, @device_b, 0x7ff, "", 0xc}, @not_ext={{}, @broadcast, 0x1, "", 0x3c}, @ext={{}, @device_a, 0x83a, @device_b, 0x3f}, @not_ext={{}, @broadcast, 0xf550, "", 0x1e}, @ext={{}, @broadcast, 0x800, @broadcast, 0x7}, @not_ext={{}, @device_b, 0x0, "", 0x2f}, @ext={{}, @device_b, 0x4, @broadcast, 0x26}, @ext={{}, @device_a, 0x7, @device_a, 0x10}, @not_ext={{}, @device_b, 0x354, "", 0xf}, @ext={{}, @device_a, 0x4, @device_a, 0x3f}, @not_ext={{}, @device_a, 0x6e, "", 0x40}]}}]}, @NL80211_ATTR_PROBE_RESP={0x39f, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x4b6, 0x91, "27a4d23b18b37b3bce769c882cd3cc2705c8cc354e1042a5b46cb906bf317f05bbaea12213ec24a7cae64c85f56f97590063699d8a8e9a6db2a79f8b3e89a537d3b41419e4628eaa7a6b3cc48a79a92030bca52e5a696471d398b188b9afa523265266d5eff985acd80a5db281b935b6a2bd94bc566603783ae38cec249dd4a725d4cd725d7bba1e7fcada5e802dc6bf790e7de518c54e62e7651888d09e7e62304bcb4ab4d8a98117f9ec2cd18bc9f86b34ffa09c1539f74184adbc30b34c69df0d9116bc4e713d0f4b4672791dc4306b6d7c3cdca19719e784768d280695acc4755148c436a105814c1858c0ea310cc8795395cb319c16feafca57fc27cc8e13d3c346cbc1a4f3156f1b14f27ff4684f6bbaa02ef80f7c9ee7c33f2b197f376a711231b059b435b6af70017dceee69a29c8685fb1ca1d36e6485ae2294a40555b15a5d7e6c4a030f04568c45872e4337ec06ee2c854068443206ef6aba5952bd6b51f654b8db32a39dd4bb56be2b7ffa1643c6c6b183da400ca2beb04ff7468ce6c65d7a3144397fb0953c70952648601e27466b1dcf7e73f4741d38324c3a3145e9f9353aa52fbdd3f5685c74da9a86354aa307fd46cb10079ed5b871df8dc4f26c6b4fed51f35982c3f1885e315ab57902ff139aaae0e0cfad17632a890ac9bc0f55c10c5f9104334c681202ca32d710ae1d0dae1f1fe09a0dd79bbeeec8b397ac722167c255680a67f67217c127efe395b02ff632749f20008a20fe096a8e43957d2138986388ef395d9efbf09ec6210035bafb9f515ddd786ec60bbb0df9744f9abfba69c73c77a9b983dd82b3153a7d9eb36d84c4452547daa887da56e70a271fa1a8c10fdfe1bb33c236e15e1a89a19f06965d8f9e5da394edd5c3e62e9c3857b2ea594ec18d91982d47a8f7a9f58350eb149ff7e11f3cd3c616ccf9fc75370ca8fac74ae9b0b9fe97e2527cf7d67443639aab79c76e5bae18029801ecec0a3a9d8da91fd56eba208eee28814b59aec2d152668bd7e56ee88f5d06572e83ec5f7bcdb92aabbb2e2e452ae9021847a1271b106f47f61cbb1d069164fa7da25b63f6b7303719ccc6df6264b65afdb23849875b5f03d915c797aabf81a13480fa52fea13441c0e59279a8e42f75d70a80711eb8517fe8ff7d626433a7b514186ac56b5b00209d76363859f71783874c0a1bcc5bd1677607cfa6e0506b9686d880485f58619934613a3a5a9cf029c1a1aa5517b12460f6a221e64d426e4cd02dba52f8bbcb143f0e5f2163db3f6683b522347453bdc7b2463bb32cd24dfda8035302bd3518aefb37ab815bf45903e603636492e9630c7df0a023b9f03410e848ccc8fb3ecc4f179c2ab16c4481931730b3d0ec2168ea2b782c6a6f8534b56711b629f4168ce53c6c22df7eb5a6667556ca587d4a4c2d1f1fd8676191651b480140d762c03f2d1aec851892e12beb30c84663603c82403fb8a27f5142f27b4c691d8736d94fb8859d074ff6dc19371a36800deca98114116dfdf6a331eef931e760427e7d4a56b235678f642e667fc5c23578738b7be0bbab4dd2f647c0ca1b34be2b838eb03972ddfe42bda2775b791b88b03f92cc00ba34eb5a3963067e6d561fcc8eb014ad4f2f00c0e13de0356ed062744d980c29f1b77c252c1ee938dad34fe1eedd1afa3f5cffbf91af86623826"}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@dsss={0x3, 0x1, 0xb3}, @supported_rates, @random_vendor={0xdd, 0xfa, "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"}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x40, 0x8, 0x40}}]}, @NL80211_ATTR_PROBE_RESP={0x364, 0x91, "f3c796ae655284fbb9790c216fb2713d2cff1525e2feee1ed8554208a5b0fb9cdd4f4e95a73f11f55cb65111267dfbd7607ec4f6a5be8440e23d5d51a3c62707e29cbdfa488b0bef0558f488d1db6348b6a22e2b4f8b2420056782a193c0d3034c5363a89e855e144627d3f24ca8a7fdd485a97c0880aa713c921bdf2df886e4504cb559ac68848668b3e4024d4f02dcf22929ee289adbb31fd69a162757896c851b765ee35c815a2fd387e5fae24351c42d610bc5e92f47bbcf35e232145cf7935908b8b7835108594c2f7455ecfae71ede0ebda4431072a9eef9b76fff51c0828758bf28c468ae942bd19562aa69b7d0f778cd620285f2eacbdd031fe5cf00ae86fd55efe0c8297a9b535ec5f53108b2dcff7182b43373d8d3734c7e6e7203edb2614d4c84045e60d2b4174cb70305d228905ca3c9441d4955f93f4a49e05672afce5d808e92e399b0a80a0cd4deaf370d4ced4ad0f1c63474816b45e23615603381d917b02d62b413d5871bd4a9c94efbf63f5601f8b158db5cb1cb6b18f0b1e2e29b384d241c7e7699b756c796a10f32648d94b04c7590c50b93fc25807055b567fdea548ab65084fd380badee3669b863326479575b0003ff5725962564dff835a2dfd46581358010a85084837dc0bc3d2ad9ddae81ac1de0ddf7e19c3195c09c8a11218a98543b7849f0e5a85200c6333433964bba2168b8b6e2103da820a9d502ba2a3f09d11ac88ad0b14ac38aa17b4a2d85ae99783246f286b5cc4f4c544d845670d070331d64755b804f810033bf9d06bb86632f3a017326ca23f4fe323473150704fa4efd44df4f69bb861e5ace4bb15c70200d06be2116e867d176cebcb140cfccaa404196f01eb7206214765863d705cf05b8f61c7b37167086189d909d7f67f65568aaed832fc743786f75d88859bd8e065adcc73c7e7ece793dcc2dad199f9f51cd854ddd6f5f6d361284e1b7890e758f1dd22591f8dfb13a89cd6101b7c38d9e82d4f54c00cc94f9ea88753d238a45a11451603da1d769d3c97616ea935e641734901f2e2df9bd8e5bbeaec425edd5a96eef52a0a07a512d6d77241691b4f17a8da94eb399256202d682b59bebe972fad807fcfa9e2ca8dd1d935933ce7f8e08e5a8a79cdf809dea2d5a12f2c867e37a5e2dd5d475ac41d20859f3e8616f6a1a8e01d0631d8f81f4eb77ff97759af9efc52c0063c41e6a69"}]}, 0xdb8}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8804) syz_genetlink_get_family_id$nbd(&(0x7f0000001540), r0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x60, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040090}, 0x801) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001700), r1) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd4, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e4091bf}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a1}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c719d74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11b3e0a5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fd87c0f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a3285b2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f76}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52bfb893}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0xc800) r3 = open(&(0x7f0000001a00)='./file0\x00', 0x48002, 0x8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x34, 0x0, 0x89297bb82f0cbd2b, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8015) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24048840) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001cc0), r3) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x78, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x30000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0x78}}, 0x10048011) 10:02:24 executing program 3: sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48801) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x118, r0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7069}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10000}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x10001, 0x1, 0x8, 0x7f, 0x8, 0x9, 0x81, 0x4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xf930]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x142}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x6, 0x800]}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0x81]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x72e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x90b}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000009}, 0x800) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80800204}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r0, 0x406, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40408c4) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x94, 0x0, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0xaabab9cd34e58a3f) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe0, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}}, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x35}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004004}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x10000) r5 = syz_open_dev$vcsu(&(0x7f0000000e40), 0x6, 0x101080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'ip6_vti0\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x6, 0xc4, 0x52, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x8000, 0x9, 0x9}}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe8e063971e383dbd}, 0x4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x11c, r3, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ea605e73c521c0e1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="47d1d7b57e486734e837522eee9b6c3abfc25044022c929ba4c31507a39ea5ac"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eabbef40c3e5b0d104e34f63a975009dd65d61aa9d75cbff"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e86ffe53e9b389bfac53f2e4e4c7ee13"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "529fffd8a53c61c3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a43615f303acbdebeb7631dd4c448a6b"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2593a34b7d1bcc26"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fe95f07fe542b429012833dcf3bb522da627a208de20d8f7"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b98b3c5ce6b058c40cd88afb5b7b04d1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="58db1e6857e9d74e3e2c828a530471e01212607b0afba0e9"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x4002084) 10:02:24 executing program 4: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x5, 0x1, 0x9, 0x8, 0x2, 0x0, 0x9, 0x2be, 0x40, 0x3ab, 0x0, 0x500, 0x38, 0x2, 0x49, 0x3, 0x6}, [{0x5, 0xffffffff, 0x7f, 0x401, 0xffffffffffff3ea5, 0xffff, 0x7, 0x3}], "db53ad6710c989263ba94bb43bb806fb58f1b63725f11da7d2cd27f2a74bd51a253da469ed90d6dfbb7131d99724842b0864d5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9ab) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) bind$802154_dgram(r1, &(0x7f0000000a00)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) statx(r0, &(0x7f0000000b00)='./file0\x00', 0x100, 0x10, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x0, &(0x7f0000000c40)={'trans=xen,', {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@version_u}, {@nodevmap}, {@posixacl}, {@cache_fscache}, {@mmap}, {@access_any}, {@access_user}, {@cache_mmap}], [{@pcr={'pcr', 0x3d, 0x2f}}, {@smackfshat={'smackfshat', 0x3d, '%\'\'\xc6[*5.!\x93\'+/,A'}}, {@euid_eq}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', 0xee00}}]}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001280)=@IORING_OP_STATX={0x15, 0x3, 0x0, r0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001240)='./file0/file0\x00', 0x20, 0x800}, 0x7) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000d80)='./file1\x00', 0x5, 0x4, &(0x7f00000010c0)=[{&(0x7f0000000dc0)="f61d5ece2eb59dd1283f501aa2d6df7c51d8376d84ef09a755baea6ea1ec0cf9515923bc539fe228678c11b9df2a25108b077bbee5792a8e33f17cc2cc2e6dc55ce63633b38957b266ff68a646f762b0eec131506d9da362af759358a3f8eb14d860eea88c2db268630138ca5be0bfbcaf05b7f1e807d157c6287aa26cc4f18b324260bf11d7b70bbbe79e4f4c12e5f296d22e49f232cd3e4d161cb84bc59671ebaf4cfd923a4732602b25fda98ddbd128b643e06eeceddfa4013a65f1e80e59462a4c321329e5bf3e7bd18d04eae930bc8d", 0xd2, 0x2}, {&(0x7f0000000ec0)="451b01af086f6d7bf2c839021c95340239090c4efb80c0aebb8343bd1da80591f4896d1d994b630926f5489f3099811348c6f84c9d788e2924ae97e38a8fc7735d80cb162bd816819464c7000ef3fe53460bffb7160c589923a34793b5c7167f9a29ed9016", 0x65, 0xd4}, {&(0x7f0000000f40)="7e43cb64759461724750e594821b3f888a8ebaacd0b70f8088ec970ce68c25a49fbba02bca7e951692e7a688e14fd703cd8ea0a6a2b8ebb69f78213791880c8cfc5f2afe4f418b4718802d626f0467a0498cb349d4d105efee50e536711db7dbabc67464145f379fc5e8bcc5428b83bea2a438c641e3976685abeb05fb72e0fab5a0b1fdccea67d0a48249d949563e7489c5e45cd473c524919d139b68236ab3c8c180c5ba0a692da06df0faf41d146add5083a18da76f5b160c1620d0286385cea381c2d808cfbeddca5fbf5d6c874ebd0ad9855aef5eeaa3bb4a59bb68f050fefafccf13f136121df1acf0", 0xec, 0xa6}, {&(0x7f0000001040)="e1ed668147727c5739355012ddd6a76e150eb516eeccf57023749290a95d5c4a8711346865afb3c238b911b0c9ded44fa6968bd261240491d696cdf959a50ecdb78b8f67ec0a62db8031006b5aa05a85cddd", 0x52, 0x3}], 0x2040004, &(0x7f00000012c0)={[{@mode={'mode', 0x3d, 0x6}}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x50, 0xffffffffffffffff, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001400)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7fffffff, 0x3, &(0x7f0000001340)="0271435a22bdd64e62ad153ccbb53975e13ae2066644c5076072bf3de31594a0bcf5a5d86f56a8e8009f5d8c1347964dc780840e49aaeb7a7fad0d67c6eb05a0c994213f64a5c5e3c3e4288b8f51f69147487f05838dea9bdede9954ec5e4a44f731de8c5152812ceff5a18893397c5681e6a8c1f5c5119e4cbca274bc68c2cab360d52a4d244c9c23dd331daeb7b429730b7ac24a7fbb0ed842cb37c2f465fa8f3f97eadb6a95f5d8f3733049530d52c157d6e4b93805aed6", 0x101, 0x0, 0x0, {0x1, r6}}, 0x6) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) recvfrom$unix(r8, &(0x7f0000001480)=""/187, 0xbb, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x50, r7, 0x0) syz_io_uring_setup(0x721f, &(0x7f0000001540)={0x0, 0x7b55, 0xa, 0x3, 0xd8, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000015c0), &(0x7f0000001600)) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001640)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) fcntl$setlease(r7, 0x400, 0x1) 10:02:24 executing program 5: ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000000)={0x100000001, 0xfb}) r0 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x2, &(0x7f00000011c0)=[{&(0x7f00000000c0)="efc9c1196d7427ac46022abc8be67367b260231e827eb9cbae51512719299eede2409fbf286ec8c1ef2c3c9a32f421dc3bd34204b500bfa69ad5c13d79c962c17f5715721abea4d767b8289fea803829ac94dd7a511c349fe094af6a455a5fcff5c2394a081c8b389c8220b8f631c0e369dfa546adbd0ffbc204b1afa1d9dda754f1e4a7539a219e89199c2b9eaac1c708302e8f58420c493adb46ea753b9d389e1aa3665370d6fccc1103f2c87da08fcdef63504cfe8fea3329f7f7995e0625d9777ffe3caca55ab16f2dba26d3b1554ace198f6c6092ae09", 0xd9, 0x5}, {&(0x7f00000001c0)="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", 0x1000, 0x3}], 0x1004000, &(0x7f0000001200)={[{'}\xaa^'}, {'+\'}!%*'}, {'\'['}, {'@'}, {')@\xa7/\\'}, {'.\xe0&+(N\\:($['}], [{@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '}'}}, {@permit_directio}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, '@\''}}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x34, 0x65, 0x65, 0x31, 0x37, 0x61, 0x31], 0x2d, [0xe7, 0x38, 0x31, 0x66], 0x2d, [0x56, 0x64, 0x35, 0x38], 0x2d, [0x62, 0x32, 0x32, 0x31], 0x2d, [0x63, 0x62, 0x512a8436c700adba, 0x63, 0x30, 0x61, 0x64, 0x5]}}}]}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000012c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_io_uring_setup(0x29b1, &(0x7f0000001740)={0x0, 0x3b, 0x10, 0x0, 0xcc, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000017c0)=0x0, &(0x7f0000001800)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000001840)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2000, @fd=r0, 0x3, 0x8, 0x53, 0x3, 0x1, {0x2}}, 0x3f) openat$cgroup_procs(r2, &(0x7f0000001880)='tasks\x00', 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000001940)={0x1, 0x1, 0x1000, 0x0, &(0x7f00000018c0), 0x3, 0x0, &(0x7f0000001900)="350b05"}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x4010, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000001a80)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd_index=0x9, 0x0, &(0x7f00000019c0)="a2142aa04c4b74032b98b2b39bf2bed47ce79c512da92d81a5937ceb1d06a140d6d9256540be64aeea84f1ef46f3a55cb12efc95e5807e00dba984a828469c83a93453394b0faaca5e305432192d83dc8b06d2ea237a02006d1614e148db5bece8ac49840b1d3dc28cbe093f780cc046c29537e8a8573608018e15667abf9e2b7bad62219149b144e6be5d7da404f9618dc771e68994549fd7c275de", 0x9c, 0xf}, 0x1) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001ac0), 0x80, 0x0) accept$unix(r7, &(0x7f0000001b00), &(0x7f0000001b80)=0x6e) getsockname$unix(r7, &(0x7f0000001bc0), &(0x7f0000001c40)=0x6e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)='./file0\x00', r8) readlink(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)=""/173, 0xad) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000001e40)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r9, 0x8, 0x0, 0x80000000, 0x4, 0x1}, 0x3ff) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000001e80)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) [ 71.029794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.033074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.034595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.037758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.039667] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.041017] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.046500] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.081976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.085565] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.089553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.093794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.097529] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.099055] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.110420] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.143893] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.149819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.151838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.153581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.155004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.158100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.160054] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.161562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.166733] Bluetooth: hci3: HCI_REQ-0x0c1a [ 71.173648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.187616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.198585] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.199953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.229867] Bluetooth: hci2: HCI_REQ-0x0c1a [ 71.288100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.299563] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.309585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.348147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.359711] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.361244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.372600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.374116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.381150] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.390423] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.414626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.421750] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.425948] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.434441] Bluetooth: hci7: HCI_REQ-0x0c1a [ 73.111622] Bluetooth: hci0: command 0x0409 tx timeout [ 73.176400] Bluetooth: hci3: command 0x0409 tx timeout [ 73.176611] Bluetooth: hci1: command 0x0409 tx timeout [ 73.240391] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 73.242358] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 73.303389] Bluetooth: hci2: command 0x0409 tx timeout [ 73.431524] Bluetooth: hci6: command 0x0409 tx timeout [ 73.496823] Bluetooth: hci7: command 0x0409 tx timeout [ 75.161320] Bluetooth: hci0: command 0x041b tx timeout [ 75.223516] Bluetooth: hci1: command 0x041b tx timeout [ 75.224239] Bluetooth: hci3: command 0x041b tx timeout [ 75.352429] Bluetooth: hci2: command 0x041b tx timeout [ 75.480453] Bluetooth: hci6: command 0x041b tx timeout [ 75.544349] Bluetooth: hci7: command 0x041b tx timeout [ 77.208419] Bluetooth: hci0: command 0x040f tx timeout [ 77.272447] Bluetooth: hci3: command 0x040f tx timeout [ 77.272929] Bluetooth: hci1: command 0x040f tx timeout [ 77.400409] Bluetooth: hci2: command 0x040f tx timeout [ 77.469008] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.470571] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.471975] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.474832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.476218] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.477075] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.481522] Bluetooth: hci5: HCI_REQ-0x0c1a [ 77.527388] Bluetooth: hci6: command 0x040f tx timeout [ 77.591340] Bluetooth: hci7: command 0x040f tx timeout [ 79.127359] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 79.257320] Bluetooth: hci0: command 0x0419 tx timeout [ 79.320340] Bluetooth: hci1: command 0x0419 tx timeout [ 79.320787] Bluetooth: hci3: command 0x0419 tx timeout [ 79.447346] Bluetooth: hci2: command 0x0419 tx timeout [ 79.511354] Bluetooth: hci5: command 0x0409 tx timeout [ 79.575334] Bluetooth: hci6: command 0x0419 tx timeout [ 79.640391] Bluetooth: hci7: command 0x0419 tx timeout [ 81.559377] Bluetooth: hci5: command 0x041b tx timeout [ 83.607378] Bluetooth: hci5: command 0x040f tx timeout [ 83.863443] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 85.656409] Bluetooth: hci5: command 0x0419 tx timeout [ 88.599457] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 93.528345] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 98.072344] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 102.615427] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 105.362815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.364229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.365166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.370474] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.373415] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 105.376499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.385741] Bluetooth: hci4: HCI_REQ-0x0c1a [ 107.416369] Bluetooth: hci4: command 0x0409 tx timeout [ 109.463401] Bluetooth: hci4: command 0x041b tx timeout [ 111.511553] Bluetooth: hci4: command 0x040f tx timeout [ 113.559418] Bluetooth: hci4: command 0x0419 tx timeout 10:03:17 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000002300)) r1 = signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) 10:03:17 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "d1f14792bb10750ea9e86f2109c85a306eac969c225abcf9542493077458dc50dd5546ef22c70a8bd6b5a45e86c81b77924f226ab6e09915cbe829241e71703056bc95c7386df10315c79284a94c638e15bb1a293b37fce9ccef990b6b10fb9c04f3786fecc4e7d36ad34a037174328cfbd507df8590cdb8df705efb63f6d543b899d97ca79e8c4414fd5da623d28f9252c13428af0998f63ad30f909619b043f0a7aa899a6d92a2a5e61460066587029f38eff5aeafc3e8b67b97ebf6c447380bd9fd03521069fdc0d128d6041c0c873b2d58b8881c4a4c74e260693309049d39b69a09df12caf88245f7f4dc058c0fb2295afbe717134ff663413f7d075e5e", "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"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9200, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) setresuid(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_xfrm(r1, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @phonet={0x23, 0x4, 0x7, 0x6}, @generic={0x23, "74f56e4d9061aac3216c0996fc27"}, 0x5, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)='vxcan1\x00', 0xff, 0x4, 0xc1a}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)={0x0, "118c07"}, 0x6) fstat(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') [ 123.545924] audit: type=1400 audit(1664272998.066:7): avc: denied { open } for pid=3566 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.549267] audit: type=1400 audit(1664272998.066:8): avc: denied { kernel } for pid=3566 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.565314] hrtimer: interrupt took 37710 ns [ 123.567922] ------------[ cut here ]------------ [ 123.567952] [ 123.567957] ====================================================== [ 123.567963] WARNING: possible circular locking dependency detected [ 123.567969] 6.0.0-rc6-next-20220923 #1 Not tainted [ 123.567980] ------------------------------------------------------ [ 123.567986] syz-executor.7/3567 is trying to acquire lock: [ 123.567997] ffffffff853faaf8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0xe/0x70 [ 123.568060] [ 123.568060] but task is already holding lock: [ 123.568065] ffff88800f20f820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 123.568114] [ 123.568114] which lock already depends on the new lock. [ 123.568114] [ 123.568119] [ 123.568119] the existing dependency chain (in reverse order) is: [ 123.568124] [ 123.568124] -> #3 (&ctx->lock){....}-{2:2}: [ 123.568149] _raw_spin_lock+0x2a/0x40 [ 123.568182] __perf_event_task_sched_out+0x53b/0x18d0 [ 123.568204] __schedule+0xedd/0x2470 [ 123.568228] preempt_schedule_common+0x45/0xc0 [ 123.568254] __cond_resched+0x17/0x30 [ 123.568278] __mutex_lock+0xa3/0x14d0 [ 123.568303] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.568326] do_syscall_64+0x3b/0x90 [ 123.568356] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.568378] [ 123.568378] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 123.568402] _raw_spin_lock_nested+0x30/0x40 [ 123.568435] raw_spin_rq_lock_nested+0x1e/0x30 [ 123.568457] task_fork_fair+0x63/0x4d0 [ 123.568490] sched_cgroup_fork+0x3d0/0x540 [ 123.568523] copy_process+0x4183/0x6e20 [ 123.568542] kernel_clone+0xe7/0x890 [ 123.568558] user_mode_thread+0xad/0xf0 [ 123.568577] rest_init+0x24/0x250 [ 123.568598] arch_call_rest_init+0xf/0x14 [ 123.568639] start_kernel+0x4c1/0x4e6 [ 123.568671] secondary_startup_64_no_verify+0xe0/0xeb [ 123.568701] [ 123.568701] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 123.568735] _raw_spin_lock_irqsave+0x39/0x60 [ 123.568770] try_to_wake_up+0xab/0x1930 [ 123.568802] up+0x75/0xb0 [ 123.568834] __up_console_sem+0x6e/0x80 [ 123.568866] console_unlock+0x46a/0x590 [ 123.568905] vprintk_emit+0x1bd/0x560 [ 123.568936] vprintk+0x84/0xa0 [ 123.568968] _printk+0xba/0xf1 [ 123.568987] kauditd_hold_skb.cold+0x3f/0x4e [ 123.569017] kauditd_send_queue+0x233/0x290 [ 123.569052] kauditd_thread+0x5da/0x9a0 [ 123.569076] kthread+0x2ed/0x3a0 [ 123.569101] ret_from_fork+0x22/0x30 [ 123.569123] [ 123.569123] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 123.569148] __lock_acquire+0x2a02/0x5e70 [ 123.569177] lock_acquire+0x1a2/0x530 [ 123.569205] _raw_spin_lock_irqsave+0x39/0x60 [ 123.569238] down_trylock+0xe/0x70 [ 123.569263] __down_trylock_console_sem+0x3b/0xd0 [ 123.569292] vprintk_emit+0x16b/0x560 [ 123.569320] vprintk+0x84/0xa0 [ 123.569348] _printk+0xba/0xf1 [ 123.569366] report_bug.cold+0x72/0xab [ 123.569394] handle_bug+0x3c/0x70 [ 123.569422] exc_invalid_op+0x14/0x50 [ 123.569452] asm_exc_invalid_op+0x16/0x20 [ 123.569472] group_sched_out.part.0+0x2c7/0x460 [ 123.569491] ctx_sched_out+0x8f1/0xc10 [ 123.569509] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.569531] __schedule+0xedd/0x2470 [ 123.569555] preempt_schedule_common+0x45/0xc0 [ 123.569581] __cond_resched+0x17/0x30 [ 123.569613] __mutex_lock+0xa3/0x14d0 [ 123.569645] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.569668] do_syscall_64+0x3b/0x90 [ 123.569697] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.569720] [ 123.569720] other info that might help us debug this: [ 123.569720] [ 123.569727] Chain exists of: [ 123.569727] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 123.569727] [ 123.569755] Possible unsafe locking scenario: [ 123.569755] [ 123.569759] CPU0 CPU1 [ 123.569763] ---- ---- [ 123.569767] lock(&ctx->lock); [ 123.569777] lock(&rq->__lock); [ 123.569788] lock(&ctx->lock); [ 123.569799] lock((console_sem).lock); [ 123.569810] [ 123.569810] *** DEADLOCK *** [ 123.569810] [ 123.569813] 2 locks held by syz-executor.7/3567: [ 123.569825] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 123.569877] #1: ffff88800f20f820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 123.569927] [ 123.569927] stack backtrace: [ 123.569931] CPU: 1 PID: 3567 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1 [ 123.569954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 123.569968] Call Trace: [ 123.569974] [ 123.569981] dump_stack_lvl+0x8b/0xb3 [ 123.570013] check_noncircular+0x263/0x2e0 [ 123.570042] ? format_decode+0x26c/0xb50 [ 123.570070] ? print_circular_bug+0x450/0x450 [ 123.570100] ? enable_ptr_key_workfn+0x20/0x20 [ 123.570127] ? __lockdep_reset_lock+0x180/0x180 [ 123.570157] ? format_decode+0x26c/0xb50 [ 123.570187] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 123.570218] __lock_acquire+0x2a02/0x5e70 [ 123.570257] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 123.570297] lock_acquire+0x1a2/0x530 [ 123.570327] ? down_trylock+0xe/0x70 [ 123.570357] ? lock_release+0x750/0x750 [ 123.570393] ? vprintk+0x84/0xa0 [ 123.570424] _raw_spin_lock_irqsave+0x39/0x60 [ 123.570458] ? down_trylock+0xe/0x70 [ 123.570487] down_trylock+0xe/0x70 [ 123.570514] ? vprintk+0x84/0xa0 [ 123.570544] __down_trylock_console_sem+0x3b/0xd0 [ 123.570575] vprintk_emit+0x16b/0x560 [ 123.570611] vprintk+0x84/0xa0 [ 123.570644] _printk+0xba/0xf1 [ 123.570664] ? record_print_text.cold+0x16/0x16 [ 123.570688] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 123.570713] ? lock_downgrade+0x6d0/0x6d0 [ 123.570744] ? report_bug.cold+0x66/0xab [ 123.570775] ? group_sched_out.part.0+0x2c7/0x460 [ 123.570796] report_bug.cold+0x72/0xab [ 123.570829] handle_bug+0x3c/0x70 [ 123.570860] exc_invalid_op+0x14/0x50 [ 123.570891] asm_exc_invalid_op+0x16/0x20 [ 123.570913] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 123.570938] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 123.570958] RSP: 0018:ffff88804101f978 EFLAGS: 00010006 [ 123.570974] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.570987] RDX: ffff88801d5e3580 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 123.571001] RBP: ffff888041030000 R08: 0000000000000005 R09: 0000000000000001 [ 123.571014] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f20f800 [ 123.571027] R13: ffff88806cf3d140 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 123.571047] ? group_sched_out.part.0+0x2c7/0x460 [ 123.571071] ? group_sched_out.part.0+0x2c7/0x460 [ 123.571094] ctx_sched_out+0x8f1/0xc10 [ 123.571118] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.571146] ? lock_is_held_type+0xd7/0x130 [ 123.571169] ? __perf_cgroup_move+0x160/0x160 [ 123.571191] ? set_next_entity+0x304/0x550 [ 123.571222] ? update_curr+0x267/0x740 [ 123.571255] ? lock_is_held_type+0xd7/0x130 [ 123.571279] __schedule+0xedd/0x2470 [ 123.571309] ? io_schedule_timeout+0x150/0x150 [ 123.571335] ? find_held_lock+0x2c/0x110 [ 123.571364] ? lock_is_held_type+0xd7/0x130 [ 123.571386] ? __cond_resched+0x17/0x30 [ 123.571413] preempt_schedule_common+0x45/0xc0 [ 123.571442] __cond_resched+0x17/0x30 [ 123.571467] __mutex_lock+0xa3/0x14d0 [ 123.571496] ? lock_is_held_type+0xd7/0x130 [ 123.571518] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.571545] ? mutex_lock_io_nested+0x1310/0x1310 [ 123.571573] ? lock_release+0x3b2/0x750 [ 123.571604] ? __up_read+0x192/0x730 [ 123.571630] ? up_write+0x520/0x520 [ 123.571660] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.571691] ? perf_compat_ioctl+0x130/0x130 [ 123.571713] ? xfd_validate_state+0x59/0x180 [ 123.571753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.571777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.571804] do_syscall_64+0x3b/0x90 [ 123.571835] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.571858] RIP: 0033:0x7f607691ab19 [ 123.571873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.571892] RSP: 002b:00007f6073e90188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 123.571911] RAX: ffffffffffffffda RBX: 00007f6076a2df60 RCX: 00007f607691ab19 [ 123.571925] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 123.571939] RBP: 00007f6076974f6d R08: 0000000000000000 R09: 0000000000000000 [ 123.571952] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 123.571965] R13: 00007ffd835821af R14: 00007f6073e90300 R15: 0000000000022000 [ 123.571988] [ 123.679784] WARNING: CPU: 1 PID: 3567 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 123.680926] Modules linked in: [ 123.681337] CPU: 1 PID: 3567 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1 [ 123.682323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 123.683785] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 123.684479] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 123.686835] RSP: 0018:ffff88804101f978 EFLAGS: 00010006 [ 123.687540] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.688461] RDX: ffff88801d5e3580 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 123.689397] RBP: ffff888041030000 R08: 0000000000000005 R09: 0000000000000001 [ 123.690338] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f20f800 [ 123.691273] R13: ffff88806cf3d140 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 123.692210] FS: 00007f6073e90700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 123.693328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.694098] CR2: 00007fa4ea305070 CR3: 000000000dad6000 CR4: 0000000000350ee0 [ 123.695035] Call Trace: [ 123.695387] [ 123.695698] ctx_sched_out+0x8f1/0xc10 [ 123.696234] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.696924] ? lock_is_held_type+0xd7/0x130 [ 123.697532] ? __perf_cgroup_move+0x160/0x160 [ 123.698149] ? set_next_entity+0x304/0x550 [ 123.698717] ? update_curr+0x267/0x740 [ 123.699255] ? lock_is_held_type+0xd7/0x130 [ 123.699836] __schedule+0xedd/0x2470 [ 123.700344] ? io_schedule_timeout+0x150/0x150 [ 123.700960] ? find_held_lock+0x2c/0x110 [ 123.701536] ? lock_is_held_type+0xd7/0x130 [ 123.702104] ? __cond_resched+0x17/0x30 [ 123.702649] preempt_schedule_common+0x45/0xc0 [ 123.703264] __cond_resched+0x17/0x30 [ 123.703802] __mutex_lock+0xa3/0x14d0 [ 123.704370] ? lock_is_held_type+0xd7/0x130 [ 123.704945] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.705651] ? mutex_lock_io_nested+0x1310/0x1310 [ 123.706293] ? lock_release+0x3b2/0x750 [ 123.706830] ? __up_read+0x192/0x730 [ 123.707330] ? up_write+0x520/0x520 [ 123.707817] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.708496] ? perf_compat_ioctl+0x130/0x130 [ 123.709096] ? xfd_validate_state+0x59/0x180 [ 123.709697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.710365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.711048] do_syscall_64+0x3b/0x90 [ 123.711554] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.712260] RIP: 0033:0x7f607691ab19 [ 123.712750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.715249] RSP: 002b:00007f6073e90188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 123.716320] RAX: ffffffffffffffda RBX: 00007f6076a2df60 RCX: 00007f607691ab19 [ 123.717338] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 123.718322] RBP: 00007f6076974f6d R08: 0000000000000000 R09: 0000000000000000 [ 123.719304] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 123.720305] R13: 00007ffd835821af R14: 00007f6073e90300 R15: 0000000000022000 [ 123.721322] [ 123.721653] irq event stamp: 1612 [ 123.722145] hardirqs last enabled at (1611): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 123.723397] hardirqs last disabled at (1612): [] __schedule+0x1225/0x2470 [ 123.724493] softirqs last enabled at (1610): [] __irq_exit_rcu+0x11b/0x180 [ 123.725704] softirqs last disabled at (963): [] __irq_exit_rcu+0x11b/0x180 [ 123.726792] ---[ end trace 0000000000000000 ]--- 10:03:18 executing program 7: r0 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000380)="dcf83f59a5179d20e8b30d337aaa3f7f0572c7890f56f69320136005c274637b2ec3af4ac226c028618deb", 0x2b}], 0x1, 0xbefe, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x2000, 0x8, 0x1, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 10:03:18 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) open_by_handle_at(r2, &(0x7f00000005c0)=@orangefs={0x14, 0x1, {"99e58357afe9710e97a6a6c0203ee5c7", 0x3}}, 0x4040) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0xfffffffe}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000600)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r1, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000200)=""/107, 0x6b}], 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0xcf, 0x1, 0xf9, 0x8, 0x0, 0x42ba3309, 0xb5c0936dcf0b8d61, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000440), 0x8}, 0xb001, 0x5b4, 0xff, 0x7, 0x6caff66, 0x0, 0xfff8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xc, r4, 0x9) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f00000014c0)) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @remote}, 0x0, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000380)='ipvlan1\x00', 0x0, 0x30000000000, 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) [ 124.189721] audit: type=1400 audit(1664272998.709:9): avc: denied { write } for pid=3609 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 10:03:19 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) open_by_handle_at(r2, &(0x7f00000005c0)=@orangefs={0x14, 0x1, {"99e58357afe9710e97a6a6c0203ee5c7", 0x3}}, 0x4040) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0xfffffffe}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000600)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r1, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000200)=""/107, 0x6b}], 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0xcf, 0x1, 0xf9, 0x8, 0x0, 0x42ba3309, 0xb5c0936dcf0b8d61, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000440), 0x8}, 0xb001, 0x5b4, 0xff, 0x7, 0x6caff66, 0x0, 0xfff8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xc, r4, 0x9) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f00000014c0)) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @remote}, 0x0, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000380)='ipvlan1\x00', 0x0, 0x30000000000, 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) 10:03:19 executing program 7: r0 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000380)="dcf83f59a5179d20e8b30d337aaa3f7f0572c7890f56f69320136005c274637b2ec3af4ac226c028618deb", 0x2b}], 0x1, 0xbefe, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x2000, 0x8, 0x1, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 10:03:19 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) open_by_handle_at(r2, &(0x7f00000005c0)=@orangefs={0x14, 0x1, {"99e58357afe9710e97a6a6c0203ee5c7", 0x3}}, 0x4040) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0xfffffffe}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000600)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r1, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000200)=""/107, 0x6b}], 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0xcf, 0x1, 0xf9, 0x8, 0x0, 0x42ba3309, 0xb5c0936dcf0b8d61, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000440), 0x8}, 0xb001, 0x5b4, 0xff, 0x7, 0x6caff66, 0x0, 0xfff8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xc, r4, 0x9) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f00000014c0)) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @remote}, 0x0, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000380)='ipvlan1\x00', 0x0, 0x30000000000, 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) 10:03:19 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) open_by_handle_at(r2, &(0x7f00000005c0)=@orangefs={0x14, 0x1, {"99e58357afe9710e97a6a6c0203ee5c7", 0x3}}, 0x4040) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0xfffffffe}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000600)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r1, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000200)=""/107, 0x6b}], 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0xcf, 0x1, 0xf9, 0x8, 0x0, 0x42ba3309, 0xb5c0936dcf0b8d61, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000440), 0x8}, 0xb001, 0x5b4, 0xff, 0x7, 0x6caff66, 0x0, 0xfff8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xc, r4, 0x9) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f00000014c0)) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @remote}, 0x0, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000380)='ipvlan1\x00', 0x0, 0x30000000000, 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) [ 125.203028] loop5: detected capacity change from 0 to 8 [ 125.205815] nfs4: Unknown parameter '}ª^' [ 125.247657] loop5: detected capacity change from 0 to 8 [ 125.248264] nfs4: Unknown parameter '}ª^' [ 126.537140] audit: type=1400 audit(1664273001.057:10): avc: denied { map } for pid=3745 comm="syz-executor.4" path="pipe:[13735]" dev="pipefs" ino=13735 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 126.538948] audit: type=1400 audit(1664273001.057:11): avc: denied { execute } for pid=3745 comm="syz-executor.4" path="pipe:[13735]" dev="pipefs" ino=13735 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 VM DIAGNOSIS: 10:03:18 Registers: info registers vcpu 0 RAX=1ffffffff0bbfe65 RBX=ffffffff85dff32c RCX=ffffffff8440009a RDX=0000000000000000 RSI=ffffffff86244c3e RDI=ffffffff85dff32c RBP=ffffffff85dff32c RSP=ffff88803995f2c0 R8 =ffffffff86244c3e R9 =ffffffff862400ee R10=ffffed100732be7e R11=000000000003603d R12=ffffffff85dff330 R13=ffffffff85dff32c R14=ffffffff85dff32c R15=dffffc0000000000 RIP=ffffffff81119bef RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbbd7605260 CR3=000000003991c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88804101f3c8 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006e R11=0000000000000001 R12=000000000000006e R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6073e90700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa4ea305070 CR3=000000000dad6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000