Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:61721' (ECDSA) to the list of known hosts. 2022/09/28 19:52:09 fuzzer started 2022/09/28 19:52:10 dialing manager at localhost:35827 syzkaller login: [ 36.316303] cgroup: Unknown subsys name 'net' [ 36.398164] cgroup: Unknown subsys name 'rlimit' 2022/09/28 19:52:24 syscalls: 2215 2022/09/28 19:52:24 code coverage: enabled 2022/09/28 19:52:24 comparison tracing: enabled 2022/09/28 19:52:24 extra coverage: enabled 2022/09/28 19:52:24 setuid sandbox: enabled 2022/09/28 19:52:24 namespace sandbox: enabled 2022/09/28 19:52:24 Android sandbox: enabled 2022/09/28 19:52:24 fault injection: enabled 2022/09/28 19:52:24 leak checking: enabled 2022/09/28 19:52:24 net packet injection: enabled 2022/09/28 19:52:24 net device setup: enabled 2022/09/28 19:52:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/28 19:52:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/28 19:52:24 USB emulation: enabled 2022/09/28 19:52:24 hci packet injection: enabled 2022/09/28 19:52:24 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220927) 2022/09/28 19:52:24 802.15.4 emulation: enabled 2022/09/28 19:52:25 fetching corpus: 50, signal 19324/21137 (executing program) 2022/09/28 19:52:25 fetching corpus: 100, signal 36776/40119 (executing program) 2022/09/28 19:52:25 fetching corpus: 150, signal 47142/51916 (executing program) 2022/09/28 19:52:25 fetching corpus: 200, signal 52788/58961 (executing program) 2022/09/28 19:52:25 fetching corpus: 250, signal 56313/63886 (executing program) 2022/09/28 19:52:25 fetching corpus: 300, signal 60116/69034 (executing program) 2022/09/28 19:52:25 fetching corpus: 350, signal 66330/76374 (executing program) 2022/09/28 19:52:25 fetching corpus: 400, signal 73394/84408 (executing program) 2022/09/28 19:52:26 fetching corpus: 450, signal 77461/89501 (executing program) 2022/09/28 19:52:26 fetching corpus: 500, signal 81393/94384 (executing program) 2022/09/28 19:52:26 fetching corpus: 550, signal 84230/98247 (executing program) 2022/09/28 19:52:26 fetching corpus: 600, signal 87436/102370 (executing program) 2022/09/28 19:52:26 fetching corpus: 650, signal 90085/105942 (executing program) 2022/09/28 19:52:26 fetching corpus: 700, signal 95137/111601 (executing program) 2022/09/28 19:52:26 fetching corpus: 750, signal 97715/114997 (executing program) 2022/09/28 19:52:26 fetching corpus: 800, signal 99153/117381 (executing program) 2022/09/28 19:52:27 fetching corpus: 850, signal 104153/122793 (executing program) 2022/09/28 19:52:27 fetching corpus: 900, signal 106281/125699 (executing program) 2022/09/28 19:52:27 fetching corpus: 950, signal 108772/128846 (executing program) 2022/09/28 19:52:27 fetching corpus: 1000, signal 111136/131830 (executing program) 2022/09/28 19:52:27 fetching corpus: 1050, signal 115318/136293 (executing program) 2022/09/28 19:52:27 fetching corpus: 1100, signal 117389/138958 (executing program) 2022/09/28 19:52:27 fetching corpus: 1150, signal 119444/141604 (executing program) 2022/09/28 19:52:27 fetching corpus: 1200, signal 121425/144110 (executing program) 2022/09/28 19:52:28 fetching corpus: 1250, signal 123274/146546 (executing program) 2022/09/28 19:52:28 fetching corpus: 1300, signal 124458/148387 (executing program) 2022/09/28 19:52:28 fetching corpus: 1350, signal 126035/150542 (executing program) 2022/09/28 19:52:28 fetching corpus: 1400, signal 126986/152145 (executing program) 2022/09/28 19:52:28 fetching corpus: 1450, signal 128723/154289 (executing program) 2022/09/28 19:52:28 fetching corpus: 1500, signal 129799/155947 (executing program) 2022/09/28 19:52:28 fetching corpus: 1550, signal 131299/157958 (executing program) 2022/09/28 19:52:28 fetching corpus: 1600, signal 132434/159636 (executing program) 2022/09/28 19:52:28 fetching corpus: 1650, signal 133612/161355 (executing program) 2022/09/28 19:52:28 fetching corpus: 1700, signal 134772/163043 (executing program) 2022/09/28 19:52:29 fetching corpus: 1750, signal 136494/165078 (executing program) 2022/09/28 19:52:29 fetching corpus: 1800, signal 137275/166468 (executing program) 2022/09/28 19:52:29 fetching corpus: 1850, signal 138504/168069 (executing program) 2022/09/28 19:52:29 fetching corpus: 1900, signal 139521/169570 (executing program) 2022/09/28 19:52:29 fetching corpus: 1950, signal 140699/171161 (executing program) 2022/09/28 19:52:29 fetching corpus: 2000, signal 142917/173401 (executing program) 2022/09/28 19:52:29 fetching corpus: 2050, signal 144317/175051 (executing program) 2022/09/28 19:52:29 fetching corpus: 2100, signal 145054/176273 (executing program) 2022/09/28 19:52:29 fetching corpus: 2150, signal 146306/177775 (executing program) 2022/09/28 19:52:30 fetching corpus: 2200, signal 148224/179773 (executing program) 2022/09/28 19:52:30 fetching corpus: 2250, signal 148766/180833 (executing program) 2022/09/28 19:52:30 fetching corpus: 2300, signal 149636/182013 (executing program) 2022/09/28 19:52:30 fetching corpus: 2350, signal 150390/183173 (executing program) 2022/09/28 19:52:30 fetching corpus: 2400, signal 151275/184433 (executing program) 2022/09/28 19:52:30 fetching corpus: 2450, signal 152579/185901 (executing program) 2022/09/28 19:52:30 fetching corpus: 2500, signal 153385/187071 (executing program) 2022/09/28 19:52:30 fetching corpus: 2550, signal 154170/188155 (executing program) 2022/09/28 19:52:30 fetching corpus: 2600, signal 155076/189289 (executing program) 2022/09/28 19:52:31 fetching corpus: 2650, signal 155841/190333 (executing program) 2022/09/28 19:52:31 fetching corpus: 2700, signal 156978/191600 (executing program) 2022/09/28 19:52:31 fetching corpus: 2750, signal 158055/192766 (executing program) 2022/09/28 19:52:31 fetching corpus: 2800, signal 158938/193849 (executing program) 2022/09/28 19:52:31 fetching corpus: 2850, signal 159829/194938 (executing program) 2022/09/28 19:52:31 fetching corpus: 2900, signal 161945/196603 (executing program) 2022/09/28 19:52:31 fetching corpus: 2950, signal 163084/197734 (executing program) 2022/09/28 19:52:31 fetching corpus: 3000, signal 163663/198634 (executing program) 2022/09/28 19:52:32 fetching corpus: 3050, signal 164510/199635 (executing program) 2022/09/28 19:52:32 fetching corpus: 3100, signal 165274/200571 (executing program) 2022/09/28 19:52:32 fetching corpus: 3150, signal 165826/201408 (executing program) 2022/09/28 19:52:32 fetching corpus: 3200, signal 166174/202121 (executing program) 2022/09/28 19:52:32 fetching corpus: 3250, signal 166868/202930 (executing program) 2022/09/28 19:52:32 fetching corpus: 3300, signal 167398/203699 (executing program) 2022/09/28 19:52:32 fetching corpus: 3350, signal 168219/204600 (executing program) 2022/09/28 19:52:32 fetching corpus: 3400, signal 168622/205318 (executing program) 2022/09/28 19:52:32 fetching corpus: 3450, signal 169100/206033 (executing program) 2022/09/28 19:52:32 fetching corpus: 3500, signal 169985/206904 (executing program) 2022/09/28 19:52:32 fetching corpus: 3550, signal 171425/208127 (executing program) 2022/09/28 19:52:33 fetching corpus: 3600, signal 171875/208807 (executing program) 2022/09/28 19:52:33 fetching corpus: 3650, signal 173091/209759 (executing program) 2022/09/28 19:52:33 fetching corpus: 3700, signal 173623/210446 (executing program) 2022/09/28 19:52:33 fetching corpus: 3750, signal 174629/211253 (executing program) 2022/09/28 19:52:33 fetching corpus: 3800, signal 176809/212506 (executing program) 2022/09/28 19:52:33 fetching corpus: 3850, signal 177371/213179 (executing program) 2022/09/28 19:52:33 fetching corpus: 3900, signal 177807/213755 (executing program) 2022/09/28 19:52:33 fetching corpus: 3950, signal 178557/214428 (executing program) 2022/09/28 19:52:34 fetching corpus: 4000, signal 179699/215272 (executing program) 2022/09/28 19:52:34 fetching corpus: 4050, signal 180520/215960 (executing program) 2022/09/28 19:52:34 fetching corpus: 4100, signal 181275/216729 (executing program) 2022/09/28 19:52:34 fetching corpus: 4150, signal 182096/217380 (executing program) 2022/09/28 19:52:34 fetching corpus: 4200, signal 182894/217983 (executing program) 2022/09/28 19:52:34 fetching corpus: 4250, signal 183846/218587 (executing program) 2022/09/28 19:52:34 fetching corpus: 4300, signal 184686/219218 (executing program) 2022/09/28 19:52:34 fetching corpus: 4350, signal 185484/219852 (executing program) 2022/09/28 19:52:35 fetching corpus: 4400, signal 187456/220761 (executing program) 2022/09/28 19:52:35 fetching corpus: 4450, signal 188482/221369 (executing program) 2022/09/28 19:52:35 fetching corpus: 4500, signal 189471/221972 (executing program) 2022/09/28 19:52:35 fetching corpus: 4550, signal 190574/222531 (executing program) 2022/09/28 19:52:35 fetching corpus: 4600, signal 191313/223032 (executing program) 2022/09/28 19:52:35 fetching corpus: 4650, signal 191994/223486 (executing program) 2022/09/28 19:52:35 fetching corpus: 4700, signal 192378/223866 (executing program) 2022/09/28 19:52:35 fetching corpus: 4750, signal 192909/224289 (executing program) 2022/09/28 19:52:35 fetching corpus: 4800, signal 193467/224681 (executing program) 2022/09/28 19:52:36 fetching corpus: 4850, signal 194064/225082 (executing program) 2022/09/28 19:52:36 fetching corpus: 4900, signal 194595/225473 (executing program) 2022/09/28 19:52:36 fetching corpus: 4950, signal 195359/225916 (executing program) 2022/09/28 19:52:36 fetching corpus: 5000, signal 195880/226263 (executing program) 2022/09/28 19:52:36 fetching corpus: 5050, signal 196370/226620 (executing program) 2022/09/28 19:52:36 fetching corpus: 5100, signal 196895/226998 (executing program) 2022/09/28 19:52:36 fetching corpus: 5150, signal 197185/227332 (executing program) 2022/09/28 19:52:36 fetching corpus: 5200, signal 197844/227686 (executing program) 2022/09/28 19:52:36 fetching corpus: 5250, signal 198361/228034 (executing program) 2022/09/28 19:52:37 fetching corpus: 5300, signal 198968/228359 (executing program) 2022/09/28 19:52:37 fetching corpus: 5350, signal 199524/228683 (executing program) 2022/09/28 19:52:37 fetching corpus: 5400, signal 200273/229025 (executing program) 2022/09/28 19:52:37 fetching corpus: 5450, signal 201079/229339 (executing program) 2022/09/28 19:52:37 fetching corpus: 5500, signal 201695/229608 (executing program) 2022/09/28 19:52:37 fetching corpus: 5550, signal 202213/229859 (executing program) 2022/09/28 19:52:37 fetching corpus: 5600, signal 202573/230113 (executing program) 2022/09/28 19:52:37 fetching corpus: 5650, signal 203400/230481 (executing program) 2022/09/28 19:52:38 fetching corpus: 5700, signal 204182/230723 (executing program) 2022/09/28 19:52:38 fetching corpus: 5750, signal 204778/230729 (executing program) 2022/09/28 19:52:38 fetching corpus: 5800, signal 205369/230735 (executing program) 2022/09/28 19:52:38 fetching corpus: 5850, signal 206380/230757 (executing program) 2022/09/28 19:52:38 fetching corpus: 5900, signal 207008/230757 (executing program) 2022/09/28 19:52:38 fetching corpus: 5950, signal 207339/230764 (executing program) 2022/09/28 19:52:38 fetching corpus: 6000, signal 207955/230764 (executing program) 2022/09/28 19:52:38 fetching corpus: 6050, signal 208279/230766 (executing program) 2022/09/28 19:52:39 fetching corpus: 6100, signal 209258/230859 (executing program) 2022/09/28 19:52:39 fetching corpus: 6150, signal 209674/230859 (executing program) 2022/09/28 19:52:39 fetching corpus: 6200, signal 210274/230872 (executing program) 2022/09/28 19:52:39 fetching corpus: 6250, signal 210581/230872 (executing program) 2022/09/28 19:52:39 fetching corpus: 6250, signal 210581/230872 (executing program) 2022/09/28 19:52:42 starting 8 fuzzer processes 19:52:42 executing program 0: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x600, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x9c0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffa}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4881}, 0x8880) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x38}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x23}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c800}, 0x40019) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/meminfo\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000004c0)={'security\x00', 0x0, [0x5, 0x1ff, 0x74bb, 0x9, 0x7ff]}, &(0x7f0000000540)=0x54) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000580)={{r0}, {@val, @actul_num={@val=0x2b, 0xb80, 0x4b}}}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x154, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}]}, 0x154}, 0x1, 0x0, 0x0, 0x12}, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000e00)={0x0, 0x0}, &(0x7f0000000e40)=0xc) syz_mount_image$msdos(&(0x7f0000000800), &(0x7f0000000840)='./file1\x00', 0x2, 0x7, &(0x7f0000000d40)=[{&(0x7f0000000880)="992c58556c14be90d5547a034536214fcd99bf4a185c17d4717243a5360a459b0e4084060fb4eed87cd73e29f0f80c932f53bacfb2e32f32f6d552b5722dda00b87a7f3322f87bc209baf5711f2629a0377d5fc5acb8514bf2338ae1e70095c4adb46828329e136bd156693dde956715f62164e75726441448ab1a530c59b7381e6992825dcd8869443f3603cfa98b3520d7389f376a104f4c97bcd86cc822764827b8df651be4ee501ebf", 0xab, 0x8}, {&(0x7f0000000940)="29c13ce36526f61784734dda42f864a799e4c4f2d7478ff7c18028760e53536b53608c72c00a4d582d", 0x29, 0xfffffffffffffffb}, {&(0x7f0000000980)="aa5eb897549a13921a539746e527984c925ed6f7cbdbb45daf3db14d06ff156074d44f8877e41362ee35a46c8bf6682d7221de87b5a8e43ee5e465b8aa3a4f9da72f8af42cba150b3cce188937e11351fec2949857dad5a5878f40408ee029396a7498d7ca72ec9b94ea4e2f877e1c70f06926984791cc111c55822623512a44ac9b57ee149d56cfdb24cd1a80f77a736606319f2281973377557186a896865126b93da9f94484de863eefc6abfb6d0bca7a4b9f6bbb70be", 0xb8, 0xfa}, {&(0x7f0000000a40)="861353e76d4eb435bb3a468475088d4e84f9b10c29785be0949b975a476c5936e533cd8c54eb09f7f9a04d8e2870e386b9227e1522e790294fa0d36be2bceb9b03a81e1ab5eb5fca00b08a4d68f2581e21d331761df188a69f8195159e44b14b5d445de5e1193cfb4197ef774683c582c3071bdab1af89f57604e6b81e26d4fea1276fe2f75fb126176a56d4e01f9b190307596da59b01eb17ae9360c828172469a6c4d2d3a61ad526bb75b1c99f289f6ef3b2ee89b9edf72af9c9b4d772dd0527b76e9b0bd0575376d2f4bd11745d09b22c6086e1fc06e66a6929c17c81831bf5091bfabfc024706205b6fc51550309e870a0ce", 0xf4, 0x81}, {&(0x7f0000000b40)="a02ec3f50da926b0e2dd469cc82a782553062046d10687714f36b5cb80e8faec9d3b2b61f0ca07766656f147a992b9bf2fc47f7bf97b79a6a8f763ae31beb621aacdb00e2267bd4b25b739b485c0aba382f456ab52f4b6d68e5828ed77f8b2054758730210244f361d15f923db51be3f608194b1833b756a546717", 0x7b, 0x7f}, {&(0x7f0000000bc0)="0a96139c32d80003ca58520c7eb246bfac74c710f64826d416c4208c8b7e54b057a16dffc0ef9831fcd62bac5b86ee1b3581792f82e4cc232dba8b123e747728e6d7c65078ef9264b6ef32e14993bb8cdd6052d9f1b4bc0b21", 0x59, 0x3}, {&(0x7f0000000c40)="dee676921dca1e6fa24a3d127b4318b34ce4f19f475064b0f0e6df36bcca9ce1b3e38c692b249fe3a06e9c966c0a545b3c9e7538cd37606dbf1954bdd1ee5e0f5b6e5d574d7303cf4c77626e53a46cca8471613beebcc878f040180ae6e80228743d00572de6e72a5a2d2bc2ec2418507addd77c6c98df2baf4b4f060b767a6aff3a62048ac4146233fc6eba9296dc6cb31d4dc892fea994ba35992a989766c77f0f8f60744b60b78bc82407f3b101dad81fb9fb2c5b28a0d7353a0ef71ab5eeddc62ab36fc049d65f632c13e4a99f28e2cebe5e88668e1ac612756f5ea6e333791b62926c7d266312a4010ed8c0377f43c08975da6d66964b6e0d58b6", 0xfd, 0x2}], 0x2a20000, &(0x7f0000000e80)={[{@fat=@showexec}, {@fat=@check_normal}], [{@fsname={'fsname', 0x3d, '%^'}}, {@fowner_gt={'fowner>', r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/s:&\\]&-)'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000001080), 0x9, 0x101000) syz_genetlink_get_family_id$fou(&(0x7f0000001040), r6) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001100), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}}, 0x4000810) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) 19:52:42 executing program 1: fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'system.', '\xdcM#\x00'}, &(0x7f0000000040)=',\r\'%\'@{$),:\x00', 0xc, 0x2) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)=0x5) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000140)='system.', 0x7, 0x1) r0 = socket(0x10, 0x1, 0x1000) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180), &(0x7f00000001c0)={'L-', 0x80000000}, 0x16, 0x2) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/4096, 0x1000) r1 = accept4$packet(r0, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001280)=0x14, 0x80000) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000012c0)='wg1\x00', 0x4) r3 = fsmount(0xffffffffffffffff, 0x1, 0x8) write$P9_RGETATTR(r3, &(0x7f0000001300)={0xa0, 0x19, 0x1, {0x2000, {0x0, 0x4}, 0x3a, 0xee00, 0xffffffffffffffff, 0x5, 0x4, 0x80000000, 0x0, 0x5, 0x5, 0x817e, 0x4, 0x20, 0x0, 0x9, 0x3, 0x7fffffff, 0x8, 0xfffffffffffffffa}}, 0xa0) syz_genetlink_get_family_id$batadv(&(0x7f00000013c0), r0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000001400)={0x6}, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x7fff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xa9c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x7666d850a8647147) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001640)={'syztnl2\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x29, 0x30, 0x6, 0xfff, 0x78, @mcast1, @empty, 0x8000, 0x380e, 0x1000, 0x8}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000016c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000017c0)=0xe8) lchown(&(0x7f0000001680)='./file0\x00', r5, 0xee00) setxattr$trusted_overlay_nlink(&(0x7f0000001800)='./file0/file0\x00', &(0x7f0000001840), &(0x7f0000001880)={'U-', 0x100000000}, 0x16, 0x2) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000018c0)={r2, 0x1, 0x6, @random="a0c74289578d"}, 0x10) unlink(&(0x7f0000001900)='./file0\x00') 19:52:42 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@can={0x1d, 0x0}, &(0x7f0000000140)=0x80, 0x80800) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x90) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x200}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x101}]}, 0x24}}, 0x1) r6 = dup2(0xffffffffffffffff, r4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000480)={'erspan0\x00', r3, 0x8000, 0x40, 0x2, 0x6, {{0x8, 0x4, 0x3, 0x6, 0x20, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @multicast1, {[@generic={0x88, 0x9, "42666b57c4b67f"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000500)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf4, r7, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x24044080) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000700)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'tunl0\x00', r3, 0x700, 0x8, 0x3, 0x0, {{0x9, 0x4, 0x2, 0x2, 0x24, 0x67, 0x0, 0x1, 0x4, 0x0, @empty, @multicast2, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x55, [@multicast1, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000940)={'ip6gre0\x00', r9, 0x2f, 0x8, 0x18, 0x80, 0x11, @local, @local, 0x7, 0x7, 0x4, 0x7fff}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000b80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x130, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x44800}, 0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x6c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8a2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) r14 = socket(0x39, 0x80000, 0x9) sendmsg$NL80211_CMD_SET_MPATH(r14, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4010) 19:52:42 executing program 3: getcwd(&(0x7f0000000000)=""/41, 0x29) getcwd(&(0x7f0000000040), 0x0) getcwd(&(0x7f0000000080)=""/193, 0xc1) getcwd(&(0x7f0000000180)=""/234, 0xea) getcwd(&(0x7f0000000280)=""/29, 0x1d) getcwd(&(0x7f00000002c0)=""/94, 0x5e) getcwd(&(0x7f0000000340)=""/16, 0x10) getcwd(&(0x7f0000000380)=""/21, 0x15) getcwd(&(0x7f00000003c0)=""/136, 0x88) getcwd(&(0x7f0000000480)=""/251, 0xfb) getcwd(&(0x7f0000000580)=""/4096, 0x1000) getcwd(&(0x7f0000001580)=""/184, 0xb8) getcwd(&(0x7f0000001640)=""/178, 0xb2) getcwd(&(0x7f0000001700)=""/220, 0xdc) getcwd(&(0x7f0000001800)=""/4096, 0x1000) getcwd(&(0x7f0000002800)=""/4096, 0x1000) getcwd(&(0x7f0000003800)=""/113, 0x71) getcwd(&(0x7f0000003880)=""/251, 0xfb) getcwd(&(0x7f0000003980)=""/49, 0x31) getcwd(&(0x7f00000039c0)=""/211, 0xd3) [ 68.454421] audit: type=1400 audit(1664394762.400:6): avc: denied { execmem } for pid=285 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:52:42 executing program 4: sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x59}}}}, [@NL80211_ATTR_TESTDATA={0x37, 0x45, "09211a2f32796e98852bd32f4b404bc0ae13410644e7db324b10be2b972c101dc80a248c8095e063453f4e63d5f68251294522"}, @NL80211_ATTR_TESTDATA={0x69, 0x45, "7be52d40d1fc47e6cb60c1e0a6c56d43e32994098efacc532e034a2294d9407ca3e65c0ddefb1ea4f03825b469a67d42e697dd6efab99416a2cf7e8414dfbc92d9e7ba5fb5963943c303cc38806cfb9d64c71f62fef9c11193bd0f432f35a9fd5c1b809c0d"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x19}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/zoneinfo\x00', 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x28c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x73bf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ee}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4b93}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xae}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "cdf4f761185e52d2a0e1c388f403c485ac205662572723cfd9059cf043fef86284fae0"}}, @TIPC_NLA_NODE_ID={0x56, 0x3, "ee152f7472abfe458e78520379cd0f9ce8e6b64e293ef86d2b04547266c80eb06b929d3d6f0c2d65eda59dfee57657c3ce49ee4e339d092b9f9ba26efd16f70b269fadb58c946a826a8a44618a56960723b2"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "7fe29ea1ae24567858183e6346f5f9fef00d8584a70378d114c0c839db17"}}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "8c08a64f0a80e935380b1a1c1ced2d082e053e43d31078a10d9da942ae0ef0d6f38bf907f29c598e9237ca414951eb85e97c9348c663109247e36785e31a34fa8fc4e478141a97b50dc69e50e1dc8d1069e67d81c61fc8ee32699e40694c2ef187ba48228c6e3a549bf98a9ab6b38bfcf1424a14f764bec484fd2b3df528f85eabb3c50acc2e4ed51dd11a802c0cb1b4705ed218a89a76ec3745a9e57c4a1cf75d"}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000006c0), 0x2, 0x0) close(r2) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000800)={0x6, 0x1c}, 0x2) sendmsg$netlink(r1, &(0x7f0000000dc0)={&(0x7f0000000840)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)=[{&(0x7f0000000880)={0x490, 0x19, 0x100, 0x70bd28, 0x25dfdbff, "", [@typed={0x5, 0xc, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x47, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @fd=r0}]}, @generic="4981bcefaa4aca3183673c599710233b652575280fc13202918d0a716ab44f225ac2c11889cd54e7eca74908b82a505452ffccd8a94d888ddd2be03f11ad9d684485b7c1e5a05137b5278d04598aa8bb3d8ab82ba619f1c3e0aa58ebcfb1d7b977b9ba5a01d32880ccfe983838366a6c878fea375aff2f12278d06b2d88630bd54d0a9f5962bf4f70d46fb985335297fb9d8c6e13ac1bc65c13402fa8284c2744dde306165e311de42a1a7ab942500a4d4f66d96c4dc01e265b853d44227244539c437db015c4e6a5ac0d26056db4b97566b5887fb5cc90e4fa4103c743f61a0f44c9594ab16761a13aa009bf63b7651", @generic="d4bc2690c55a5cabcbb862cd6390fa02832a0caccb119011867fde17acf87887fa337d5a43d39105e69b461e131259b06e30025d8c9124c5d5b3b4063ba8433f546150306479338bb18d9b44854ee2c4b151be671f43ebf17e8ff3892a79ad6c3443abc01926e7902c45c2d7d7adc445014d33872c177ba3e286856563b669fc056ef838e64450fcc3762e5e62ca3343b042272e7ee8445e21320492e271c52e7c0e3ec56ae4458ca47ed07f4676178ae871e64414eb0c23ef4a47f8b6aafabfad268e87eca7a1d54125bdaf972d88568c1a152e8145c5a1c3d68b09", @nested={0x29f, 0x10, 0x0, 0x1, [@typed={0xc, 0x13, 0x0, 0x0, @u64=0x450e}, @generic="a3f0c3d2078c73a16afa71dcad4cddcfb504311c33308e322023783441480ffc31e991d48d34dc15076ac33ab5921a5e4529", @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@mcast1}, @generic, @generic="0cb1c298321c103e7ec96c13032e52245e71b2f93b3fd19ba78ab17f2bbdc6dd339bbf25af4eb3a80fe3d3ac359d167f0edd44816241283c68fe3cfc22ed54c2803519b922ed0e97d5a8bf25778285d2c2e0248e8e58b4edc682b162960cedfdcab50ba9c88470ced06dd6682986141d5f757b927149e52f268bbcd02f42300163aa24bf43f7f2a12101706f6455c0804f0e54ea3fda0e788f29362618bfb18b4a27550f4c777a4906485e199adf621672eeff0e51ee7f55fc0624be2cacb5d7ac54796a04943e8523206a10", @generic="b5196bb64312a50502aef1b2c5239af6f83513f4ea73f8bb5c658e49c069c49331db9f36d6dacb1916", @generic="c99db1066fb6207239d92c5305c53d8f0818e337854327c56d98ce134cb5cf6278f0d8eb78b423cb0fa507f734680a1bac81aee8d389feac503636cd92c0bcdc4b342fd094d951b0d58648dc6e5b7b1095ac911e56200cc63d7ff8a0c29e10510365cbe3d603275a58193fe650324bd0", @typed={0xd, 0x61, 0x0, 0x0, @str='gcm(aes)\x00'}, @generic="5ecabfdd789c63239e8fa806fe388115318f63898fc2a063257e780685b7d96b6ac3b8b93653a4e703513dd6f2f46a6ac802d8b9c80f996d6eaa7edce9ba234716eda1dcddd2459af66c4fd5437d3c48151e9c1bc140868df4de857edaca65cf8178b73d0612581954cbc3b1451e3a1bafb40b26b758b98c36ce4766af7f328d54428923a2f58c02fb9fa081e6903b44b3a1f527ec220cf5da8e0022f8e17fccebebc3f9e492c0de757c6029848566aa0c0c1b07e743ee88da493f43653b043d563c1caf9f05171371eb5fac1e020557471de2b7"]}]}, 0x490}], 0x1, &(0x7f0000000d80), 0x0, 0x4}, 0x40d0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20018840) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0x201740, 0x0) ioctl$FICLONE(r3, 0x40049409, r0) r4 = accept(r0, 0x0, &(0x7f0000000f40)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x40009) io_setup(0x9, &(0x7f00000010c0)=0x0) io_submit(r6, 0x2, &(0x7f00000012c0)=[&(0x7f0000001140)={0x0, 0x0, 0x0, 0x6, 0x6, r3, &(0x7f0000001100)="c6c69d8e1f4397f6904cab39c0af8ff37545", 0x12, 0x9, 0x0, 0x2, r1}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000001180)="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", 0xfa, 0x7f027783, 0x0, 0x2}]) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x810, r3, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000001440)=@IORING_OP_STATX={0x15, 0x4, 0x0, r0, &(0x7f0000001300), &(0x7f0000001400)='./file0\x00', 0x400, 0x1000, 0x1}, 0x1016) 19:52:42 executing program 5: ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x7}}, './file0\x00'}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="3b19fe75213dfc47844d5753", 0xc, 0x81) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x339040, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cpu.max\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0xa5cc}}, './file0/../file0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000200)={0x10001, 0x0, 0x9, 0x4, 0x90, 0x2}) write$P9_RXATTRCREATE(r2, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7) r6 = syz_mount_image$nfs(0xfffffffffffffffe, &(0x7f0000000280)='./file0/../file0\x00', 0xfffffffffffffff7, 0x4, &(0x7f0000000540)=[{&(0x7f00000002c0)="78db771f708de07f5c47ba9e205b221adb45c8a383801e8e635b7df52c753ec3710271e6d5890a09d55d0f08da99aa2602320e37d8f42b7f001bef75433466427229972f7b1cc000c6918f75b373571ea0a1caaf18c953b32f6e06fdff4c7bbfa123bc558990573bf0c5b7358bfd0a3ced32c7ab2e17d9eaecc1bfcb008562d95348f6918325f42f588ca6e8fed75e073ccd4cece82145370086cace2b2b638fe72348f73293855f3a941caf50df139c3d53b40c87bf935c0d03871de0c808dc5a0943e41b888bcf01ceb0d7a68656bc847098d17b37995060ba88", 0xdb, 0xffffffff}, {&(0x7f00000003c0)="37212a60cbb9c4603dc875a1db6f1763c05e557748d589098970e01733aeb8d6ce8230d1054cea6457766a7caf3fe6848c8b2efefa54f140a03fc033c81ff0cc068ff8d3d22dbb627d6bd4ef028fcb20de18981ab7622280df9b399cea8da6d030bee354a81d57489c", 0x69, 0x80}, {&(0x7f0000000440)="f35095783331da99d9c1c940be55bff52535e8c23ab874e4f5846c12466ba65a07ca2c8ad8d6853b625d8e37bef70bbe197fce08f293f9db8363edfd3418048028d0bca7866b4c2dd5fb3e51737fcaaa885d65c41d57c85e60c679bfa7f6812b5cf0c9a000fab12d7620d85752292dc4bcdae15b5ada66f63b4a895052b31b361e3c1c5011bd9c2a2d37d0831537c78fcf22c869a4696389c608a6fd3f6940408022a498d4b42097f68f5e8e329f87f98460d72a4557f49d3fba8dfb5bef", 0xbe, 0x8}, {&(0x7f0000000500)="5d4f7c625aec3ae1275df855de910b8223908eb7d0f15263d906fca5c37bb616cf561f82f41ced990fc69702c13798dba58f5c25721767", 0x37, 0x2}], 0x80, &(0x7f00000005c0)={[{'(]+^)\a(\x83)/'}, {'cpuacct.usage_user\x00'}, {'cpu.max\x00'}, {'#}$!'}, {}, {']%'}, {'cpuacct.usage_user\x00'}, {'cpu.max\x00'}, {'\xc5/'}, {'cpuacct.usage_user\x00'}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x62, 0x33, 0x61, 0x37, 0x35, 0x38, 0x33], 0x2d, [0x37, 0x30, 0x66, 0x39], 0x2d, [0x32, 0x61, 0x64, 0x63], 0x2d, [0x37, 0x39, 0x35, 0x30], 0x2d, [0x35, 0x34, 0x61, 0x31, 0x36, 0x39, 0x36, 0x34]}}}, {@pcr={'pcr', 0x3d, 0x39}}]}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) r7 = fsopen(&(0x7f00000006c0)='gfs2meta\x00', 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000700)={0x0, 0x7, r7, 0x1ff, 0x80000}) pipe(&(0x7f0000000740)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r7, {0x10001}}, './file0\x00'}) sendfile(r6, r9, 0x0, 0xa5aa) syz_mount_image$tmpfs(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x0, 0x5, &(0x7f0000000c00)=[{&(0x7f0000000840)="819ce1cc43b5ed6f28151767957df6d4b86515b75b5ec0816e53467a0623360099c88b1330a0ba8c8ea394d78d575cc75a19f99c11970e3f5a867db18d342036e32bbd8cc798e65601e0231e4f2d853c6af670ba789c3aa8e26a2c93c6e9ff2ff48e936ed3e5769e59b6695bb7bbf8530a550b8c353dc97f1bf437edbe39ae1c5a4702ea1784fcad96aa29d568e3000910dd086ae0bdd3ec2e19111f3d83bee9977ff5b58cedfcdb7c53010951f438ea8e5c1fed96d4d853f27de676dc189502552b00557cbf209648b347f628df10", 0xcf, 0x6}, {&(0x7f0000000940)="1d7b09ca304426ac21454b1c21cf38d165e677922e0dcd1b1f5555f7bf978f61c56e374e03b3", 0x26, 0x5}, {&(0x7f0000000980)="b57b7968a0b87323410f41dca045b4b51bc26a738ead78ae677ee909f3886e6da79a9e349f05f6e4ac336d51e9a8ff4e690c4c956cef6bcad06a40c78c2abea9960ba883467d73213b2fc3fc8054dab842b978cdabd8f0426f3b8a0c2988e19279bb04e5590599359755e38d434df679c882046c4f05a76bea3243b3b4bd6fa8ab8fb67ed02ec490d814199a76ebe9d983cced5d0d140e73eb0e7778fb3b7ae225dade17e0b3fec2a3560d17850246abe3aafeeac27b370ac15176886d1ec33f32885133f2a984e145be0238927befefd235f3378ea3cd0b6d5a06c3b5e40e66746bae8614", 0xe5, 0xff}, {&(0x7f0000000a80)="0369a68bd3cc9643e90f6d2520b3eb16b35bf4e8eacfe27d82e5c4557f05bd41cd3cb5f3d33f92712064a4023e051ca26925b4da451d5f2de61c37f8357d562305426406847003525cad31746840548c52f5a068e48022380aab158ddc8e705a77b0df04acfd52d162aa14424b937e1d35a6fbf8a7e7f6c1f058d7ec325fc58f9e98edd77b8653ad4c143bbb8ce3260bd809aa69", 0x94, 0x8000}, {&(0x7f0000000b40)="0b0dceb60bb9439ef5d856ac751e0c34507da2a875a11bb2445fed372cc31994b4e3f1ab345bc21487f94adf92898d563c0c1495b47fc9219d4478e593c27d4aca93c22a4f747051d04fe7e171a07e6c1e93da7ed9075632a0ce39cca373515b0fd393ed7846313f9bb52ed6dea0cd5c6e151889b8f69487ae49e945f361625d0b424735a0f2c8c13dc15f63f8c2", 0x8e, 0x85}], 0x2000000, &(0x7f0000000c80)={[{@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@size={'size', 0x3d, [0x2d, 0x35, 0x32]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x34, 0x65, 0x38]}}, {@huge_within_size}, {@huge_always}, {@mode={'mode', 0x3d, 0x40}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, '}(*:+!'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x63, 0x63, 0x31, 0x64, 0x63, 0x62, 0x64], 0x2d, [0x62, 0x35, 0x62, 0x65], 0x2d, [0x0, 0x35, 0x34, 0x37], 0x2d, [0x6a, 0x32, 0x35, 0x37], 0x2d, [0x62, 0x33, 0x61, 0x64, 0x34, 0xc43f383f5d5efc2f, 0x31, 0x62]}}}, {@subj_user={'subj_user', 0x3d, ','}}, {@uid_lt}, {@fowner_gt={'fowner>', 0xee01}}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000dc0)='./file0\x00', 0x2) 19:52:42 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="dbcbbf59785a4384f0c7d4db546b27a0d0819d7b4b3a7b8c7d941b93c8217e6431ee", 0x22, 0xfffffffffffffff7}, {&(0x7f0000000100)="a8bed7dc8d1b096efbe581a15104a4d28c28e9a5454d9e30419597a6b49c3f3e3059e8a04426e5dfa4f0b84f2fdc264dc18e59d2597ca14b0e9c1da82ecdeeedfc86ba09bc8856cc8e870a0bdf69f023547dee6c55c62994a21e3fdb3f48aab38e6c31e517f0db3c0a65e24d3927ad16d5be70d3665b40a70446a4ed43cc4f8909344421a792104edba16b3a", 0x8c, 0x5}, {&(0x7f00000001c0)="860963d89fd2072e78c9cbaa1b88092d7cb8c9816e7010a5f08e364f75e38123d0a5caf71b8ee5a913cf5b302045c21847b1b4362b301c6119000ab2af8386f06b064bc03812276dbb9a1edfb8ed982814aa2541e2242ed1eab09d5b1ba8e2152d27032e1e58a046f8932542121a923f2ee0c3f99554c187fa61122c9f7d11efa330faf4c873a158f01a60e120891f02555fa70982c1b99202c70ea121ff688d2ffaf0f90c3d7ed475f9304ddde96a2164e8bb5d6896d92b057881a628ca6e2ee85417ca8e1622044d53055ef4", 0xcd, 0x789c}], 0x1180020, &(0x7f0000000340)={[{@shortname_winnt}], [{@appraise}, {@subj_user={'subj_user', 0x3d, '}*'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}, {@permit_directio}]}) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000003c0)='./file0\x00') syz_io_uring_setup(0x453, &(0x7f0000000400)={0x0, 0xf195, 0x4, 0x0, 0x2b1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000540)='appraise', &(0x7f0000000580)='./file0\x00', 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000005c0)) getdents64(r2, &(0x7f0000000600)=""/37, 0x25) recvmmsg$unix(r2, &(0x7f0000003600)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000780)=""/30, 0x1e}, {&(0x7f00000007c0)=""/171, 0xab}, {&(0x7f0000000880)=""/222, 0xde}], 0x4, &(0x7f00000009c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/232, 0xe8}, {&(0x7f0000000c80)=""/59, 0x3b}, {&(0x7f0000000cc0)=""/219, 0xdb}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/214, 0xd6}, {&(0x7f0000001ec0)}], 0x7, &(0x7f0000001f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000002000), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002080)=""/140, 0x8c}, {&(0x7f0000002140)=""/25, 0x19}, {&(0x7f0000002180)=""/170, 0xaa}, {&(0x7f0000002240)=""/217, 0xd9}, {&(0x7f0000002340)=""/14, 0xe}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/4, 0x4}, {&(0x7f00000033c0)=""/197, 0xc5}], 0x8, &(0x7f0000003540)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xc0}}], 0x3, 0x2040, &(0x7f00000036c0)={0x0, 0x3938700}) move_mount(r2, &(0x7f0000003700)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000003740)='./file0\x00', 0x1) openat(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x8a00, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000037c0), 0xa482, 0x0) fcntl$addseals(r9, 0x409, 0x0) r10 = syz_open_dev$mouse(&(0x7f0000003840), 0x0, 0x181080) symlinkat(&(0x7f0000003800)='./file0\x00', r10, &(0x7f0000003880)='./file0\x00') ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f00000038c0)) r11 = syz_open_dev$vcsn(&(0x7f0000003940), 0x4b63, 0x400) ioctl$BTRFS_IOC_SCRUB_CANCEL(r11, 0x941c, 0x0) r12 = gettid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000003f40)={{0x1, 0x1, 0x18, r6, {r5, r8}}, './file0\x00'}) sendmsg$unix(r3, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003980)="62c82d305b6af5e13ac038bf215ef44dde292514921bb91e97f6ac24c473e3d37e591181fbb8fee9ca36cd804c754488dffaafe06d64c2aeff0f32022fec970d8c60d6447bb6f826f967", 0x4a}, {&(0x7f0000003a00)="b63317610a207fbf48f12de7b368a3567508027b82031cfb97a2062266900a67ca08d96b259de6c702a64edabe380181bf21f101629a2af9352566c7ee1e31b041b1d73959633f7353e6dc497f8955eb5817c328922e4cc096e278e6cce89bd7a1154434ace7e82b2c3720a0886aec4a1eb6f41bbabcd83d3b3604de65857f3934f2175b4b624312af392fb2def7d26024d58f7f6219cff856ff1bff742d0fe0bc26b24d301ced6673b1c5eed0307b5de6265b53acc8e8494422c7ef51a8b7fddf9795597ac30fd0210908a026ab9f45ec71894189fbb795496ba392de", 0xdd}, {&(0x7f0000003b00)="f1aeaf97a40cd53a3478b8c954428284be419bf180d6e5e80678e9cdb060de13cbcad94a52b5f47925df91f1fdee0b9d72a6c41461f215f6fabbba0821c73e2b0e4c7effcf56b7ebc60a388d", 0x4c}, {&(0x7f0000003b80)="0cdd8f70491cb13eafe0adf4f9e38d126ceece70d7a3ad572e56bcebda5fb27483a8199cf562b804271e79dfb2e90ff1bbccd431381594d6f5bb7bca337b3a8257d423d0c0b68b2d3111711b2d9c90a8671455a95f5d60da3316ed031ec2c2c0d21c2e921e00b3c171b0efd0053e2812ff0648075b490dab6fa560ad99bb779a2c37c7c6ad6916504d1735d9202b3f053a6d7a45b659671fe1bb4936f08598055f8b85e8ee3619c75449867a238d8b5fd275d20d2962b08412986e2b9eac15f52ec493cbfd809a6563ea88c75853f31f93b84f53b4736764d027cbbc2c4d79b1", 0xe0}, {&(0x7f0000003c80)="2ca27883105e6f0719512abd106a91c084ee39758530", 0x16}, {&(0x7f0000003cc0)="b1b4468cb20ee2cad711505170e9afd46e5b2b6c5651666e6bf9fc1fa2728fac042be5bdfe04fc5ad0aee8290e277cb552a6e8902ab7bf7ba715e1774d194c60931a8d6667c3ce4fb43b32906e97c29d31c486", 0x53}, {&(0x7f0000003d40)="ad8ef55d9d5230d75f4cda669e12678905570bfa875910587db5f13cf4720284f367eb813f2714578c39508f93136b16c9719a8a95ce41521d477981574f3b417cfc729451417d8437d5618a178923f06195ff7232a55a18c0289b7504d13a", 0x5f}, {&(0x7f0000003dc0)="34507a2c778d7838591a60eb84a805516f4232a9da11b46ea0cbbbf6b25577e0fb196d01d815af769789cf5105ba13a3ff7c5bb0a8f2eeba0dd40477902b6c6fa7668853326777a840fdca02fcdc1b010de9f00bce9b54ac31e087937d60be796fe4e68a85e9a27828b1ddaf2a98ec57ee42dfe5251b5b5c5d6409f988c9de47ac85a2624eedb86eb341b28502d07bd4dc9a2bd87209d354825b58b875b342ce1e0bf31d5678d0504850a5937fdbd0f7aba79c4d33ddcc582f67790a0136f9ddfab952b6b0cc445715a4b1781b1b21e9caa48667458e373e235f804fdf3f4802", 0xe0}], 0x8, &(0x7f0000004400)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68, 0x8001}, 0x44894) 19:52:42 executing program 7: setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0xfb, 0x8}, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'bridge0\x00', @ifru_addrs=@sco={0x1f, @none}}}) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000180)={0x0, 0x88c, 0x5}) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14, 0x80000) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000240)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{r0}, 0x6, &(0x7f0000000280)=[0x5, 0x5, 0x8, 0x3f, 0xffff, 0x20], 0x1, 0x4, [0x100, 0x8, 0x5ab, 0x2]}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000340)=0x6, 0x4) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000380)) connect$bt_sco(0xffffffffffffffff, &(0x7f00000003c0), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x3c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x24008010) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000540), 0x1) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000580), 0x10) syz_io_uring_setup(0x2179, &(0x7f00000005c0)={0x0, 0x39ae, 0x1, 0x0, 0x302}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000006c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r3}}, 0x2) [ 69.793267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.793474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.795776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.796210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.801900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.803419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.804209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.806924] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.807874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.811779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.812692] Bluetooth: hci0: HCI_REQ-0x0c1a [ 69.821769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.824029] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.825031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.834668] Bluetooth: hci1: HCI_REQ-0x0c1a [ 69.877986] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.913299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.917187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.919057] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.920430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.930811] Bluetooth: hci2: HCI_REQ-0x0c1a [ 69.948898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.949357] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.952522] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.954671] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.956922] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.958821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.960161] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.963170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.965071] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 69.965411] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.966401] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.967388] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.969546] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.971530] Bluetooth: hci6: HCI_REQ-0x0c1a [ 69.973077] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.974347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.975828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.979120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.980163] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.985959] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.987365] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.989825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.991971] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.993047] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 69.995005] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.996350] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.997787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.999099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.000224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 70.001796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.003078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.011438] Bluetooth: hci7: HCI_REQ-0x0c1a [ 70.018667] Bluetooth: hci3: HCI_REQ-0x0c1a [ 70.026754] Bluetooth: hci5: HCI_REQ-0x0c1a [ 70.027478] Bluetooth: hci4: HCI_REQ-0x0c1a [ 71.865134] Bluetooth: hci1: command 0x0409 tx timeout [ 71.866132] Bluetooth: hci0: command 0x0409 tx timeout [ 71.992681] Bluetooth: hci6: command 0x0409 tx timeout [ 71.994247] Bluetooth: hci2: command 0x0409 tx timeout [ 72.056834] Bluetooth: hci7: command 0x0409 tx timeout [ 72.184799] Bluetooth: hci4: command 0x0409 tx timeout [ 72.185782] Bluetooth: hci3: command 0x0409 tx timeout [ 72.186710] Bluetooth: hci5: command 0x0409 tx timeout [ 73.913635] Bluetooth: hci0: command 0x041b tx timeout [ 73.914313] Bluetooth: hci1: command 0x041b tx timeout [ 74.040617] Bluetooth: hci2: command 0x041b tx timeout [ 74.041177] Bluetooth: hci6: command 0x041b tx timeout [ 74.105663] Bluetooth: hci7: command 0x041b tx timeout [ 74.233788] Bluetooth: hci5: command 0x041b tx timeout [ 74.234292] Bluetooth: hci3: command 0x041b tx timeout [ 74.234789] Bluetooth: hci4: command 0x041b tx timeout [ 75.961621] Bluetooth: hci1: command 0x040f tx timeout [ 75.962086] Bluetooth: hci0: command 0x040f tx timeout [ 76.089609] Bluetooth: hci6: command 0x040f tx timeout [ 76.090069] Bluetooth: hci2: command 0x040f tx timeout [ 76.153596] Bluetooth: hci7: command 0x040f tx timeout [ 76.281680] Bluetooth: hci4: command 0x040f tx timeout [ 76.282167] Bluetooth: hci3: command 0x040f tx timeout [ 76.282608] Bluetooth: hci5: command 0x040f tx timeout [ 78.009648] Bluetooth: hci0: command 0x0419 tx timeout [ 78.010112] Bluetooth: hci1: command 0x0419 tx timeout [ 78.136607] Bluetooth: hci2: command 0x0419 tx timeout [ 78.137055] Bluetooth: hci6: command 0x0419 tx timeout [ 78.200662] Bluetooth: hci7: command 0x0419 tx timeout [ 78.328619] Bluetooth: hci5: command 0x0419 tx timeout [ 78.329098] Bluetooth: hci3: command 0x0419 tx timeout [ 78.329506] Bluetooth: hci4: command 0x0419 tx timeout 19:53:38 executing program 3: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000240)=""/4096, &(0x7f0000000000)=0x1000) sendfile(r0, r2, 0x0, 0xfffffffffffffffd) utimensat(r1, 0x0, 0x0, 0x0) 19:53:39 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioperm(0x0, 0x800, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x0, 0x8}) syz_io_uring_setup(0x3344, &(0x7f00000001c0)={0x0, 0xf06b, 0x2, 0x0, 0x2d4, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) [ 125.255915] audit: type=1400 audit(1664394819.201:7): avc: denied { open } for pid=3725 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.259193] audit: type=1400 audit(1664394819.202:8): avc: denied { kernel } for pid=3725 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.270133] ------------[ cut here ]------------ [ 125.270157] [ 125.270161] ====================================================== [ 125.270165] WARNING: possible circular locking dependency detected [ 125.270170] 6.0.0-rc7-next-20220927 #1 Not tainted [ 125.270176] ------------------------------------------------------ [ 125.270180] syz-executor.3/3726 is trying to acquire lock: [ 125.270186] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 125.270229] [ 125.270229] but task is already holding lock: [ 125.270233] ffff88800d4a8420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.270262] [ 125.270262] which lock already depends on the new lock. [ 125.270262] [ 125.270265] [ 125.270265] the existing dependency chain (in reverse order) is: [ 125.270269] [ 125.270269] -> #3 (&ctx->lock){....}-{2:2}: [ 125.270283] _raw_spin_lock+0x2a/0x40 [ 125.270296] __perf_event_task_sched_out+0x53b/0x18d0 [ 125.270309] __schedule+0xedd/0x2470 [ 125.270324] schedule+0xda/0x1b0 [ 125.270340] futex_wait_queue+0xf5/0x1e0 [ 125.270353] futex_wait+0x28e/0x690 [ 125.270363] do_futex+0x2ff/0x380 [ 125.270372] __x64_sys_futex+0x1c6/0x4d0 [ 125.270383] do_syscall_64+0x3b/0x90 [ 125.270393] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.270408] [ 125.270408] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 125.270421] _raw_spin_lock_nested+0x30/0x40 [ 125.270434] raw_spin_rq_lock_nested+0x1e/0x30 [ 125.270448] task_fork_fair+0x63/0x4d0 [ 125.270469] sched_cgroup_fork+0x3d0/0x540 [ 125.270483] copy_process+0x4183/0x6e20 [ 125.270495] kernel_clone+0xe7/0x890 [ 125.270504] user_mode_thread+0xad/0xf0 [ 125.270514] rest_init+0x24/0x250 [ 125.270528] arch_call_rest_init+0xf/0x14 [ 125.270546] start_kernel+0x4c6/0x4eb [ 125.270557] secondary_startup_64_no_verify+0xe0/0xeb [ 125.270571] [ 125.270571] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 125.270585] _raw_spin_lock_irqsave+0x39/0x60 [ 125.270597] try_to_wake_up+0xab/0x1930 [ 125.270610] up+0x75/0xb0 [ 125.270626] __up_console_sem+0x6e/0x80 [ 125.270642] console_unlock+0x46a/0x590 [ 125.270658] vt_ioctl+0x2822/0x2ca0 [ 125.270672] tty_ioctl+0x785/0x16b0 [ 125.270685] __x64_sys_ioctl+0x19a/0x210 [ 125.270701] do_syscall_64+0x3b/0x90 [ 125.270711] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.270742] [ 125.270742] -> #0 ((console_sem).lock){....}-{2:2}: [ 125.270756] __lock_acquire+0x2a02/0x5e70 [ 125.270774] lock_acquire+0x1a2/0x530 [ 125.270789] _raw_spin_lock_irqsave+0x39/0x60 [ 125.270801] down_trylock+0xe/0x70 [ 125.270817] __down_trylock_console_sem+0x3b/0xd0 [ 125.270833] vprintk_emit+0x16b/0x560 [ 125.270850] vprintk+0x84/0xa0 [ 125.270865] _printk+0xba/0xf1 [ 125.270878] report_bug.cold+0x72/0xab [ 125.270889] handle_bug+0x3c/0x70 [ 125.270899] exc_invalid_op+0x14/0x50 [ 125.270909] asm_exc_invalid_op+0x16/0x20 [ 125.270922] group_sched_out.part.0+0x2c7/0x460 [ 125.270934] ctx_sched_out+0x8f1/0xc10 [ 125.270944] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.270956] __schedule+0xedd/0x2470 [ 125.270971] schedule+0xda/0x1b0 [ 125.270987] futex_wait_queue+0xf5/0x1e0 [ 125.270997] futex_wait+0x28e/0x690 [ 125.271007] do_futex+0x2ff/0x380 [ 125.271017] __x64_sys_futex+0x1c6/0x4d0 [ 125.271027] do_syscall_64+0x3b/0x90 [ 125.271037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.271051] [ 125.271051] other info that might help us debug this: [ 125.271051] [ 125.271054] Chain exists of: [ 125.271054] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 125.271054] [ 125.271068] Possible unsafe locking scenario: [ 125.271068] [ 125.271071] CPU0 CPU1 [ 125.271073] ---- ---- [ 125.271076] lock(&ctx->lock); [ 125.271081] lock(&rq->__lock); [ 125.271088] lock(&ctx->lock); [ 125.271094] lock((console_sem).lock); [ 125.271100] [ 125.271100] *** DEADLOCK *** [ 125.271100] [ 125.271102] 2 locks held by syz-executor.3/3726: [ 125.271109] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 125.271139] #1: ffff88800d4a8420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.271168] [ 125.271168] stack backtrace: [ 125.271171] CPU: 0 PID: 3726 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220927 #1 [ 125.271186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.271195] Call Trace: [ 125.271200] [ 125.271204] dump_stack_lvl+0x8b/0xb3 [ 125.271216] check_noncircular+0x263/0x2e0 [ 125.271233] ? format_decode+0x26c/0xb50 [ 125.271252] ? print_circular_bug+0x450/0x450 [ 125.271269] ? enable_ptr_key_workfn+0x20/0x20 [ 125.271287] ? format_decode+0x26c/0xb50 [ 125.271306] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 125.271324] __lock_acquire+0x2a02/0x5e70 [ 125.271345] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 125.271368] lock_acquire+0x1a2/0x530 [ 125.271384] ? down_trylock+0xe/0x70 [ 125.271403] ? lock_release+0x750/0x750 [ 125.271423] ? vprintk+0x84/0xa0 [ 125.271441] _raw_spin_lock_irqsave+0x39/0x60 [ 125.271454] ? down_trylock+0xe/0x70 [ 125.271471] down_trylock+0xe/0x70 [ 125.271489] ? vprintk+0x84/0xa0 [ 125.271505] __down_trylock_console_sem+0x3b/0xd0 [ 125.271523] vprintk_emit+0x16b/0x560 [ 125.271541] vprintk+0x84/0xa0 [ 125.271559] _printk+0xba/0xf1 [ 125.271571] ? record_print_text.cold+0x16/0x16 [ 125.271589] ? report_bug.cold+0x66/0xab [ 125.271600] ? group_sched_out.part.0+0x2c7/0x460 [ 125.271612] report_bug.cold+0x72/0xab [ 125.271625] handle_bug+0x3c/0x70 [ 125.271635] exc_invalid_op+0x14/0x50 [ 125.271647] asm_exc_invalid_op+0x16/0x20 [ 125.271661] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.271676] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.271687] RSP: 0018:ffff8880186ef8f8 EFLAGS: 00010006 [ 125.271696] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.271704] RDX: ffff88801005d040 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 125.271712] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 125.271719] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d4a8400 [ 125.271727] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 125.271738] ? group_sched_out.part.0+0x2c7/0x460 [ 125.271752] ? group_sched_out.part.0+0x2c7/0x460 [ 125.271765] ctx_sched_out+0x8f1/0xc10 [ 125.271778] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.271794] ? lock_is_held_type+0xd7/0x130 [ 125.271810] ? __perf_cgroup_move+0x160/0x160 [ 125.271822] ? set_next_entity+0x304/0x550 [ 125.271842] ? lock_is_held_type+0xd7/0x130 [ 125.271857] __schedule+0xedd/0x2470 [ 125.271876] ? io_schedule_timeout+0x150/0x150 [ 125.271893] ? futex_wait_setup+0x166/0x230 [ 125.271908] schedule+0xda/0x1b0 [ 125.271924] futex_wait_queue+0xf5/0x1e0 [ 125.271937] futex_wait+0x28e/0x690 [ 125.271949] ? futex_wait_setup+0x230/0x230 [ 125.271963] ? wake_up_q+0x8b/0xf0 [ 125.271976] ? do_raw_spin_unlock+0x4f/0x220 [ 125.271995] ? futex_wake+0x158/0x490 [ 125.272012] ? fd_install+0x1f9/0x640 [ 125.272029] do_futex+0x2ff/0x380 [ 125.272040] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 125.272057] __x64_sys_futex+0x1c6/0x4d0 [ 125.272070] ? __x64_sys_futex_time32+0x480/0x480 [ 125.272084] ? __secure_computing+0x199/0x2f0 [ 125.272104] do_syscall_64+0x3b/0x90 [ 125.272116] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.272131] RIP: 0033:0x7f0ffa312b19 [ 125.272139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.272150] RSP: 002b:00007f0ff7888218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.272160] RAX: ffffffffffffffda RBX: 00007f0ffa425f68 RCX: 00007f0ffa312b19 [ 125.272168] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0ffa425f68 [ 125.272175] RBP: 00007f0ffa425f60 R08: 0000000000000000 R09: 0000000000000000 [ 125.272182] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0ffa425f6c [ 125.272190] R13: 00007ffe10fe224f R14: 00007f0ff7888300 R15: 0000000000022000 [ 125.272203] [ 125.331307] WARNING: CPU: 0 PID: 3726 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 125.331979] Modules linked in: [ 125.332220] CPU: 0 PID: 3726 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220927 #1 [ 125.332807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.333620] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.334017] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.335342] RSP: 0018:ffff8880186ef8f8 EFLAGS: 00010006 [ 125.335731] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.336255] RDX: ffff88801005d040 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 125.336781] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 125.337304] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d4a8400 [ 125.337826] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 125.338349] FS: 00007f0ff7888700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 125.338953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.339380] CR2: 00007fef7ce5e6f4 CR3: 00000000402ee000 CR4: 0000000000350ef0 [ 125.339902] Call Trace: [ 125.340094] [ 125.340265] ctx_sched_out+0x8f1/0xc10 [ 125.340558] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.340940] ? lock_is_held_type+0xd7/0x130 [ 125.341265] ? __perf_cgroup_move+0x160/0x160 [ 125.341597] ? set_next_entity+0x304/0x550 [ 125.341920] ? lock_is_held_type+0xd7/0x130 [ 125.342243] __schedule+0xedd/0x2470 [ 125.342530] ? io_schedule_timeout+0x150/0x150 [ 125.342888] ? futex_wait_setup+0x166/0x230 [ 125.343210] schedule+0xda/0x1b0 [ 125.343469] futex_wait_queue+0xf5/0x1e0 [ 125.343773] futex_wait+0x28e/0x690 [ 125.344049] ? futex_wait_setup+0x230/0x230 [ 125.344372] ? wake_up_q+0x8b/0xf0 [ 125.344642] ? do_raw_spin_unlock+0x4f/0x220 [ 125.344978] ? futex_wake+0x158/0x490 [ 125.345263] ? fd_install+0x1f9/0x640 [ 125.345556] do_futex+0x2ff/0x380 [ 125.345821] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 125.346248] __x64_sys_futex+0x1c6/0x4d0 [ 125.346552] ? __x64_sys_futex_time32+0x480/0x480 [ 125.346932] ? __secure_computing+0x199/0x2f0 [ 125.347276] do_syscall_64+0x3b/0x90 [ 125.347556] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.347944] RIP: 0033:0x7f0ffa312b19 [ 125.348218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.349541] RSP: 002b:00007f0ff7888218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.350098] RAX: ffffffffffffffda RBX: 00007f0ffa425f68 RCX: 00007f0ffa312b19 [ 125.350621] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0ffa425f68 [ 125.351155] RBP: 00007f0ffa425f60 R08: 0000000000000000 R09: 0000000000000000 [ 125.351676] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0ffa425f6c [ 125.352198] R13: 00007ffe10fe224f R14: 00007f0ff7888300 R15: 0000000000022000 [ 125.352731] [ 125.352908] irq event stamp: 880 [ 125.353157] hardirqs last enabled at (879): [] syscall_enter_from_user_mode+0x1d/0x50 [ 125.353848] hardirqs last disabled at (880): [] __schedule+0x1225/0x2470 [ 125.354452] softirqs last enabled at (572): [] __irq_exit_rcu+0x11b/0x180 [ 125.355086] softirqs last disabled at (567): [] __irq_exit_rcu+0x11b/0x180 [ 125.355715] ---[ end trace 0000000000000000 ]--- [ 125.482227] loop0: detected capacity change from 0 to 16383 [ 125.655093] loop0: detected capacity change from 0 to 16383 19:53:39 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioperm(0x0, 0x800, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x0, 0x8}) syz_io_uring_setup(0x3344, &(0x7f00000001c0)={0x0, 0xf06b, 0x2, 0x0, 0x2d4, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) [ 127.687162] loop6: detected capacity change from 0 to 16383 [ 127.707429] loop6: detected capacity change from 0 to 16383 [ 128.702070] syz-executor.7 (301) used greatest stack depth: 24664 bytes left [ 132.984658] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 132.985660] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 135.172658] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.178764] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.180396] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.183264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.185451] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 135.187222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.190794] Bluetooth: hci5: HCI_REQ-0x0c1a VM DIAGNOSIS: 19:53:39 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba0b1 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff8880186ef340 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba0a0 RIP=ffffffff823ba109 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0ff7888700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fef7ce5e6f4 CR3=00000000402ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f0ffa3f97c0 00007f0ffa3f97c8 YMM02=0000000000000000 0000000000000000 00007f0ffa3f97e0 00007f0ffa3f97c0 YMM03=0000000000000000 0000000000000000 00007f0ffa3f97c8 00007f0ffa3f97c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=0000000000000202 RCX=1ffffffff0b60ee1 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff84270c38 RBP=ffff88800f2130e0 RSP=ffff88801d167860 R8 =0000000000000000 R9 =0000000000000000 R10=ffffed1001e4261c R11=0000000000000001 R12=ffff88800f213170 R13=ffff88800f213120 R14=ffff888007c75000 R15=ffff888040f1f600 RIP=ffffffff8424ff99 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f52b8ca8260 CR3=000000004072e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000