Warning: Permanently added '[localhost]:50427' (ECDSA) to the list of known hosts. 2022/09/30 04:21:06 fuzzer started 2022/09/30 04:21:07 dialing manager at localhost:40535 syzkaller login: [ 44.053200] cgroup: Unknown subsys name 'net' [ 44.142672] cgroup: Unknown subsys name 'rlimit' 2022/09/30 04:21:21 syscalls: 2215 2022/09/30 04:21:21 code coverage: enabled 2022/09/30 04:21:21 comparison tracing: enabled 2022/09/30 04:21:21 extra coverage: enabled 2022/09/30 04:21:21 setuid sandbox: enabled 2022/09/30 04:21:21 namespace sandbox: enabled 2022/09/30 04:21:21 Android sandbox: enabled 2022/09/30 04:21:21 fault injection: enabled 2022/09/30 04:21:21 leak checking: enabled 2022/09/30 04:21:21 net packet injection: enabled 2022/09/30 04:21:21 net device setup: enabled 2022/09/30 04:21:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 04:21:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 04:21:21 USB emulation: enabled 2022/09/30 04:21:21 hci packet injection: enabled 2022/09/30 04:21:21 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 04:21:21 802.15.4 emulation: enabled 2022/09/30 04:21:21 fetching corpus: 50, signal 24412/26153 (executing program) 2022/09/30 04:21:21 fetching corpus: 100, signal 45014/48110 (executing program) 2022/09/30 04:21:21 fetching corpus: 150, signal 51381/55807 (executing program) 2022/09/30 04:21:21 fetching corpus: 200, signal 56218/61914 (executing program) 2022/09/30 04:21:21 fetching corpus: 250, signal 61370/68225 (executing program) 2022/09/30 04:21:21 fetching corpus: 300, signal 65134/73136 (executing program) 2022/09/30 04:21:21 fetching corpus: 350, signal 70389/79354 (executing program) 2022/09/30 04:21:21 fetching corpus: 400, signal 74087/84065 (executing program) 2022/09/30 04:21:22 fetching corpus: 450, signal 76928/87895 (executing program) 2022/09/30 04:21:22 fetching corpus: 500, signal 80466/92295 (executing program) 2022/09/30 04:21:22 fetching corpus: 550, signal 82272/95093 (executing program) 2022/09/30 04:21:22 fetching corpus: 600, signal 85674/99312 (executing program) 2022/09/30 04:21:22 fetching corpus: 650, signal 89785/104045 (executing program) 2022/09/30 04:21:22 fetching corpus: 700, signal 91782/106811 (executing program) 2022/09/30 04:21:22 fetching corpus: 750, signal 94544/110225 (executing program) 2022/09/30 04:21:22 fetching corpus: 800, signal 97991/114178 (executing program) 2022/09/30 04:21:23 fetching corpus: 850, signal 100104/116904 (executing program) 2022/09/30 04:21:23 fetching corpus: 900, signal 102521/119862 (executing program) 2022/09/30 04:21:23 fetching corpus: 950, signal 104939/122757 (executing program) 2022/09/30 04:21:23 fetching corpus: 1000, signal 106098/124611 (executing program) 2022/09/30 04:21:23 fetching corpus: 1050, signal 107991/127027 (executing program) 2022/09/30 04:21:23 fetching corpus: 1100, signal 109932/129480 (executing program) 2022/09/30 04:21:23 fetching corpus: 1150, signal 111617/131649 (executing program) 2022/09/30 04:21:23 fetching corpus: 1200, signal 113810/134196 (executing program) 2022/09/30 04:21:24 fetching corpus: 1250, signal 117175/137573 (executing program) 2022/09/30 04:21:24 fetching corpus: 1300, signal 118555/139440 (executing program) 2022/09/30 04:21:24 fetching corpus: 1350, signal 120161/141411 (executing program) 2022/09/30 04:21:24 fetching corpus: 1400, signal 121470/143208 (executing program) 2022/09/30 04:21:24 fetching corpus: 1450, signal 122826/144948 (executing program) 2022/09/30 04:21:24 fetching corpus: 1500, signal 124321/146727 (executing program) 2022/09/30 04:21:24 fetching corpus: 1550, signal 126450/148926 (executing program) 2022/09/30 04:21:24 fetching corpus: 1600, signal 127613/150396 (executing program) 2022/09/30 04:21:24 fetching corpus: 1650, signal 128360/151597 (executing program) 2022/09/30 04:21:25 fetching corpus: 1700, signal 129738/153203 (executing program) 2022/09/30 04:21:25 fetching corpus: 1750, signal 131656/155163 (executing program) 2022/09/30 04:21:25 fetching corpus: 1800, signal 133802/157373 (executing program) 2022/09/30 04:21:25 fetching corpus: 1850, signal 134848/158674 (executing program) 2022/09/30 04:21:25 fetching corpus: 1900, signal 136005/160001 (executing program) 2022/09/30 04:21:25 fetching corpus: 1950, signal 137696/161648 (executing program) 2022/09/30 04:21:25 fetching corpus: 2000, signal 138956/163009 (executing program) 2022/09/30 04:21:25 fetching corpus: 2050, signal 139746/164073 (executing program) 2022/09/30 04:21:25 fetching corpus: 2100, signal 141179/165433 (executing program) 2022/09/30 04:21:26 fetching corpus: 2150, signal 142139/166521 (executing program) 2022/09/30 04:21:26 fetching corpus: 2200, signal 143329/167772 (executing program) 2022/09/30 04:21:26 fetching corpus: 2250, signal 144873/169189 (executing program) 2022/09/30 04:21:26 fetching corpus: 2300, signal 145954/170314 (executing program) 2022/09/30 04:21:26 fetching corpus: 2350, signal 146642/171224 (executing program) 2022/09/30 04:21:26 fetching corpus: 2400, signal 147958/172379 (executing program) 2022/09/30 04:21:26 fetching corpus: 2450, signal 149305/173603 (executing program) 2022/09/30 04:21:26 fetching corpus: 2500, signal 150335/174834 (executing program) 2022/09/30 04:21:27 fetching corpus: 2550, signal 151080/175627 (executing program) 2022/09/30 04:21:27 fetching corpus: 2600, signal 154054/177650 (executing program) 2022/09/30 04:21:27 fetching corpus: 2650, signal 155952/178965 (executing program) 2022/09/30 04:21:27 fetching corpus: 2700, signal 156695/179740 (executing program) 2022/09/30 04:21:27 fetching corpus: 2750, signal 158145/180847 (executing program) 2022/09/30 04:21:27 fetching corpus: 2800, signal 159087/181645 (executing program) 2022/09/30 04:21:27 fetching corpus: 2850, signal 160750/182712 (executing program) 2022/09/30 04:21:28 fetching corpus: 2900, signal 161392/183360 (executing program) 2022/09/30 04:21:28 fetching corpus: 2950, signal 162721/184298 (executing program) 2022/09/30 04:21:28 fetching corpus: 3000, signal 163399/184945 (executing program) 2022/09/30 04:21:28 fetching corpus: 3050, signal 164017/185563 (executing program) 2022/09/30 04:21:28 fetching corpus: 3100, signal 165104/186341 (executing program) 2022/09/30 04:21:28 fetching corpus: 3150, signal 165658/186882 (executing program) 2022/09/30 04:21:28 fetching corpus: 3200, signal 166742/187645 (executing program) 2022/09/30 04:21:28 fetching corpus: 3250, signal 167666/188299 (executing program) 2022/09/30 04:21:28 fetching corpus: 3300, signal 168404/188881 (executing program) 2022/09/30 04:21:29 fetching corpus: 3350, signal 169380/189529 (executing program) 2022/09/30 04:21:29 fetching corpus: 3400, signal 169972/190022 (executing program) 2022/09/30 04:21:29 fetching corpus: 3450, signal 170963/190727 (executing program) 2022/09/30 04:21:29 fetching corpus: 3500, signal 171817/191249 (executing program) 2022/09/30 04:21:29 fetching corpus: 3550, signal 172680/191786 (executing program) 2022/09/30 04:21:29 fetching corpus: 3600, signal 173392/192244 (executing program) 2022/09/30 04:21:29 fetching corpus: 3650, signal 174356/192776 (executing program) 2022/09/30 04:21:29 fetching corpus: 3700, signal 175719/193369 (executing program) 2022/09/30 04:21:30 fetching corpus: 3750, signal 176334/193777 (executing program) 2022/09/30 04:21:30 fetching corpus: 3800, signal 176951/194127 (executing program) 2022/09/30 04:21:30 fetching corpus: 3850, signal 178215/194736 (executing program) 2022/09/30 04:21:30 fetching corpus: 3900, signal 179109/195110 (executing program) 2022/09/30 04:21:30 fetching corpus: 3950, signal 179503/195388 (executing program) 2022/09/30 04:21:30 fetching corpus: 4000, signal 180096/195729 (executing program) 2022/09/30 04:21:30 fetching corpus: 4050, signal 180861/196054 (executing program) 2022/09/30 04:21:30 fetching corpus: 4100, signal 181509/196356 (executing program) 2022/09/30 04:21:31 fetching corpus: 4150, signal 181910/196598 (executing program) 2022/09/30 04:21:31 fetching corpus: 4200, signal 182385/196848 (executing program) 2022/09/30 04:21:31 fetching corpus: 4250, signal 182930/197079 (executing program) 2022/09/30 04:21:31 fetching corpus: 4300, signal 183569/197291 (executing program) 2022/09/30 04:21:31 fetching corpus: 4350, signal 184174/197542 (executing program) 2022/09/30 04:21:31 fetching corpus: 4400, signal 184831/197751 (executing program) 2022/09/30 04:21:31 fetching corpus: 4450, signal 185465/197963 (executing program) 2022/09/30 04:21:31 fetching corpus: 4500, signal 186324/198168 (executing program) 2022/09/30 04:21:31 fetching corpus: 4550, signal 186879/198332 (executing program) 2022/09/30 04:21:32 fetching corpus: 4600, signal 187418/198490 (executing program) 2022/09/30 04:21:32 fetching corpus: 4650, signal 188050/198649 (executing program) 2022/09/30 04:21:32 fetching corpus: 4700, signal 188836/198798 (executing program) 2022/09/30 04:21:32 fetching corpus: 4750, signal 189205/198902 (executing program) 2022/09/30 04:21:32 fetching corpus: 4800, signal 189947/199016 (executing program) 2022/09/30 04:21:32 fetching corpus: 4850, signal 190320/199121 (executing program) 2022/09/30 04:21:32 fetching corpus: 4871, signal 190739/199168 (executing program) 2022/09/30 04:21:32 fetching corpus: 4871, signal 190739/199168 (executing program) 2022/09/30 04:21:35 starting 8 fuzzer processes 04:21:35 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="8597c6530421a2dfefcaeb1d2d587fb15eb4", 0x12}, {&(0x7f0000000040)="4a915952113d3896065297421c60e2ee21b6e52316ba6bea91ab680946917b67e2e7309d7cd2e6ef0128695ff82bd6ae3fbf2fe5fcc384df9b8f29b0957c1a459ac0718ef07e34d0e544d09a4a7d95bd243f6226af28243cc9b67633b39be7b8b7ce29ab0aff582625e613e7dcd81f0a532188ec0d820eb469eda9d79f5de25ad6ad652a28f96a87415a9177995e6c6a3c1132b642fa65e9dc69b91e9cad898002c58086fe7aa7193f20a9597209ac691e7e89f5d510b96f091b0acea2af5f9b6d9eadb833bcab19227e792dacda88da538aa09e29246f3a0b7ebcb2624e7d8267d73e7ce187a2c0e0b990895c2d5b721d38ce9a67", 0xf5}], 0x2, 0x8, 0x8) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x3) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000240), 0xffffffffffff02f8) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000280)=0x4) r1 = signalfd4(r0, &(0x7f00000002c0)={[0x9]}, 0x8, 0x80000) fsetxattr(r1, &(0x7f0000000300)=@random={'user.', 'y\x00'}, &(0x7f0000000340)='&[*!*#)%Y\x00', 0xa, 0x0) fcntl$addseals(r0, 0x409, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = memfd_secret(0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000580)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000a00)=[{&(0x7f00000007c0)="647e077b32c62e863702041742caced6b257f0494c917aab64d4b7b23777647d781491ea97", 0x25}, {&(0x7f0000000800)="909ea7e9b5eee41b81dd18aa54bc79ab985d84289f49fe58ee02cd0660397cf37e6c260d204c74c7e2b9a9c9367b41910e5225e34781852e1e88214d624058c151a977c0534688a7fb16f7f7365d1d33b7f164b49dbeea31d6e5e2ac", 0x5c}, {&(0x7f0000000880)="78a89886deb013a86fd8c4396b043b4279fa782f415c3fa05d37cac3aab51c9e6b9955f2f1716fe62b0d48b927df57", 0x2f}, {&(0x7f00000008c0)="dd873ad0298e812a15c58c7760390e1e9ef2c12b1a07b0e67469", 0x1a}, {&(0x7f0000000900)="92c81dc9f23bad5315866db31e1bed3dd9b208986fab72d37dbb5d56e1e2591aaa70c52764f719f1c768c39cf58353349318b9f959ebc8eb33a801cd372517df50af89fd828b16bd72e815d2004abc553de3cae35dac874730d487941e5f8d47e4", 0x61}, {&(0x7f0000000980)="4c5f1c7199fd3d005645562f4453ff23fd2252c3b839646dbf7f69aeb6fe5a55aba2eea8ee34a79c4a332564d6b3", 0x2e}, {&(0x7f00000009c0)="c04a3482d16d4cde88a2adeadd33d40f0bde038bea3993e8e3eb34a06ad2ddfd", 0x20}], 0x7, 0x200, 0x918f, 0x0) write$cgroup_subtree(r0, &(0x7f0000000a80)={[{0x2d, 'freezer'}, {0x2d, 'rlimit'}, {0x2d, 'rlimit'}]}, 0x19) r3 = syz_open_dev$hidraw(&(0x7f0000000ac0), 0x0, 0x4a0000) fchdir(r3) r4 = syz_open_dev$vcsu(&(0x7f0000000b00), 0xa0, 0x80400) ioctl$VT_DISALLOCATE(r4, 0x5608) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000b40), 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000b80)={0x3, 0x51, "cb36985db4c8d827a42ef2a854754ace3c08f19be06efed028454b78199fd74776053ff349e36504640ab4ca8948ae1c8d3c980c924edb26a2355ee0971f44bcfdf3db614aba2c6c04ac2c7a33a9eef011"}) 04:21:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff, 0x3879fb4a}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x90) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x48c002, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8000}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x214}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0x5}, {0x3c, 0x1}, {0x46}, {0x6c}, {0x9, 0x1}, {0x6}, {0xb}, {0x18}, {0x30, 0x1}, {0x30}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x19a}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x71a}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004851}, 0x8080) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10040094}, 0x4000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfffffff9, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10001}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x74}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x184}, 0x1, 0x0, 0x0, 0x44018001}, 0x20000010) r4 = syz_open_procfs(0x0, &(0x7f0000000940)='net/igmp6\x00') r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7fffffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x80000001}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x5f}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000001}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) fcntl$setflags(r4, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x48}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x70, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000ec0)={0x2, 0xac, @start={0x0, 0x0, "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", "5f2e7f03a8529160458e1cf545ee3f9de807a4930804dff3139b915e75c9418f6d662c82f17f8001061d8536d0474893deec8e24d859dcd619e0e9ec1331537d8e27b465a4b40dfee5851750cad481991c3149e2cbc2f935aa5ff7ca52bf8f83fe96ff0cfd4bbf32f20309d1c2a0ec8bfec52f6d070ea2dbc693c82222b5b57c5456a16c3d83aef3db0e173c7531739d973dd642be9df76972ba21f2863226a5b94b862a49c594e2d9ce53c4c1f78991cfd9570d91d1262f63ecc74a8b5f16187e8141af218c95cd8713fe69ed7066fd05288c72dd95753ace6f9da55be5f048ec195594679a42d8d333de029f2884d81a038e6b81f30393215beb97fa4b8aa1ed1cf7e020eb61ab6594cdb8cdeccad85a56ab6277f5798821bd653ec9ada1a3714e2b2bd3a13ab2aab34eaf02e7b7ee9eb8b240cf68b593d161dfc5fadda771b1aa27368bdf75edae8a2d8a2d07fb1bc0f3ff08e456207c1b69acd237a9c6f79dae1b806d262b3b71ef5e11e21c6f48578adeb33e8b426496023a1880a937c36936cfe19117ff3e89704fa0b5366d8aa41af9f5e47d276a4c192f5bf4b8f2732367e3f6fad2ffe0dff07bc7c4467371219fa89c51176f9ea4c494c4779baf960da5f60086880cbda3b2a8ccab8c666288ab96449bf45d525a44b1371a1bfbbce4e9fb31401ff33beba44dce57e14403262456def148b18e3a79f90e05159fe9e8e444f7990898a6866c0bd21ee6b2dbf9cc67217c3c19e1e38fdb7226cd4d4a4a4351aa486b5446c696faed8e471bc797c7b94edf91f379b073a7036dd2b855a973c92e534124ffd55c23b472655021b300d8cbb5c6de82bdec96396003655a4a3ff6a75b76b7660b375ef2c07747afff424223844c193ed7024dd4db23acddaf830dd032be8c48821c380a5fc93d15b0f75ba83a6ded191e735c62d209b4fcb258809da9f17c0cef646afa2f76510fa46d49afb9f307aa3fd7bace8653c9710821aba5e8104a62a2ad9657656326ae5b3d13fe0e2964d3516bd4ca816009bbb82917d3c84ae83960718127698db993faba2bbacf378865f60c97d4007e87fe4fad4ea0a3852b8a5c8d3eba068ea66fc33ff1d6c8bf37fc924eb6973235fe315d3a7b88ae1109a0f4e1f9c8e28dcb5273d6b62f40bea622b6643b55d27f8f07e0ed5b20e9226ac7ad8f75462bf2aad25937de4a2156d4465bc1f41efffc063e3eabe1f9b6177143178ba563262bdbc0b1f5a26e9dd4fed9237075289f621bb8fd2b6d15c4bffec4f226b250bb92124a9562c3dc38e8525eaa61e132e8073aeec0d82ee688b05b9ca34bfe8a69ce2474f0b16165f4ca6d98759c36a2a3f66eefbec0edb6d5e42f78999ee99deaf69c21fce7d4e9312b75e164ddc616009c278fe52b1ea4150d67ee43a00c8a01efebadd6b21efb51efb4355390cd76df5b01ddfa"}, [0xffffffffffffffff, 0x6, 0x4, 0x82, 0x40, 0x4, 0x3dc, 0x8, 0x7fff, 0x1, 0x1, 0x7a, 0xfffffffffffffffd, 0x3, 0x7, 0x3, 0x3330, 0x100000001, 0x6, 0x20, 0x2, 0x100000001, 0x5, 0x6, 0x9a7, 0x77d5c29e, 0x9, 0xffffffff, 0x4, 0x1f, 0x4, 0xe20a, 0x0, 0x400, 0x4f8, 0x8, 0x31, 0x3, 0x9, 0x7fff, 0x1, 0x6, 0x9, 0x10001, 0x3, 0x94, 0x1a, 0x0, 0x6, 0x9, 0x200, 0x0, 0x2, 0x9000, 0x2207, 0x3ff, 0x10001, 0x6, 0x401, 0xad, 0xfffffffffffffff8, 0x2, 0xad, 0x1]}) [ 72.342253] audit: type=1400 audit(1664511695.515:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:21:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd6a9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x895}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2c}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffd}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2ea}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3f}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0xa000}, 0x80110) r3 = dup3(r2, r2, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x19}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="27318e5c0dd5"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xf6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044881}, 0x40004800) r5 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x40, 0x1f, 0x1, 0x9, 0x0, 0x83e, 0x42, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x40, 0x6}, 0x149, 0x3, 0x81, 0x1, 0x80000001, 0x6, 0x80, 0x0, 0x800, 0x0, 0x16}, 0x0, 0x4, 0xffffffffffffffff, 0x7) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3fb, 0x800, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x8c4) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r3) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x24040885) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000c80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000880)={0x394, r8, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfee}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @mcast2, 0x100}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffa8f, @private2, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc6ef, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x30d4be8b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x26}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "961035d92e8c40af0973e519f270a05c4a7c06a23c1977f14b"}}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "cf4fd015c32618ff5c6cc8e69343ac645784dfa09dfb1162d722c7465efe24717fb4a581750a61088ba0af920c4606be87a0f4a862008bf17cd19e1b564e04d131a4ef726545308ad281ff40a6787d2c8e849d525ba706e0268a637d6066a82b533f0336a4e0dcab5174222a794a4d32c2eeba81c5bf0a0656c5af45c70652d4a566b80dbb74c8775e4d5305751d124f35dc5dcd3a5ee816b8b2ce536884eae55b475c04499f933beaad2a5418"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e70a6d0031d1a377c3a5d98753a3f8e16260b5707f3d"}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x8000}, 0x20040001) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000044}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r9, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xd4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0x38ff06e7}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x31, 0x7, 'system_u:object_r:systemd_tmpfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r9, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x74, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xaa}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x20}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000800) 04:21:35 executing program 3: ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x428, 0x37, 0x4, 0x70bd29, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0xfffffc00}, @typed={0x8, 0x35, 0x0, 0x0, @u32=0xb829}, @nested={0x272, 0x10, 0x0, 0x1, [@generic, @typed={0x8, 0x65, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xf7, 0x60, 0x0, 0x0, @binary="8c8a40fb17aef83839fc026a2ea67b8fe341923b877ebcebf1f88d1322a45075fdc4cee43b7fcfc2107f24787b560901366c30e20017477ce72cdba53d2e25abb1c4c48a6264162ec1784cf1b2289a5fb1437c94b85522ac8c4b1f0603dfed536371a0c18bc87b2b99c998567fe0f3dd9b5fe0348b1d50ac63800ee34caf143ac67d888b658d4e119131f10b18f1ad76323717bfe0c5287549d29aaca27bfa442e97ee685a40de4b22f7e2ef681435fad94ea0acb59b25b4e5d4cc1ec14f6aa594224501764d4ba7aa24a512cbbdf870a05a617328aea1eddaba6e26472f3d3e6b0fd83b3ece604c694bb322dc35b2e61a1651"}, @generic="58cdad09075203cbba61e940c052fba37fd309bb27f0e87f44b3073f3f7bfaba7e4c4bba6b80b98910fa2a58298bbf493f8ed4297aab41ab1daf3eec3bef982f3bfb5c674a5e9e879cda13c93cc014e13f0c2596b73bbc87c0a132c71627601effd72e9d08f77e53217d8e5bf1564b611f36ac24628e29a49fc2eec4dbe6009a7a4f25092c6001b36882ac454e7c26fa4d6a70ccf1f272c3817a2575b83792d1ae8484ace9bb1e2814f7053a489afc2a83f35819e08d07770b5f5aed0a725e17f459685d958a4f05385561b3cd1d1e68ae1460c94d4f7bd842", @generic="55cae7c00b0f34b61b56814982819b2644546aef5add20fbcb901eef50a9d208b0baaf2e8f4c83a9f148f0886bfc602cf7d358b453dd5341ebcead750315fc29299056ea569aad9141129ff1ae1abdde24a952cfce3e86402f858a6192c9b2a4e11359b4123ed5a1bb8cf17343e207ab33a3da9a5a2f14768915434bee3ae225b108ca6c70fafbe47aabc747c8bcb9e0c04e605c20"]}, @nested={0x186, 0x8b, 0x0, 0x1, [@generic="44ee32585074d78ced7383fd6e939df780bef2ca7c132d976ee34b82c38cca6452d5f3a79ff29da437870cdd8a8ce7f80a1da036ad47486d61a4a8af5b5df527474989f6380734f0", @typed={0x8, 0x2e, 0x0, 0x0, @fd}, @generic="6de17e0479809f7692600fdd8716f961cd959de3665b18b2172826649288b8614261614eba9e3d8906809bf510bfb6ddb90413e7fcdca6107fb497deec223f2818b2fb51acb82d81719fa3ab9062d0bb058b4a75d13a7b9069656a89b2b3f95321436c7f12840c3ef485b57d6ef19a3ace0780052d7da468341b0a54a2a708c5cbfe0464977d326808381cc98ce0fdadd77aa377adac4a3f7ab622d4632a0cfbcffbf85cba08dfa86b247155d221ebba10b52f99d82687d2c35cd2fcb583a99db170385d2ccd337b1a5915dab1b53349f715bf83a1aca35ffa8a5fdaae2565d8b9d3f4b1ec05", @generic="3d3fa4c59b8fde3304a0b2a856467ef6ad59c730d88f3b0690c60969d08677d65405a953268e3092b22ffa2a73ce09e75f5202504b987487434ed47538099c37c311e282ba9cb0677daafb4b"]}, @typed={0x8, 0x30, 0x0, 0x0, @fd}]}, 0x428}}, 0x80) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x16c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008084) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000007c0), 0x20280, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000840)={@rand_addr, @initdev, 0x0}, &(0x7f0000000880)=0xc) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000900)={0x0, @can={0x1d, 0x0}, @qipcrtr={0x2a, 0x0, 0x4000}, @hci={0x1f, 0x3, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x4, &(0x7f00000008c0)='veth1_to_bond\x00', 0x401, 0x5, 0x5}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x184, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8800}, 0x40081) newfstatat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6d86ec4c598fd690) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000cc0)={@multicast1, @private, 0x0}, &(0x7f0000000d00)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000001280)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f0000000d40)=@polexpire={0x4d8, 0x1b, 0x100, 0x70bd2c, 0x25dfdbff, {{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x9, 0x4e21, 0x8, 0xa, 0x80, 0x10, 0x16, r2, r4}, {0x3, 0x5, 0x1c1ccc55, 0x9, 0xf5, 0x3, 0x0, 0x3f}, {0x3, 0x5, 0x0, 0x9}, 0x1, 0x6e6bb1, 0x0, 0x1, 0x1, 0x3}, 0x8}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd26, 0x70bd25, 0x70bd25, 0x70bd25, 0x3, [0x2, 0x0]}}, @tmpl={0x44, 0x5, [{{@in=@multicast1, 0x4d4, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xff}, 0x3503, 0x0, 0x0, 0x8, 0xffffffc0}]}, @algo_auth={0x120, 0x1, {{'sha512-avx2\x00'}, 0x6c0, "10df62650596c4e8da334440bee91022a35830175c26069a152a40ca8d5a2d6308e87c823843b236d2211267556b2b4a6e74e2172edacd48f30372ac34e2c89238f69b9566083fd098705361a2efb304669e39d0cb2ddb9bffff1765774c2b1b28a91029f10d140a1b61a876478932a095258e67c107ca08b02aaec13d5af4b6d6b951b1e8bf4b7b1e5ad6c8f4f3afa43867e373960770b9ae5c23f22f45b992af53653232b83e5dec9c5d9ac84f627f1cf0fa204eeda0339b9c476356f777dc5aaaf9a84e1ebf2f284157d0d7780cf9e9fc15fcacbf74d4"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @policy={0xac, 0x7, {{@in=@remote, @in6=@local, 0x4e23, 0x193, 0x4e22, 0x3f, 0x2, 0xa0, 0x80, 0x87, r5, 0xffffffffffffffff}, {0x81, 0xff, 0xf2, 0x3, 0x6, 0xffffffff, 0xf4, 0xc4e8}, {0x81, 0x9, 0x7fff, 0x8000}, 0x9, 0x6e6bbb, 0x1, 0x0, 0x3, 0x1}}, @tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010100, 0x4d3, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3505, 0x2, 0x0, 0xff, 0x3ff, 0x5, 0x8aa}, {{@in6=@private2, 0x4d6, 0x6c}, 0xa, @in=@remote, 0x34ff, 0x2, 0x3, 0x40, 0x663, 0xfffffc00, 0x3bebba9c}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d3, 0x2b}, 0x2, @in=@private=0xa010101, 0x3503, 0x4, 0x2, 0x80, 0x4a, 0x200, 0x4}, {{@in=@multicast1, 0x4d5, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x0, 0xfb, 0x4d63, 0x6}, {{@in6=@private1, 0x4d2, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x4, 0x0, 0xe7, 0x2, 0x7fffffff, 0x2}]}, @algo_aead={0x81, 0x12, {{'morus1280-sse2\x00'}, 0x1a8, 0x80, "74ba3558a83ffe343d21dfaa6b14c78b6a1cac8f46e08809a0a2db3a8104ecc8e335074296223b105c82bead9be8804eb0927dba26"}}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) accept$inet(r0, &(0x7f00000012c0)={0x2, 0x0, @dev}, &(0x7f0000001300)=0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x78, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x7}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4050}, 0x54) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000014c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f00000018c0)={r8, 0x8, 0x0, [0x1, 0x4, 0x1, 0x8, 0x1], [0x3, 0x20, 0x8, 0x6, 0x7, 0x8, 0xabc, 0x6, 0x27e3, 0x3, 0x6c6, 0x2, 0x81, 0x3, 0xffffffff, 0xe5, 0x4fd, 0x4, 0x9, 0xcc, 0x9, 0x7fff, 0x3, 0x1, 0xffffffff, 0x3, 0x8, 0x3, 0x100, 0x8, 0x7fffffff, 0x6, 0xfffffffffffffffd, 0x7, 0x1, 0x3, 0x200, 0x9, 0x8, 0x6, 0xc8, 0x981, 0x10000, 0x401, 0x3f, 0x8f05, 0x31e, 0x28b, 0x2, 0x7, 0x8, 0x6, 0x8, 0xf893, 0x0, 0x200, 0x3, 0x3, 0x260c, 0x2, 0x101, 0x4, 0x0, 0xffffffff, 0x8, 0x5, 0x2, 0x6, 0x400, 0x5a84, 0x40, 0x2, 0x6, 0xffffffffffffff81, 0x8, 0xfffffffffffffffc, 0x9, 0x8, 0x5, 0x4, 0x7, 0x1ff, 0x100000001, 0xffff, 0x516dab1a, 0x100000000, 0xd2ec, 0xfffffffffffffffa, 0x1, 0xfc4, 0x4, 0x5, 0x8, 0x8, 0x2, 0x100000000, 0xd3f, 0x5, 0x0, 0xb2a6, 0x3, 0x3ce, 0xf8d, 0x8, 0x6, 0x1, 0x4, 0xdfd6, 0x3, 0x0, 0x6, 0x0, 0x7, 0x3, 0x1ff, 0x0, 0x80, 0xffff, 0x9, 0xffffffffffffff99, 0x5]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001d80), r1) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000001f00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0xcc, r10, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb24b}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffbf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x40}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x54b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 04:21:35 executing program 4: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xa77, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x80d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ed}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffc}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r3, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000005c0)={r4, 0x1, r2, 0x398}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000640)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r2) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x15c, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6d5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ec}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdeac}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfb5a}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x56}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan0\x00'}) r7 = accept(r2, &(0x7f0000000980)=@rc, &(0x7f0000000a00)=0x80) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x16) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x4, 0xa2, 0x3, 0x8, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x20, 0x10, 0x40, 0x4}}) 04:21:35 executing program 5: mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x40000, &(0x7f00000000c0)='$.-\'{[:\'\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x650000, 0x21) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0xe216d2bdb319a942, 0x20) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000300)=""/234, 0xea}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/179, 0xb3}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000600)=""/249, 0xf9}], 0x7, 0x9, 0x7ff) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) write$binfmt_aout(r3, &(0x7f00000007c0)={{0x10b, 0x5, 0x4, 0x2b3, 0xa3, 0x81, 0x1d4, 0x8000}, "e1f53874b2f7ec2d9b40da71ac15f92c9e1e323a83b52adcfdb1f93c", ['\x00', '\x00']}, 0x23c) r4 = openat(r1, &(0x7f0000000a00)='./file0\x00', 0x20000, 0xc2) r5 = open$dir(&(0x7f0000000a40)='./file0\x00', 0x0, 0x1d) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000a80)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000c80)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getdents64(r6, &(0x7f0000000ec0)=""/161, 0xa1) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000f80)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index, 0x80, 0x0, 0x9, 0x0, 0x1}, 0x3a605852) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x90, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5a030aab5c3e9f2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x21be}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3accdf36c71503ae}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r3}, {0x8, 0x1, r1}, {0x8, 0x1, r6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000001140)) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0x9c, 0x0, 0x40c, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9cd}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5640}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8a}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 04:21:35 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd0000004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x100) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4012) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4048004) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r8, 0x202, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880), r11) 04:21:35 executing program 7: timer_delete(0x0) timer_getoverrun(0x0) timer_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{r0, r1+60000000}, {0x77359400}}, &(0x7f00000000c0)) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:tzdata_exec_t:s0\x00', 0x23, 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x3f, 0x2, @thr={&(0x7f0000000180)="2c07da0e9bb8a38deb20b5c7bf71d2225ca3fa9c82b3187c313246505d126d887a460c66cf70c8de57f97f5271bd44c881d1d4279f3b9aefd7855009398a5324582453ba8869959260639cec346607ea26a3c4140ebab3f97ef10c1f86d810e8d46a261774b3949a7e3f909cad792b6ced29ec1c3818fa1e9ae58cc171b4466fbbb9c3c9d95eb3c74f40f2586c85129b", &(0x7f0000000240)="9e8e5afcff6ae8efba62882dff5aeeaaa8ca94dab11c49c6c36b645ba2702ffe16879dd7674b2283cdaf15670adb72817f5065fbf50828e70e4570363fefbb66017baf5110"}}, &(0x7f0000000300)=0x0) timer_getoverrun(r2) io_setup(0x3e07fc91, &(0x7f0000000340)=0x0) r4 = syz_open_procfs$userns(0x0, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x7, &(0x7f0000000940)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000380)="22d507fa0039ad9e171d4988be834c26a267e0916d29c04754c09aba0fc71277178ba4d6fc631d30c416fa1b50a3db67710624571f263e62e92bec2b08e1281608deb03dd7003af09ebba4f1c2e1833c507030a4f826e1f3", 0x58, 0x3, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000000440)="2dfe78b23e35b242fd491bc77548e44a4d0bf050cedcf7b00cbb112dcd722f77de858cabf150b58a87a963c579", 0x2d, 0x1ff, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f0000000500)="f380b271b80b146aa5ff4a9f1a2281ba2592cfee5843225e0e7425fd9e7ed134ae6ba1ead7749faad3784be9c30f2b939766d098354c819cfdf7f2c4f54a02aa244ce421ac24f0ecb7c8fcab35724caec68a8cae24d5dad25d26b623afd9439077f58385b9323b767b064c5300f642764403bda6b7ea34039008db3580eb1369574b3e3fb1c96ede41c74f29818bd42de2552d1f3f089c60", 0x98, 0xfffffffff3b8022d, 0x0, 0x1, r5}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x9, r6, &(0x7f0000000640)="1d6a557b722820e7d0a0ea7427fa16b03786", 0x12, 0x6, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="7f5295b9ac274821dca8d0", 0xb, 0x7f, 0x0, 0x4}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0x8001, 0xffffffffffffffff, &(0x7f0000000740)="8a4d5fd0fd3505a730208e1ede4c102477f9ea4e46f183101933ef104c306b0a7a1a5e12a18bf30603010af75918177d3e03f7545501514c19c75f82a78e7b49e9b867fff81e2f78fbd6173cf9a260d2b851913c6fccb25a059baea0a6a041fe19d2fd5b85", 0x65, 0x6}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x40, 0xffffffffffffffff, &(0x7f0000000800)="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", 0xfb, 0x6, 0x0, 0x1}]) timer_getoverrun(r2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/module/module', 0x0, 0x4) setns(r7, 0x8000000) r8 = epoll_create1(0x0) fcntl$getown(r8, 0x9) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) timer_settime(r2, 0x1, &(0x7f0000000c00)={{0x0, 0x989680}}, &(0x7f0000000c40)) [ 73.572938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.576185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.578631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.582260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.585216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.586718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.591922] Bluetooth: hci0: HCI_REQ-0x0c1a [ 73.825164] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.829940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.843283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.845345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.847530] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.849577] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.851705] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.852997] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.854129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.856929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.858374] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.861021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.862522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.863700] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.865354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.867311] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.869324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.870914] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.872940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.874866] Bluetooth: hci3: HCI_REQ-0x0c1a [ 73.875342] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.876968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.879310] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.886587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.888169] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.889615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.889944] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.894955] Bluetooth: hci2: HCI_REQ-0x0c1a [ 73.896109] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 73.901021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.906417] Bluetooth: hci6: HCI_REQ-0x0c1a [ 73.906655] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.906891] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.909992] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.911117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.919006] Bluetooth: hci4: HCI_REQ-0x0c1a [ 73.921388] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.950810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.957917] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.976881] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 73.980701] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.999808] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.652796] Bluetooth: hci0: command 0x0409 tx timeout [ 75.717500] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 75.908580] Bluetooth: hci2: command 0x0409 tx timeout [ 75.909762] Bluetooth: hci3: command 0x0409 tx timeout [ 75.972549] Bluetooth: hci5: command 0x0409 tx timeout [ 75.972659] Bluetooth: hci4: command 0x0409 tx timeout [ 75.973154] Bluetooth: hci6: command 0x0409 tx timeout [ 76.036526] Bluetooth: hci7: command 0x0409 tx timeout [ 77.700794] Bluetooth: hci0: command 0x041b tx timeout [ 77.956547] Bluetooth: hci3: command 0x041b tx timeout [ 77.956994] Bluetooth: hci2: command 0x041b tx timeout [ 78.020511] Bluetooth: hci4: command 0x041b tx timeout [ 78.020948] Bluetooth: hci5: command 0x041b tx timeout [ 78.021609] Bluetooth: hci6: command 0x041b tx timeout [ 78.084510] Bluetooth: hci7: command 0x041b tx timeout [ 78.503262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.506470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.507159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.514030] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.516137] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.518379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.524501] Bluetooth: hci1: HCI_REQ-0x0c1a [ 79.749515] Bluetooth: hci0: command 0x040f tx timeout [ 80.004512] Bluetooth: hci2: command 0x040f tx timeout [ 80.004543] Bluetooth: hci3: command 0x040f tx timeout [ 80.068611] Bluetooth: hci6: command 0x040f tx timeout [ 80.068638] Bluetooth: hci5: command 0x040f tx timeout [ 80.069097] Bluetooth: hci4: command 0x040f tx timeout [ 80.132532] Bluetooth: hci7: command 0x040f tx timeout [ 80.581545] Bluetooth: hci1: command 0x0409 tx timeout [ 81.797511] Bluetooth: hci0: command 0x0419 tx timeout [ 82.052540] Bluetooth: hci3: command 0x0419 tx timeout [ 82.053783] Bluetooth: hci2: command 0x0419 tx timeout [ 82.116526] Bluetooth: hci4: command 0x0419 tx timeout [ 82.117566] Bluetooth: hci5: command 0x0419 tx timeout [ 82.117582] Bluetooth: hci6: command 0x0419 tx timeout [ 82.180524] Bluetooth: hci7: command 0x0419 tx timeout [ 82.628561] Bluetooth: hci1: command 0x041b tx timeout [ 84.676574] Bluetooth: hci1: command 0x040f tx timeout [ 86.725551] Bluetooth: hci1: command 0x0419 tx timeout 04:22:33 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000002740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0x0, r0) ioprio_set$uid(0x3, r0, 0x0) r1 = getuid() ioprio_set$uid(0x3, r1, 0x4004) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, 0x7, &(0x7f0000000540)=[{&(0x7f0000000080)="3bc2cef610ab1226c2d35c4e1cfea2888efca5afb4f4d91344264eebc6d1", 0x1e, 0x20}, {&(0x7f00000000c0)="5812b8547a802f2c2fe67e2507636c9b5d7b77e6044aacc55f9ef858ab67a6bfcca0af34f184e2cd5d32db69ef98d621a803507a9068f663fc3c98ea339dd52f824ec8abc67ead5c106866876773ed34c6a219f846a4219f1a77bc8139b15a987588c46ad987af9458bbe9e7d5807f3017ba6329081e85d3b0ab4b639f73dd16215e6091b27a58ee72a59a0b3faf146c0858c8529fab28b6f07c5ad31066e5f3da93", 0xa2, 0x1ff}, {&(0x7f0000000180)="7625bda4ecfac9e51658d51a8868582c69259b6d19147260619c0a785f6603d1a0737d3a7249a72b0b1457b80a09855de976a96400231f7d1108ff74089f3287881044a9388b59a7d781ceeee4562e04e6e4690290551f92f0c170397787653689e7bc63585cd20900e836f851c60ba5eb8650c671a3c83797f0b7ac02116d8ddd1255c1fa824fa38554dcf6d482c6dece547eab95d6d5cba428324467d74d551d472d85daeb3276cea328542027c30c5b406d937706", 0xb6, 0xfffffffffffff2f6}, {&(0x7f0000000300)="8f0474b5c75f54e521796393ee2b23e9922fd5a5bcc57b9b4f5269c09b892011748f34b35a854572be24c902068ee98e43319dd41f87b436d03a264b4592ae6695082bde1f7f9d37cedd", 0xfffffffffffffebe, 0x5db7}, {&(0x7f0000000380)="01e0292d7b852509145398e99b87b4499c0971646e28029ac9957b199d9aa67d37d9324d0994499c2beec8e10944b6886197b1128fb34a6dd81969d07316bc52346c48abca51ca0938499b02519a86862d5a4c2e98742f33e5be5a67dad27f1ba0c09ac27de774f4ef27450e5fc2daaaf5db27521333ca3dd4", 0x79, 0x6}, {&(0x7f0000000400)="56acf2a2527e7f627e6b8d834957bfdafc24b66bf9f63307bff5ac169fd0deeda487f14fd3558407a5e813bfad08f1f37ee1506b33d0049a79b038b236c440557694466a0347c0c6ca94138168507ea90d3f0b0346b666fd347354af4abfb70223310cf16b81d96b6c165001306564773980fbdaf1d940c20214e817efa1a167e4ea77bf7e7126cc5436a79ec719495edc2ae948b24e36d15577f30cc6b2a913aa2dbbebbd5d9ba735d4d42b2e09a2ff468978de76bf84c6f7ffff2e", 0xbc, 0x3}, {&(0x7f00000004c0)="4c80485cfa234f3f26755f1185374bc41dc553ba2335a16f37706baff9e78ff756a7f8db32058631d8a24c1b2746abd5f27b87f1f951d99dee735fe5fa2806e326c61cd2fcc45c4cc898f7f341632d2d", 0x50, 0xbe98}], 0xa08a8, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESDEC=r1, @ANYBLOB=',dont_appraise,\x00']) [ 130.809158] loop4: detected capacity change from 0 to 32766 04:22:34 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000003380)=[{{&(0x7f00000036c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000003700)='@f', 0x2}], 0x1, &(0x7f0000004dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x0, @local}, 0xf, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000b9da00000007000000140000000000000000000000070000008903000000000000"], 0x28}}], 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xb5b}, 0x4) 04:22:34 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000002740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0x0, r0) ioprio_set$uid(0x3, r0, 0x0) r1 = getuid() ioprio_set$uid(0x3, r1, 0x4004) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, 0x7, &(0x7f0000000540)=[{&(0x7f0000000080)="3bc2cef610ab1226c2d35c4e1cfea2888efca5afb4f4d91344264eebc6d1", 0x1e, 0x20}, {&(0x7f00000000c0)="5812b8547a802f2c2fe67e2507636c9b5d7b77e6044aacc55f9ef858ab67a6bfcca0af34f184e2cd5d32db69ef98d621a803507a9068f663fc3c98ea339dd52f824ec8abc67ead5c106866876773ed34c6a219f846a4219f1a77bc8139b15a987588c46ad987af9458bbe9e7d5807f3017ba6329081e85d3b0ab4b639f73dd16215e6091b27a58ee72a59a0b3faf146c0858c8529fab28b6f07c5ad31066e5f3da93", 0xa2, 0x1ff}, {&(0x7f0000000180)="7625bda4ecfac9e51658d51a8868582c69259b6d19147260619c0a785f6603d1a0737d3a7249a72b0b1457b80a09855de976a96400231f7d1108ff74089f3287881044a9388b59a7d781ceeee4562e04e6e4690290551f92f0c170397787653689e7bc63585cd20900e836f851c60ba5eb8650c671a3c83797f0b7ac02116d8ddd1255c1fa824fa38554dcf6d482c6dece547eab95d6d5cba428324467d74d551d472d85daeb3276cea328542027c30c5b406d937706", 0xb6, 0xfffffffffffff2f6}, {&(0x7f0000000300)="8f0474b5c75f54e521796393ee2b23e9922fd5a5bcc57b9b4f5269c09b892011748f34b35a854572be24c902068ee98e43319dd41f87b436d03a264b4592ae6695082bde1f7f9d37cedd", 0xfffffffffffffebe, 0x5db7}, {&(0x7f0000000380)="01e0292d7b852509145398e99b87b4499c0971646e28029ac9957b199d9aa67d37d9324d0994499c2beec8e10944b6886197b1128fb34a6dd81969d07316bc52346c48abca51ca0938499b02519a86862d5a4c2e98742f33e5be5a67dad27f1ba0c09ac27de774f4ef27450e5fc2daaaf5db27521333ca3dd4", 0x79, 0x6}, {&(0x7f0000000400)="56acf2a2527e7f627e6b8d834957bfdafc24b66bf9f63307bff5ac169fd0deeda487f14fd3558407a5e813bfad08f1f37ee1506b33d0049a79b038b236c440557694466a0347c0c6ca94138168507ea90d3f0b0346b666fd347354af4abfb70223310cf16b81d96b6c165001306564773980fbdaf1d940c20214e817efa1a167e4ea77bf7e7126cc5436a79ec719495edc2ae948b24e36d15577f30cc6b2a913aa2dbbebbd5d9ba735d4d42b2e09a2ff468978de76bf84c6f7ffff2e", 0xbc, 0x3}, {&(0x7f00000004c0)="4c80485cfa234f3f26755f1185374bc41dc553ba2335a16f37706baff9e78ff756a7f8db32058631d8a24c1b2746abd5f27b87f1f951d99dee735fe5fa2806e326c61cd2fcc45c4cc898f7f341632d2d", 0x50, 0xbe98}], 0xa08a8, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESDEC=r1, @ANYBLOB=',dont_appraise,\x00']) 04:22:34 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x10, 0x0, 0x4f) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7, 0xd8, 0x2, 0x6, 0x0, 0x5b3c, 0x600, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0, 0x4, @perf_bp={&(0x7f0000000140), 0x4}, 0x500, 0x4410792d, 0x200000, 0x2, 0x7, 0x3, 0x7, 0x0, 0xfff, 0x0, 0x80}, 0x0, 0x5, r2, 0x2) io_setup(0x7, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) io_setup(0x6, &(0x7f0000000380)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r5, &(0x7f0000000180)=""/70, 0x18) getdents(r5, &(0x7f0000000300)=""/123, 0x7b) syz_mount_image$nfs4(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x1000, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="5cc56afefd0948996f88560af3e0cf88c5bcdafb4ac36a5f61809ef321b04dfe75814c745df272ea452f6707f9748272c404ee37fb1b8a06bd77cbb776d668c8ece8c8d88556c38df0d63cacba5013ec4772a42a7f630704fdbc5486a627ec7a816aaedbdf563043a92c9e60785e98957ccb1ce49cbbde053536dd81abfabf998a67eada5937f99d8bad022655d9b6e19eacc4d49759b10c7e6040603596d19649ed79d4a9975c3a7bad61ec6ce95410aef5ba52c8f1c0ee243e4a6bf6489b24f22462d130f063a5573070643e3f8dab0794cab5b5", 0xd5, 0x1ff}], 0x1000404, &(0x7f0000000680)={[{}, {'personality\x00'}, {'attr\x00'}, {'*{'}, {}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) fcntl$dupfd(r0, 0x0, r3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x0, 0x4, 0xe1, 0x9, 0x0, 0x800000000000fff, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffffff9, 0xfffffffffffffffa}, 0x415c0, 0x4, 0x1, 0x0, 0x7, 0x1, 0x8000, 0x0, 0xa6cc, 0x0, 0x48}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8161317f64c884f4) [ 131.289930] audit: type=1400 audit(1664511754.462:7): avc: denied { open } for pid=3912 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.291501] audit: type=1400 audit(1664511754.463:8): avc: denied { kernel } for pid=3912 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.304128] ------------[ cut here ]------------ [ 131.304147] [ 131.304150] ====================================================== [ 131.304153] WARNING: possible circular locking dependency detected [ 131.304158] 6.0.0-rc7-next-20220929 #1 Not tainted [ 131.304165] ------------------------------------------------------ [ 131.304168] syz-executor.3/3913 is trying to acquire lock: [ 131.304174] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 131.304212] [ 131.304212] but task is already holding lock: [ 131.304215] ffff88800e73c420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.304241] [ 131.304241] which lock already depends on the new lock. [ 131.304241] [ 131.304244] [ 131.304244] the existing dependency chain (in reverse order) is: [ 131.304248] [ 131.304248] -> #3 (&ctx->lock){....}-{2:2}: [ 131.304262] _raw_spin_lock+0x2a/0x40 [ 131.304273] __perf_event_task_sched_out+0x53b/0x18d0 [ 131.304284] __schedule+0xedd/0x2470 [ 131.304297] schedule+0xda/0x1b0 [ 131.304311] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.304323] syscall_exit_to_user_mode+0x19/0x40 [ 131.304335] do_syscall_64+0x48/0x90 [ 131.304352] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.304364] [ 131.304364] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 131.304378] _raw_spin_lock_nested+0x30/0x40 [ 131.304388] raw_spin_rq_lock_nested+0x1e/0x30 [ 131.304401] task_fork_fair+0x63/0x4d0 [ 131.304417] sched_cgroup_fork+0x3d0/0x540 [ 131.304431] copy_process+0x4183/0x6e20 [ 131.304444] kernel_clone+0xe7/0x890 [ 131.304454] user_mode_thread+0xad/0xf0 [ 131.304464] rest_init+0x24/0x250 [ 131.304475] arch_call_rest_init+0xf/0x14 [ 131.304492] start_kernel+0x4c6/0x4eb [ 131.304506] secondary_startup_64_no_verify+0xe0/0xeb [ 131.304521] [ 131.304521] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 131.304534] _raw_spin_lock_irqsave+0x39/0x60 [ 131.304545] try_to_wake_up+0xab/0x1930 [ 131.304558] up+0x75/0xb0 [ 131.304572] __up_console_sem+0x6e/0x80 [ 131.304587] console_unlock+0x46a/0x590 [ 131.304603] vt_ioctl+0x2822/0x2ca0 [ 131.304615] tty_ioctl+0x785/0x16b0 [ 131.304625] __x64_sys_ioctl+0x19a/0x210 [ 131.304639] do_syscall_64+0x3b/0x90 [ 131.304655] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.304668] [ 131.304668] -> #0 ((console_sem).lock){....}-{2:2}: [ 131.304682] __lock_acquire+0x2a02/0x5e70 [ 131.304698] lock_acquire+0x1a2/0x530 [ 131.304713] _raw_spin_lock_irqsave+0x39/0x60 [ 131.304724] down_trylock+0xe/0x70 [ 131.304739] __down_trylock_console_sem+0x3b/0xd0 [ 131.304755] vprintk_emit+0x16b/0x560 [ 131.304771] vprintk+0x84/0xa0 [ 131.304786] _printk+0xba/0xf1 [ 131.304798] report_bug.cold+0x72/0xab [ 131.304813] handle_bug+0x3c/0x70 [ 131.304830] exc_invalid_op+0x14/0x50 [ 131.304847] asm_exc_invalid_op+0x16/0x20 [ 131.304859] group_sched_out.part.0+0x2c7/0x460 [ 131.304876] ctx_sched_out+0x8f1/0xc10 [ 131.304893] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.304904] __schedule+0xedd/0x2470 [ 131.304917] schedule+0xda/0x1b0 [ 131.304930] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.304941] syscall_exit_to_user_mode+0x19/0x40 [ 131.304953] do_syscall_64+0x48/0x90 [ 131.304970] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.304982] [ 131.304982] other info that might help us debug this: [ 131.304982] [ 131.304985] Chain exists of: [ 131.304985] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 131.304985] [ 131.304999] Possible unsafe locking scenario: [ 131.304999] [ 131.305001] CPU0 CPU1 [ 131.305004] ---- ---- [ 131.305006] lock(&ctx->lock); [ 131.305011] lock(&rq->__lock); [ 131.305017] lock(&ctx->lock); [ 131.305024] lock((console_sem).lock); [ 131.305030] [ 131.305030] *** DEADLOCK *** [ 131.305030] [ 131.305032] 2 locks held by syz-executor.3/3913: [ 131.305039] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 131.305068] #1: ffff88800e73c420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.305094] [ 131.305094] stack backtrace: [ 131.305097] CPU: 1 PID: 3913 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220929 #1 [ 131.305110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.305118] Call Trace: [ 131.305121] [ 131.305125] dump_stack_lvl+0x8b/0xb3 [ 131.305143] check_noncircular+0x263/0x2e0 [ 131.305159] ? format_decode+0x26c/0xb50 [ 131.305175] ? print_circular_bug+0x450/0x450 [ 131.305193] ? enable_ptr_key_workfn+0x20/0x20 [ 131.305209] ? format_decode+0x26c/0xb50 [ 131.305227] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 131.305244] __lock_acquire+0x2a02/0x5e70 [ 131.305266] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.305288] lock_acquire+0x1a2/0x530 [ 131.305304] ? down_trylock+0xe/0x70 [ 131.305322] ? lock_release+0x750/0x750 [ 131.305343] ? vprintk+0x84/0xa0 [ 131.305361] _raw_spin_lock_irqsave+0x39/0x60 [ 131.305372] ? down_trylock+0xe/0x70 [ 131.305388] down_trylock+0xe/0x70 [ 131.305403] ? vprintk+0x84/0xa0 [ 131.305426] __down_trylock_console_sem+0x3b/0xd0 [ 131.305443] vprintk_emit+0x16b/0x560 [ 131.305465] vprintk+0x84/0xa0 [ 131.305482] _printk+0xba/0xf1 [ 131.305493] ? record_print_text.cold+0x16/0x16 [ 131.305509] ? report_bug.cold+0x66/0xab [ 131.305527] ? group_sched_out.part.0+0x2c7/0x460 [ 131.305546] report_bug.cold+0x72/0xab [ 131.305565] handle_bug+0x3c/0x70 [ 131.305582] exc_invalid_op+0x14/0x50 [ 131.305600] asm_exc_invalid_op+0x16/0x20 [ 131.305613] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.305633] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.305644] RSP: 0018:ffff88803ef77c48 EFLAGS: 00010006 [ 131.305653] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.305660] RDX: ffff88803ef1b580 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 131.305668] RBP: ffff88803fd60000 R08: 0000000000000005 R09: 0000000000000001 [ 131.305676] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800e73c400 [ 131.305684] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 131.305695] ? group_sched_out.part.0+0x2c7/0x460 [ 131.305715] ? group_sched_out.part.0+0x2c7/0x460 [ 131.305735] ctx_sched_out+0x8f1/0xc10 [ 131.305754] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.305769] ? lock_is_held_type+0xd7/0x130 [ 131.305782] ? __perf_cgroup_move+0x160/0x160 [ 131.305793] ? set_next_entity+0x304/0x550 [ 131.305810] ? update_curr+0x267/0x740 [ 131.305829] ? lock_is_held_type+0xd7/0x130 [ 131.305843] __schedule+0xedd/0x2470 [ 131.305860] ? io_schedule_timeout+0x150/0x150 [ 131.305877] ? rcu_read_lock_sched_held+0x3e/0x80 [ 131.305897] schedule+0xda/0x1b0 [ 131.305912] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.305924] syscall_exit_to_user_mode+0x19/0x40 [ 131.305938] do_syscall_64+0x48/0x90 [ 131.305955] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.305968] RIP: 0033:0x7f942e212b19 [ 131.305976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.305987] RSP: 002b:00007f942b788218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.305998] RAX: 0000000000000001 RBX: 00007f942e325f68 RCX: 00007f942e212b19 [ 131.306005] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f942e325f6c [ 131.306013] RBP: 00007f942e325f60 R08: 000000000000000e R09: 0000000000000000 [ 131.306020] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f942e325f6c [ 131.306027] R13: 00007ffe5580668f R14: 00007f942b788300 R15: 0000000000022000 [ 131.306040] [ 131.360560] WARNING: CPU: 1 PID: 3913 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 131.361264] Modules linked in: [ 131.361516] CPU: 1 PID: 3913 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220929 #1 [ 131.362120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.362974] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.363386] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.364765] RSP: 0018:ffff88803ef77c48 EFLAGS: 00010006 [ 131.365164] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.365714] RDX: ffff88803ef1b580 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 131.366244] RBP: ffff88803fd60000 R08: 0000000000000005 R09: 0000000000000001 [ 131.366774] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800e73c400 [ 131.367311] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 131.367847] FS: 00007f942b788700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 131.368448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.368883] CR2: 00000000202dc000 CR3: 0000000018648000 CR4: 0000000000350ee0 [ 131.369434] Call Trace: [ 131.369630] [ 131.369805] ctx_sched_out+0x8f1/0xc10 [ 131.370115] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.370495] ? lock_is_held_type+0xd7/0x130 [ 131.370830] ? __perf_cgroup_move+0x160/0x160 [ 131.371166] ? set_next_entity+0x304/0x550 [ 131.371489] ? update_curr+0x267/0x740 [ 131.371791] ? lock_is_held_type+0xd7/0x130 [ 131.372127] __schedule+0xedd/0x2470 [ 131.372414] ? io_schedule_timeout+0x150/0x150 [ 131.372774] ? rcu_read_lock_sched_held+0x3e/0x80 [ 131.373149] schedule+0xda/0x1b0 [ 131.373421] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.373795] syscall_exit_to_user_mode+0x19/0x40 [ 131.374162] do_syscall_64+0x48/0x90 [ 131.374457] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.374856] RIP: 0033:0x7f942e212b19 [ 131.375140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.376526] RSP: 002b:00007f942b788218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.377092] RAX: 0000000000000001 RBX: 00007f942e325f68 RCX: 00007f942e212b19 [ 131.377645] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f942e325f6c [ 131.378186] RBP: 00007f942e325f60 R08: 000000000000000e R09: 0000000000000000 [ 131.378724] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f942e325f6c [ 131.379266] R13: 00007ffe5580668f R14: 00007f942b788300 R15: 0000000000022000 [ 131.379813] [ 131.379987] irq event stamp: 652 [ 131.380247] hardirqs last enabled at (651): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 131.380958] hardirqs last disabled at (652): [] __schedule+0x1225/0x2470 [ 131.381594] softirqs last enabled at (0): [] copy_process+0x1e15/0x6e20 [ 131.382213] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 131.382688] ---[ end trace 0000000000000000 ]--- [ 131.516846] loop4: detected capacity change from 0 to 32766 [ 131.711166] loop3: detected capacity change from 0 to 8 [ 131.718498] nfs4: Unknown parameter 'personality' [ 131.753789] loop3: detected capacity change from 0 to 8 [ 131.754385] nfs4: Unknown parameter 'personality' VM DIAGNOSIS: 04:22:34 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff8111a26c RCX=1ffffffff0e0c0e0 RDX=0000000000000000 RSI=ffffffff8424ca5b RDI=ffffffff8111a26c RBP=ffff88803fc4f788 RSP=ffff88803fc4f698 R8 =ffffffff85ecff90 R9 =ffffffff85ecff94 R10=ffffed1007f89ef3 R11=ffff88803fc4f770 R12=ffff88803fc4f7f8 R13=0000000000000000 R14=ffff88803fc4f730 R15=0000000000000dc0 RIP=ffffffff81205098 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563feccf2080 CR3=000000000d37e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff88803ef77690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000062 R11=0000000000000001 R12=0000000000000062 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f942b788700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000202dc000 CR3=0000000018648000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f942e2f97c0 00007f942e2f97c8 YMM02=0000000000000000 0000000000000000 00007f942e2f97e0 00007f942e2f97c0 YMM03=0000000000000000 0000000000000000 00007f942e2f97c8 00007f942e2f97c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000