Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:8409' (ECDSA) to the list of known hosts. 2022/10/01 09:13:51 fuzzer started 2022/10/01 09:13:52 dialing manager at localhost:35095 syzkaller login: [ 37.431422] cgroup: Unknown subsys name 'net' [ 37.523304] cgroup: Unknown subsys name 'rlimit' 2022/10/01 09:14:08 syscalls: 2215 2022/10/01 09:14:08 code coverage: enabled 2022/10/01 09:14:08 comparison tracing: enabled 2022/10/01 09:14:08 extra coverage: enabled 2022/10/01 09:14:08 setuid sandbox: enabled 2022/10/01 09:14:08 namespace sandbox: enabled 2022/10/01 09:14:08 Android sandbox: enabled 2022/10/01 09:14:08 fault injection: enabled 2022/10/01 09:14:08 leak checking: enabled 2022/10/01 09:14:08 net packet injection: enabled 2022/10/01 09:14:08 net device setup: enabled 2022/10/01 09:14:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 09:14:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 09:14:08 USB emulation: enabled 2022/10/01 09:14:08 hci packet injection: enabled 2022/10/01 09:14:08 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 09:14:08 802.15.4 emulation: enabled 2022/10/01 09:14:08 fetching corpus: 50, signal 31901/33619 (executing program) 2022/10/01 09:14:08 fetching corpus: 100, signal 41155/44433 (executing program) 2022/10/01 09:14:08 fetching corpus: 150, signal 48571/53245 (executing program) 2022/10/01 09:14:08 fetching corpus: 200, signal 56722/62658 (executing program) 2022/10/01 09:14:08 fetching corpus: 250, signal 62606/69792 (executing program) 2022/10/01 09:14:08 fetching corpus: 300, signal 65133/73594 (executing program) 2022/10/01 09:14:08 fetching corpus: 350, signal 70419/79972 (executing program) 2022/10/01 09:14:09 fetching corpus: 400, signal 73579/84260 (executing program) 2022/10/01 09:14:09 fetching corpus: 450, signal 76798/88539 (executing program) 2022/10/01 09:14:09 fetching corpus: 500, signal 79887/92690 (executing program) 2022/10/01 09:14:09 fetching corpus: 550, signal 83020/96793 (executing program) 2022/10/01 09:14:09 fetching corpus: 600, signal 86446/101093 (executing program) 2022/10/01 09:14:09 fetching corpus: 650, signal 88861/104441 (executing program) 2022/10/01 09:14:09 fetching corpus: 700, signal 94695/110719 (executing program) 2022/10/01 09:14:10 fetching corpus: 750, signal 99226/115793 (executing program) 2022/10/01 09:14:10 fetching corpus: 800, signal 103317/120335 (executing program) 2022/10/01 09:14:10 fetching corpus: 850, signal 105168/122975 (executing program) 2022/10/01 09:14:10 fetching corpus: 900, signal 107624/126067 (executing program) 2022/10/01 09:14:10 fetching corpus: 950, signal 109696/128804 (executing program) 2022/10/01 09:14:10 fetching corpus: 1000, signal 111683/131456 (executing program) 2022/10/01 09:14:10 fetching corpus: 1050, signal 113820/134201 (executing program) 2022/10/01 09:14:10 fetching corpus: 1100, signal 116060/136977 (executing program) 2022/10/01 09:14:11 fetching corpus: 1150, signal 118893/140179 (executing program) 2022/10/01 09:14:11 fetching corpus: 1200, signal 119738/141780 (executing program) 2022/10/01 09:14:11 fetching corpus: 1250, signal 120806/143504 (executing program) 2022/10/01 09:14:11 fetching corpus: 1300, signal 122281/145530 (executing program) 2022/10/01 09:14:11 fetching corpus: 1350, signal 124174/147802 (executing program) 2022/10/01 09:14:11 fetching corpus: 1400, signal 126368/150372 (executing program) 2022/10/01 09:14:11 fetching corpus: 1450, signal 127698/152208 (executing program) 2022/10/01 09:14:11 fetching corpus: 1500, signal 128736/153830 (executing program) 2022/10/01 09:14:11 fetching corpus: 1550, signal 131276/156491 (executing program) 2022/10/01 09:14:12 fetching corpus: 1600, signal 132425/158104 (executing program) 2022/10/01 09:14:12 fetching corpus: 1650, signal 133772/159845 (executing program) 2022/10/01 09:14:12 fetching corpus: 1700, signal 134424/161041 (executing program) 2022/10/01 09:14:12 fetching corpus: 1750, signal 136065/162922 (executing program) 2022/10/01 09:14:12 fetching corpus: 1800, signal 137249/164497 (executing program) 2022/10/01 09:14:12 fetching corpus: 1850, signal 137971/165703 (executing program) 2022/10/01 09:14:12 fetching corpus: 1900, signal 138865/166967 (executing program) 2022/10/01 09:14:12 fetching corpus: 1950, signal 140310/168645 (executing program) 2022/10/01 09:14:12 fetching corpus: 2000, signal 141153/169860 (executing program) 2022/10/01 09:14:12 fetching corpus: 2050, signal 142184/171261 (executing program) 2022/10/01 09:14:13 fetching corpus: 2100, signal 143844/172992 (executing program) 2022/10/01 09:14:13 fetching corpus: 2150, signal 145771/174896 (executing program) 2022/10/01 09:14:13 fetching corpus: 2200, signal 147742/176764 (executing program) 2022/10/01 09:14:13 fetching corpus: 2250, signal 150013/178835 (executing program) 2022/10/01 09:14:13 fetching corpus: 2300, signal 151036/180062 (executing program) 2022/10/01 09:14:13 fetching corpus: 2350, signal 151699/181042 (executing program) 2022/10/01 09:14:13 fetching corpus: 2400, signal 152414/182016 (executing program) 2022/10/01 09:14:13 fetching corpus: 2450, signal 153337/183140 (executing program) 2022/10/01 09:14:13 fetching corpus: 2500, signal 154743/184536 (executing program) 2022/10/01 09:14:14 fetching corpus: 2550, signal 155677/185632 (executing program) 2022/10/01 09:14:14 fetching corpus: 2600, signal 156328/186581 (executing program) 2022/10/01 09:14:14 fetching corpus: 2650, signal 157573/187792 (executing program) 2022/10/01 09:14:14 fetching corpus: 2700, signal 158515/188893 (executing program) 2022/10/01 09:14:14 fetching corpus: 2750, signal 159184/189792 (executing program) 2022/10/01 09:14:14 fetching corpus: 2800, signal 159984/190762 (executing program) 2022/10/01 09:14:14 fetching corpus: 2850, signal 160862/191758 (executing program) 2022/10/01 09:14:14 fetching corpus: 2900, signal 162545/193083 (executing program) 2022/10/01 09:14:14 fetching corpus: 2950, signal 163351/193957 (executing program) 2022/10/01 09:14:15 fetching corpus: 3000, signal 164643/195054 (executing program) 2022/10/01 09:14:15 fetching corpus: 3050, signal 165427/195879 (executing program) 2022/10/01 09:14:15 fetching corpus: 3100, signal 166180/196706 (executing program) 2022/10/01 09:14:15 fetching corpus: 3150, signal 166873/197441 (executing program) 2022/10/01 09:14:15 fetching corpus: 3200, signal 167380/198161 (executing program) 2022/10/01 09:14:15 fetching corpus: 3250, signal 168049/198929 (executing program) 2022/10/01 09:14:15 fetching corpus: 3300, signal 169277/199879 (executing program) 2022/10/01 09:14:15 fetching corpus: 3350, signal 170657/200878 (executing program) 2022/10/01 09:14:16 fetching corpus: 3400, signal 172345/201979 (executing program) 2022/10/01 09:14:16 fetching corpus: 3450, signal 173325/202815 (executing program) 2022/10/01 09:14:16 fetching corpus: 3500, signal 173985/203478 (executing program) 2022/10/01 09:14:16 fetching corpus: 3550, signal 175282/204346 (executing program) 2022/10/01 09:14:16 fetching corpus: 3600, signal 175618/204881 (executing program) 2022/10/01 09:14:16 fetching corpus: 3650, signal 176422/205536 (executing program) 2022/10/01 09:14:16 fetching corpus: 3700, signal 176803/206087 (executing program) 2022/10/01 09:14:16 fetching corpus: 3750, signal 177613/206873 (executing program) 2022/10/01 09:14:17 fetching corpus: 3800, signal 178175/207504 (executing program) 2022/10/01 09:14:17 fetching corpus: 3850, signal 179044/208275 (executing program) 2022/10/01 09:14:17 fetching corpus: 3900, signal 179590/208782 (executing program) 2022/10/01 09:14:17 fetching corpus: 3950, signal 180125/209312 (executing program) 2022/10/01 09:14:17 fetching corpus: 4000, signal 181058/209932 (executing program) 2022/10/01 09:14:17 fetching corpus: 4050, signal 181883/210499 (executing program) 2022/10/01 09:14:17 fetching corpus: 4100, signal 182634/211045 (executing program) 2022/10/01 09:14:17 fetching corpus: 4150, signal 183847/211744 (executing program) 2022/10/01 09:14:18 fetching corpus: 4200, signal 184641/212219 (executing program) 2022/10/01 09:14:18 fetching corpus: 4250, signal 185402/212713 (executing program) 2022/10/01 09:14:18 fetching corpus: 4300, signal 186222/213211 (executing program) 2022/10/01 09:14:18 fetching corpus: 4350, signal 186649/213620 (executing program) 2022/10/01 09:14:18 fetching corpus: 4400, signal 187730/214143 (executing program) 2022/10/01 09:14:18 fetching corpus: 4450, signal 188446/214583 (executing program) 2022/10/01 09:14:18 fetching corpus: 4500, signal 189140/214973 (executing program) 2022/10/01 09:14:18 fetching corpus: 4550, signal 190240/215412 (executing program) 2022/10/01 09:14:19 fetching corpus: 4600, signal 190769/215767 (executing program) 2022/10/01 09:14:19 fetching corpus: 4650, signal 191293/216139 (executing program) 2022/10/01 09:14:19 fetching corpus: 4700, signal 192072/216517 (executing program) 2022/10/01 09:14:19 fetching corpus: 4750, signal 192901/216962 (executing program) 2022/10/01 09:14:19 fetching corpus: 4800, signal 193859/217288 (executing program) 2022/10/01 09:14:19 fetching corpus: 4850, signal 194457/217602 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/217874 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/218105 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/218343 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/218579 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/218816 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/219049 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/219303 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/219556 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/219782 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/220023 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/220252 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/220302 (executing program) 2022/10/01 09:14:19 fetching corpus: 4870, signal 194679/220302 (executing program) 2022/10/01 09:14:22 starting 8 fuzzer processes 09:14:22 executing program 0: sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48084) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x4040) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x1, 0x2, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x1, 0x4, 0x401, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6ac}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa91}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0xee01, 0xee01}, 0xc) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @private}, &(0x7f00000004c0)=0x10, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000500)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc8080}, 0x24040015) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x80c1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r3, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7dc9740bf7ce8d1d715d745607"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "051c9ec663"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0x100, 0x1, 0x1, 0x301, 0x0, 0x0, {0x6, 0x0, 0x4}, [@CTA_ZONE={0x6}, @CTA_TUPLE_ORIG={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa4}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4190}, 0x880) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2010}, 0x800) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x2d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4088c}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0xc5) recvfrom$inet6(r1, &(0x7f0000000e00)=""/4096, 0x1000, 0x1, &(0x7f0000001e00)={0xa, 0x4e24, 0x0, @remote, 0xdd5}, 0x1c) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002180)={&(0x7f0000001e80)={0x300, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf794}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x8, 0x3, "89344bc0"}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "cc94928fa96478fb4d73ce8146d3f55502477d77c71021cea9487749cc8ab4c3222112abf9fe37efcdcc0b51c8d3dd279e02a80f8bfe2d7eeb591734a1a0cfbde0068f61c27d3738e6730a81cfbbf2158a89383c65633608284c8e604ec4ac0317c85a539c86b141863796ce602b159cb7667e1bc69f8b86c282ede97383c1bdd5c27aed670d16625ee5005a1079ed79179bf867ab2f6ec5b0b57429af184276dda209bba660106bf6df454b6b27ac1fe17af443e5d5f2f10537410a4077a94970c1e1d4cd69631ea9695da0e7a779668cdfb48f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65d}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000002200)="01988e3f678f5a2e79c8126f9cfc851e98ab1fd247cbd61d25399764fdad220de01715ff57f5f5922f185bdc9dfd429d85d6959d5fc6426a75c9f7f2808d07fe9b2536088b9f783938cf0c0a14d937939a412e15445183aa") 09:14:22 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x7800, 0x8, 0xfe, 0x3, {{0x19, 0x4, 0x2, 0x1a, 0x64, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast1, {[@end, @timestamp_addr={0x44, 0x2c, 0x31, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0xe}, 0xc63a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x10000}, {@multicast2}, {@remote, 0x3}]}, @timestamp={0x44, 0x10, 0x63, 0x0, 0x4, [0x5, 0x5, 0x4]}, @generic={0x83, 0x11, "c944f045e98accead8e0ccc10e6f93"}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@initdev, 0x0}, &(0x7f00000002c0)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="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", 0xfd}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x50}}], 0x1, 0x20084014) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x24080805) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x100, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40040}, 0x4000010) fsetxattr$security_selinux(r2, &(0x7f0000000780), &(0x7f00000007c0)='system_u:object_r:sshd_exec_t:s0\x00', 0x21, 0x2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x2000804) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x80000000}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7fffffff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000a40)={r2, 0x1, 0xffff}) accept4$packet(r2, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b80)=0x14, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000bc0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @dev={0xfe, 0x80, '\x00', 0x10}, 0xdd, 0x3, 0xffff, 0x0, 0x4, 0x80, r6}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f0000000c40)={0x81, {{0xa, 0x4e24, 0x1, @mcast2, 0xfffffffe}}}, 0x88) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r5) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000d40)={r0, 0x1, 0x6, @local}, 0x10) 09:14:22 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @dev}, &(0x7f0000000080)=0x80) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000d, 0x100010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r0, 0x0, &(0x7f00000001c0)="86392d70d3f28757c150567c4cdc418794523d449031f55422fd58362abe06248e7f521ba739c8d839deba31366f8e9a18bb19dc6d0ee52977f88f0741a9130cba69690be67c6090c3b06c5c1a404ae9ad58691f64b0c71faa28bb1ce1d4588678008288e1edc60b85ebcbcfc0700d687dd3bfa94e8116e84f3124ad16448942b61742bbcaaaf04733c8e657b8b9ad4822348a4aebd8ebb8a1a450b7c4614462b13612d17cb9438b9bbc9d0c4cd5a3bd8e041af6d38a51f5cd1c53fcbc6c3d16815349", 0xc3, 0x10101, 0x1, {0x0, r3}}, 0x5) r4 = syz_io_uring_setup(0x48f6, &(0x7f0000000300)={0x0, 0x22e4, 0x4, 0x2, 0x3ce}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0xa09, 0x201240) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4004, @fd=r6, 0x7ee, 0x4, 0xffffffff, 0x1, 0x0, {0x3, r7}}, 0x4) r8 = dup2(r0, r4) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4051}, 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r4, {r6}}, './file0\x00'}) syz_io_uring_setup(0x6785, &(0x7f0000000600)={0x0, 0x952c, 0x8, 0x3, 0x19d, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x4, 0x8, 0x5, 0x0, 0x0, 0x8000, 0x4401, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x8000, 0x300000000}, 0x4200, 0xffff, 0x40000, 0x3, 0xfffffffffffffff8, 0x3, 0x5, 0x0, 0x9, 0x0, 0x2e81}, 0x0, 0x3, 0xffffffffffffffff, 0x2) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) syz_io_uring_setup(0x1723, &(0x7f0000000780)={0x0, 0xbbae, 0x1, 0x2, 0xe9, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000800), &(0x7f0000000840)) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000940)=0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/module/rng_core', 0x80000, 0x90) perf_event_open(&(0x7f00000008c0)={0x312d1d9ad8d7e2b0, 0x80, 0xfc, 0x80, 0x6, 0x6, 0x0, 0x0, 0x40, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000880)}, 0xa00c, 0x1ff, 0x4, 0x1, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1000}, r11, 0x3, r12, 0x1) 09:14:22 executing program 4: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{}, {0x2, 0x1, 0xee01}, {0x2, 0x4, r0}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4, 0xee01}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x1, 0xffffffffffffffff}, {}], {0x4, 0x5}, [{0x8, 0x3, 0xee00}], {0x10, 0x4}, {0x20, 0x2}}, 0x74, 0x3) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x1000, 0x4, &(0x7f00000001c0)) r1 = getgid() statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400, 0x40, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x81008, &(0x7f00000004c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}, {@common=@loose}, {@common=@version_L}, {@common=@dfltgid={'dfltgid', 0x3d, r1}}], [{@audit}, {@fowner_lt={'fowner<', r0}}, {@dont_hash}, {@hash}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, '\'k&+'}}, {@uid_gt={'uid>', r0}}, {@fowner_lt={'fowner<', r2}}]}}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file0\x00', 0x1400, &(0x7f0000000840)={0x8a, 0x71, 0xe0000}, 0x20) r3 = socket$unix(0x1, 0x1, 0x0) accept$unix(r3, &(0x7f0000000880), &(0x7f0000000900)=0x6e) mount_setattr(0xffffffffffffff9c, &(0x7f0000000940)='./file0/file0\x00', 0x9000, &(0x7f0000000980)={0x100004, 0x84, 0x120000}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0/file0\x00', 0x280400, 0x1b6) statfs(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=""/219) r4 = syz_mount_image$nfs(&(0x7f0000000b40), &(0x7f0000000b80)='./file0/file0\x00', 0x400, 0xa, &(0x7f0000001040)=[{&(0x7f0000000bc0)="ca8f36d528553bf6de7af4b9bd293e7c95e549b4ac2771e35842a91198", 0x1d, 0x3}, {&(0x7f0000000c00)="21383abd29b637d41bf7ae17f7c03a23bc5be337f6ccfdd4afbd45bc856b030daf0b72a1cf37733f8140987e020e09f6592ef56443d7f596aa8af73a5e25aae3c588f1a49a2a4d518e5082d1b114c0aca3bba4bf604ee6687ba47b05f245fe75a7d559ac3d5018052743dd9db172f45e37b34dd7a839cb2d09d9ce78b16e006bed19df069f2962b61b0da78d25e9ec01dfdd5a25842a755b9aee71aff85bcb4ed0", 0xa1, 0x2}, {&(0x7f0000000cc0)="ee004bdf84ab4c36f5cc976704aba86c41e4d2b8e7f9ab195881a0a24fdfc39938b21b87c4f526b27eb0cb75491819", 0x2f, 0x1ff}, {&(0x7f0000000d00), 0x0, 0x101}, {&(0x7f0000000d40)="d74e", 0x2, 0x40}, {&(0x7f0000000d80)="5c53e9e11ee3e593640066d5f7057539bff64261a36ba17aa59c7c71db8339374fec54ece1ed2716647efaedb07246fae111129986e55e450b814b71de9899675103f7ed007069c9b0afd57d0830ecafd76c305cb660b469e1cda5a614a38f87164733f3e0b9f6e3506e31a7edd6ee478f24352e04faad3fb558768094a05f94db6eb88147d4bad4bef102524a5864995add03aa9793290cc847855e3f436994238ff51e394a659b2fc84dee38f420703e0f04964cfb90eb73a6870a7b27f3b5f907c3a0", 0xc4}, {&(0x7f0000000e80)="39bb245e2e65b2aaa2c4df0f4dd779e943b187d0d1117a2227d001e854cd38f03638398bd7853a949d15d1e32197435f6b2a11a3b6c69eea92d9be7dfd0621192ef96f79869276254c52ef260a68919e973e733d0dbc7ac353cde6feba4cf129bfa81f8914", 0x65, 0xff}, {&(0x7f0000000f00)="5008099efe5fa87335e6063c0f0228d4425774c6198f78e146bcb5173eecfeaff96382a5791445f281", 0x29, 0x8001}, {&(0x7f0000000f40)="c6de4e60b83d4e1c4feb8fd1eea38b91ee02d00de4148df9e5eb4ab633aab966268c06412fcb4ead39c2df53bce3c7e75b8040bda8715074ae358fcd8831722b4ae631e804bf70e0846fbb1c16b0ef75f0a9ddb380be2578803bc7008231721b2fe0d5d33006120debe4f62d8d3b68", 0x6f, 0x3}, {&(0x7f0000000fc0)="30dfb47b9258c0bcd7e4d65d918e70fb73313e35778e0e3eb93ad014935f0f01fb962f8c8681db7d6292304f0d2f1cf41dcdd993249e01a852580ffb91d77e313ae3663024a80e0414aaf619de168ded7f13fb06e96ec3af72a4a7707395d32d75d597d3a78bd0", 0x67, 0x4}], 0xce000, &(0x7f0000001140)={[{}, {'timeout'}, {'127.0.0.1\x00'}, {'dont_hash'}, {}, {'9p\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>', r2}}, {@pcr={'pcr', 0x3d, 0x1c}}]}) unlinkat(r4, &(0x7f00000011c0)='./file0/file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x1, 0x3, &(0x7f0000001440)=[{&(0x7f0000001280)="45bf256d9332c33cada92ba9046cb845ef8b6df09514a2ad2a0ee9f8af56d7183fed75b8fe4cf264c13e", 0x2a, 0x17}, {&(0x7f00000012c0)="2442a5f3537d7ae806b5dba8f3afcf4069ae9fbe9454c09ecbeb7e3dba22f551a256e46bda7747a59f210841362419c725b2fff1926b889a13bdd78ba772c434039e1e0591e22a1c72f581056d0d5742c22924b8bee6686fec117b0d8b133459c03c30dcdda7463f728087ed575c7eeab0270810a7e4fdee3d3bfba0a9dce1fb4b1b0dc112eb69b6c922142037cfac11924f028a2609a8", 0x97, 0xffffffffffff0000}, {&(0x7f0000001380)="7062f1177acbbe073be29cad0dcec6286e4efe88b006345fa6f039b57f6ad32ce10aec902dbb9a1dcf8676a71740bff13f25dd2c628ecc7364030c6af05e4e9e4fd9ef7853ec962958fecf3bea699fb2e216916bb109685d7115c59ef78e4e2df54c68415050105543f717cf9a33d57c38cf9fd83fc7301cb16f41ce7fb6116f35fd4cf85633135baeb265983b63b3fa14a658191006152ed094", 0x9a, 0x8}], 0x8000, &(0x7f00000014c0)={[{@check_strict}, {@dmode={'dmode', 0x3d, 0x6}}, {@dmode={'dmode', 0x3d, 0x80000001}}, {@block={'block', 0x3d, 0x400}}, {@check_relaxed}, {@block={'block', 0x3d, 0x300}}, {@check_strict}, {@sbsector={'sbsector', 0x3d, 0x1000}}, {@session={'session', 0x3d, 0x57}}, {@hide}], [{@appraise_type}, {@obj_user={'obj_user', 0x3d, 'defcontext'}}, {@audit}, {@appraise_type}]}) r5 = socket$packet(0x11, 0x2, 0x300) pwrite64(r5, &(0x7f0000001600)="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", 0x1000, 0xffffffff) r6 = openat2(r4, &(0x7f0000002600)='./file0/file0\x00', &(0x7f0000002640)={0xa2800, 0x0, 0x10}, 0x18) fchmodat(r6, &(0x7f0000002680)='./file0/file1\x00', 0x4) 09:14:22 executing program 3: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x9, 0x989}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0x4]}, 0x8, 0x180800) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0xeb, 0x0, 0x27f8, 0x2, 0x3, 0xff, 0x396, 0x40, 0x38d, 0xffffffff, 0x7fff, 0x38, 0x9, 0x7, 0x8a, 0x9061}, [{0x6474e551, 0x7, 0x101, 0x7fff, 0xab, 0x0, 0x1}], "299525d54632966c6a33f834b2cafed427e2ed5a9aeff178b462804b814c483dfa03523cc77ccb8ab0ef1a6b94111dd8ba9fdfb0a03cb2058180b67b2bca559cdf055ff0ec4286cc8abd709b7ee152fe7ef15915eaf049313dd572839a8255497d4bb6498380f6", ['\x00', '\x00', '\x00', '\x00']}, 0x4df) recvmmsg$unix(r0, &(0x7f0000002300)=[{{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000009c0)=""/44, 0x2c}], 0x1, &(0x7f0000000a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000bc0)=""/195, 0xc3}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/226, 0xe2}, {&(0x7f0000001dc0)=""/94, 0x5e}, {&(0x7f0000001e40)=""/19, 0x13}, {&(0x7f0000001e80)=""/73, 0x49}], 0x6}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000002200)=[{&(0x7f0000002000)=""/162, 0xa2}, {&(0x7f00000020c0)=""/118, 0x76}, {&(0x7f0000002140)=""/183, 0xb7}], 0x3, &(0x7f0000002240)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x3, 0x100, &(0x7f00000023c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000002440)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) write$binfmt_elf64(r7, &(0x7f0000002480)={{0x7f, 0x45, 0x4c, 0x46, 0xdb, 0x81, 0x0, 0x6, 0x6, 0x2, 0x6, 0xffffffff, 0x2, 0x40, 0x262, 0x4a, 0x9, 0x38, 0x1, 0x840, 0x1, 0x1fe}, [{0x1, 0x9, 0x40, 0x100000000, 0x62c, 0x6, 0x3, 0x1000}, {0x6, 0x3, 0x3ff, 0x0, 0x2, 0x5, 0x3f14, 0x7fffffff}], "8284bd70d0336614a40d91cd8ec0f77b8702d5a98c200283bcc92562ee539337d0dc3428231e7bbcd0c18a223738b65d310a836912d6eb88", ['\x00', '\x00', '\x00', '\x00']}, 0x4e8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002980)='./cgroup.net/syz0\x00', 0x200002, 0x0) signalfd4(r8, &(0x7f00000029c0)={[0x101]}, 0x8, 0x800) write$tcp_mem(r1, &(0x7f0000002a00)={0x81, 0x20, 0x6, 0x20, 0x6}, 0x48) fcntl$addseals(r6, 0x409, 0x1) r9 = accept4$bt_l2cap(r2, &(0x7f0000002a80)={0x1f, 0x0, @fixed}, &(0x7f0000002ac0)=0xe, 0x40000) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000002b00)={0x0, 0x81}) r10 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x7f) ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x80049367, &(0x7f0000003b00)) r11 = memfd_secret(0x80000) sendmsg$IPVS_CMD_NEW_DEST(r11, &(0x7f0000003c00)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xbd4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x6000000) removexattr(&(0x7f0000003c40)='./file0\x00', &(0x7f0000003c80)=@random={'trusted.', './cgroup.net/syz0\x00'}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003d00), r7) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000003e00)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d40)={0x4c, r12, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x393}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 68.015709] audit: type=1400 audit(1664615662.793:6): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:14:22 executing program 5: mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x140840, &(0x7f00000000c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@nodevmap}], [{@euid_lt={'euid<', 0xee01}}]}}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x88000) recvmsg$unix(r0, &(0x7f0000001740)={&(0x7f0000000240), 0x6e, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/34, 0x22}, {&(0x7f0000000500)=""/38, 0x26}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f00000005c0)=""/21, 0x15}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x9, &(0x7f00000016c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x80}, 0x1) stat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002b80)={0x0, 0x0, 0x0}, &(0x7f0000002bc0)=0xc) mount$9p_xen(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x20040ac, &(0x7f0000002c00)={'trans=xen,', {[{@mmap}, {@access_uid={'access', 0x3d, r9}}, {@dfltuid={'dfltuid', 0x3d, r11}}, {@afid={'afid', 0x3d, 0x9}}, {@privport}], [{@uid_lt={'uid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_lt={'uid<', r12}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x33, 0x39, 0x62, 0x31, 0x65, 0x66, 0x32], 0x2d, [0x38, 0x36, 0x62, 0x5a], 0x2d, [0x31, 0x0, 0x35, 0x9], 0x2d, [0x63, 0x63, 0x61, 0x64], 0x2d, [0x33, 0x39, 0x31, 0x63, 0x35, 0x35, 0x34, 0x65]}}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000002d00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r14, 0x0, 0x487, &(0x7f0000002d40)={{0x16, @loopback, 0x4e23, 0x2, 'rr\x00', 0x22, 0x200, 0x2b}, {@rand_addr=0x64010102, 0x4e21, 0x2, 0x81, 0x3, 0x6cd3}}, 0x44) pivot_root(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)='./file0\x00') r15 = open_tree(0xffffffffffffffff, &(0x7f0000002e40)='\x00', 0x1000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000002e80)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) inotify_add_watch(r1, &(0x7f0000002ec0)='./file1\x00', 0x40000a01) r17 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000043c0), 0x400, 0x0) r18 = syz_io_uring_setup(0x22dc, &(0x7f0000004400)={0x0, 0x933, 0x10, 0x2, 0x323, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000004480), &(0x7f00000044c0)) r19 = signalfd(r16, &(0x7f0000004500)={[0xa19]}, 0x8) recvmmsg$unix(r15, &(0x7f0000005300)=[{{&(0x7f0000004540), 0x6e, &(0x7f0000004ac0)=[{&(0x7f00000045c0)=""/214, 0xd6}, {&(0x7f00000046c0)}, {&(0x7f0000004700)=""/194, 0xc2}, {&(0x7f0000004800)=""/48, 0x30}, {&(0x7f0000004840)=""/131, 0x83}, {&(0x7f0000004900)=""/124, 0x7c}, {&(0x7f0000004980)=""/214, 0xd6}, {&(0x7f0000004a80)=""/50, 0x32}], 0x8, &(0x7f0000004b40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000004c40), 0x6e, &(0x7f0000004f40)=[{&(0x7f0000004cc0)=""/235, 0xeb}, {&(0x7f0000004dc0)=""/159, 0x9f}, {&(0x7f0000004e80)=""/126, 0x7e}, {&(0x7f0000004f00)=""/16, 0x10}], 0x4, &(0x7f0000004f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000005040)=@abs, 0x6e, &(0x7f00000052c0)=[{&(0x7f00000050c0)=""/133, 0x85}, {&(0x7f0000005180)=""/134, 0x86}, {&(0x7f0000005240)=""/114, 0x72}], 0x3}}], 0x3, 0x40000120, &(0x7f00000053c0)={0x77359400}) r21 = socket$nl_sock_diag(0x10, 0x3, 0x4) r22 = eventfd(0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r14, 0xc0502100, &(0x7f0000005400)={0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000005740)={&(0x7f0000002f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004340)=[{&(0x7f0000002f80)="6d28b49d79f3bbbabb9034ced753aed8be67871f41b846cb0435aced8f3a21d2f67a2906f0a2bf7a52f9ab5108add075e48c1c490f0a5cea1c1c280fc5f62f4776", 0x41}, {&(0x7f0000003000)="faf7bdf79b2d6e358840c2ba8fbf5a907c7dc556d389cc30a90292a7ac2902ba29324240f8", 0x25}, {&(0x7f0000003040)="e95fa10fe49fa5f3d8d765519f7113d479d28be1e572162bd36d", 0x1a}, {&(0x7f0000003080)="09fe4d47af1cd810e8a9edad895718ca55c766a904dcc8330f1706614b1b76bc1014d717f4f1d30ab661b0fefa1e7bc5af73d5f20177aabf442033f236e633ffd25ddefd9ace1be53cbf33ab2ac2620f77510912ca1d582c3ffbfb5a5a36388380bc77d12ad02c015c56d82a6e8833c1bf1c5c000e9f8725f471ab86250884153ff970946e2bd3ef6fc6a65197acc4cfb6e4486cce7542b6485c7ae4da0e901ef5f6d7461cb561528a65467c7ec35c1cd2c1d6360ce03ed94157ef0dc8f57293a5556ca0", 0xc4}, {&(0x7f0000003180)="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", 0xfd}, {&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000004280)="4ee3a27a32f1c5d2df059423f02f8454c5d5185d7021b4aa4b21691ca7f26ba02817fa19528060c98f8cd6dca5711c24ea65ae81d369ae84cb9ac69fd22dc1174fc4b541efaa80ff2ed9a64a6e2a87cc517ef7f4c6ae14fb4c1db0e402d1f5f9ce009c88ecd77c2e4bdee225f40494181e44aae29735b3f662d4c4bc014092fd7c294221c9f5762f74894b7b3e1959", 0x8f}], 0x7, &(0x7f0000005600)=[@rights={{0x20, 0x1, 0x1, [r17, r1, r18, r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, r7, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r21, r2, r14, r14, r0, r22, r15]}}, @cred={{0x1c, 0x1, 0x2, {r8, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r6}}}, @cred={{0x1c, 0x1, 0x2, {r23, r5, r13}}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, r10}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x110, 0x8000}, 0x4000) 09:14:22 executing program 7: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000180)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000200)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000240)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000280)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000002c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000300)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000340)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000380)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000003c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000400)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000440)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000480)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000004c0)) 09:14:22 executing program 6: semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0xa8, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x8, 0x800}, {0x0, 0x6, 0xc00}, {0x4, 0x2}, {0x4, 0x6, 0x1000}], 0x6, &(0x7f0000000040)) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x9}, {0x2, 0xfff, 0x1800}, {0x1, 0x7, 0x1800}, {0x4, 0x6, 0x1000}, {0x1, 0xf001, 0x1800}, {0x2, 0x3, 0x1800}, {0x2, 0x7}, {0x0, 0xff}], 0x8, &(0x7f00000000c0)={0x77359400}) r0 = semget$private(0x0, 0x0, 0x400) semctl$SEM_INFO(r0, 0x6, 0x13, &(0x7f0000000100)=""/223) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x80, 0x1800}], 0x1, &(0x7f0000000240)={0x77359400}) r1 = semget$private(0x0, 0x4, 0x300) semtimedop(r1, &(0x7f0000000280)=[{0x4, 0x800}, {0x3, 0xa3e0}, {0x3, 0x9}, {0x1, 0x20}, {0x3, 0x2, 0x3800}, {0x1, 0x5000, 0x1000}, {0x6, 0xc15b, 0x800}], 0x7, &(0x7f00000002c0)={0x0, 0x989680}) semtimedop(r1, &(0x7f0000000300)=[{0x1, 0x200, 0x800}], 0x1, &(0x7f0000000340)={0x0, 0x989680}) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000380)=""/179) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x2, 0x1) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000440)=""/237) r3 = semget$private(0x0, 0x0, 0x408) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000540)=[{0x2, 0x2000, 0x1800}, {0x0, 0x4, 0x1800}], 0x2, &(0x7f00000005c0)={r4, r5+60000000}) semtimedop(r3, &(0x7f0000000600)=[{0x0, 0x8, 0x1000}, {0x1, 0x0, 0x800}], 0x2, &(0x7f0000000640)={0x77359400}) r6 = semget$private(0x0, 0x2, 0x0) semctl$SEM_INFO(r2, 0x4, 0x13, &(0x7f0000000680)=""/68) semctl$SEM_INFO(r6, 0x0, 0x13, &(0x7f0000000700)=""/176) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000007c0)=""/111) [ 69.351182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.354215] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.356156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.360103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.363212] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.364731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.371805] Bluetooth: hci0: HCI_REQ-0x0c1a [ 69.423743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.425120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.428051] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.429965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.430961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.432046] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.433459] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.434510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.438145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.439462] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.441515] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.442909] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.444198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.445503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.450668] Bluetooth: hci2: HCI_REQ-0x0c1a [ 69.451658] Bluetooth: hci1: HCI_REQ-0x0c1a [ 69.453660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.471131] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.474046] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.475490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.477987] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.483848] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 69.485156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.491473] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.493532] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.493572] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.494741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.497433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.498948] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.500118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.505891] Bluetooth: hci4: HCI_REQ-0x0c1a [ 69.523135] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.525676] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.527319] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.530832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.537101] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 69.538694] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.551627] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.563796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.565890] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.572561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.601298] Bluetooth: hci3: HCI_REQ-0x0c1a [ 69.603229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.650825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.670891] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.688823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.691840] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 69.694847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.702508] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.437782] Bluetooth: hci0: command 0x0409 tx timeout [ 71.501693] Bluetooth: hci2: command 0x0409 tx timeout [ 71.501760] Bluetooth: hci1: command 0x0409 tx timeout [ 71.565436] Bluetooth: hci7: command 0x0409 tx timeout [ 71.565529] Bluetooth: hci4: command 0x0409 tx timeout [ 71.566099] Bluetooth: hci5: command 0x0409 tx timeout [ 71.629474] Bluetooth: hci3: command 0x0409 tx timeout [ 71.758476] Bluetooth: hci6: command 0x0409 tx timeout [ 73.486130] Bluetooth: hci0: command 0x041b tx timeout [ 73.549463] Bluetooth: hci1: command 0x041b tx timeout [ 73.549628] Bluetooth: hci2: command 0x041b tx timeout [ 73.613569] Bluetooth: hci4: command 0x041b tx timeout [ 73.613582] Bluetooth: hci7: command 0x041b tx timeout [ 73.614551] Bluetooth: hci5: command 0x041b tx timeout [ 73.677402] Bluetooth: hci3: command 0x041b tx timeout [ 73.805446] Bluetooth: hci6: command 0x041b tx timeout [ 75.533586] Bluetooth: hci0: command 0x040f tx timeout [ 75.597536] Bluetooth: hci1: command 0x040f tx timeout [ 75.597634] Bluetooth: hci2: command 0x040f tx timeout [ 75.661425] Bluetooth: hci7: command 0x040f tx timeout [ 75.661894] Bluetooth: hci5: command 0x040f tx timeout [ 75.662295] Bluetooth: hci4: command 0x040f tx timeout [ 75.725429] Bluetooth: hci3: command 0x040f tx timeout [ 75.853387] Bluetooth: hci6: command 0x040f tx timeout [ 77.581434] Bluetooth: hci0: command 0x0419 tx timeout [ 77.645428] Bluetooth: hci2: command 0x0419 tx timeout [ 77.646696] Bluetooth: hci1: command 0x0419 tx timeout [ 77.709481] Bluetooth: hci4: command 0x0419 tx timeout [ 77.709892] Bluetooth: hci5: command 0x0419 tx timeout [ 77.710315] Bluetooth: hci7: command 0x0419 tx timeout [ 77.773408] Bluetooth: hci3: command 0x0419 tx timeout [ 77.901470] Bluetooth: hci6: command 0x0419 tx timeout 09:15:19 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc0200, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="c666cc9468d70d548636f6251e393e0994570336eb9667e810dcc22464cf86ebc14e1309fd6c5a74b19a81acaba34e8c9d0d87f75a22f1a5b16c6ac9d668a40c49fdea6ec8e2719985436887a3afe866c996adaf86fc5ea12d0b536e3d277fedd83a86cba296c1a4f083458f02ccb6483b626452bdc2a24f971d93c45942ddf71eb9aae2cae3bc5937729e4d68fc7bd86d34c380299915e0b8dbbcaac2674beaecf7db5ab401106fa4a5d291995c2909d36dec414bef5a4e0c5aa41bf537e16a29538759418da03cad1418bdd6eea214f49ec62f06f7b108e2dc707b60aac16212e3a474d8fa0d65b0") r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x1) 09:15:19 executing program 7: prctl$PR_GET_DUMPABLE(0x3) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73666e6c9200080101000440002000f801002000400003000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1800}, {&(0x7f0000010400)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x2000}, {&(0x7f0000010500)="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", 0x120, 0x2800}, {&(0x7f0000010700)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x3800}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x4000}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x4800}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x7800}], 0x0, &(0x7f0000010f00)) [ 124.960153] loop7: detected capacity change from 0 to 128 09:15:19 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x1ff) renameat2(r3, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000027f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7) [ 125.117315] loop4: detected capacity change from 0 to 128 [ 125.128782] audit: type=1400 audit(1664615719.905:7): avc: denied { open } for pid=3833 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.130305] audit: type=1400 audit(1664615719.906:8): avc: denied { kernel } for pid=3833 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.140244] ------------[ cut here ]------------ [ 125.140265] [ 125.140268] ====================================================== [ 125.140272] WARNING: possible circular locking dependency detected [ 125.140276] 6.0.0-rc7-next-20220930 #1 Not tainted [ 125.140283] ------------------------------------------------------ [ 125.140286] syz-executor.7/3835 is trying to acquire lock: [ 125.140292] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 125.140334] [ 125.140334] but task is already holding lock: [ 125.140340] ffff88800fcff820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.140367] [ 125.140367] which lock already depends on the new lock. [ 125.140367] [ 125.140370] [ 125.140370] the existing dependency chain (in reverse order) is: [ 125.140373] [ 125.140373] -> #3 (&ctx->lock){....}-{2:2}: [ 125.140387] _raw_spin_lock+0x2a/0x40 [ 125.140399] __perf_event_task_sched_out+0x53b/0x18d0 [ 125.140410] __schedule+0xedd/0x2470 [ 125.140423] preempt_schedule_common+0x45/0xc0 [ 125.140439] __cond_resched+0x17/0x30 [ 125.140453] __mutex_lock+0xa3/0x14d0 [ 125.140467] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.140479] do_syscall_64+0x3b/0x90 [ 125.140496] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.140509] [ 125.140509] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 125.140522] _raw_spin_lock_nested+0x30/0x40 [ 125.140533] raw_spin_rq_lock_nested+0x1e/0x30 [ 125.140547] task_fork_fair+0x63/0x4d0 [ 125.140563] sched_cgroup_fork+0x3d0/0x540 [ 125.140578] copy_process+0x4183/0x6e20 [ 125.140588] kernel_clone+0xe7/0x890 [ 125.140598] user_mode_thread+0xad/0xf0 [ 125.140608] rest_init+0x24/0x250 [ 125.140620] arch_call_rest_init+0xf/0x14 [ 125.140638] start_kernel+0x4c6/0x4eb [ 125.140652] secondary_startup_64_no_verify+0xe0/0xeb [ 125.140667] [ 125.140667] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 125.140680] _raw_spin_lock_irqsave+0x39/0x60 [ 125.140691] try_to_wake_up+0xab/0x1930 [ 125.140704] up+0x75/0xb0 [ 125.140717] __up_console_sem+0x6e/0x80 [ 125.140734] console_unlock+0x46a/0x590 [ 125.140749] vt_ioctl+0x2822/0x2ca0 [ 125.140761] tty_ioctl+0x785/0x16b0 [ 125.140772] __x64_sys_ioctl+0x19a/0x210 [ 125.140786] do_syscall_64+0x3b/0x90 [ 125.140802] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.140815] [ 125.140815] -> #0 ((console_sem).lock){....}-{2:2}: [ 125.140828] __lock_acquire+0x2a02/0x5e70 [ 125.140845] lock_acquire+0x1a2/0x530 [ 125.140861] _raw_spin_lock_irqsave+0x39/0x60 [ 125.140871] down_trylock+0xe/0x70 [ 125.140886] __down_trylock_console_sem+0x3b/0xd0 [ 125.140902] vprintk_emit+0x16b/0x560 [ 125.140918] vprintk+0x84/0xa0 [ 125.140933] _printk+0xba/0xf1 [ 125.140945] report_bug.cold+0x72/0xab [ 125.140961] handle_bug+0x3c/0x70 [ 125.140977] exc_invalid_op+0x14/0x50 [ 125.140994] asm_exc_invalid_op+0x16/0x20 [ 125.141006] group_sched_out.part.0+0x2c7/0x460 [ 125.141023] ctx_sched_out+0x8f1/0xc10 [ 125.141040] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.141051] __schedule+0xedd/0x2470 [ 125.141064] preempt_schedule_common+0x45/0xc0 [ 125.141078] __cond_resched+0x17/0x30 [ 125.141092] __mutex_lock+0xa3/0x14d0 [ 125.141107] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.141118] do_syscall_64+0x3b/0x90 [ 125.141134] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.141147] [ 125.141147] other info that might help us debug this: [ 125.141147] [ 125.141149] Chain exists of: [ 125.141149] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 125.141149] [ 125.141164] Possible unsafe locking scenario: [ 125.141164] [ 125.141167] CPU0 CPU1 [ 125.141169] ---- ---- [ 125.141171] lock(&ctx->lock); [ 125.141177] lock(&rq->__lock); [ 125.141184] lock(&ctx->lock); [ 125.141190] lock((console_sem).lock); [ 125.141195] [ 125.141195] *** DEADLOCK *** [ 125.141195] [ 125.141197] 2 locks held by syz-executor.7/3835: [ 125.141204] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 125.141233] #1: ffff88800fcff820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.141259] [ 125.141259] stack backtrace: [ 125.141262] CPU: 0 PID: 3835 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 125.141274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.141282] Call Trace: [ 125.141285] [ 125.141289] dump_stack_lvl+0x8b/0xb3 [ 125.141308] check_noncircular+0x263/0x2e0 [ 125.141324] ? format_decode+0x26c/0xb50 [ 125.141340] ? print_circular_bug+0x450/0x450 [ 125.141357] ? simple_strtoul+0x30/0x30 [ 125.141375] ? lock_release+0x547/0x750 [ 125.141392] ? format_decode+0x26c/0xb50 [ 125.141409] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 125.141429] __lock_acquire+0x2a02/0x5e70 [ 125.141453] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 125.141475] lock_acquire+0x1a2/0x530 [ 125.141491] ? down_trylock+0xe/0x70 [ 125.141508] ? lock_release+0x750/0x750 [ 125.141528] ? vprintk+0x84/0xa0 [ 125.141546] _raw_spin_lock_irqsave+0x39/0x60 [ 125.141557] ? down_trylock+0xe/0x70 [ 125.141573] down_trylock+0xe/0x70 [ 125.141588] ? vprintk+0x84/0xa0 [ 125.141605] __down_trylock_console_sem+0x3b/0xd0 [ 125.141622] vprintk_emit+0x16b/0x560 [ 125.141640] vprintk+0x84/0xa0 [ 125.141657] _printk+0xba/0xf1 [ 125.141669] ? record_print_text.cold+0x16/0x16 [ 125.141684] ? report_bug.cold+0x66/0xab [ 125.141702] ? group_sched_out.part.0+0x2c7/0x460 [ 125.141720] report_bug.cold+0x72/0xab [ 125.141739] handle_bug+0x3c/0x70 [ 125.141756] exc_invalid_op+0x14/0x50 [ 125.141774] asm_exc_invalid_op+0x16/0x20 [ 125.141786] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.141807] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.141818] RSP: 0018:ffff88801a737978 EFLAGS: 00010006 [ 125.141827] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.141835] RDX: ffff88800d4fb580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 125.141842] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 125.141850] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800fcff800 [ 125.141857] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 125.141868] ? group_sched_out.part.0+0x2c7/0x460 [ 125.141888] ? group_sched_out.part.0+0x2c7/0x460 [ 125.141907] ctx_sched_out+0x8f1/0xc10 [ 125.141927] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.141941] ? lock_is_held_type+0xd7/0x130 [ 125.141954] ? __perf_cgroup_move+0x160/0x160 [ 125.141965] ? set_next_entity+0x304/0x550 [ 125.141982] ? update_curr+0x267/0x740 [ 125.142000] ? lock_is_held_type+0xd7/0x130 [ 125.142014] __schedule+0xedd/0x2470 [ 125.142031] ? io_schedule_timeout+0x150/0x150 [ 125.142046] ? find_held_lock+0x2c/0x110 [ 125.142062] ? lock_is_held_type+0xd7/0x130 [ 125.142075] ? __cond_resched+0x17/0x30 [ 125.142090] preempt_schedule_common+0x45/0xc0 [ 125.142106] __cond_resched+0x17/0x30 [ 125.142121] __mutex_lock+0xa3/0x14d0 [ 125.142137] ? lock_is_held_type+0xd7/0x130 [ 125.142149] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.142163] ? mutex_lock_io_nested+0x1310/0x1310 [ 125.142179] ? lock_release+0x3b2/0x750 [ 125.142196] ? __up_read+0x192/0x730 [ 125.142211] ? up_write+0x520/0x520 [ 125.142225] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 125.142239] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.142254] ? __up_read+0x192/0x730 [ 125.142268] ? perf_compat_ioctl+0x130/0x130 [ 125.142279] ? up_write+0x520/0x520 [ 125.142297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.142311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.142326] do_syscall_64+0x3b/0x90 [ 125.142344] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.142357] RIP: 0033:0x7f8f6e52db19 [ 125.142365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.142375] RSP: 002b:00007f8f6baa3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 125.142386] RAX: ffffffffffffffda RBX: 00007f8f6e640f60 RCX: 00007f8f6e52db19 [ 125.142394] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 125.142401] RBP: 00007f8f6e587f6d R08: 0000000000000000 R09: 0000000000000000 [ 125.142408] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.142415] R13: 00007ffeff8392cf R14: 00007f8f6baa3300 R15: 0000000000022000 [ 125.142428] [ 125.207807] WARNING: CPU: 0 PID: 3835 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 125.208668] Modules linked in: [ 125.208964] CPU: 0 PID: 3835 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 125.209751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.210814] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.211315] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.213061] RSP: 0018:ffff88801a737978 EFLAGS: 00010006 [ 125.213545] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.214230] RDX: ffff88800d4fb580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 125.214938] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 125.215629] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800fcff800 [ 125.216284] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 125.216975] FS: 00007f8f6baa3700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 125.217751] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.218277] CR2: 00007fd8e802a038 CR3: 000000000dff8000 CR4: 0000000000350ef0 [ 125.218981] Call Trace: [ 125.219239] [ 125.219453] ctx_sched_out+0x8f1/0xc10 [ 125.219836] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.220315] ? lock_is_held_type+0xd7/0x130 [ 125.220740] ? __perf_cgroup_move+0x160/0x160 [ 125.221152] ? set_next_entity+0x304/0x550 [ 125.221572] ? update_curr+0x267/0x740 [ 125.221937] ? lock_is_held_type+0xd7/0x130 [ 125.222359] __schedule+0xedd/0x2470 [ 125.222748] ? io_schedule_timeout+0x150/0x150 [ 125.223170] ? find_held_lock+0x2c/0x110 [ 125.223577] ? lock_is_held_type+0xd7/0x130 [ 125.223971] ? __cond_resched+0x17/0x30 [ 125.224367] preempt_schedule_common+0x45/0xc0 [ 125.224792] __cond_resched+0x17/0x30 [ 125.225175] __mutex_lock+0xa3/0x14d0 [ 125.225535] ? lock_is_held_type+0xd7/0x130 [ 125.225952] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.226428] ? mutex_lock_io_nested+0x1310/0x1310 [ 125.226811] ? lock_release+0x3b2/0x750 [ 125.227084] ? __up_read+0x192/0x730 [ 125.227339] ? up_write+0x520/0x520 [ 125.227595] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 125.227933] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.228272] ? __up_read+0x192/0x730 [ 125.228533] ? perf_compat_ioctl+0x130/0x130 [ 125.228828] ? up_write+0x520/0x520 [ 125.229083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.229430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.229775] do_syscall_64+0x3b/0x90 [ 125.230034] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.230378] RIP: 0033:0x7f8f6e52db19 [ 125.230645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.231813] RSP: 002b:00007f8f6baa3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 125.232308] RAX: ffffffffffffffda RBX: 00007f8f6e640f60 RCX: 00007f8f6e52db19 [ 125.232779] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 125.233241] RBP: 00007f8f6e587f6d R08: 0000000000000000 R09: 0000000000000000 [ 125.233708] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.234173] R13: 00007ffeff8392cf R14: 00007f8f6baa3300 R15: 0000000000022000 [ 125.234656] [ 125.234820] irq event stamp: 712 [ 125.235042] hardirqs last enabled at (711): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 125.235656] hardirqs last disabled at (712): [] __schedule+0x1225/0x2470 [ 125.236198] softirqs last enabled at (382): [] __irq_exit_rcu+0x11b/0x180 [ 125.236756] softirqs last disabled at (343): [] __irq_exit_rcu+0x11b/0x180 [ 125.237313] ---[ end trace 0000000000000000 ]--- [ 125.241947] audit: type=1400 audit(1664615720.019:9): avc: denied { write } for pid=3833 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:15:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x1ff) renameat2(r3, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000027f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7) [ 125.441362] hrtimer: interrupt took 19346 ns [ 125.512599] loop4: detected capacity change from 0 to 16128 [ 125.533031] loop4: detected capacity change from 0 to 128 09:15:20 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x1ff) renameat2(r3, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000027f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7) 09:15:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x1ff) renameat2(r3, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000027f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7) 09:15:20 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, 0x0, 0x0, 0x610) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x1ff) renameat2(r3, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000027f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7) VM DIAGNOSIS: 09:15:20 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88801a7373c0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000061 R11=0000000000000001 R12=0000000000000061 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8f6baa3700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd8e802a038 CR3=000000000dff8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f8f6e6147c0 00007f8f6e6147c8 YMM02=0000000000000000 0000000000000000 00007f8f6e6147e0 00007f8f6e6147c0 YMM03=0000000000000000 0000000000000000 00007f8f6e6147c8 00007f8f6e6147c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888009369800 RCX=ffffea0000f9d501 RDX=ffffea0000f9d500 RSI=ffffea0000f9d500 RDI=0000000040000000 RBP=0000000000000000 RSP=ffff88801bf1f870 R8 =ffff88803e755a00 R9 =dead00008010000e R10=ffffea0000f9d500 R11=0000000000000000 R12=dffffc0000000000 R13=ffff88801bf1f8b0 R14=ffff888007c75000 R15=ffff88803e755e00 RIP=ffffffff81788236 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa12359c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f93b6b73028 CR3=000000001d3c0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000