Warning: Permanently added '[localhost]:52225' (ECDSA) to the list of known hosts. 2022/10/01 12:09:01 fuzzer started 2022/10/01 12:09:01 dialing manager at localhost:35095 syzkaller login: [ 44.165611] cgroup: Unknown subsys name 'net' [ 44.288476] cgroup: Unknown subsys name 'rlimit' 2022/10/01 12:09:16 syscalls: 2215 2022/10/01 12:09:16 code coverage: enabled 2022/10/01 12:09:16 comparison tracing: enabled 2022/10/01 12:09:16 extra coverage: enabled 2022/10/01 12:09:16 setuid sandbox: enabled 2022/10/01 12:09:16 namespace sandbox: enabled 2022/10/01 12:09:16 Android sandbox: enabled 2022/10/01 12:09:16 fault injection: enabled 2022/10/01 12:09:16 leak checking: enabled 2022/10/01 12:09:16 net packet injection: enabled 2022/10/01 12:09:16 net device setup: enabled 2022/10/01 12:09:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 12:09:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 12:09:16 USB emulation: enabled 2022/10/01 12:09:16 hci packet injection: enabled 2022/10/01 12:09:16 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 12:09:16 802.15.4 emulation: enabled 2022/10/01 12:09:16 fetching corpus: 50, signal 19281/21105 (executing program) 2022/10/01 12:09:16 fetching corpus: 100, signal 33569/36966 (executing program) 2022/10/01 12:09:16 fetching corpus: 150, signal 46023/50814 (executing program) 2022/10/01 12:09:16 fetching corpus: 200, signal 49200/55455 (executing program) 2022/10/01 12:09:16 fetching corpus: 250, signal 53724/61337 (executing program) 2022/10/01 12:09:17 fetching corpus: 300, signal 58980/67860 (executing program) 2022/10/01 12:09:17 fetching corpus: 350, signal 62308/72443 (executing program) 2022/10/01 12:09:17 fetching corpus: 400, signal 68342/79498 (executing program) 2022/10/01 12:09:17 fetching corpus: 450, signal 72673/84893 (executing program) 2022/10/01 12:09:17 fetching corpus: 500, signal 77196/90342 (executing program) 2022/10/01 12:09:17 fetching corpus: 550, signal 82711/96646 (executing program) 2022/10/01 12:09:17 fetching corpus: 600, signal 87969/102611 (executing program) 2022/10/01 12:09:17 fetching corpus: 650, signal 90685/106254 (executing program) 2022/10/01 12:09:18 fetching corpus: 700, signal 92867/109394 (executing program) 2022/10/01 12:09:18 fetching corpus: 750, signal 94370/111861 (executing program) 2022/10/01 12:09:18 fetching corpus: 800, signal 96119/114574 (executing program) 2022/10/01 12:09:18 fetching corpus: 850, signal 99955/119005 (executing program) 2022/10/01 12:09:18 fetching corpus: 900, signal 101881/121809 (executing program) 2022/10/01 12:09:18 fetching corpus: 950, signal 103733/124442 (executing program) 2022/10/01 12:09:18 fetching corpus: 1000, signal 106505/127814 (executing program) 2022/10/01 12:09:18 fetching corpus: 1050, signal 108310/130381 (executing program) 2022/10/01 12:09:19 fetching corpus: 1100, signal 109664/132538 (executing program) 2022/10/01 12:09:19 fetching corpus: 1150, signal 111806/135300 (executing program) 2022/10/01 12:09:19 fetching corpus: 1200, signal 113613/137723 (executing program) 2022/10/01 12:09:19 fetching corpus: 1250, signal 116187/140716 (executing program) 2022/10/01 12:09:19 fetching corpus: 1300, signal 117614/142847 (executing program) 2022/10/01 12:09:19 fetching corpus: 1350, signal 121258/146613 (executing program) 2022/10/01 12:09:19 fetching corpus: 1400, signal 122842/148775 (executing program) 2022/10/01 12:09:19 fetching corpus: 1450, signal 124166/150712 (executing program) 2022/10/01 12:09:19 fetching corpus: 1500, signal 125234/152409 (executing program) 2022/10/01 12:09:20 fetching corpus: 1550, signal 126172/154011 (executing program) 2022/10/01 12:09:20 fetching corpus: 1600, signal 127296/155735 (executing program) 2022/10/01 12:09:20 fetching corpus: 1650, signal 129558/158247 (executing program) 2022/10/01 12:09:20 fetching corpus: 1700, signal 132409/161112 (executing program) 2022/10/01 12:09:20 fetching corpus: 1750, signal 134367/163337 (executing program) 2022/10/01 12:09:20 fetching corpus: 1800, signal 135644/165042 (executing program) 2022/10/01 12:09:20 fetching corpus: 1850, signal 137063/166814 (executing program) 2022/10/01 12:09:20 fetching corpus: 1900, signal 138973/168892 (executing program) 2022/10/01 12:09:21 fetching corpus: 1950, signal 139779/170191 (executing program) 2022/10/01 12:09:21 fetching corpus: 2000, signal 140921/171714 (executing program) 2022/10/01 12:09:21 fetching corpus: 2050, signal 141655/172948 (executing program) 2022/10/01 12:09:21 fetching corpus: 2100, signal 142907/174576 (executing program) 2022/10/01 12:09:21 fetching corpus: 2150, signal 143793/175928 (executing program) 2022/10/01 12:09:21 fetching corpus: 2200, signal 144946/177494 (executing program) 2022/10/01 12:09:21 fetching corpus: 2250, signal 145742/178711 (executing program) 2022/10/01 12:09:21 fetching corpus: 2300, signal 146717/180027 (executing program) 2022/10/01 12:09:22 fetching corpus: 2350, signal 148011/181493 (executing program) 2022/10/01 12:09:22 fetching corpus: 2400, signal 148953/182716 (executing program) 2022/10/01 12:09:22 fetching corpus: 2450, signal 150569/184359 (executing program) 2022/10/01 12:09:22 fetching corpus: 2500, signal 151811/185688 (executing program) 2022/10/01 12:09:22 fetching corpus: 2550, signal 153241/187218 (executing program) 2022/10/01 12:09:22 fetching corpus: 2600, signal 154245/188407 (executing program) 2022/10/01 12:09:22 fetching corpus: 2650, signal 155792/189898 (executing program) 2022/10/01 12:09:22 fetching corpus: 2700, signal 156898/191150 (executing program) 2022/10/01 12:09:23 fetching corpus: 2750, signal 157730/192238 (executing program) 2022/10/01 12:09:23 fetching corpus: 2800, signal 159035/193532 (executing program) 2022/10/01 12:09:23 fetching corpus: 2850, signal 160626/194952 (executing program) 2022/10/01 12:09:23 fetching corpus: 2900, signal 162082/196236 (executing program) 2022/10/01 12:09:23 fetching corpus: 2950, signal 163033/197277 (executing program) 2022/10/01 12:09:23 fetching corpus: 3000, signal 163929/198289 (executing program) 2022/10/01 12:09:23 fetching corpus: 3050, signal 165371/199522 (executing program) 2022/10/01 12:09:23 fetching corpus: 3100, signal 166238/200525 (executing program) 2022/10/01 12:09:24 fetching corpus: 3150, signal 167577/201714 (executing program) 2022/10/01 12:09:24 fetching corpus: 3200, signal 168245/202561 (executing program) 2022/10/01 12:09:24 fetching corpus: 3250, signal 169137/203433 (executing program) 2022/10/01 12:09:24 fetching corpus: 3300, signal 170530/204619 (executing program) 2022/10/01 12:09:24 fetching corpus: 3350, signal 171261/205466 (executing program) 2022/10/01 12:09:24 fetching corpus: 3400, signal 172205/206330 (executing program) 2022/10/01 12:09:24 fetching corpus: 3450, signal 173440/207252 (executing program) 2022/10/01 12:09:25 fetching corpus: 3500, signal 174259/208025 (executing program) 2022/10/01 12:09:25 fetching corpus: 3550, signal 175376/208913 (executing program) 2022/10/01 12:09:25 fetching corpus: 3600, signal 175827/209557 (executing program) 2022/10/01 12:09:25 fetching corpus: 3650, signal 176594/210309 (executing program) 2022/10/01 12:09:25 fetching corpus: 3700, signal 177467/211071 (executing program) 2022/10/01 12:09:25 fetching corpus: 3750, signal 177997/211735 (executing program) 2022/10/01 12:09:25 fetching corpus: 3800, signal 179013/212549 (executing program) 2022/10/01 12:09:25 fetching corpus: 3850, signal 179591/213195 (executing program) 2022/10/01 12:09:26 fetching corpus: 3900, signal 181029/214114 (executing program) 2022/10/01 12:09:26 fetching corpus: 3950, signal 182479/215028 (executing program) 2022/10/01 12:09:26 fetching corpus: 4000, signal 183083/215570 (executing program) 2022/10/01 12:09:26 fetching corpus: 4050, signal 183758/216176 (executing program) 2022/10/01 12:09:26 fetching corpus: 4100, signal 184294/216686 (executing program) 2022/10/01 12:09:26 fetching corpus: 4150, signal 184966/217287 (executing program) 2022/10/01 12:09:26 fetching corpus: 4200, signal 185532/217810 (executing program) 2022/10/01 12:09:26 fetching corpus: 4250, signal 186269/218380 (executing program) 2022/10/01 12:09:26 fetching corpus: 4300, signal 187153/219109 (executing program) 2022/10/01 12:09:27 fetching corpus: 4350, signal 188115/219706 (executing program) 2022/10/01 12:09:27 fetching corpus: 4400, signal 188857/220239 (executing program) 2022/10/01 12:09:27 fetching corpus: 4450, signal 189310/220692 (executing program) 2022/10/01 12:09:27 fetching corpus: 4500, signal 189769/221110 (executing program) 2022/10/01 12:09:27 fetching corpus: 4550, signal 190636/221619 (executing program) 2022/10/01 12:09:27 fetching corpus: 4600, signal 191292/222126 (executing program) 2022/10/01 12:09:27 fetching corpus: 4650, signal 192009/222599 (executing program) 2022/10/01 12:09:27 fetching corpus: 4700, signal 192464/222991 (executing program) 2022/10/01 12:09:28 fetching corpus: 4750, signal 193439/223498 (executing program) 2022/10/01 12:09:28 fetching corpus: 4800, signal 193883/223893 (executing program) 2022/10/01 12:09:28 fetching corpus: 4850, signal 194402/224284 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/224604 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/224904 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/225213 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/225524 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/225818 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/226120 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/226435 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/226729 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/227000 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/227302 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/227578 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/227867 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/228183 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/228491 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/228812 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/229029 (executing program) 2022/10/01 12:09:28 fetching corpus: 4870, signal 194679/229029 (executing program) 2022/10/01 12:09:30 starting 8 fuzzer processes 12:09:30 executing program 0: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/13, &(0x7f0000000040)=0xd) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000100)=""/14, &(0x7f0000000140)=0xe) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000180)=""/125, &(0x7f0000000200)=0x7d) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x6340, 0x0) sendfile(r1, r0, &(0x7f0000000280)=0x401, 0x5) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000340)) ioctl$FICLONE(r1, 0x40049409, r1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000003c0)={0x7, 'veth0_virt_wifi\x00', {0x6}, 0x1000}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000400)={0x1, 'veth1\x00', {}, 0x1000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'wlan1\x00'}) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000480)={0x57, 0x5, 0xfe, {0x1ff, 0x5}, {0x4}, @rumble={0x8, 0x1000}}) r4 = syz_open_dev$mouse(&(0x7f00000004c0), 0x7, 0x8000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xac, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000680)=0x5, 0x4) readv(r4, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000740)=""/86, 0x56}, {&(0x7f00000007c0)=""/231, 0xe7}, {&(0x7f00000008c0)}], 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000940)=0x400, 0x1) 12:09:30 executing program 1: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ac00, 0x4}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x140}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x801) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff8001}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000003c0)={0x3, 0x0, 0x63, &(0x7f0000000340)=""/99}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/hid_logitech', 0x82000, 0x187) accept4$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14, 0x100000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x3, 0x7f, 0xd, @private2, @mcast2, 0x20, 0x10, 0x8, 0x7fff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003e80)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003f40)={'syztnl1\x00', &(0x7f0000003ec0)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x6, 0x5, {{0x17, 0x4, 0x2, 0x38, 0x5c, 0x68, 0x0, 0x9, 0x4, 0x0, @local, @empty, {[@ssrr={0x89, 0x7, 0x21, [@rand_addr=0x64010102]}, @end, @timestamp_addr={0x44, 0x2c, 0xa9, 0x1, 0x0, [{@loopback, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x40}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x8}, {@loopback, 0x8e56}, {@multicast2}]}, @timestamp_prespec={0x44, 0x14, 0x6c, 0x3, 0x3, [{@multicast2, 0xffff}, {@multicast2, 0x3}]}]}}}}}) getpeername$packet(r0, &(0x7f0000003f80)={0x11, 0x0, 0x0}, &(0x7f0000003fc0)=0x14) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000004700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000046c0)={&(0x7f0000004000)={0x694, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x49}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x856b}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x64, 0x9, 0x3ff}, {0x7a4, 0x20, 0x20, 0xb5}, {0x1, 0x4, 0xe0, 0x3}, {0x9, 0x8, 0x6, 0x5}, {0x1ff, 0xd1, 0x3, 0x7fffffff}, {0x3, 0x6, 0x50, 0x6}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0xb6, 0x0, 0x909}, {0x7f, 0x3f, 0xd2, 0x9e1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7c5d64e2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6f}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x6, 0xa4, 0x3}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x694}, 0x1, 0x0, 0x0, 0x20000801}, 0x8050) r9 = openat$cgroup_devices(r3, &(0x7f0000004740)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000004780)) r10 = memfd_secret(0x80000) ioctl$TIOCL_UNBLANKSCREEN(r10, 0x541c, &(0x7f0000004980)) clone3(&(0x7f0000004c40)={0x40008400, &(0x7f00000049c0), &(0x7f0000004a00), &(0x7f0000004a40), {0xd}, &(0x7f0000004a80)=""/175, 0xaf, &(0x7f0000004b40)=""/152, &(0x7f0000004c00)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5, {r3}}, 0x58) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000004e80)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004e40)={&(0x7f0000004d00)={0x110, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x72}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4800}, 0x1) 12:09:30 executing program 2: prctl$PR_SET_PDEATHSIG(0x1, 0x39) prctl$PR_SET_PDEATHSIG(0x1, 0x14) prctl$PR_SET_PDEATHSIG(0x1, 0x6) prctl$PR_SET_PDEATHSIG(0x1, 0x2b) prctl$PR_SET_PDEATHSIG(0x1, 0x27) prctl$PR_SET_PDEATHSIG(0x1, 0x27) prctl$PR_SET_PDEATHSIG(0x1, 0x14) prctl$PR_SET_PDEATHSIG(0x1, 0x36) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) prctl$PR_SET_PDEATHSIG(0x1, 0x2d) prctl$PR_SET_PDEATHSIG(0x1, 0x17) prctl$PR_SET_PDEATHSIG(0x1, 0x19) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) prctl$PR_SET_PDEATHSIG(0x1, 0x17) prctl$PR_SET_PDEATHSIG(0x1, 0x22) prctl$PR_SET_PDEATHSIG(0x1, 0x37) prctl$PR_SET_PDEATHSIG(0x1, 0x39) prctl$PR_SET_PDEATHSIG(0x1, 0x41) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1) 12:09:30 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) r3 = request_key(&(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='-/]*-+\'\x00', 0x0) keyctl$search(0xa, r0, &(0x7f0000000240)='trusted\x00', &(0x7f0000000280)={'syz', 0x3}, r3) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x32, 0x64, 0x4f, 0x31, 0x35, 0x30, 0x61, 0x66, 0x38, 0x38, 0x32, 0x63, 0x66, 0x32, 0x38, 0x66]}, &(0x7f00000003c0)={0x0, "bbbb15f4c68853518afed96f0fb2d914b7e785db5f9cffdad24851b32075dccced9915f12699ec290d6834d421111afafe0977d6873bc1bf5f44b39751d4dc96", 0x10}, 0x48, r2) keyctl$link(0x8, r4, r5) r6 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f00000004c0)={0x0, "1efedd63ff681d171e7e5bf414d0b5c7ca810a52f46a2ea7914949d6ae2f6a12805576996f1bee254d5e68fa945fb4e508e49e94cb39434778b8408cae06066a", 0x34}, 0x48, r2) r7 = request_key(&(0x7f0000000540)='pkcs7_test\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='fscrypt:', r6) add_key(&(0x7f0000000600)='pkcs7_test\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000680)="2b9c78ddae7ba7e82d0b2a5fca64147c8bce756cf692bc04b381163f3e64d634160ab61bd562ae0fc40eba10dff623fdda", 0x31, 0xffffffffffffffff) r8 = add_key$fscrypt_provisioning(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)={0x3, 0x0, @auto=[0x18, 0x3d, 0x33, 0x3d, 0x27]}, 0xd, r6) r9 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$search(0xa, r8, &(0x7f0000000780)='user\x00', &(0x7f00000007c0)={'syz', 0x1}, r9) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x1}, 0x0, 0x0, r2) r10 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "57980abb5b51bd0411523ce3ac230e0550f751d6fdec5e64f890563960651af768f76a51c7b15cebdfe007deb4ea301c998602e50bd8797d1d38c1091e0b1447", 0x34}, 0x48, r2) keyctl$unlink(0x9, r10, r5) r11 = add_key(&(0x7f0000000ac0)='syzkaller\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)="6bc091c486ccde746f0b6ba23daff717ca9514caa7022dbd634e8324619bf7d12b53cd0e948750a9e66c0a2718622c91c4b6e1f913f9b9252cd134a5c45349ccfe1dd4b8ca0c595e561e2c7af58e9b95ec394c69f7da7a0f26056be2a3dd2f06a7822e39ed767925cec54e8c7f95a91f932112c45981d36ce88b4361ba93a2770f3913adb7d2178767c94f5c9be470209b82a8a11cf118119ef3ebef4c1fd8f29a3f1ee61bf75198d75aa4ef0322ffdbf2ea0d42fd97d8877260c52a5a717f14f6716f40d903721b4a23939e2f88c6c7a37464179ca044ac804850c44827ee99a690d910f8f13070ee65c3a0d5d30a304e62bc", 0xf3, r1) request_key(&(0x7f0000000a00)='blacklist\x00', &(0x7f0000000a40)={'syz', 0x3}, &(0x7f0000000a80)='$!\x00', r11) 12:09:30 executing program 4: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, @auto=[0x2c, 0x2b, 0x1e, 0x1b]}, 0xc, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)=@chain={'key_or_keyring:', r0}) r1 = add_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff9, r1, 0x0) r2 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="ce9943bcbfd81472f590c503f4d0657242cf7977404e6aac64ade280659f9b7774b584865fa73990686c27b2a12bdbc30a25520ee71c44462499cc28b1aefa53592b95d83d214f976567af", 0x4b, r2) keyctl$search(0xa, r3, &(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x1}, r2) r4 = request_key(&(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)='\x00', r2) r5 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "919adc879bdcedc2f4827faae011070d4f3d4bff6b330bb41aa7a95d280a62c071886fdbdd67d1355db6a8d8412a0948eeef57061ffcd900a827aa6c937d2e94", 0x1e}, 0x48, r2) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r1, 0x1) r6 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, r5) add_key$user(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="547661eb222d6a6f64544639bd84ade7b1a879", 0x13, r6) r7 = add_key(&(0x7f0000000740)='.dead\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)="8b7aa4b7339e97d36416f3f9cdff448ea5653e2c8c85d3abbc546521b2479d66932d1134291326648de481526292bbf37e423ed066dffa4e911eec0a43a669b174e7ba60ac852c926e7c804ed2fa3d53e22bfdd1c8cdd32ea70378ba9490bbe2c594c2c1f0d9994b2deefcf215a860ef16ef505b6dc9d236", 0x78, 0x0) r8 = add_key$keyring(&(0x7f00000018c0), &(0x7f0000001900)={'syz', 0x3}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)="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", 0x1000, r8) keyctl$KEYCTL_MOVE(0x1e, r2, r4, r2, 0x1) add_key(&(0x7f0000001940)='ceph\x00', &(0x7f0000001980)={'syz', 0x3}, &(0x7f00000019c0)="7b46bc36d1ea342919d3150f1851cd7931eebc165523b6c4dd43259ea673abab9cb8793f86b05a647ed0f12dc8db938b626ac1a2ccfdbdec1682774334fbe41991f99e", 0x43, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000001a40), &(0x7f0000001a80)={'syz', 0x3}, &(0x7f0000001ac0)="2c36c4769d7761bcde23b94f4ff2ab8af4f9a1f7020272922ab8a149efc1cc025ae9a2f2e117ab1c31b7991a5b07a5157589c89781bbff1bbc2580d3ac8f0520fede92abd15ec56845b641a38209d02fd2037fc811b9d94ea61ccdde2d810fa1aab6faf88c2f2747971a9188c0e367b4241cd2f32f7f8e958b3c1ddd33c6", 0x7e, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, &(0x7f0000001b40)=@secondary) 12:09:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2a0, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xb}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xf}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x11}]}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_SAE_PASSWORD={0x6f, 0x115, "6a410fb19818755201d4abedd539fa1bb0d279cdb6bfe6233e731e518a69834e81c76e701e06ec5e4918e1a79b567e21e17f44a70bbd39fcc6aa5828f611912c9e57aaa2ff9d74134d876cd673ed9da57073dd2694f839a8322597a52e7585595dbc28642d5249eaeb3d2a"}, @NL80211_ATTR_SAE_PASSWORD={0x1f, 0x115, "d05961678c3ecd4353d8085f58f163ee58aa1ae5ae6dde0fd444d5"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac06, 0xfac04]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4305}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x2a0}, 0x1, 0x0, 0x0, 0x44040}, 0x2000004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r2, 0xa89ce79c27d6de59, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf3e1, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x814}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x4, 0x7f}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20008041) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r3) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000b80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000780)={0x3b8, r6, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x91}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x680e}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfc000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf48}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x719}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan0\x00'}) r7 = syz_io_uring_complete(0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r7) perf_event_open(&(0x7f0000000c40)={0x5, 0x80, 0x20, 0x6, 0x3, 0x5, 0x0, 0xffffffffffffff01, 0x10, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x4712, 0xd}, 0x600, 0x734, 0x1f, 0x3, 0x1, 0x8000, 0x7, 0x0, 0x4, 0x0, 0xe}, 0xffffffffffffffff, 0x5, r7, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x7c, r8, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x20}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xf80}, @broadcast, @broadcast, @initial, {0x0, 0x3}}, 0x40, @void}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x2) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r7) 12:09:30 executing program 7: write$9p(0xffffffffffffffff, &(0x7f0000000000)="8fc5939dfa7dacbfb6aa1d3cc920939aa39d2e365790faf7498936192efb679020", 0x21) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) r1 = clone3(&(0x7f0000000500)={0x8000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x2f}, &(0x7f0000000340)=""/137, 0x89, &(0x7f0000000400)=""/171, &(0x7f00000004c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/consoles\x00', 0x0, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x2201, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x80, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000740)=""/111, 0x6f}, {&(0x7f00000007c0)=""/62, 0x3e}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x4, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x98}, 0x21) stat(0xfffffffffffffffe, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffd}}, './file0\x00'}) getgroups(0x4, &(0x7f0000001b00)=[0xee00, 0xffffffffffffffff, 0xee01, 0x0]) sendmsg$unix(r0, &(0x7f0000001c80)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="c285ff66fe92d726fb91d2fb5ad3ea8bef8a0d1ab4dbf61cd70090f5905675a640f7ab7571246e9ce146ca7ff78b93c8efe90a614346631c1fef3b8fadf96b989997862f7452881173bdb740709b015dc8bd205ec472b9d081f5385e4ae39c252b692d8ed0404f64458e0f8ce7e72cec8e437a750f6bb7dcfc9188edb6087d14ac60ea13b48732f2ac56ea46eb019d60e5f4e347c3afab4f001ed2c0c7db523ad07bd7604806e46c3965500dc6e2912d923a8a31d21b22e95f8dfa836312a42a9bad678e", 0xc4}, {&(0x7f0000000200)="76f15cfe548718ffc6fabc4efcf29ac3191c1cddc35cd60fa35b", 0x1a}], 0x2, &(0x7f0000001b40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r3}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}}, @rights={{0x34, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r12, 0xffffffffffffffff, r13]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r14}}}], 0x110, 0x894}, 0xdcfd194d40044f2) pwritev2(r9, &(0x7f0000001d00)=[{&(0x7f0000001cc0)="36c857c8a9c298d96482063ade9d2fb8d03a6423cf8d", 0x16}], 0x1, 0x7ff, 0xfffffffa, 0x12) stat(&(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000001ec0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4}}, &(0x7f0000001fc0)=0xe8) stat(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(r13, &(0x7f0000002500)=[{{&(0x7f00000020c0), 0x6e, &(0x7f0000002440)=[{&(0x7f0000002140)=""/31, 0x1f}, {&(0x7f0000002180)=""/149, 0x95}, {&(0x7f0000002240)=""/201, 0xc9}, {&(0x7f0000002340)=""/213, 0xd5}], 0x4, &(0x7f0000002480)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}], 0x1, 0x40000020, &(0x7f0000002540)={0x0, 0x3938700}) fsetxattr$system_posix_acl(r13, &(0x7f0000001d40)='system.posix_acl_access\x00', &(0x7f0000002580)={{}, {}, [{0x2, 0x4, r10}, {0x2, 0x0, r16}, {0x2, 0x1, r17}, {0x2, 0x1, r2}, {0x2, 0x0, r2}, {0x2, 0x1, r18}], {0x4, 0x3}, [{0x8, 0x2, r15}, {0x8, 0x4, r19}], {0x10, 0x7}, {0x20, 0x2}}, 0x64, 0x1) [ 73.300066] audit: type=1400 audit(1664626170.912:6): avc: denied { execmem } for pid=288 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:09:30 executing program 6: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000000)) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x17, 0x1a, 0x161, &(0x7f0000000040)}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000480)={0x3, 0x4, 0x9, 0x4, 0x2, "a7b77326bd089bd4194a36a49a7a410cf1e873", 0x7, 0x2}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0) read(r0, &(0x7f0000000500)=""/46, 0x2e) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000580)={0x2, {0x2, 0x7, 0x8000, 0x7, 0x8, 0x6}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) r2 = geteuid() sendmsg$nl_generic(r0, &(0x7f0000001900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)={&(0x7f0000000600)={0x12b8, 0x3d, 0x400, 0x70bd2a, 0x25dfdbfc, {0x9}, [@generic="f6c590f1727885cc107c58a013d54f364d673d471eac30f4dd95cdeea48b0ddb7f0d4f73e25763e2b0a987967e230577625153f55f2370ff1c58471c04155641d190d6b41eaebd2a2f4eabfa7aa13bfe9011346c0e1b3b4e8e41665bfcae8fb61f55d2f3ea46f77d2f1339466b1c611da3a6c5a3ff4f07b7d8556d70e251b12942cd917b4daf43e05af7f9a0854dd6330163a5d64b2ce0453f8de64ebef8a6442524d30b32195db42c37b57729ae", @typed={0x8, 0x3f, 0x0, 0x0, @uid=r2}, @nested={0x11ec, 0x6d, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @uid}, @typed={0xb7, 0x74, 0x0, 0x0, @binary="66c5b5d021a567e574fa5dc945478637e58b06ef08e81fdefe1d3757054d15bdf38e6d05e5d437bb7075292ec509c62cab26fdaed0305cac46996649c08d95a6abd141bf46b94d277717a0178afacdeb63b6807b02d2e9722f9c00440d7aa7c28644ed5565003aa6fc3a6ff181401b60c083a0371f6eb3f1ae75c64198c1713db3a2dd53eccc71a5e4b0fde351a1b1ce467dee39f41fff269b9fac0bc3c67ec4377ebaa78b7bc47e93d03d1bba3bb1fe747675"}, @generic="23505195b6a3a2fd7c0aeee4109e1fe0c87604aca0fa2597b17d084c54cad7a5f85bccbaafdf4d86cef91e954aca28d79af062b595acd174fce4ea1b994408cf1082f44468a1a5055d08ee82e122c174ac04f1", @typed={0x8, 0x49, 0x0, 0x0, @fd=r0}, @generic="e5ab9dc86785151ae88de16628dd7622b6b0043f82ba968e64467dcc1e5fcfbf10e1838427a88a51d63d64e743993743a7807611b71c60c0dee840b3d415170e2d58d97aff8c839ca7c67ccbc3f7bd6d1122390241db78e99dc1ca6163f9c6e8713cdc414bf5beea3e16b30e6045f1651a486fcbf777d94c25f2ff71c6a904937eef0584b717247689ecf3a26ae7377de190c6d7aba1d1054f23a6f23969f9db2dc3217040", @generic="8b6458bd5fb1f2f2303ee366eb93a0543e359b6aeff3987855aaeac37468b6e87b4cbdfecc0ab69726dc3c6a00e6fbf46ba52c6bb065d88c2c6bf584706970770a33b6583f7048e7e4924357ac7b8867e6997f0f232fe409a44b22f919c02093335dc28d709d622d55cc9c4d194e50be21d782196259af12986d3b18b0e5fedfc58af33e113b310fb8db0b3612f8935e6c400b5e8d0e4d9e095d5098b71f01d4ba3cb186fb5a4dfd9a3447e1631e6b81b9df1e8119d8b5b0fc7e281ed67897e85ec7ef906a2a25720f6febac72a7a10583a55f749bf5eb9d365c08b585449f5064c60a896b9395684aff6a0756a18954138930001d12a9bdc2cee52cd8e648ce40be14273255c9b95fcefa41dff403951c51a5f07ed0eea5940e92cf325c3884053b19ed0ba1c1def643e4dfe3738f5188285781c54acfee15e083c7e5c5648fc4a8c0e6a662634d03a23166301864c49b5b844b0fe3134563ef8127674b9a682f5d9e2cb01e557bbb21546f4ee398c58c8e2a7c3c50ebe8fc4feb3197e4762858113a37ae0e2b240f7c5856b2f4edcef0487e37a7b2e0366dc0c98d1835b9080a713121e5e385610b8b4c6335faae060356d49d36720032a838fdae677839530f9b45465f8ffb6b6101beabd96d07fb2fdc930eef39e9355392f31355fcf87742e88da20dd339931ead6dc0d2e6057d38a57ade9f82a2c2c0247a6994da3d311b8f55f4f7da80bae0fcd0260750cfe58f0a207820f83e3bf53b0f45369ddf42abd0600636703608ee03da89470ca85e7704acdf96103540cdfbc89bf608e9183d7bcbc168fcc8b07edbb82f69b7cab4b26a9af94f9f3d90102512727817bfef28f318e3fc01d5438447556cbb079fd99ecac78e1f4897aa26a6e5c8d805cb14114a8df687f3e711c438b9eb1793d8e1cd847deb9c879b58900401c8c0236cf801a6a0bda8ef99c4c9b0187609a09ca0a28a815550c9ed2aad2d856524568de163c5e4453b989f56ff458616fcb8365a2b91b4a8a00fa194d99c196e90d84dcd86221ba54a2149a1105ec9060be95b65b84e461bb15b7142f06e4625dfd4bac0b9ea2c7539ec7f3cf70806de88005bf61139116ecdac8a7c39091aa79f9f392ead7f9b8aa2456b4daae1e882ecd8a363e80b44fbfb210d6d65f6b95fcee65d0d25818e17722c787f4038031e3c805cfca26e7be8d411ba8b7f63079115b1850b73c692cd4f19589c5e0b66f2677cacdc41cde496b4eba66a51161787c8f48ca514b7b8d22fe0278dee0a85c93c6756533c69cb534156e1fcf248ff9eb07c239d8a8d6b234dffd49efac26a31e124e7075385f2afa1bb35fdb34bd880c1a309ccfe41b63274a544a84c019dd449bc1b19708d41219526819ba5ea761dfa73e08f6c66c963b6cb33b01031f3cc637ea63d15045ac2572a58b662d9ece13bc5f166d6ea6f2cfe37bc7dcd3dd27c1f8ddabd178e8862e73a1e2875f4b66d56c2536b92567f70fec918eb7df7b4f415a79b680a408e8ac48c7abee09ef43d7ee550e64b76ae52cf35b52b1bd3b78c46d46496b39f602d9a15ef38a3baa297f97ab2778cf76373c354cc9a874f8a0fe1e5971516933eb2c68d554ed86e519c8f46bf58aca2d41a06ebf4956e2ba05e93715204a9c1974ee26420f589b6a67cd1258093cf072a33500a065fd8ab7769567b30d5082587bbc38b90e5c30d34e348a1140ffb6b69efb077ffba4509b79388617ca897c5cfd57b0b506b4e31ca75d915d12d63fd84c9147d3846d35ed58eb1d355ae13e95266eb5223c3b511fab3efcf76a8e4b6c203b1f1ef21677a50f582d86694f0583fbff5ec6169ab53a3f6d2ad6e3e83fbd4c3fb87901d6dfb0bb3268d1d7ffd47ff1f7fa05df188976644cd6374218b25e6d8ac0d2d8b1da9a40026da4b083492915fad4177a59a61f8966001941e80df159a191952e640a9982b975571c3b19d6630204ed005a4a2f729af1b134495b11ee1f831daff30c0f03d7532a9a763f19ecf3c1458598c278b6f45f07f788537d90a7b5be3602e8cd5e2fd2e2222014bf0fe450a9585c3e03c8d1adc87a39c9af3d6d41b27eff02aff9b60f57d56dddf021eda57e151d05c908087140691604f98ffb6a2993e75d4fb06dd2f690e962f51c61ff67a2a8fd3fd860bd470df3c7e0d9f66bff11e852043dcd7d6d6ca2ed66563bfe7efa36c40fa11988ca464d5a78ab4653a94ad6a4827ecb3edc7dfccc51d69ea7d223507e3190526071c89e6c7aab5ebb3516d237b63c9c373a18a26e6e73d0304c49065098be0c6184022f2a3be909669be45e36cdd18243abfabad0842fdd43842c7dbf717efedebc0031a300e64f938394efd58960cd14a831e85243ce26d73efba9d25fd6f23c518f41d11436d04f240742c43b3d243a9863217e664731f6a94871bd024ce5db0a6af1a65beb35311a51dd54df01e73b2f19d37db4db964296a005e41c78fe11f4d2af8b1fa0909ceed4f7d71ba24f1da18b052f79e7b63d79723f41c51cc2c5dc23815c162a1d1255552d5073c53023baa7905c339d02af7a4b52bba048c7dece6d23697c516dabfa134ac24d4827215353c2aa57d05c0b5a5e3df35be0002841b2bdd518e31e622c4f694dd72cad87bb52f73382d95080e76067f1e2e5399391c8540e8e9992ff2262b0bb5ff0eb82cac317a3263b37cf8d369988662afc5937942a781cc3d846555afc2e6ab3e7c0b6bbd4a194f8e04562ac2e6639d636f456c0f446bfde8f09bfe0c644225244a6ecd4d86af71f1ae7c98dad624d914d3d7c807112d807e8d7150d531b4fcbc23ce73574d8195df01231749bfcc779f3987f6874e55bc45eb3e299ac04e7f3cc28bc7b11b9681371e6227797709e0001570529ee72b0119d64737c5afc9ff4efb4f7fc48306c0a8ac67ab18331295573089df4713f89a0eec52e694df2b556481fb42c4b138b6a06ebc1172913da45b9779a6958bc2a533a75af31bb8da3b9b306b92b25a2e17ad28604d53ca91647d9f495bf1ae80d89455f92dfc26c3fa062a6f034a5ca64ca9811f95936b05c6989b5d9082d804e6c8ee10a53eb1c073159d8d724507c4ebb6bba79b5d93dcecd14599945285f5cf3b4155c44e3d492d60d710d092f52ca900ecb42b6316f022eb3c8a90bff0453f085b6cc17b46b33dfd4f92827510532a55b6cf392bcc49a3eaa8e3d18e885be68f183b7214a156d848eabda57cab8a372ab8daf9c7bfbebea201db7fe5c35e04862a5ed654bc2bdb23aa9ca26a854c9f21836acf5396d4985cfea2fe9a2942b913b951848066233008092226172260b2fe38565344d6a6ba3784cf253b75ac42bf6e5b0b8ee44b619636b029f98d293d080a3f7de83709a767f8f3a3a874bdd0e9d37db3225a06e567b94ac261b5e850038bf9ae58b72b4f77f2104239e222bd2768235442b73f8839add099ba285509a77d93f485736fc1759ab9b84f9695f5d2d87f9e2f3b05a6c54dfac9088ab28ad749b85c446d6b9dc699f496107bdfc5d9f313df371915fedb18e9bc0bf254f8bb002ed65a02a9630290c8d42af6dc91afbb0c7ffc12778720f513a11ba7d8eaebe542fd58783eba488e57cceae7a97228c5b7e75e09e5e30811cf2806943450b203c238ac79953faefb72a4b49705cb2c92d43f00079290bb2a72f94c1bbf21ba37d09b434ddec3698f00a9756cdfa69d3d61f1139355e37cc24b8140d1f7e4602196d48298c44c7706894f11258e43145042042cb23657a2b778b827ae35657c507f96e734ef5e15f09991d65a50f63c56718e8e840c8fd17334d4f37298c22be37a96e57f5c9b20b25466257dcd89b10171afac5faf0af1e12c6c127dae431d3225d368c19f83460ea8ec77886346e0d176b583076771c7369d3ef2b7c78847f889a64b3ddfad9939a96c940fd81ce6cca56c871a76be018f030ddceee1934d56566a12d8fe49ccb98a65261077132b40aa913aa2a69f91585ee9c11691aa5fdcf11bfe4e2cd11f93a28f184bd33cab1fc53e7f60b6938e417ee7b407c25b82fccc000c4aaa7d389ffb0081a8014e39f6aae53d992626ae27357c55ffa40a5f783629b1d251f8e4574230449fd67e0ebef8ea91ae73e8f614a9f4d45ec4afc67f1f959a004a925644b512e26968481fcdd400fd0a65f7683717b0b4370c4e2e93a9b565353e4414a198704aa0b5583187ee087a31e1f2d2d1dc4df34ebbd693f07e59e6b5061703e484d5e0d04d97169be6482d6fa6073d91d10aa15fd966d2da80cf6cae57df63d778d7211474eef16a4ccb5e8bc5195b6ad36495ea197f9a7ac12ae0f7dbeb58ba4852a472e4b36cccf586a5187fc396c78292f0d99b4f5ce49deefea53f6c3886ee6f64a1db6a9d72bc2834144d08e9094fad816d448f3dd9f51f4028c4b9245715a8de919971168e7bc81284d1cb734c4116a85992ec347cf3025e7c536eb505f31f64fe72cccf1660943396b55a0ab47f49c479ef8881d0f7a56327ed22e368b85d8cda29f1429bbf209d2d9105bcc83e022ea18b2280f069184ddbcecf8768e18d1d93ddaa8c9084bd49bb18bb075f23d94142851579c75c71a03e7d58f95c20ed728192d027d6f5aa0c1d0da9ce7b9cac831535cae89632cd7d1ccdbcf8d622a764f25616bc43680e53793e295298ac6c4ab9d6a0d26b00324bba27e6ccafd0f8e16273cb800b296d8a8f02cdcd85275bd052b502e6929f5d47459cc6d23fb3f91b53207b21d39920f5661706a2d6c4e1262c2923632619086614c1e7419275e4bd59892b5ce3467d3ab6e7c5492765f296bf25e6c86df88ea111cd9d84fdb26727206dbe2dde0e2ea5041be5c713eeb535f5a8d1a9c1315fe35f67d5eeac43989498b69ba7460e760519bb7c6362506d654e35abee0f9bcb6a48abc9a5b8c9c0aa2ff0c5192ad5a6b273027cf6bde5368cc29d3d23c3ba368f9ab4fd124a90677818c093d472b2ed1f1427736ca350f44b3731584f476c90ab56af64ee848d7f16ec5e5498bd962fd8e21435f40f87d7de714085a966f9ce4492bd52cbeb08f70dff110728c0747a632cadf9b7a8fcc3479d3907bbfe65102391a605b1515b072b1eeacc9dcddacdcced4cd957a3495559f5baf255a1a305cf4d467bde1bade5f59b1a1b8db0f277932c2d1c5114f60aced7d923a61d0e277416a24080917a09647a7391b3bdf39ea620d464650790a341c26fcaa2cbcc0dd4e570536bb68353561160464465ea6573306751de3e5ac405d927f4759d654f9ecad3dfd3790a2efeffc04c3a69d7ad503b131e16e6ce721a3c1c24420c2d342206e2b782e9dd4935fe8f6d538358edcc45f5beb1929355e168a04164cb1715150d360adc2501dcce752974f30e6709bd3c5c6c2c2d86bc20a10ede4501d6e30aa7b19c9ed59ca56abc1bcd162e2342895c4dc5b2eec44a3992158bcf843215b9e085a655d8966f45d96d60ddb0a9722d313b74814efedf1d61e8d362cf9a58ea9aaa44af7a4bae47b00b7736beb0f77e0d7698138a87f89fcc3bec878de23d31bb12facb220cd86d41a25a2fcf8b98b677e36fc5a7ec4b5c1a7c5a23531a3ae342e6a7a31800acf7623e919e3bebc273ebeb132a3097a97f8034c36d5d6e50793417a9e35422181e8f0583d7bb1aa006858f1c07396ba1ee24e588ba32f778bf1dd9981cc94ef69287fa4a02503ad2383deba9cb719f133fded0392f85e23b4d341ae36bf42b28ee9803488773421d2fd08a996c2c92672b042017838fdad25169060124f6ed30ec", @generic="091aa788570c24a75a830c296708f93e90d064b2dd3d59600f42563d62f926eafe81725229e054f2"]}]}, 0x12b8}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) read$eventfd(r0, &(0x7f0000001940), 0x8) ioctl$TIOCEXCL(r0, 0x540c) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001980), 0x40000, 0x0) sendfile(r3, r4, &(0x7f00000019c0)=0xc828, 0xd9) signalfd(r3, &(0x7f0000001a00)={[0x3]}, 0x8) r5 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000003740)={{0x2, r5, 0x0, r2, 0x0, 0xc, 0x7}, 0x8, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x1}) [ 74.579279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.580985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.584156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.585427] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.587286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.588602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.593792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.606882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.610011] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.611832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.614247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.616033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.617724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.619297] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.620785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.622077] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.629801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.631079] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.639430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.641010] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.642693] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.643396] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.650670] Bluetooth: hci2: HCI_REQ-0x0c1a [ 74.653732] Bluetooth: hci1: HCI_REQ-0x0c1a [ 74.681771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.683941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.685308] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.688261] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.691799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.692935] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.696391] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.697968] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.704100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.705285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.708632] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.714897] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.721578] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.722918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.729631] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.745103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.747877] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.749894] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.751310] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.757643] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.776804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.791476] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.792805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.816935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.830493] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.834929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.847553] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.855939] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.857248] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.868998] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.883105] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.885833] Bluetooth: hci5: HCI_REQ-0x0c1a [ 76.703042] Bluetooth: hci2: command 0x0409 tx timeout [ 76.703719] Bluetooth: hci0: command 0x0409 tx timeout [ 76.704218] Bluetooth: hci1: command 0x0409 tx timeout [ 76.766694] Bluetooth: hci4: command 0x0409 tx timeout [ 76.767314] Bluetooth: hci3: command 0x0409 tx timeout [ 76.767867] Bluetooth: hci6: command 0x0409 tx timeout [ 76.958601] Bluetooth: hci5: command 0x0409 tx timeout [ 76.959263] Bluetooth: hci7: command 0x0409 tx timeout [ 78.750646] Bluetooth: hci1: command 0x041b tx timeout [ 78.751454] Bluetooth: hci0: command 0x041b tx timeout [ 78.752225] Bluetooth: hci2: command 0x041b tx timeout [ 78.814772] Bluetooth: hci6: command 0x041b tx timeout [ 78.815868] Bluetooth: hci3: command 0x041b tx timeout [ 78.816671] Bluetooth: hci4: command 0x041b tx timeout [ 79.006585] Bluetooth: hci7: command 0x041b tx timeout [ 79.007374] Bluetooth: hci5: command 0x041b tx timeout [ 80.798616] Bluetooth: hci2: command 0x040f tx timeout [ 80.799086] Bluetooth: hci0: command 0x040f tx timeout [ 80.799482] Bluetooth: hci1: command 0x040f tx timeout [ 80.862713] Bluetooth: hci4: command 0x040f tx timeout [ 80.863140] Bluetooth: hci3: command 0x040f tx timeout [ 80.863599] Bluetooth: hci6: command 0x040f tx timeout [ 81.054629] Bluetooth: hci5: command 0x040f tx timeout [ 81.055075] Bluetooth: hci7: command 0x040f tx timeout [ 82.846670] Bluetooth: hci1: command 0x0419 tx timeout [ 82.847125] Bluetooth: hci0: command 0x0419 tx timeout [ 82.847556] Bluetooth: hci2: command 0x0419 tx timeout [ 82.910628] Bluetooth: hci6: command 0x0419 tx timeout [ 82.911091] Bluetooth: hci3: command 0x0419 tx timeout [ 82.911460] Bluetooth: hci4: command 0x0419 tx timeout [ 83.102580] Bluetooth: hci7: command 0x0419 tx timeout [ 83.103003] Bluetooth: hci5: command 0x0419 tx timeout [ 128.274654] audit: type=1400 audit(1664626225.886:7): avc: denied { open } for pid=3788 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:10:45 executing program 4: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, @auto=[0x2c, 0x2b, 0x1e, 0x1b]}, 0xc, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)=@chain={'key_or_keyring:', r0}) r1 = add_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff9, r1, 0x0) r2 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="ce9943bcbfd81472f590c503f4d0657242cf7977404e6aac64ade280659f9b7774b584865fa73990686c27b2a12bdbc30a25520ee71c44462499cc28b1aefa53592b95d83d214f976567af", 0x4b, r2) keyctl$search(0xa, r3, &(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x1}, r2) r4 = request_key(&(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)='\x00', r2) r5 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "919adc879bdcedc2f4827faae011070d4f3d4bff6b330bb41aa7a95d280a62c071886fdbdd67d1355db6a8d8412a0948eeef57061ffcd900a827aa6c937d2e94", 0x1e}, 0x48, r2) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r1, 0x1) r6 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, r5) add_key$user(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="547661eb222d6a6f64544639bd84ade7b1a879", 0x13, r6) r7 = add_key(&(0x7f0000000740)='.dead\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)="8b7aa4b7339e97d36416f3f9cdff448ea5653e2c8c85d3abbc546521b2479d66932d1134291326648de481526292bbf37e423ed066dffa4e911eec0a43a669b174e7ba60ac852c926e7c804ed2fa3d53e22bfdd1c8cdd32ea70378ba9490bbe2c594c2c1f0d9994b2deefcf215a860ef16ef505b6dc9d236", 0x78, 0x0) r8 = add_key$keyring(&(0x7f00000018c0), &(0x7f0000001900)={'syz', 0x3}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)="061c5b9b604a9c432a88ae84182e935ebf46fee8d72581dde076ee067f7de7f7d3c91bcac4a95c07ec27e2e5629ecbcab958ae51c97bab6efe49fd375e0e1fd8f264521e0fe90442bfd68d65f4ee80cf91be13c762f2c69602a3f5b70c83ed87d9ddefd6f434511a3468319d23db1c5bb68d6763dc06d2b236229abd988dc9b023ba126591ea8eed4b8c54e024f151fb8777d9d945d3d6b9e6153d0ebfed7b4afb1d80a290801a0bc9609c33e5ebf7f58414e3440a51f669b5569aef8a6558f7d040a93303435854257a6db5800e2b7620859a9f88fe428442a25faf95b2a575111737809255e5f920342c32577a19482198132ab39a16ae93418324f93c425f428a0e185bdcc3b337214b348e9f43571d276bf300c8fab18dcd5048305995f88ff70ce99fd3c237d0cf5c9937570332e86411b18eca356e7d893be60a2b09d9b4d9be098628656aff992684d23afce1cd74e4fdff20f11191fc228cd027fa34ea396871ef6d5486088a13d194735422e58f85c7181f3d9a0924bf38bc1fb51d04dd38d4f7593566d4f77e55645cebe91f345b45421840cd69ac9998a74f445f24917b5d9ba17a7cc6ccc426211364dc351e4aeb12f4d4614587e44a1a969470099933b1bb4e90b1a8b4e1f6afb6f82b5eda4990bd72c4b87ecbf2f83024c65f15b758feb57cf80f8487300415d3de31fae5c3f4d4f8769840be9ac05f68af425c48fda00e35ec78414e340266380ca83e3dd89f3648e60659a1d3c01c4800efdc49bada708116ccabca2032742e2b5dc66325b4ec188d57c88cb1222ef919f30b81b03f9f8abd4b16de7852d65b8776a2861001ff10aed8bbe1ce9a31511902fd281044489c631b9a3f813aba6486ba7be8213f96714a34fdf691924e7c6b28ec005a4a7175272ac1eb0922d688e96f75b32f024fa2c834b0d22edc648335de4d72536a2f465a00a3f7118d86281ed51d3858dd4f61377d20bc84d1a90e9a3dba25f53f20640f09c97625082637f24afe70fc0fb88e01c7d342717a8479661be57140da7a4c600f44d3ac17e9811f4ed7ee919dd18c35df25c195f0f2901eda4f7b885374ef0340f8ddf17fab575d34573f8c07f1049fa2cfdc3dbf67bf30dde9e871dce38f9d0b80c75653ce48bf207576e943d9b206596f0a79b5e419a33c75fde4b809d211ad8bf5bf089d47423b8c1fac64d9b539508c9902728f18bbca00b19f6bdec2c3e5f906155c3a74a83629691c110d424df0e8ea88b194505c15b188d2c01259a81b045a90c9ea52ae538dfdb1e815a7e3a4b3fdd2144edf619e4834bcb52bb50cc8cdd6560116616402523170528a2058ecfcc683e1b5815c080e85aa484ba4e84008348d1945fe307fcc3fed0d5f5dfe182d88aee227dc54f6273745f469edf5d6be5298d5d77062855041b782f2bb19cabcde6b53662ee144df524b2c3f4c09fcace9e7b603566d54f899669a48485048c7dd270c163fc866cd8af1485682b64756b0d3ed755fea8fb833782f4ea8471bd773bf867794a8d4d8ce749fbfd1c18ae0a00f8f89c34b9e2238f2b9b1806b526b25b51e714c8a9f8489bfba99c62e7b9ec19b69aa9cc1f907d951d6b4c5c81d86ccc632a43a648580e4448c92230ff8bb091dfde0bfad2279d73cbfd99fb071a8b57cbfc30345bad53d3d5073d2f2f9832c50a870d55604245835bcc6d98dc7a99b7088523063622b6375b8efee3cf32c7e013e463b3bd8f130c541b996d9e63799c6dc95b0271d7f278a5e828688c00337ab846a114bc9aa563995963122a5a8ed2efd590c4eaff8a3abe6c94dbbbdc1cd6bf27b8503ff7d38309b8d77c929b830ba91c59e932779eed986fe575219bfece54e430889c7d7ca9aa9d657498a8ac82b5766dc7bd000f80df27bafb88cef838aa90896e37fc3696b462cf5b0e74c75900120a89d9a19aa8c66a8b5c0632f5da56076cf81e1df1091b1bf3968fd57dc800329da79abe278b6346551d149e4dd1f957a645ad9fc6a271e3e997c7e0335bf011683fc23205d904691ea4d3b6667be1907053fd2d982a11606ac237f93859edfc12ba057b6c3c4137e89bf87cebff7abfcfb668dcc477483fb3cdf25deb430958ea251ed60c3f1d79a62b2dd40c862b02e4404b41a3110a005662b3bbdd64cf964ccaf93fd670c644aa3faef7bffef455ebd0ea1e168f636072239b88345af2073d88e128427807c3f76b7d15d454aff8ff61e606766fc39e4fc7080a26dce0d2a97ffb1fe1dbe0397cb2e08dd229e02c8c862cc11b77b00ae9479746a5ad7f0d7e9dbc2d20f95ab9235f15cd0342c93578dfc96337f44d5aff8fd8841576abba03e364e6bd059e7337680bfae2ac9f662136a32de5aa805dcad6da8bca364962a233933a77009e7ef00235d1e12c449c461211e5c121641c6fc3db9611b86306691a5c35b993c3bdd3528c1402fef497b8225a831079a78d847a7465394f19ce56180e77110d307a60a349a2efbb210553cc5cac49c83ca774bd35a92bd8726b474fed9f258818373f85fae670e7fbccfbbd0d4eb3323d23ed86ba38aec874275c12039045620e525441665368484f55cafb07f434a683a12185cef6b2422dfb0b7139e88f2c57ebf6cbd73b74df1391f7561a90837b25435b970d6f60b1ff70f16785a6fbd9e454d69523b41d64c5375dbe858fa03aa23225b5faa8d8bc5f132ebb576840d06432c0112bc7527a5adc32a050d18067a2f3f7d010a87da8230d3dee46a2beb4c23b4943a5c2c474d6d2d0da2fc9c13b735dca0e770d2af13e4f161fc3bc8e879bff687606d17067cfcffe77384d3ed4afc7446327f9ec1321824f52d0721e73cffc9a9918b23732a6c01403b7d51992f12a0238938cfeefcc8945160e62855e214b5c58639c251d68e2cf346d85b946e88309677f23406ed40e770128698af46a15cfd5f39628297843ddc4eec8178da1b210569f41a661a1398ad9c10433421039cc4f59db7ced55023b46c2dcf9892cbe4eba87b4a04475605ce085f11159cfcf82fa9ecd5e5517db51db759c266f4a6688622d680f0f6c02c03ee6d807b7fe99ada2dbcf0d78b55e7504b1cdc8046eb409c81b42a4334cf45c3dc042bd60912fb6d86de2d25dc4af935aaf622a6ebfbb82e08a5b70437245708cf750c32be496bcdfdb8a4ff436b72eef830bb0dbd28b7f40fa2c481c11d3b3535df542dd47d73f505e1aa67b7942c8e270c61c9ec18ad36524d2f8809548f3a73e3ed5b801e13c481a84a9437c12ab56fbcf93f97a911f27fe75548813d20d1b6a27198d04cbd5858b821244f69c30d18438d32281ee90343b3ce541f7ce5bec4c0fd557f8126569f98efcc766f4f5e7861adc6fe994e701f885a3ff489c4228e5f85511c05c4449a0f89c9c01711d5a3f49234e7dad563d334d85d28c63ed557bbb0e34c19ea7eeb585b04e5536fdc8331b7e9b59202f7c998e112b73b0cfaefd30ea2ff0657fd1039021c7d5345a76ce53cdd2b3fcc6c447cea4c1cec61718f1ab3c1ec39650a694a7b0358adff4061ca78b655e1a5ca788b4469f0755727647c3dc150ea2ac9b184c96a2f854741434de5cf5d14fb74008dbb2c978a7310f852f7aeeca1ade7927f957cf53661323710f7a5915dbffb3454575e79282326f138a473fe8e30725f96eed244802593558a8fbb954592f0d8f679543c735ff114392aca32f1c87a8e6726f8c020bd213b15592c671fa4af8f6f86ec950ac0b044a0b690dbb35fd5aae1d931ce207d0bfbeaf3f4d94c9c3c37cf16770aa887235c3ba4d9d643d7359d35b66fe165a38dc1d9348aff6e1e537206bf75177e000cedc665d9ec5257f7948166b662dbef7928be6ca16ee4f2ff785b3d4a7282224e077efad8d9236f75581a623bcad20918cb5280a76754bf87e1e93b72c484b1edade246f8a0efbbd2876862cfbed8c6a34440fd84ac9087ac7edbc8fe39744824456e24efe1588181532db2987791c01d061bf9e3a9a5cfb68c4983cca04c3f31a74342b6eefc2bbdb3d8539acaeb161b56ac45619bb68240142317b0ef80b55b72aab86439093a98d1835d31e8680286fd750217e2df271ac8beef304c4f5a31042971da4b7ae42657da04bdadbfc0306c3ee04d39eca5debdff2a5b6eeef134ad6c83c44196a5f4f459f365e0cdb59f67ea6eccf8bf461be86c89d6ecc724674ebf2eb30b25c5beeb62d236e567dc786d9b8d63733bc27680eec05b4027fd7ed8ae0f88a732288c0f0224fe618458c54299b2e2b3af8742a931778a0209a761d47b36cdc151d3abe03ced21c53461341e65cbfc8aa2e7856b687a190acbd2b57753e3fd8b048d98e580f745527e1cb509824b4f2eadc5c5fe3d79cf84d8025037badce61c0eaf3800084ddc7aa08ca1fb20fa989793c6a348f841431021137a98946d964cc67f34c5de8d473536c1f8a957791578357d3a258db0f5bc5c79fad9f524eeb890c7ba995d3ae567ae829242fbce02370b76187aaf387de6d0e6b16810b1dedc6a5f0575abd16fdb948247bf3c281809d3877eea6ead2fd93fbfc9d892b4a0bec03ad5820f644af6aae8607da7ec95d3b0d5542e714e6740a6172019242b6817d2106c585a208e7bbe32f968cca3e9d5436e605c25792ea6e9a8b401e77389268ae4257860a158f0a596693a0806353bdfa546b19fb2059fc5404ffb843fb74ee1997b06d21eddf4fa44fb74e3f451e17d0306f323cb6ac874cc2333045a25739e231ee0617843a18ef1cda3b862433adc9690223c7a12602b8e3a8341199a8853664d0babc7001bd6c458bb95191a26d372fe108ddcc7bb7e5a0766cd475b6ef9b6d068d82627867c798015d3d8ce93874654041d2adb31a7df2ad584b1bdfe63c829f0cd490369fdeb3d5dae724d945eaa74298d5bc0ef91eff4f177a16221436c5801489f9698dbc6bd3fdaa99680e6db02947140b19a50dbec89ee823710b7d62d2e322ffc2701d6835ff9726555bdb1cd6c82b58e7d6cf2e065eb90e4807b3763b94f8b5afc5c880f9e6fb46b486ca6cd9101368e20150de42868bc125b009e91a883d5976c7b3eadea88e8b2f311581a6ac72d5f05f2791da9846b9b830a0a130917212cee203a0fbde6e60ed4fae0cd4f57ec7b4c49f0c649d98524950e8876cd105d3f46c160ad9f4e3ea33c6fd8d1b585c5d2ccee8c3bab9f92a41eb46b587f08d32e46d8346489b21c750933bfb50ee2a7ab0089cdb13bf2b9f5dc43c0475d52f9a47cbe48db4acf1d4951c5061121321159247c7883d2cb45bf1314936f53b6d491f7b08a984c6b8c19979f7e91e6b13e5cf212d6a0b264c9622748a17560cf56a7601ce21de858f1ba4386d050dc67af15cc0db33f9411d84ecfb4c226793ef19122ffb4b11d8e0499b807f921d1667f649abc2661a25210722c834228dcf64c2d3808758a8c15fe90c23154cc03f7eb163d839c58d116f0ff85037eb1748a56a81d38ebe1e94d6d41def26a66398246c81597d53cf7306f0c98b91f582df0b0dc20e3b22acf500ec0043b5439167f15fc0586115b31df068d85d5ebdfa3d463b9cd11e9001f9ff0742122bb5e7b4a729ba313fb6868e4d790142c519f168725493af15770699d36f4d273d4e283d7655ad00af9cb1d6469a59cb71211bce9332d30e9d43419ebe66b928613a3fd2f7e901052b7f16593c6fb124e70e6690dd9c5d96b92ec748b325dea6e9da5938bab884e3f46b8a29915ef1d0bb0c01e266a1913b84b11ee075e6dac7a29ebb3d5fee12212f4a528be", 0x1000, r8) keyctl$KEYCTL_MOVE(0x1e, r2, r4, r2, 0x1) add_key(&(0x7f0000001940)='ceph\x00', &(0x7f0000001980)={'syz', 0x3}, &(0x7f00000019c0)="7b46bc36d1ea342919d3150f1851cd7931eebc165523b6c4dd43259ea673abab9cb8793f86b05a647ed0f12dc8db938b626ac1a2ccfdbdec1682774334fbe41991f99e", 0x43, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000001a40), &(0x7f0000001a80)={'syz', 0x3}, &(0x7f0000001ac0)="2c36c4769d7761bcde23b94f4ff2ab8af4f9a1f7020272922ab8a149efc1cc025ae9a2f2e117ab1c31b7991a5b07a5157589c89781bbff1bbc2580d3ac8f0520fede92abd15ec56845b641a38209d02fd2037fc811b9d94ea61ccdde2d810fa1aab6faf88c2f2747971a9188c0e367b4241cd2f32f7f8e958b3c1ddd33c6", 0x7e, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, &(0x7f0000001b40)=@secondary) 12:10:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0) openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000040), 0x4800) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xb9) recvfrom(0xffffffffffffffff, &(0x7f0000000400)=""/14, 0xe, 0x2000, &(0x7f0000000440)=@hci={0x1f, 0x2, 0x4}, 0x80) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r3, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r4, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'}) 12:10:45 executing program 3: chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) r1 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x5) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) acct(&(0x7f00000001c0)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:10:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x8}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x26, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000480), &(0x7f0000000280)=0x4) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4401000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4020806) fcntl$setstatus(r0, 0x4, 0x2c00) fchdir(r0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000100)={'hsr0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r3, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x6558, r5}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000240)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6, @random="767b24f4e073"}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 12:10:45 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000480)={0x0, 0x9, 0x4, 0x5, 0x2, [{0x1, 0x7, 0x6}, {0x1, 0x20, 0x1, '\x00', 0x1082}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xb220}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r4, r3, 0x0, 0xffff) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xba, 0x3f, 0x2, 0x1, 0x0, 0x2, 0x60, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f00000001c0), 0x4}, 0x10a00, 0x4, 0x3, 0x0, 0x8, 0x400, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xa, r3, 0xa) r5 = getpid() r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) get_robust_list(r5, &(0x7f00000005c0)=&(0x7f0000000580)={&(0x7f0000000540)={&(0x7f0000000340)}}, &(0x7f0000000600)=0x18) perf_event_open(0x0, r6, 0xb, 0xffffffffffffffff, 0xb) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r7, 0x5607) 12:10:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff]}, 0x1) r0 = syz_io_uring_setup(0x516b, &(0x7f0000000440), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)=0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000540)=[0xffffffffffffffff], 0x1) syz_io_uring_setup(0x6c02, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x2, 0x4004, @fd_index=0x3, 0xfffffffffffffe01, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x1, {0x2}}, 0x2) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 12:10:45 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x10000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000280)="431eb68648535b33500f4c33662112ea8005d0d1c1ba361d70b39867a88fdc4e21dc482ebd4bb3e9f6232cc1d85ad83bfdf8f58673f7649934cc3abb4909fb1905891f41ffb3f74b57e6bf25eb3892a80f774effac0487acc0fe29c86e6e8519744cc25ac52fce06f46b112712cadb1d34f36068a60ef013bf348a4e1a2ef5b1628eaabc060f0a3eeba5a088240c6c64467a5d02ef5d4da5e218f86458798bce410e4d9d58ec11e90ce22f0295a296e19e320d6f104a1a35ec0f783a84f2fc194ab4902ff5a13ce0d6eddf88f70e8655da1424985c", 0xd5, 0x2}], 0x40000, &(0x7f00000006c0)=ANY=[@ANYBLOB='dots,uid>', @ANYRESDEC=r2, @ANYBLOB="5a009eec05b46992b9a38e8dbae176b2db520e4c9e4de876f89f910e50d91971dafe573fe78780ee66fe439c284944af1d2f90f35aa122ead88b3b6549608145704fa91b2351ed835be11aa5fca33e1bcb07d927d280cd9b6d40d828efb26cdd653b59c47d8e2b9fbaf74746b78678c3aac9814ebf4fec746809cdafc0cf5ceced387d8a48fdbbc23a924e9a5786d18f3610795176960f6571a5c29f8b83677ca1e60b6d5c8b160a850d73ae7008e598401afbfcd6d9f5e9d64e197ef1b4", @ANYRESDEC=r3, @ANYBLOB=',mask=^MAY_APPEND,subj_user=/dev/usbmon#\x00,\x00']) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) fchdir(r0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000140)={{0x6ce, 0x5}, 0x100, './file1\x00'}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x96d25) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000540)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) [ 148.137069] loop5: detected capacity change from 0 to 128 12:10:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='9', 0x1, 0x8040000) unlinkat(r0, &(0x7f00000003c0)='./file1\x00', 0x200) utimes(0x0, &(0x7f0000000280)={{}, {0x0, 0xea60}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101342, 0x0) write$binfmt_aout(r1, &(0x7f0000000c40)=ANY=[], 0x820) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x260100, 0x4) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='\x00', &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x8, 0x3) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0xca9e09d5bb4a44c, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4d1241c2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x400) sendfile(r1, r2, 0x0, 0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x100, 0x6) [ 148.140241] audit: type=1400 audit(1664626245.752:8): avc: denied { kernel } for pid=3974 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 148.155181] loop5: detected capacity change from 0 to 128 [ 148.156349] ------------[ cut here ]------------ [ 148.156384] [ 148.156389] ====================================================== [ 148.156396] WARNING: possible circular locking dependency detected [ 148.156402] 6.0.0-rc7-next-20220930 #1 Not tainted [ 148.156415] ------------------------------------------------------ [ 148.156421] syz-executor.6/3976 is trying to acquire lock: [ 148.156433] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 148.156507] [ 148.156507] but task is already holding lock: [ 148.156512] ffff88803eda3c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 148.156562] [ 148.156562] which lock already depends on the new lock. [ 148.156562] [ 148.156567] [ 148.156567] the existing dependency chain (in reverse order) is: [ 148.156573] [ 148.156573] -> #3 (&ctx->lock){....}-{2:2}: [ 148.156600] _raw_spin_lock+0x2a/0x40 [ 148.156621] __perf_event_task_sched_out+0x53b/0x18d0 [ 148.156643] __schedule+0xedd/0x2470 [ 148.156670] preempt_schedule_common+0x45/0xc0 [ 148.156699] __cond_resched+0x17/0x30 [ 148.156726] kmem_cache_alloc+0x2d2/0x3e0 [ 148.156751] __create_object+0x3d/0xc10 [ 148.156771] kmem_cache_alloc+0x235/0x3e0 [ 148.156795] getname_flags.part.0+0x50/0x4f0 [ 148.156816] getname+0x8e/0xd0 [ 148.156833] do_sys_openat2+0xf9/0x4c0 [ 148.156859] __x64_sys_openat+0x13f/0x1f0 [ 148.156885] do_syscall_64+0x3b/0x90 [ 148.156918] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.156943] [ 148.156943] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 148.156978] _raw_spin_lock_nested+0x30/0x40 [ 148.156999] raw_spin_rq_lock_nested+0x1e/0x30 [ 148.157023] task_fork_fair+0x63/0x4d0 [ 148.157058] sched_cgroup_fork+0x3d0/0x540 [ 148.157085] copy_process+0x4183/0x6e20 [ 148.157105] kernel_clone+0xe7/0x890 [ 148.157123] user_mode_thread+0xad/0xf0 [ 148.157143] rest_init+0x24/0x250 [ 148.157166] arch_call_rest_init+0xf/0x14 [ 148.157198] start_kernel+0x4c6/0x4eb [ 148.157228] secondary_startup_64_no_verify+0xe0/0xeb [ 148.157255] [ 148.157255] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 148.157281] _raw_spin_lock_irqsave+0x39/0x60 [ 148.157302] try_to_wake_up+0xab/0x1930 [ 148.157328] up+0x75/0xb0 [ 148.157355] __up_console_sem+0x6e/0x80 [ 148.157385] console_unlock+0x46a/0x590 [ 148.157416] vprintk_emit+0x1bd/0x560 [ 148.157447] vprintk+0x84/0xa0 [ 148.157478] _printk+0xba/0xf1 [ 148.157500] kauditd_hold_skb.cold+0x3f/0x4e [ 148.157532] kauditd_send_queue+0x233/0x290 [ 148.157561] kauditd_thread+0x5f9/0x9c0 [ 148.157588] kthread+0x2ed/0x3a0 [ 148.157615] ret_from_fork+0x22/0x30 [ 148.157638] [ 148.157638] -> #0 ((console_sem).lock){....}-{2:2}: [ 148.157665] __lock_acquire+0x2a02/0x5e70 [ 148.157697] lock_acquire+0x1a2/0x530 [ 148.157728] _raw_spin_lock_irqsave+0x39/0x60 [ 148.157749] down_trylock+0xe/0x70 [ 148.157778] __down_trylock_console_sem+0x3b/0xd0 [ 148.157810] vprintk_emit+0x16b/0x560 [ 148.157841] vprintk+0x84/0xa0 [ 148.157872] _printk+0xba/0xf1 [ 148.157892] report_bug.cold+0x72/0xab [ 148.157924] handle_bug+0x3c/0x70 [ 148.157956] exc_invalid_op+0x14/0x50 [ 148.157989] asm_exc_invalid_op+0x16/0x20 [ 148.158012] group_sched_out.part.0+0x2c7/0x460 [ 148.158048] ctx_sched_out+0x8f1/0xc10 [ 148.158082] __perf_event_task_sched_out+0x6d0/0x18d0 [ 148.158103] __schedule+0xedd/0x2470 [ 148.158130] preempt_schedule_common+0x45/0xc0 [ 148.158159] __cond_resched+0x17/0x30 [ 148.158186] kmem_cache_alloc+0x2d2/0x3e0 [ 148.158211] __create_object+0x3d/0xc10 [ 148.158229] kmem_cache_alloc+0x235/0x3e0 [ 148.158254] getname_flags.part.0+0x50/0x4f0 [ 148.158274] getname+0x8e/0xd0 [ 148.158291] do_sys_openat2+0xf9/0x4c0 [ 148.158316] __x64_sys_openat+0x13f/0x1f0 [ 148.158343] do_syscall_64+0x3b/0x90 [ 148.158375] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.158400] [ 148.158400] other info that might help us debug this: [ 148.158400] [ 148.158405] Chain exists of: [ 148.158405] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 148.158405] [ 148.158434] Possible unsafe locking scenario: [ 148.158434] [ 148.158438] CPU0 CPU1 [ 148.158443] ---- ---- [ 148.158447] lock(&ctx->lock); [ 148.158458] lock(&rq->__lock); [ 148.158470] lock(&ctx->lock); [ 148.158482] lock((console_sem).lock); [ 148.158493] [ 148.158493] *** DEADLOCK *** [ 148.158493] [ 148.158497] 2 locks held by syz-executor.6/3976: [ 148.158510] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 148.158568] #1: ffff88803eda3c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 148.158619] [ 148.158619] stack backtrace: [ 148.158624] CPU: 1 PID: 3976 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220930 #1 [ 148.158648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 148.158663] Call Trace: [ 148.158669] [ 148.158676] dump_stack_lvl+0x8b/0xb3 [ 148.158712] check_noncircular+0x263/0x2e0 [ 148.158744] ? format_decode+0x26c/0xb50 [ 148.158775] ? print_circular_bug+0x450/0x450 [ 148.158808] ? simple_strtoul+0x30/0x30 [ 148.158837] ? __lockdep_reset_lock+0x180/0x180 [ 148.158871] ? format_decode+0x26c/0xb50 [ 148.158905] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 148.158939] __lock_acquire+0x2a02/0x5e70 [ 148.158982] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 148.159027] lock_acquire+0x1a2/0x530 [ 148.159060] ? down_trylock+0xe/0x70 [ 148.159093] ? lock_release+0x750/0x750 [ 148.159126] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 148.159168] ? vprintk+0x84/0xa0 [ 148.159203] _raw_spin_lock_irqsave+0x39/0x60 [ 148.159226] ? down_trylock+0xe/0x70 [ 148.159257] down_trylock+0xe/0x70 [ 148.159289] ? vprintk+0x84/0xa0 [ 148.159322] __down_trylock_console_sem+0x3b/0xd0 [ 148.159356] vprintk_emit+0x16b/0x560 [ 148.159389] ? lock_downgrade+0x6d0/0x6d0 [ 148.159425] vprintk+0x84/0xa0 [ 148.159459] _printk+0xba/0xf1 [ 148.159482] ? record_print_text.cold+0x16/0x16 [ 148.159510] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 148.159537] ? lock_downgrade+0x6d0/0x6d0 [ 148.159571] ? report_bug.cold+0x66/0xab [ 148.159607] ? group_sched_out.part.0+0x2c7/0x460 [ 148.159643] report_bug.cold+0x72/0xab [ 148.159680] handle_bug+0x3c/0x70 [ 148.159715] exc_invalid_op+0x14/0x50 [ 148.159750] asm_exc_invalid_op+0x16/0x20 [ 148.159775] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 148.159815] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 148.159837] RSP: 0018:ffff88803f697998 EFLAGS: 00010006 [ 148.159854] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 148.159869] RDX: ffff888015e73580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 148.159884] RBP: ffff888018648000 R08: 0000000000000005 R09: 0000000000000001 [ 148.159898] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803eda3c00 [ 148.159912] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 148.159934] ? group_sched_out.part.0+0x2c7/0x460 [ 148.159973] ? group_sched_out.part.0+0x2c7/0x460 [ 148.160012] ctx_sched_out+0x8f1/0xc10 [ 148.160051] __perf_event_task_sched_out+0x6d0/0x18d0 [ 148.160079] ? lock_is_held_type+0xd7/0x130 [ 148.160106] ? __perf_cgroup_move+0x160/0x160 [ 148.160127] ? set_next_entity+0x304/0x550 [ 148.160162] ? update_curr+0x188/0x740 [ 148.160198] ? lock_is_held_type+0xd7/0x130 [ 148.160226] __schedule+0xedd/0x2470 [ 148.160259] ? io_schedule_timeout+0x150/0x150 [ 148.160293] ? lock_is_held_type+0xd7/0x130 [ 148.160319] ? __cond_resched+0x17/0x30 [ 148.160349] preempt_schedule_common+0x45/0xc0 [ 148.160381] ? __create_object+0x3d/0xc10 [ 148.160401] __cond_resched+0x17/0x30 [ 148.160430] kmem_cache_alloc+0x2d2/0x3e0 [ 148.160460] __create_object+0x3d/0xc10 [ 148.160482] ? kasan_set_track+0x21/0x30 [ 148.160512] kmem_cache_alloc+0x235/0x3e0 [ 148.160542] getname_flags.part.0+0x50/0x4f0 [ 148.160567] getname+0x8e/0xd0 [ 148.160587] do_sys_openat2+0xf9/0x4c0 [ 148.160617] ? build_open_flags+0x6f0/0x6f0 [ 148.160647] ? irqentry_enter+0x26/0x60 [ 148.160672] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 148.160705] __x64_sys_openat+0x13f/0x1f0 [ 148.160735] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 148.160767] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 148.160802] do_syscall_64+0x3b/0x90 [ 148.160837] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.160863] RIP: 0033:0x7fea21c62b19 [ 148.160879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 148.160901] RSP: 002b:00007fea1f1d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.160921] RAX: ffffffffffffffda RBX: 00007fea21d75f60 RCX: 00007fea21c62b19 [ 148.160937] RDX: 0000000000004042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 148.160951] RBP: 00007fea21cbcf6d R08: 0000000000000000 R09: 0000000000000000 [ 148.160973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.160987] R13: 00007fff3323e59f R14: 00007fea1f1d8300 R15: 0000000000022000 [ 148.161012] [ 148.298800] WARNING: CPU: 1 PID: 3976 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 148.300201] Modules linked in: [ 148.300695] CPU: 1 PID: 3976 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220930 #1 [ 148.301922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 148.303568] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 148.304392] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 148.307085] RSP: 0018:ffff88803f697998 EFLAGS: 00010006 [ 148.307877] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 148.308928] RDX: ffff888015e73580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 148.309986] RBP: ffff888018648000 R08: 0000000000000005 R09: 0000000000000001 [ 148.311031] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803eda3c00 [ 148.312097] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 148.313178] FS: 00007fea1f1d8700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 148.314380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.315238] CR2: 00007f5c05179543 CR3: 00000000188c0000 CR4: 0000000000350ee0 [ 148.316289] Call Trace: [ 148.316682] [ 148.317031] ctx_sched_out+0x8f1/0xc10 [ 148.317636] __perf_event_task_sched_out+0x6d0/0x18d0 [ 148.318421] ? lock_is_held_type+0xd7/0x130 [ 148.319080] ? __perf_cgroup_move+0x160/0x160 [ 148.319751] ? set_next_entity+0x304/0x550 [ 148.320399] ? update_curr+0x188/0x740 [ 148.321016] ? lock_is_held_type+0xd7/0x130 [ 148.321665] __schedule+0xedd/0x2470 [ 148.322245] ? io_schedule_timeout+0x150/0x150 [ 148.322952] ? lock_is_held_type+0xd7/0x130 [ 148.323605] ? __cond_resched+0x17/0x30 [ 148.324210] preempt_schedule_common+0x45/0xc0 [ 148.324905] ? __create_object+0x3d/0xc10 [ 148.325525] __cond_resched+0x17/0x30 [ 148.326100] kmem_cache_alloc+0x2d2/0x3e0 [ 148.326736] __create_object+0x3d/0xc10 [ 148.327348] ? kasan_set_track+0x21/0x30 [ 148.327971] kmem_cache_alloc+0x235/0x3e0 [ 148.328608] getname_flags.part.0+0x50/0x4f0 [ 148.329297] getname+0x8e/0xd0 [ 148.329792] do_sys_openat2+0xf9/0x4c0 [ 148.330384] ? build_open_flags+0x6f0/0x6f0 [ 148.331053] ? irqentry_enter+0x26/0x60 [ 148.331662] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 148.332478] __x64_sys_openat+0x13f/0x1f0 [ 148.333122] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 148.333847] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 148.334589] do_syscall_64+0x3b/0x90 [ 148.335172] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.335956] RIP: 0033:0x7fea21c62b19 [ 148.336515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 148.339216] RSP: 002b:00007fea1f1d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.340335] RAX: ffffffffffffffda RBX: 00007fea21d75f60 RCX: 00007fea21c62b19 [ 148.341397] RDX: 0000000000004042 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 148.342459] RBP: 00007fea21cbcf6d R08: 0000000000000000 R09: 0000000000000000 [ 148.343513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.344567] R13: 00007fff3323e59f R14: 00007fea1f1d8300 R15: 0000000000022000 [ 148.345653] [ 148.346013] irq event stamp: 686 [ 148.346517] hardirqs last enabled at (685): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 148.347965] hardirqs last disabled at (686): [] __schedule+0x1225/0x2470 [ 148.349201] softirqs last enabled at (670): [] __irq_exit_rcu+0x11b/0x180 [ 148.350467] softirqs last disabled at (557): [] __irq_exit_rcu+0x11b/0x180 [ 148.351727] ---[ end trace 0000000000000000 ]--- [ 148.368809] loop0: detected capacity change from 0 to 256 [ 148.382752] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 148.425674] audit: type=1400 audit(1664626246.037:9): avc: denied { write } for pid=3984 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 148.445515] hrtimer: interrupt took 17232 ns [ 148.477580] Process accounting resumed 12:10:46 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x10000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000280)="431eb68648535b33500f4c33662112ea8005d0d1c1ba361d70b39867a88fdc4e21dc482ebd4bb3e9f6232cc1d85ad83bfdf8f58673f7649934cc3abb4909fb1905891f41ffb3f74b57e6bf25eb3892a80f774effac0487acc0fe29c86e6e8519744cc25ac52fce06f46b112712cadb1d34f36068a60ef013bf348a4e1a2ef5b1628eaabc060f0a3eeba5a088240c6c64467a5d02ef5d4da5e218f86458798bce410e4d9d58ec11e90ce22f0295a296e19e320d6f104a1a35ec0f783a84f2fc194ab4902ff5a13ce0d6eddf88f70e8655da1424985c", 0xd5, 0x2}], 0x40000, &(0x7f00000006c0)=ANY=[@ANYBLOB='dots,uid>', @ANYRESDEC=r2, @ANYBLOB="5a009eec05b46992b9a38e8dbae176b2db520e4c9e4de876f89f910e50d91971dafe573fe78780ee66fe439c284944af1d2f90f35aa122ead88b3b6549608145704fa91b2351ed835be11aa5fca33e1bcb07d927d280cd9b6d40d828efb26cdd653b59c47d8e2b9fbaf74746b78678c3aac9814ebf4fec746809cdafc0cf5ceced387d8a48fdbbc23a924e9a5786d18f3610795176960f6571a5c29f8b83677ca1e60b6d5c8b160a850d73ae7008e598401afbfcd6d9f5e9d64e197ef1b4", @ANYRESDEC=r3, @ANYBLOB=',mask=^MAY_APPEND,subj_user=/dev/usbmon#\x00,\x00']) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) fchdir(r0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000140)={{0x6ce, 0x5}, 0x100, './file1\x00'}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x96d25) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000540)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 12:10:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x440) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000280)={{}, 'port0\x00'}) close_range(r0, r1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000280)={{}, 'port0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000c427cc536461b16f84958af4cfe2d09c056bf04b30419a80b8172c22e06511519705f7aad9693c2096fdd940ff9d8141602", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x5, 0x11, 0x0, 0x1, [@generic="1c"]}]}, 0x1c}], 0x1}, 0x0) 12:10:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0) openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000040), 0x4800) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xb9) recvfrom(0xffffffffffffffff, &(0x7f0000000400)=""/14, 0xe, 0x2000, &(0x7f0000000440)=@hci={0x1f, 0x2, 0x4}, 0x80) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r3, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r4, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'}) [ 148.498208] ieee80211 : Selected rate control algorithm 'minstrel_ht' [ 148.499217] loop5: detected capacity change from 0 to 128 [ 148.541987] Process accounting resumed 12:10:46 executing program 3: chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) r1 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x5) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) acct(&(0x7f00000001c0)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 148.624646] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 148.646554] Process accounting resumed [ 148.666281] device syz_tun entered promiscuous mode [ 148.680000] device syz_tun left promiscuous mode [ 148.847921] device syz_tun entered promiscuous mode [ 148.855293] device syz_tun left promiscuous mode VM DIAGNOSIS: 12:10:46 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800e3c72d0 RCX=0000000000000000 RDX=1ffff11001c78e65 RSI=ffff88800e3c7830 RDI=ffff88800e3c72d0 RBP=ffff88800e3c7328 RSP=ffff88800e3c72b8 R8 =ffffffff85ef3e0c R9 =ffffffff85ef3e10 R10=ffffed1001c78e67 R11=ffff88800e3c7310 R12=ffff88800e3c7398 R13=0000000000000000 R14=ffff88800ff6b580 R15=ffff88800ec8d300 RIP=ffffffff81119f9a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe2376f5900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe236b04848 CR3=000000000ef1a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 64b6d6fdeb5fef11 000000000013c8e8 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 01cacf8afca46c28 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 2000000000000000 2000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803f6973e0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000079 R11=0000000000000001 R12=0000000000000079 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fea1f1d8700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5c05179543 CR3=00000000188c0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fea21d497c0 00007fea21d497c8 YMM02=0000000000000000 0000000000000000 00007fea21d497e0 00007fea21d497c0 YMM03=0000000000000000 0000000000000000 00007fea21d497c8 00007fea21d497c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000