Warning: Permanently added '[localhost]:61548' (ECDSA) to the list of known hosts. 2022/10/02 00:17:26 fuzzer started 2022/10/02 00:17:26 dialing manager at localhost:35095 syzkaller login: [ 37.257334] cgroup: Unknown subsys name 'net' [ 37.390517] cgroup: Unknown subsys name 'rlimit' 2022/10/02 00:17:40 syscalls: 2215 2022/10/02 00:17:40 code coverage: enabled 2022/10/02 00:17:40 comparison tracing: enabled 2022/10/02 00:17:40 extra coverage: enabled 2022/10/02 00:17:40 setuid sandbox: enabled 2022/10/02 00:17:40 namespace sandbox: enabled 2022/10/02 00:17:40 Android sandbox: enabled 2022/10/02 00:17:40 fault injection: enabled 2022/10/02 00:17:40 leak checking: enabled 2022/10/02 00:17:40 net packet injection: enabled 2022/10/02 00:17:40 net device setup: enabled 2022/10/02 00:17:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 00:17:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 00:17:40 USB emulation: enabled 2022/10/02 00:17:40 hci packet injection: enabled 2022/10/02 00:17:40 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 00:17:40 802.15.4 emulation: enabled 2022/10/02 00:17:41 fetching corpus: 50, signal 23803/25622 (executing program) 2022/10/02 00:17:41 fetching corpus: 100, signal 33456/36936 (executing program) 2022/10/02 00:17:41 fetching corpus: 150, signal 42995/47981 (executing program) 2022/10/02 00:17:41 fetching corpus: 200, signal 53364/59697 (executing program) 2022/10/02 00:17:41 fetching corpus: 250, signal 61634/69218 (executing program) 2022/10/02 00:17:41 fetching corpus: 300, signal 68248/77041 (executing program) 2022/10/02 00:17:41 fetching corpus: 350, signal 71298/81408 (executing program) 2022/10/02 00:17:41 fetching corpus: 400, signal 76586/87784 (executing program) 2022/10/02 00:17:42 fetching corpus: 450, signal 78541/91008 (executing program) 2022/10/02 00:17:42 fetching corpus: 500, signal 83085/96588 (executing program) 2022/10/02 00:17:42 fetching corpus: 550, signal 84844/99575 (executing program) 2022/10/02 00:17:42 fetching corpus: 600, signal 87605/103427 (executing program) 2022/10/02 00:17:42 fetching corpus: 650, signal 90044/106989 (executing program) 2022/10/02 00:17:42 fetching corpus: 700, signal 92741/110735 (executing program) 2022/10/02 00:17:42 fetching corpus: 750, signal 95226/114203 (executing program) 2022/10/02 00:17:42 fetching corpus: 800, signal 96902/116964 (executing program) 2022/10/02 00:17:43 fetching corpus: 850, signal 99142/120126 (executing program) 2022/10/02 00:17:43 fetching corpus: 900, signal 101768/123614 (executing program) 2022/10/02 00:17:43 fetching corpus: 950, signal 104753/127353 (executing program) 2022/10/02 00:17:43 fetching corpus: 1000, signal 107220/130645 (executing program) 2022/10/02 00:17:43 fetching corpus: 1050, signal 109543/133782 (executing program) 2022/10/02 00:17:43 fetching corpus: 1100, signal 112475/137383 (executing program) 2022/10/02 00:17:43 fetching corpus: 1150, signal 114776/140422 (executing program) 2022/10/02 00:17:43 fetching corpus: 1200, signal 115895/142455 (executing program) 2022/10/02 00:17:44 fetching corpus: 1250, signal 117997/145243 (executing program) 2022/10/02 00:17:44 fetching corpus: 1300, signal 119927/147903 (executing program) 2022/10/02 00:17:44 fetching corpus: 1350, signal 121736/150386 (executing program) 2022/10/02 00:17:44 fetching corpus: 1400, signal 126435/155087 (executing program) 2022/10/02 00:17:44 fetching corpus: 1450, signal 127980/157313 (executing program) 2022/10/02 00:17:44 fetching corpus: 1500, signal 128975/159105 (executing program) 2022/10/02 00:17:44 fetching corpus: 1550, signal 130615/161330 (executing program) 2022/10/02 00:17:44 fetching corpus: 1600, signal 132776/163968 (executing program) 2022/10/02 00:17:45 fetching corpus: 1650, signal 134745/166415 (executing program) 2022/10/02 00:17:45 fetching corpus: 1700, signal 136001/168300 (executing program) 2022/10/02 00:17:45 fetching corpus: 1750, signal 137092/170039 (executing program) 2022/10/02 00:17:45 fetching corpus: 1800, signal 138689/172196 (executing program) 2022/10/02 00:17:45 fetching corpus: 1850, signal 140474/174381 (executing program) 2022/10/02 00:17:45 fetching corpus: 1900, signal 141784/176226 (executing program) 2022/10/02 00:17:45 fetching corpus: 1950, signal 143682/178421 (executing program) 2022/10/02 00:17:45 fetching corpus: 2000, signal 144927/180128 (executing program) 2022/10/02 00:17:45 fetching corpus: 2050, signal 145779/181597 (executing program) 2022/10/02 00:17:46 fetching corpus: 2100, signal 147028/183277 (executing program) 2022/10/02 00:17:46 fetching corpus: 2150, signal 148183/184927 (executing program) 2022/10/02 00:17:46 fetching corpus: 2200, signal 149365/186559 (executing program) 2022/10/02 00:17:46 fetching corpus: 2250, signal 150111/187908 (executing program) 2022/10/02 00:17:46 fetching corpus: 2300, signal 151321/189490 (executing program) 2022/10/02 00:17:46 fetching corpus: 2350, signal 152424/190987 (executing program) 2022/10/02 00:17:46 fetching corpus: 2400, signal 153591/192485 (executing program) 2022/10/02 00:17:46 fetching corpus: 2450, signal 155243/194330 (executing program) 2022/10/02 00:17:47 fetching corpus: 2500, signal 157427/196439 (executing program) 2022/10/02 00:17:47 fetching corpus: 2550, signal 158310/197766 (executing program) 2022/10/02 00:17:47 fetching corpus: 2600, signal 159249/199073 (executing program) 2022/10/02 00:17:47 fetching corpus: 2650, signal 160038/200262 (executing program) 2022/10/02 00:17:47 fetching corpus: 2700, signal 160724/201432 (executing program) 2022/10/02 00:17:47 fetching corpus: 2750, signal 161334/202517 (executing program) 2022/10/02 00:17:47 fetching corpus: 2800, signal 162797/204149 (executing program) 2022/10/02 00:17:47 fetching corpus: 2850, signal 164132/205618 (executing program) 2022/10/02 00:17:47 fetching corpus: 2900, signal 164979/206830 (executing program) 2022/10/02 00:17:48 fetching corpus: 2950, signal 165648/207892 (executing program) 2022/10/02 00:17:48 fetching corpus: 3000, signal 166396/209032 (executing program) 2022/10/02 00:17:48 fetching corpus: 3050, signal 167200/210189 (executing program) 2022/10/02 00:17:48 fetching corpus: 3100, signal 168547/211663 (executing program) 2022/10/02 00:17:48 fetching corpus: 3150, signal 169287/212715 (executing program) 2022/10/02 00:17:48 fetching corpus: 3200, signal 170131/213869 (executing program) 2022/10/02 00:17:48 fetching corpus: 3250, signal 170977/214987 (executing program) 2022/10/02 00:17:48 fetching corpus: 3300, signal 172081/216227 (executing program) 2022/10/02 00:17:48 fetching corpus: 3350, signal 172770/217201 (executing program) 2022/10/02 00:17:49 fetching corpus: 3400, signal 173475/218208 (executing program) 2022/10/02 00:17:49 fetching corpus: 3450, signal 174298/219212 (executing program) 2022/10/02 00:17:49 fetching corpus: 3500, signal 175011/220209 (executing program) 2022/10/02 00:17:49 fetching corpus: 3550, signal 175707/221190 (executing program) 2022/10/02 00:17:49 fetching corpus: 3600, signal 176083/222015 (executing program) 2022/10/02 00:17:49 fetching corpus: 3650, signal 177386/223186 (executing program) 2022/10/02 00:17:49 fetching corpus: 3700, signal 177896/224057 (executing program) 2022/10/02 00:17:49 fetching corpus: 3750, signal 178458/224952 (executing program) 2022/10/02 00:17:49 fetching corpus: 3800, signal 179034/225837 (executing program) 2022/10/02 00:17:50 fetching corpus: 3850, signal 179876/226791 (executing program) 2022/10/02 00:17:50 fetching corpus: 3900, signal 181116/227913 (executing program) 2022/10/02 00:17:50 fetching corpus: 3950, signal 182861/229152 (executing program) 2022/10/02 00:17:50 fetching corpus: 4000, signal 183931/230096 (executing program) 2022/10/02 00:17:50 fetching corpus: 4050, signal 184338/230805 (executing program) 2022/10/02 00:17:50 fetching corpus: 4100, signal 184902/231583 (executing program) 2022/10/02 00:17:50 fetching corpus: 4150, signal 185331/232310 (executing program) 2022/10/02 00:17:50 fetching corpus: 4200, signal 186120/233181 (executing program) 2022/10/02 00:17:51 fetching corpus: 4250, signal 186857/234009 (executing program) 2022/10/02 00:17:51 fetching corpus: 4300, signal 187338/234725 (executing program) 2022/10/02 00:17:51 fetching corpus: 4350, signal 187782/235446 (executing program) 2022/10/02 00:17:51 fetching corpus: 4400, signal 188703/236266 (executing program) 2022/10/02 00:17:51 fetching corpus: 4450, signal 189104/236918 (executing program) 2022/10/02 00:17:51 fetching corpus: 4500, signal 189565/237571 (executing program) 2022/10/02 00:17:51 fetching corpus: 4550, signal 190060/238274 (executing program) 2022/10/02 00:17:51 fetching corpus: 4600, signal 190668/239003 (executing program) 2022/10/02 00:17:51 fetching corpus: 4650, signal 191753/239824 (executing program) 2022/10/02 00:17:52 fetching corpus: 4700, signal 192495/240534 (executing program) 2022/10/02 00:17:52 fetching corpus: 4750, signal 193433/241308 (executing program) 2022/10/02 00:17:52 fetching corpus: 4800, signal 193844/241914 (executing program) 2022/10/02 00:17:52 fetching corpus: 4850, signal 194479/242554 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/243098 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/243598 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/244129 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/244638 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/245144 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/245632 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/246108 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/246604 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/247085 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/247586 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/248087 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/248547 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/249071 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/249567 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/250052 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/250525 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/251018 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/251517 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/252011 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/252513 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/252959 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/253445 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/253933 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/254430 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/254942 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/255456 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/255969 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/256441 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/256926 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/257410 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/257452 (executing program) 2022/10/02 00:17:52 fetching corpus: 4874, signal 194680/257452 (executing program) 2022/10/02 00:17:55 starting 8 fuzzer processes 00:17:55 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0xd4c2b000) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x5000, 0x0) r2 = signalfd4(r1, &(0x7f0000000080)={[0x7]}, 0x8, 0x80000) ioctl$FIOCLEX(r0, 0x5451) r3 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) write$binfmt_aout(r3, &(0x7f0000000140)={{0xcc, 0x9, 0x7, 0x12b, 0x350, 0x6, 0xc7, 0x316ddf36}, "", ['\x00', '\x00', '\x00']}, 0x320) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000480)={0x2, 0x3}) fsetxattr$security_selinux(r3, &(0x7f00000004c0), &(0x7f0000000500)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26, 0x1) read$eventfd(r2, &(0x7f0000000540), 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040051}, 0x2) r5 = openat$cgroup_type(r4, &(0x7f00000006c0), 0x2, 0x0) fremovexattr(r5, &(0x7f0000000700)=@random={'system.', '%:-\x00'}) r6 = syz_open_dev$mouse(&(0x7f0000000740), 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x0, @loopback}, &(0x7f0000000840)=0x10, 0x40000) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000880)={0x5c, @local, 0x4e21, 0x1, 'lc\x00', 0x0, 0x9, 0x17}, 0x2c) setsockopt(r4, 0x9, 0x5, &(0x7f00000008c0)="a33e44f85a399ec943e4b027fae7a7543a70ed995b80b12eae85f863672e92", 0x1f) fcntl$setsig(0xffffffffffffffff, 0xa, 0x18) 00:17:55 executing program 1: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x5]}, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe0000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x140, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffc0}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x65}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20000}]}, 0x140}, 0x1, 0x0, 0x0, 0xc800}, 0x8400) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x100, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0xf}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x180}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3b}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xbec}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x147}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x55e9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ad}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0xc000}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004111}, 0xc4) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000940)={&(0x7f0000000740), 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x178, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48ae}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6dd}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "bfba06eb6b740d63f1cf3809f89d6746b2ea9d9c406c7ed2d7db89a9bb4b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5e32aac5172f6c2764e585980f3cf8a8b5f6437a998ff4fa2f8773779ba2"}}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x11f73d26}, @TIPC_NLA_NODE_ID={0x51, 0x3, "bff5fca38ca2022921805064101b8d1d6d09ba9ab606ce6fc38abc13b3fef46cc98f16fb3d147c936e6ccb95cb17390b2f09c6b9dbd7f99f1310c0a7aadc7bab7f1d0da72cfc62b2ba47df25b4"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x279}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x40044) pipe2(&(0x7f0000004d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_genetlink_get_family_id$smc(&(0x7f0000000980), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000004e00)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d80)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48054}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000004e40)={{0x1, 0x1, 0x18, r0, {0x4, 0x80}}, './file0\x00'}) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000004f40)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004f00)={&(0x7f0000004ec0)={0x40, 0x15, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000005040)={&(0x7f0000004f80), 0xc, &(0x7f0000005000)={&(0x7f0000004fc0)={0x34, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x7, 0x10000, @l2={'eth', 0x3a, 'hsr0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xc010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005080), r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000005100), r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000005240)={'ip_vti0\x00', &(0x7f0000005200)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0x4, 0xff, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x64, 0x0, 0x7, 0x4, 0x0, @broadcast, @remote, {[@noop]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000005300)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000052c0)={&(0x7f0000005280)={0x3c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x53f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4010) 00:17:55 executing program 2: prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) [ 66.310070] audit: type=1400 audit(1664669875.579:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:17:55 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x40]}, 0x8, 0x800) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3e26, 0x75}}}}, [@NL80211_ATTR_TSID={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4002000}, 0x48000) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x6}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pread64(r2, &(0x7f0000000200)=""/61, 0x3d, 0x1f) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xfa}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe799de350ebbe9f2}, 0x41) sendmsg$nl_netfilter(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, 0x13, 0x9, 0x801, 0x70bd2a, 0x25dfdbfc, {0x181acbfb8c7d43f9, 0x0, 0x3}, [@nested={0xcd, 0x8d, 0x0, 0x1, [@generic="bad6c65e57919a8d9b1572c42f3a983be627ad0702e4e26f31d5b3e94694622c05994605a85750b613e41fc71e554b17a8852bdf44655591c43461185992f80b2a5effd688c5f9fe9e5651cdb4eccf2dd07511011e52639165b46a152a6effaebd7329ada61d5956c0f7b3d650dbf26aada38b070b33f3547675c2979d04419f4d5f0a5b66a33f00f35a91da4f314974f68c06afb01b619a1d28737713e8dde331af2a22155df78f0188405d942d808366800bf921942932e4683e0910c85e1a9b", @typed={0x5, 0x90, 0x0, 0x0, @str='\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4048004}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) r4 = pidfd_open(0x0, 0x0) splice(r3, &(0x7f0000000540)=0x8, r4, &(0x7f0000000580)=0x1, 0x9, 0x8) r5 = accept4$bt_l2cap(r3, 0x0, &(0x7f00000005c0), 0x80000) fadvise64(r5, 0x4, 0x0, 0x5) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x302, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r7 = socket$inet(0x2, 0x80000, 0x400) fcntl$addseals(r7, 0x409, 0x0) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000780), 0x2) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa4, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7631}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x850a}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "01e0612cfc758fc37d0ad4dc670e9c615ce8a88ae18b5dbfaabdfd"}}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x97}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x24040040) 00:17:55 executing program 4: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/67, &(0x7f0000000080)=0x43) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x3, 'wlan1\x00', {0x2}, 0x5}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0xa, &(0x7f00000001c0), 0x1, 0x1}, 0x9f) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000002640)={0x0, @phonet={0x23, 0x0, 0x4, 0x7}, @can={0x1d, 0x0}, @qipcrtr={0x2a, 0xffffffff00000000, 0x7ffe}, 0x6, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002600)='geneve0\x00', 0x800, 0x7, 0x4}) sendmsg$inet(r0, &(0x7f0000002880)={&(0x7f0000000340)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000002580)=[{&(0x7f0000000380)="ff437530a82cc57abb024b39986ae8c5032fe66a139f616a428d7509a2f058d6c21521817b2069a35ea8f6f7e257f8b853801e25e52bdfbb4018cfc0b60fe83935db3ea98cb125e616984ead2eeeae87e0f7c4039a24867d4b7cd801254ece54876fe4a00912658f9b3bedd707c297a49caeebcf964b0da9999ad0892635ca9484448f8f98a40e951c7904f25b8f41556f8c667f623b09c77921f8d6a1d919308a18a241d494b377293c1f3a37c64b9057343a7002e36a83bbd72c618b132cbf711a0d3743dc0c84ca76112b9efbdcda1c9126c41c9af12e53a0df293736", 0xde}, {&(0x7f0000000480)="3cf6ee514caac29c72a44e55116c7b5378eae7361c432dfba862ddbc346a811da08ade5c2c9aa433ef036e5bf6e79009a5ae6543fda5a1d8e77f33fe64554dad8fe57e2e955b6ac8", 0x48}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="2e09d7fa5c3d2e173236e7869fe69acaf4397c42d75f64648f14f201f3dcba48e13ecb347470c9ed697ed703e3ff69cb8fa9b65a4a99d5855952dfc355d056e43eafd7bc765db2", 0x47}], 0x5, &(0x7f00000026c0)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xb9, 0x3, 0x2, [{@multicast2, 0x8001}, {@loopback, 0x400000}, {@private=0xa010102, 0x5}]}, @cipso={0x86, 0xf, 0x3, [{0x7, 0x9, "29dcece05c93d2"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast2}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xd3, [@rand_addr=0x64010101, @private=0xa010100, @loopback]}, @timestamp_addr={0x44, 0x4, 0x33}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x1b, 0x3, [{0x7, 0xd, "7bc95c657b325297696c9e"}, {0x7, 0x8, "59978b424543"}]}, @end, @timestamp={0x44, 0x2c, 0x45, 0x0, 0xb, [0x9, 0x5, 0x100, 0x0, 0x3ff, 0x6, 0x5, 0x3f, 0x1, 0xfffffffe]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xe2, 0x0, 0xb, [0xffff, 0xe4, 0x3]}, @lsrr={0x83, 0xb, 0x66, [@private=0xa010100, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xc0, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010101, 0x3}, {@local, 0x1}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20}}], 0x198}, 0x40) recvfrom$packet(r2, &(0x7f00000028c0)=""/106, 0x6a, 0x1, &(0x7f0000002940)={0x11, 0x16, r3, 0x1, 0x8e, 0x6, @remote}, 0x14) bind$unix(0xffffffffffffffff, &(0x7f0000002980)=@file={0x0, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r2, {0xff6}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x4000015) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000002b40), 0x109000, 0x0) connect$bt_sco(r5, &(0x7f0000002b80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendfile(r2, r0, &(0x7f0000002bc0)=0x8, 0x4) r6 = syz_open_dev$evdev(&(0x7f0000002c00), 0xfff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r6}, './file0/file0\x00'}) pidfd_send_signal(r7, 0x36, &(0x7f0000002c80)={0x37, 0x4, 0x3}, 0x0) 00:17:55 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x9, 0x800, 0x656e, 0x1, 0x8, 0x47}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x404000, 0x1a8) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000100)) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10800, 0x10a) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x100) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000001c0)={0x1}) fallocate(r1, 0x40, 0x5, 0x400) r3 = syz_io_uring_setup(0x3a82, &(0x7f0000000200)={0x0, 0x8845, 0x2, 0x0, 0x10c, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000300)={0x0, 0x1, 0x7fffffff, 0x4}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x3f) write$binfmt_aout(r4, &(0x7f0000000340)={{0x108, 0x8, 0x7, 0x1ce, 0x95, 0x7fff, 0x37b, 0x4ca6}, "acb4e357346eaf182f8eee1aa0d1131cc53829e44e9995204d769773f3ed4cbad37ea2075d1466fa54310a345ec59bf8935ff971f1b66e9fde308168160a675d14dd905373737544a46808fd9d95d7ba5822aa01704750d43a769e598639bcaa7173a45105f25909dcbc2732522dfdd5e22b912764bc3825ac0bbe03d184bcf98808", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8a2) r5 = dup2(0xffffffffffffffff, r3) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xde1e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008000) ioctl$KDENABIO(r5, 0x4b36) write$binfmt_elf32(r3, &(0x7f0000000d00)={{0x7f, 0x45, 0x4c, 0x46, 0xb7, 0x40, 0x1, 0x1f, 0x9, 0x3, 0x3, 0x9, 0xfa, 0x38, 0x1d5, 0x17, 0x56, 0x20, 0x2, 0x0, 0xfffa, 0x81}, [{0x2, 0x2, 0xd4, 0x1ff, 0x5, 0x2, 0x7, 0x3}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa58) r6 = inotify_init() r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001780), 0x10000, 0x0) sendfile(r6, r7, &(0x7f00000017c0)=0x9, 0x3c0) 00:17:55 executing program 6: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8, 0x7, 0x8d, 0x7, 0x3, 0x3e, 0x2, 0x2cf, 0x40, 0x38e, 0x10001, 0x6f5, 0x38, 0x2, 0x400, 0xdc8, 0x1}, [{0x70000000, 0x4, 0x1, 0x0, 0x2, 0x4, 0x200, 0x7}, {0x7, 0x7d, 0x100000001, 0x1, 0x6, 0x3, 0x401, 0x6}], "68833dab1fdb74c1b3748f2650873e6e865a2dfc0115ae26c804da9a299ec84430557e2b7da6145321c098fc10158bf917a0d15cc548facab6f77a0d2019a5558a95f2cad5d9f7401ff10c6f9f0a36944167a160fa493c6631d5c7c79ed573baff87d9c835be3f130de6b731a88b8b3e82", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x721) syncfs(0xffffffffffffffff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000740)=0x5, 0x4) fsync(0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x20000) fchown(r0, 0xee01, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0}, '.\x00'}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) statx(r0, &(0x7f0000000880)='./file0\x00', 0x800, 0xef7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x41400, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '#,%]'}}, {@fowner_eq={'fowner', 0x3d, r3}}]}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x11, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x9010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000a80)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x3) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) fchmodat(r5, &(0x7f0000000b00)='./file0\x00', 0x15) signalfd4(r0, &(0x7f0000000b40)={[0xffffffffffffffe0]}, 0x8, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000b80)="2ff37a2f5f9b68353a8d38dfef0133e94f0dd552a57f7ada771ca671eca95ead1ce46ee6f75a51532101dc79f37247f1778dab4ad3770f70185632ec489b2687295df1fbeebed24ecca704831eae854825db826af7e2808bc95a764d35716ea24ecd54500f94a147b0d86be1511ecd9928061ba5c09c36dc69b6d6abcf14c64218899b52e559804cc645b27c9e4cd40bbc62d18e6d082e129ea330c53194b4c06ec64f5e0671f32a0a2210bdcf37414dde0c456b76326b2d0ac82dd88d8ba7b64cc244960c808ef40782dd46091cf2b2d72a4570a15a7aaae244f9c1939adf0aea61a5ce46f12d1eb4f8c7f47338ea07539905a3bf431ceb4baf467ed00791c0e5a80498c47a8cdd10e3b79046e3f47c59ddbd69da467125943f504708175cad026dd4158179d2201c6c9c14a4a491074ed85bed0604535a125122c089479c51cfcfba1fc80ba73d34ffe72ce54c7693d8cd1d022ccff81a12a760260507b3fa8181c201135f527f64a3308a90d211a50acaf9aa3bfac25130de15e283f6346607a6fd886ec32e9136dfdbc09698dcad92ee729b73b4edaf11fcb532e200d62d1e18ccfe9daaeecbd200f012e72042f8f106ce62f638f60fb85061bd21e5239d48a85920edde0dfcb32e59d4177577335089f9784d536d387de658e5eabf5a2907bf83fa7df36021ca92ea935eb3384995006d4c0b7981420e5822a9ac2b252d77e417f8effb41747a18053de41fb2f40a32771ef5e3ba471c8179198371e0558c0b4004d69d708375ca47aca41e507c45adba3aa85bbd7e6d5b78a758d5447f2c37ef4d365707eb1c8e72712d9215f1a136305bba6e85f2e45c44c04e3053a58652fd7d9d950432a74a874f2838f1020857d368818d39c99c0b151d33ef802e8a78b1f1048d4ee3530c580955cae7abf4b3f1d1007d3447e869cc245cbc20050a83e9615a4602ba56157fd3e16848fb08a082c4e11e36b726494d268355c391c54557def69880a6e82431b2dbee7f4ba4644e19bd24bb77b389d928e8ddb78fbcebdbded1cd9f347e3063f631becb168cd94ef103ab06ffc5fb571b281273a60fe55f73bdffa38b651e15f2e0ed78043abc4f8d2b5b294b3da7f092c88bd6feb64fc9839f83d7c2c9f9c783357524b780d17be25e504752c76e8cdb4683293addeb7b012bd67971763550ece043dd981832dbaf905242539b620d4379bf52fb99a5cef5d5474c95d59ced8aa343adac8344bcd7c30eba9872f892906784e6f370dc6d54e153ae55363820bac1c5f6cf06e566b7f558e8613575cde151f11cb77baed3badca7bb6946cf95b171d24ff8d22885163052601462b63c84db9463ca7dcba29623339d9a5b56d3def895fbce5bbef093d8b8e9b085fe07b5a80f5586f2a2edbcddebb6f1568f4a6fc1c48b497e2f874f92bf7cb130346345f708ebe92f58d8eb9bf176d8ffb60e3f3c6a0a64addd4756acb40f5cdcc6db36d8038bc1ac93dd3d6c3958dd79967b08083fbe2687b0c716d70dbc55a821deb143909e2c7703ccf8d5bf7212e4b202ea8e7eccbe3b4a37877aac1987ca98defc170570547c302bcaabd1c7bc6ba19ff1632bb35d2e11c3c3d8908e69164fb570fb849939b7c348927533922f63baa436aeb7012ca02b1615af9ed11cb1afe0788f06442306f6329c0ffd4404efa8e7fa7467e3bdedab098e29619a9fc58a8fe4e1c477d64bcfa623ab3585085fe90664bdcc976b21503323235cfd39a6707307cd79c385470cb0f520269c3dbdde085c8090bb493ae473ed3a11339e5a22b4a62be1c996cd6891e1969579d3c7b00744ae4004f48ab21db909d2a89c224cdc929500fbd0aa05bb3dee2c5bf8810e79b625574f2f25fbac9a6227b00b6653be64e5c0cf7b11638e99e477423a850b1810700ea72a05c5f4cfa4dcbe380e3cce2afd0125dca39abef5871e387ea5df8bbfea8f09aa11ccbe5626d41d04645c34687d392969acf7956347af525863ded3ebe5203c190b33a5a7e3bd865a9ef095ebbad7f2de171c2c42ec29104751029bc0bb6c9e5d55e1a5c3ee5250df67fdeb60b9c7637c63bba0dfd575f76f3cb31533278e71fa1a07a76a3265cdf800f27a6ee9a3c007488ea51476d2b13371c62a35ccc448c96badc4a64d0887d2b28ac05a4e9d4836f70d9e5095f57a796ef0d325797bd99cbe537ec134f6aadb8a0334e3d9110a81bf2c4840eca66c03f3f52bd52790ce568f9b9894f6d8dce0f688c322c67ade42d112b78a861819079bb1c38029700a4dab98b321586128736ee85110185cf7d683deb090c01ab5bdee1d7b0a940866d3b9eaf16aa9967a1444811663c37550b53def0a2a8f7eb1979ae0643ca73c5fb11a740e6c700305fb7a428f167b844cb31cd72c7b6755d06a0ca0da246a87952e294ea4a7ef05b0dae030ffb2c52cc11b8d81ac5194b50ebc8107ef4e8b6c24918d267f786f64df0ebff12311b8c0c829be639a1c9ec59531b3a4292826ead060325fa455b347ee63e2513eba3c11e74fbf9e49d3a4910d777a9a8434c1315b35e2019bc7b12f954004fdd4b5eaf051256c65772af6baff09c59067f1b0707d2cd1f24f6c9ceae0127467fcf94eea1515623f90b9bb93159abffee444b282c318264500f29bb9b773294f58ef61f306d8b63c7a49b6d235ef23762dff501c508289a197ba6269b7d70acbaf100b8fd810d87528e097048efb22bd373cbb13a576b1ea896c51408918ea59454afd77b87015a80df3e4b23e8a079352ff2522af527811a6d057258edea6dacbd8258f6339c9e8432bc5278456ba6bf0e941ced6d3e74bd7d226b2b97319b56f6c87b5d6d189228ac628c2bc42ec92dc0931f4d9d35c630a7dda241f34214890e30018c9e87c5fa1917ec38e40657d12fa27db6e3d3165613725f571747566fa3dfc25adbef183e0713da99fd1f41a31fb435beb6b2c13cfa990c4b3fffb3ffe50957078c5bb7607c63e4e1d51d89f9cc9bd96b480c227e6dec24365c8247f5932e1fab8bb26c59595e716332564fd74d16a3b8fc52b35feaf4061aebff2575a06105a9d10aed1e18460cf6dabcd35a0d7a0d9e668ab710a1eb874e58583e5dffeb699567688687410856a4724caadd96eba07c56309c8ca66550c25ad7358a36a5b1df8333029a267eb0de37cfc22e55fe08c631d23ba53edc2403bc8d7d1cfb45f918414c3f2756751d84953547df217a8e767f046988ffaca2dbd36847ca9588d7ea8f6aa89df71d3aa8f2cd4fc6dfa6a9546f236200691962f9e6e70642fd726e9f6fbbeddb6f6ed34b1f37b64b486aa20b63be571fb4fd51cb85ec3182beabc0c84aacfc7306d6e26f666a42468243a66d0ab245fcbba0d2cb200a31759d9daa5e5731e0cfa8a70cfbbe062a9b41a633c309bbcc18c47c47d57382338b25fc2bb60fc2aa25ff4693f6a734f5a490a778d866f03fe3e7e6e40e2e112ca2eefc1b6ef49a83c2ac6b1ce0ea484682992807ab27cbb895b10ca3cde7074239c3b61c1df7ba0841281398afc4923a158f387ac9f82d4c7e305d1a3e4ed47ab32f0efb99c3b934b9aeaf1513c5d860f0d8bc7050735fe4c5fc7a7dbf033ad99c7f08e60587c99538c73ad08b8c4c9d67bce7a3dd02107515a379761893606a0d4938acece10db7a4cccb81a8659da614e71a5fcbdde4796b0dca8a6a8caa8ebd13c3c80f2405e6f372411925fa4f1a0215ddf95dfe10ed9450a918e5a17af3508683d034e4d0ac6f04a7e9c6c177eb51180b449e217d87f43207fe24430475de7b03f11fa211e9d33caf0644e4b525534f6baae278d10f94cf0b91c3f66b24eaadf7aef5341e50bc47ccc8c92bb80af93ec857536b2708e1bed0917973224dd9b0b8d3936d842511e4227fd62426ee9f50776f1870bb09e3352e2e749efa07ea7684e24bd4d54b54c44d43e4eb123e883d3cad52148ac9d6a535ed6d6c043660dc4241d7c909e735de431ee00bbe1860882f753c4614563bae180d3b62c1d6d41d7eb7370014aa9b946447ade8558ecffb51fedebf2ca2e670e0df4e35d2aaa15ae032a1180d0bdfd01b4f1fafc489b027923a37138d9ed6a0252cfc8e3209bf8afdb878c8a6aed4b18b521ba2e141c2f73fe84f6856e115787791c0bdd7cae8d376aaa44a0f48f76315431d5bf95fce491d1f64cdf921aed09e7a8c211637d3ff0033f58f6554167bb16af83e48b1b73e5464b9b77a1b1c5d2a97e8c36d2da886e916be955be6b188bbdc5f8f9dcd8f8fe47bdd4f39acf98e3bf7e35857b2148b7c3d7eeb1ae10939d924d5a9949ea881ef6d593c14c9234ba84b720617b52d7458aba1eca85d7641c216d7a5a286df88d3ed79a3719f9842721105f74de7ec16a44d7cf65e557e5f36b7d1cd9cd7560c8848af544c82eae8ae9296726318bddef6ebb297f3e651859604a526a6d3835ddb30b5f10cd2f84a4dda525a896108b91da7b200a8c6561180b0a9492ba9c6a72ecaca993dcc525e37a3e57c1cfe8afba41cd94d100bade0fa2ff76e63ecb1f333427898c36a56b1ed7fdfb7eab66382012c337aa4fca3efe9b464db4b285da1e86e22066d09a4cf84970c632199483b0e99498a63d92fc436e16960bece45b3cb77382c2d5028b986e01f63f57c389381042def290cd9988470ec987daaf180266eb64feabfa004cbad2b30de7f4ca030e491779cc100f00471772a1110f3e5dbac06c8f58a0c46d34b8a09e38c47885c675afdd88383cab248352ce5dd386385ccbe3800419a9c7dbb56cbd5774deafed41d849fa157283c938db8b0eb45fa7c59004d51da9b8772f360a95d07afc5afb2f9bfe832a14b693dd60072e9e9383e59edd656e4746e2ebc137b1fffc7455e65cadf33d950b695d59c3b0adcf9dcea82dbf5fff68c9ec04855da090547a225d45a75a4a34a71f10d2f9441aade05cc483fb1098bacc91ce642a6e50aa34b6a5126d8b541cb30119039fdb4e49078134df1a06b8941a76607af413b9791cc5e7fc1477514b33e0c943c18b3c3b545a2f5d22710d7dd680310a202d051a9f1b42bfe2b94013b616fc3db63f285ada104ea9c1b82b91e3b97fd44d457b997dd0c9a4162bfa712c82322db27c7730c3bf439b6849ac211cfc295a09cdefa58b490f4a7d919097b63c14354eb6a8e093d484810224dc2ed0f73ae99a57dde6f9e961e45a89ad81c5dae4aa913303c9083b319567b5f7075135c6f3513f86f008d75bb403c3bd533ab25f089b042760c5f8e0dba17622ec1ff493c57ff43b8abe0c8ad1acfec418c1293656efcad9c6312e2dbd557489ced984c5367a8f54a53fbad8e48e8876fad2d79b62f6e50bba1d21634ea6495079ff2e3f71c56ec3fd04494ec9b11ac196a4bc75d66033dfd8ac51ec70884b1dbd6a0bddc5c26cf2755c671e6608713c4c7c72c77fbfd2b2df3825fe6226b2548c0cff86c26fd0d3ab0bc3a5e750fe4b27d551cf16df392ad6d634444c66eb2d86099a83286d0a3f0068d301228ef81745a9630bf2e1e47d08a8f2347449298c91e4710ec84336ab72e3a21e9bfbcf35eb2f170ead8aab661b44b4aace73b32972eefa938449c9f77b4ecfb0e173f0ee34b276b918c1ae130c2864a33e3407dc661b1667cbc6f379050fb33ab9259c8b9470e92d6e508ea89b32839c8ea6c9a77d8ff05f41ecc045d5202c5dc9bbd99f9e846c61253ea92de7292459b64afdcfbcdcbe98d213f6e17f10037e1042e3de5be35d870221723d61ccac770e28b1838a83a842d377f08759fa099694cad2") r6 = memfd_secret(0x80000) fchmodat(r6, &(0x7f0000001b80)='./file0\x00', 0x146) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000001bc0)) 00:17:55 executing program 7: sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x43}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, '\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "46c3"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "42ffe5f919"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "064092c2135200"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0444f80c3f7d17ae64dc86f469"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = openat$incfs(r0, &(0x7f0000000280)='.log\x00', 0x14200, 0x8) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x300, 0x9e0e, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x1d, 0x34, @random="aff300ee3915870f044837314e283b7bd2fe5ba2e9e7e547d5"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) setxattr$trusted_overlay_opaque(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0x13, 0x34, @random="38a23409db21d7cac2909ca44bf875"}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040044) recvfrom(r0, &(0x7f00000006c0), 0x0, 0x10100, &(0x7f0000000700)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80) statx(r1, &(0x7f0000000780)='./file0\x00', 0x1000, 0x80, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@loopback, @in6=@empty, 0x4e22, 0x0, 0x4e22, 0x1, 0x2, 0x1c0, 0x20, 0x11, 0x0, r3}, {0x9, 0x82, 0x1ff, 0x7, 0x9, 0xff, 0x5, 0x10000}, {0x5, 0x8, 0x5, 0x9}, 0x7, 0x6e6bb0, 0x1, 0x1, 0x3, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x4d6, 0x33}, 0x0, @in=@broadcast, 0x3505, 0x0, 0x3, 0x6, 0x3ff, 0x2, 0x8}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{&(0x7f00000009c0)={0xa, 0x4e22, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x60000000}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000a00)="470cb5968dba5fdd17e5e32c291b5c62ccfd15e8c1a044715227fe8b12189dd5851880915550b0f7", 0x28}, {&(0x7f0000000a40)="29edf539e3dda1d0ec850de50787b60d18943f8e3ed1c72f722b943f342ab8ffc55eb6257c7f365f025391f905681668c533d7bdd7127c85c2492d3d5f054268ef693f9635e89daf8d7ecfe588359656f8808667d9ae6d906b0f43802b20a82b45b9006df62a3e422208c63e203c1e6865d59e9b325f5bda5d5bc717d4255b80e1920cd56526ff4b0914ab791ca756be248670b51eaf8b8d9876c1b92c41c75203b487c9320a68a004615bcfb332ac3afda1feb8af8d07a31176cafee46f3e8dd931bb2e978b42c57c3163e414bf57d8df62c67940146f2763084526e8fd098d0be0b047872255bb08e448775528128be1bd", 0xf2}, {&(0x7f0000000b40)="f54e046725aa1f65b371eb0db76ed4c60131541a8d771672c0c57f214b4ced1be944e0a9dd56965d95eb623681b83e63c2192cae5636adc9746df935daec9628e2a37518a3a6941833c92a972b2fa2eb18c5e8c6ccccab612379b98d2779fb9f0a4f91e81d2db74a", 0x68}, {&(0x7f0000000bc0)="5a03f4df9421ec922a82b9f66beb00a786e93c646a75266c4f11bdb826aedba4fe7558d1204921ab386509f46ece7687675e2fc4da189f2ae24c68d73552c70c82fbc27ad7b5a5057ec93599fb1a0dc051b752fc9d170a4e447c5a8aaa856df8be206b3a6349b54dfbbd70cc016bbac8ca4e96f53c85880984cddbfdd70eb1aa865f853b78e2bf1e1c1ac5d2a4a129a694681794e7c229dac7fa7fadccb7faa4ccdd189413a7e0d555943e9f81fe42c6b5dfa397d2bf8794cb49a76076dd88bcae5555cd3211d27b075dddd613d6", 0xce}], 0x4, &(0x7f0000000d00)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0x28}}], 0x1, 0xc020) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d80)='/sys/module/spurious', 0x800, 0x150) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44810}, 0x51) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x80, 0x1, 0x30, @mcast2, @remote, 0x40, 0xff17, 0x401, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001000)={'ip6gre0\x00', &(0x7f0000000f80)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x80, 0x6, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x7, 0x1, 0x4}}) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000001080)={0x0, @can={0x1d, r5}, @can={0x1d, r6}, @nfc={0x27, 0x0, 0x0, 0x6}, 0x6, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000001040)='ipvlan0\x00', 0x7fffffff, 0x9, 0x101}) r7 = accept4(r1, &(0x7f0000001100)=@can, &(0x7f0000001180)=0x80, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f00000011c0)) [ 67.571714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.573383] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.574737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.577510] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.579446] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.580877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.585769] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.629557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.632267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.635196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.654140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.658566] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.660055] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.665109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.666189] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.671978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.676023] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.684608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.691556] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.694658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.703639] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.746098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.748567] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.749978] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.751253] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.752489] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.753948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.756654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.758588] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.760113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.761472] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.762830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.764138] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.768807] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.775469] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.845997] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.850982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.869464] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.873095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.874576] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.877173] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.898729] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.898785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.911159] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.912758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.918680] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.921054] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.941884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.990637] Bluetooth: hci6: HCI_REQ-0x0c1a [ 69.650887] Bluetooth: hci0: command 0x0409 tx timeout [ 69.714417] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 69.714492] Bluetooth: hci1: command 0x0409 tx timeout [ 69.716366] Bluetooth: hci2: command 0x0409 tx timeout [ 69.779465] Bluetooth: hci5: command 0x0409 tx timeout [ 69.842378] Bluetooth: hci7: command 0x0409 tx timeout [ 69.970467] Bluetooth: hci4: command 0x0409 tx timeout [ 70.034409] Bluetooth: hci6: command 0x0409 tx timeout [ 71.698381] Bluetooth: hci0: command 0x041b tx timeout [ 71.762438] Bluetooth: hci1: command 0x041b tx timeout [ 71.763356] Bluetooth: hci2: command 0x041b tx timeout [ 71.826479] Bluetooth: hci5: command 0x041b tx timeout [ 71.891382] Bluetooth: hci7: command 0x041b tx timeout [ 72.019432] Bluetooth: hci4: command 0x041b tx timeout [ 72.084046] Bluetooth: hci6: command 0x041b tx timeout [ 72.999239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.012539] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.014992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.019595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.023469] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.024964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.033393] Bluetooth: hci3: HCI_REQ-0x0c1a [ 73.747468] Bluetooth: hci0: command 0x040f tx timeout [ 73.810368] Bluetooth: hci2: command 0x040f tx timeout [ 73.811496] Bluetooth: hci1: command 0x040f tx timeout [ 73.874386] Bluetooth: hci5: command 0x040f tx timeout [ 73.938360] Bluetooth: hci7: command 0x040f tx timeout [ 74.066348] Bluetooth: hci4: command 0x040f tx timeout [ 74.130359] Bluetooth: hci6: command 0x040f tx timeout [ 75.091389] Bluetooth: hci3: command 0x0409 tx timeout [ 75.794389] Bluetooth: hci0: command 0x0419 tx timeout [ 75.858382] Bluetooth: hci1: command 0x0419 tx timeout [ 75.858414] Bluetooth: hci2: command 0x0419 tx timeout [ 75.922330] Bluetooth: hci5: command 0x0419 tx timeout [ 75.986391] Bluetooth: hci7: command 0x0419 tx timeout [ 76.115386] Bluetooth: hci4: command 0x0419 tx timeout [ 76.178353] Bluetooth: hci6: command 0x0419 tx timeout [ 77.138459] Bluetooth: hci3: command 0x041b tx timeout [ 79.186420] Bluetooth: hci3: command 0x040f tx timeout [ 81.234415] Bluetooth: hci3: command 0x0419 tx timeout 00:18:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000002e2f66699cdbdf76c7b9e37376e2afaf8f40205b058b8b000000000000"]) openat(r1, &(0x7f0000000200)='./file1\x00', 0x9c000, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r5, &(0x7f0000000040)=""/169, 0x200000e9) r6 = memfd_secret(0x80000) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="00000000000000002e2f66696c65310034dbb6db36594bb07428"]) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3, r9, &(0x7f0000000180)="666fd6fb7c4c8e8bf4059397e83e5ca7e7a13e2dbc305703a2c6a90bba95bb649867b6deabc9", 0x26, 0x4, 0x0, 0x3, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000400)="bcf3b4f072b97e9c8e5e4369e898ea7d3b9aaf8d0633f79e97d0826da4635d97340e117a758d18b9fe61c37ab2832aa388c707228965f582216544e3d9b9e1d50f2085b8b532a2d6b3c64fef32086daf609dede175371d47064c088a9ccda4c9", 0x60, 0x1, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r8, &(0x7f00000004c0)="457e9ecce6f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd0", 0x29, 0xffff, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x1, r3}]) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220) [ 121.066530] audit: type=1400 audit(1664669930.335:7): avc: denied { open } for pid=3774 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.071429] audit: type=1400 audit(1664669930.336:8): avc: denied { kernel } for pid=3774 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.081386] ------------[ cut here ]------------ [ 121.081410] [ 121.081414] ====================================================== [ 121.081418] WARNING: possible circular locking dependency detected [ 121.081423] 6.0.0-rc7-next-20220930 #1 Not tainted [ 121.081429] ------------------------------------------------------ [ 121.081432] syz-executor.5/3775 is trying to acquire lock: [ 121.081439] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 121.081479] [ 121.081479] but task is already holding lock: [ 121.081483] ffff88800fbbc820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.081509] [ 121.081509] which lock already depends on the new lock. [ 121.081509] [ 121.081513] [ 121.081513] the existing dependency chain (in reverse order) is: [ 121.081516] [ 121.081516] -> #3 (&ctx->lock){....}-{2:2}: [ 121.081530] _raw_spin_lock+0x2a/0x40 [ 121.081541] __perf_event_task_sched_out+0x53b/0x18d0 [ 121.081553] __schedule+0xedd/0x2470 [ 121.081567] schedule+0xda/0x1b0 [ 121.081580] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.081592] syscall_exit_to_user_mode+0x19/0x40 [ 121.081605] do_syscall_64+0x48/0x90 [ 121.081623] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.081635] [ 121.081635] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 121.081649] _raw_spin_lock_nested+0x30/0x40 [ 121.081660] raw_spin_rq_lock_nested+0x1e/0x30 [ 121.081673] task_fork_fair+0x63/0x4d0 [ 121.081689] sched_cgroup_fork+0x3d0/0x540 [ 121.081703] copy_process+0x4183/0x6e20 [ 121.081714] kernel_clone+0xe7/0x890 [ 121.081724] user_mode_thread+0xad/0xf0 [ 121.081734] rest_init+0x24/0x250 [ 121.081745] arch_call_rest_init+0xf/0x14 [ 121.081763] start_kernel+0x4c6/0x4eb [ 121.081778] secondary_startup_64_no_verify+0xe0/0xeb [ 121.081792] [ 121.081792] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 121.081805] _raw_spin_lock_irqsave+0x39/0x60 [ 121.081816] try_to_wake_up+0xab/0x1930 [ 121.081829] up+0x75/0xb0 [ 121.081842] __up_console_sem+0x6e/0x80 [ 121.081858] console_unlock+0x46a/0x590 [ 121.081874] do_con_write+0xc05/0x1d50 [ 121.081885] con_write+0x21/0x40 [ 121.081894] n_tty_write+0x4d4/0xfe0 [ 121.081906] file_tty_write.constprop.0+0x455/0x8a0 [ 121.081917] vfs_write+0x9c3/0xd90 [ 121.081934] ksys_write+0x127/0x250 [ 121.081949] do_syscall_64+0x3b/0x90 [ 121.081965] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.081978] [ 121.081978] -> #0 ((console_sem).lock){....}-{2:2}: [ 121.081991] __lock_acquire+0x2a02/0x5e70 [ 121.082008] lock_acquire+0x1a2/0x530 [ 121.082024] _raw_spin_lock_irqsave+0x39/0x60 [ 121.082034] down_trylock+0xe/0x70 [ 121.082049] __down_trylock_console_sem+0x3b/0xd0 [ 121.082065] vprintk_emit+0x16b/0x560 [ 121.082080] vprintk+0x84/0xa0 [ 121.082096] _printk+0xba/0xf1 [ 121.082107] report_bug.cold+0x72/0xab [ 121.082123] handle_bug+0x3c/0x70 [ 121.082139] exc_invalid_op+0x14/0x50 [ 121.082156] asm_exc_invalid_op+0x16/0x20 [ 121.082168] group_sched_out.part.0+0x2c7/0x460 [ 121.082186] ctx_sched_out+0x8f1/0xc10 [ 121.082202] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.082213] __schedule+0xedd/0x2470 [ 121.082226] schedule+0xda/0x1b0 [ 121.082239] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.082250] syscall_exit_to_user_mode+0x19/0x40 [ 121.082262] do_syscall_64+0x48/0x90 [ 121.082279] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.082291] [ 121.082291] other info that might help us debug this: [ 121.082291] [ 121.082294] Chain exists of: [ 121.082294] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 121.082294] [ 121.082308] Possible unsafe locking scenario: [ 121.082308] [ 121.082311] CPU0 CPU1 [ 121.082313] ---- ---- [ 121.082315] lock(&ctx->lock); [ 121.082321] lock(&rq->__lock); [ 121.082327] lock(&ctx->lock); [ 121.082334] lock((console_sem).lock); [ 121.082339] [ 121.082339] *** DEADLOCK *** [ 121.082339] [ 121.082341] 2 locks held by syz-executor.5/3775: [ 121.082348] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 121.082377] #1: ffff88800fbbc820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.082403] [ 121.082403] stack backtrace: [ 121.082406] CPU: 0 PID: 3775 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 121.082418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.082426] Call Trace: [ 121.082429] [ 121.082433] dump_stack_lvl+0x8b/0xb3 [ 121.082451] check_noncircular+0x263/0x2e0 [ 121.082468] ? format_decode+0x26c/0xb50 [ 121.082484] ? print_circular_bug+0x450/0x450 [ 121.082501] ? simple_strtoul+0x30/0x30 [ 121.082517] ? format_decode+0x26c/0xb50 [ 121.082534] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 121.082551] __lock_acquire+0x2a02/0x5e70 [ 121.082572] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 121.082594] lock_acquire+0x1a2/0x530 [ 121.082611] ? down_trylock+0xe/0x70 [ 121.082628] ? lock_release+0x750/0x750 [ 121.082648] ? vprintk+0x84/0xa0 [ 121.082665] _raw_spin_lock_irqsave+0x39/0x60 [ 121.082677] ? down_trylock+0xe/0x70 [ 121.082693] down_trylock+0xe/0x70 [ 121.082708] ? vprintk+0x84/0xa0 [ 121.082725] __down_trylock_console_sem+0x3b/0xd0 [ 121.082742] vprintk_emit+0x16b/0x560 [ 121.082760] vprintk+0x84/0xa0 [ 121.082777] _printk+0xba/0xf1 [ 121.082789] ? record_print_text.cold+0x16/0x16 [ 121.082804] ? report_bug.cold+0x66/0xab [ 121.082822] ? group_sched_out.part.0+0x2c7/0x460 [ 121.082840] report_bug.cold+0x72/0xab [ 121.082859] handle_bug+0x3c/0x70 [ 121.082876] exc_invalid_op+0x14/0x50 [ 121.082894] asm_exc_invalid_op+0x16/0x20 [ 121.082906] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.082927] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.082938] RSP: 0018:ffff88803f247c48 EFLAGS: 00010006 [ 121.082947] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.082954] RDX: ffff88800feb1ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 121.082962] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 121.082969] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800fbbc800 [ 121.082977] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 121.082988] ? group_sched_out.part.0+0x2c7/0x460 [ 121.083007] ? group_sched_out.part.0+0x2c7/0x460 [ 121.083027] ctx_sched_out+0x8f1/0xc10 [ 121.083046] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.083060] ? lock_is_held_type+0xd7/0x130 [ 121.083074] ? __perf_cgroup_move+0x160/0x160 [ 121.083084] ? set_next_entity+0x304/0x550 [ 121.083102] ? update_curr+0x267/0x740 [ 121.083120] ? lock_is_held_type+0xd7/0x130 [ 121.083134] __schedule+0xedd/0x2470 [ 121.083151] ? io_schedule_timeout+0x150/0x150 [ 121.083167] ? rcu_read_lock_sched_held+0x3e/0x80 [ 121.083188] schedule+0xda/0x1b0 [ 121.083203] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.083215] syscall_exit_to_user_mode+0x19/0x40 [ 121.083228] do_syscall_64+0x48/0x90 [ 121.083246] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.083259] RIP: 0033:0x7f36fc03eb19 [ 121.083267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.083278] RSP: 002b:00007f36f95b4218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.083288] RAX: 0000000000000001 RBX: 00007f36fc151f68 RCX: 00007f36fc03eb19 [ 121.083296] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f36fc151f6c [ 121.083303] RBP: 00007f36fc151f60 R08: 000000000000000e R09: 0000000000000000 [ 121.083310] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f36fc151f6c [ 121.083317] R13: 00007ffc6cf4f1ef R14: 00007f36f95b4300 R15: 0000000000022000 [ 121.083329] [ 121.139444] WARNING: CPU: 0 PID: 3775 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 121.140148] Modules linked in: [ 121.140395] CPU: 0 PID: 3775 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 121.140990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.141840] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.142259] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.143595] RSP: 0018:ffff88803f247c48 EFLAGS: 00010006 [ 121.143991] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.144530] RDX: ffff88800feb1ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 121.145070] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 121.145607] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800fbbc800 [ 121.146149] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 121.146703] FS: 00007f36f95b4700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 121.147303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.147773] CR2: 00007fea666b9570 CR3: 000000001e8e8000 CR4: 0000000000350ef0 [ 121.148313] Call Trace: [ 121.148516] [ 121.148702] ctx_sched_out+0x8f1/0xc10 [ 121.149010] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.149421] ? lock_is_held_type+0xd7/0x130 [ 121.149754] ? __perf_cgroup_move+0x160/0x160 [ 121.150107] ? set_next_entity+0x304/0x550 [ 121.150446] ? update_curr+0x267/0x740 [ 121.150754] ? lock_is_held_type+0xd7/0x130 [ 121.151084] __schedule+0xedd/0x2470 [ 121.151379] ? io_schedule_timeout+0x150/0x150 [ 121.151740] ? rcu_read_lock_sched_held+0x3e/0x80 [ 121.152120] schedule+0xda/0x1b0 [ 121.152385] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.152757] syscall_exit_to_user_mode+0x19/0x40 [ 121.153123] do_syscall_64+0x48/0x90 [ 121.153414] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.153810] RIP: 0033:0x7f36fc03eb19 [ 121.154093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.155469] RSP: 002b:00007f36f95b4218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.156051] RAX: 0000000000000001 RBX: 00007f36fc151f68 RCX: 00007f36fc03eb19 [ 121.156590] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f36fc151f6c [ 121.157142] RBP: 00007f36fc151f60 R08: 000000000000000e R09: 0000000000000000 [ 121.157640] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f36fc151f6c [ 121.158135] R13: 00007ffc6cf4f1ef R14: 00007f36f95b4300 R15: 0000000000022000 [ 121.158639] [ 121.158807] irq event stamp: 620 [ 121.159042] hardirqs last enabled at (619): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 121.159747] hardirqs last disabled at (620): [] __schedule+0x1225/0x2470 [ 121.160362] softirqs last enabled at (368): [] __irq_exit_rcu+0x11b/0x180 [ 121.160990] softirqs last disabled at (361): [] __irq_exit_rcu+0x11b/0x180 [ 121.161674] ---[ end trace 0000000000000000 ]--- [ 121.387498] audit: type=1400 audit(1664669930.657:9): avc: denied { read } for pid=3774 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 00:18:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000002e2f66699cdbdf76c7b9e37376e2afaf8f40205b058b8b000000000000"]) openat(r1, &(0x7f0000000200)='./file1\x00', 0x9c000, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r5, &(0x7f0000000040)=""/169, 0x200000e9) r6 = memfd_secret(0x80000) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="00000000000000002e2f66696c65310034dbb6db36594bb07428"]) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3, r9, &(0x7f0000000180)="666fd6fb7c4c8e8bf4059397e83e5ca7e7a13e2dbc305703a2c6a90bba95bb649867b6deabc9", 0x26, 0x4, 0x0, 0x3, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000400)="bcf3b4f072b97e9c8e5e4369e898ea7d3b9aaf8d0633f79e97d0826da4635d97340e117a758d18b9fe61c37ab2832aa388c707228965f582216544e3d9b9e1d50f2085b8b532a2d6b3c64fef32086daf609dede175371d47064c088a9ccda4c9", 0x60, 0x1, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r8, &(0x7f00000004c0)="457e9ecce6f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd0", 0x29, 0xffff, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x1, r3}]) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220) 00:18:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000002e2f66699cdbdf76c7b9e37376e2afaf8f40205b058b8b000000000000"]) openat(r1, &(0x7f0000000200)='./file1\x00', 0x9c000, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r5, &(0x7f0000000040)=""/169, 0x200000e9) r6 = memfd_secret(0x80000) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="00000000000000002e2f66696c65310034dbb6db36594bb07428"]) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3, r9, &(0x7f0000000180)="666fd6fb7c4c8e8bf4059397e83e5ca7e7a13e2dbc305703a2c6a90bba95bb649867b6deabc9", 0x26, 0x4, 0x0, 0x3, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000400)="bcf3b4f072b97e9c8e5e4369e898ea7d3b9aaf8d0633f79e97d0826da4635d97340e117a758d18b9fe61c37ab2832aa388c707228965f582216544e3d9b9e1d50f2085b8b532a2d6b3c64fef32086daf609dede175371d47064c088a9ccda4c9", 0x60, 0x1, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r8, &(0x7f00000004c0)="457e9ecce6f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd0", 0x29, 0xffff, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x1, r3}]) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220) 00:18:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000002e2f66699cdbdf76c7b9e37376e2afaf8f40205b058b8b000000000000"]) openat(r1, &(0x7f0000000200)='./file1\x00', 0x9c000, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r5, &(0x7f0000000040)=""/169, 0x200000e9) r6 = memfd_secret(0x80000) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="00000000000000002e2f66696c65310034dbb6db36594bb07428"]) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3, r9, &(0x7f0000000180)="666fd6fb7c4c8e8bf4059397e83e5ca7e7a13e2dbc305703a2c6a90bba95bb649867b6deabc9", 0x26, 0x4, 0x0, 0x3, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000400)="bcf3b4f072b97e9c8e5e4369e898ea7d3b9aaf8d0633f79e97d0826da4635d97340e117a758d18b9fe61c37ab2832aa388c707228965f582216544e3d9b9e1d50f2085b8b532a2d6b3c64fef32086daf609dede175371d47064c088a9ccda4c9", 0x60, 0x1, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r8, &(0x7f00000004c0)="457e9ecce6f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd0", 0x29, 0xffff, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x1, r3}]) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220) 00:18:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000002e2f66699cdbdf76c7b9e37376e2afaf8f40205b058b8b000000000000"]) openat(r1, &(0x7f0000000200)='./file1\x00', 0x9c000, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r5, &(0x7f0000000040)=""/169, 0x200000e9) r6 = memfd_secret(0x80000) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="00000000000000002e2f66696c65310034dbb6db36594bb07428"]) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3, r9, &(0x7f0000000180)="666fd6fb7c4c8e8bf4059397e83e5ca7e7a13e2dbc305703a2c6a90bba95bb649867b6deabc9", 0x26, 0x4, 0x0, 0x3, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000400)="bcf3b4f072b97e9c8e5e4369e898ea7d3b9aaf8d0633f79e97d0826da4635d97340e117a758d18b9fe61c37ab2832aa388c707228965f582216544e3d9b9e1d50f2085b8b532a2d6b3c64fef32086daf609dede175371d47064c088a9ccda4c9", 0x60, 0x1, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r8, &(0x7f00000004c0)="457e9ecce6f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd0", 0x29, 0xffff, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x1, r3}]) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220) VM DIAGNOSIS: 00:18:50 Registers: info registers vcpu 0 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803f247690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000062 R11=0000000000000001 R12=0000000000000062 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f36f95b4700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fea666b9570 CR3=000000001e8e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f36fc1257c0 00007f36fc1257c8 YMM02=0000000000000000 0000000000000000 00007f36fc1257e0 00007f36fc1257c0 YMM03=0000000000000000 0000000000000000 00007f36fc1257c8 00007f36fc1257c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffffff816d22eb RBX=ffffffff81359c40 RCX=0000000000000000 RDX=1ffff11003ad6eb1 RSI=ffffffff816d22eb RDI=ffff88801d6b75f8 RBP=ffff88801d6b75c8 RSP=ffff88801d6b7528 R8 =ffffffff85ed17c8 R9 =ffffffff85ed17cc R10=ffffed1003ad6eb3 R11=ffff88801d6b7570 R12=ffff88801d6b75f8 R13=0000000000000000 R14=ffff88801c87b580 R15=ffff88801ab55200 RIP=ffffffff81359c40 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe3173ec540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe3178c6000 CR3=000000003ea10000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00ff000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 ff00ffffffffffff ffffffffffffff00 YMM02=0000000000000000 0000000000000000 4f0063305f315f31 5f4c53534e45504f YMM03=0000000000000000 0000000000000000 000000000000314e 5341006c756f7472 YMM04=0000000000000000 0000000000000000 65675f454c424154 5f474e495254535f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000