Warning: Permanently added '[localhost]:51639' (ECDSA) to the list of known hosts. 2022/09/13 15:33:20 fuzzer started 2022/09/13 15:33:20 dialing manager at localhost:36597 syzkaller login: [ 43.615523] cgroup: Unknown subsys name 'net' [ 43.695301] cgroup: Unknown subsys name 'rlimit' 2022/09/13 15:33:35 syscalls: 2215 2022/09/13 15:33:35 code coverage: enabled 2022/09/13 15:33:35 comparison tracing: enabled 2022/09/13 15:33:35 extra coverage: enabled 2022/09/13 15:33:35 setuid sandbox: enabled 2022/09/13 15:33:35 namespace sandbox: enabled 2022/09/13 15:33:35 Android sandbox: enabled 2022/09/13 15:33:35 fault injection: enabled 2022/09/13 15:33:35 leak checking: enabled 2022/09/13 15:33:35 net packet injection: enabled 2022/09/13 15:33:35 net device setup: enabled 2022/09/13 15:33:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/13 15:33:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/13 15:33:35 USB emulation: enabled 2022/09/13 15:33:35 hci packet injection: enabled 2022/09/13 15:33:35 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913) 2022/09/13 15:33:35 802.15.4 emulation: enabled 2022/09/13 15:33:35 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/13 15:33:35 fetching corpus: 45, signal 32797/36284 (executing program) 2022/09/13 15:33:35 fetching corpus: 95, signal 45446/50300 (executing program) 2022/09/13 15:33:35 fetching corpus: 145, signal 52358/58587 (executing program) 2022/09/13 15:33:35 fetching corpus: 195, signal 59860/67315 (executing program) 2022/09/13 15:33:36 fetching corpus: 245, signal 69821/78266 (executing program) 2022/09/13 15:33:36 fetching corpus: 295, signal 75185/84709 (executing program) 2022/09/13 15:33:36 fetching corpus: 345, signal 77633/88374 (executing program) 2022/09/13 15:33:36 fetching corpus: 395, signal 83986/95612 (executing program) 2022/09/13 15:33:36 fetching corpus: 445, signal 89267/101767 (executing program) 2022/09/13 15:33:37 fetching corpus: 495, signal 92371/105867 (executing program) 2022/09/13 15:33:37 fetching corpus: 545, signal 96040/110414 (executing program) 2022/09/13 15:33:38 fetching corpus: 595, signal 99852/115066 (executing program) 2022/09/13 15:33:38 fetching corpus: 645, signal 102570/118627 (executing program) 2022/09/13 15:33:38 fetching corpus: 695, signal 105135/122023 (executing program) 2022/09/13 15:33:38 fetching corpus: 745, signal 107207/124979 (executing program) 2022/09/13 15:33:38 fetching corpus: 795, signal 110567/128940 (executing program) 2022/09/13 15:33:38 fetching corpus: 845, signal 113499/132549 (executing program) 2022/09/13 15:33:38 fetching corpus: 895, signal 116423/136033 (executing program) 2022/09/13 15:33:38 fetching corpus: 945, signal 118739/139020 (executing program) 2022/09/13 15:33:39 fetching corpus: 995, signal 120901/141852 (executing program) 2022/09/13 15:33:39 fetching corpus: 1045, signal 123090/144683 (executing program) 2022/09/13 15:33:39 fetching corpus: 1095, signal 125337/147501 (executing program) 2022/09/13 15:33:39 fetching corpus: 1145, signal 128132/150747 (executing program) 2022/09/13 15:33:39 fetching corpus: 1195, signal 130114/153239 (executing program) 2022/09/13 15:33:39 fetching corpus: 1245, signal 132084/155682 (executing program) 2022/09/13 15:33:39 fetching corpus: 1295, signal 133570/157698 (executing program) 2022/09/13 15:33:40 fetching corpus: 1345, signal 135827/160366 (executing program) 2022/09/13 15:33:40 fetching corpus: 1395, signal 137238/162406 (executing program) 2022/09/13 15:33:40 fetching corpus: 1445, signal 138757/164399 (executing program) 2022/09/13 15:33:40 fetching corpus: 1495, signal 140436/166523 (executing program) 2022/09/13 15:33:40 fetching corpus: 1545, signal 142589/168947 (executing program) 2022/09/13 15:33:40 fetching corpus: 1595, signal 143683/170528 (executing program) 2022/09/13 15:33:40 fetching corpus: 1645, signal 145340/172592 (executing program) 2022/09/13 15:33:41 fetching corpus: 1695, signal 147528/174941 (executing program) 2022/09/13 15:33:41 fetching corpus: 1745, signal 148852/176637 (executing program) 2022/09/13 15:33:41 fetching corpus: 1795, signal 151127/178966 (executing program) 2022/09/13 15:33:41 fetching corpus: 1845, signal 151706/180142 (executing program) 2022/09/13 15:33:41 fetching corpus: 1895, signal 153491/182106 (executing program) 2022/09/13 15:33:41 fetching corpus: 1945, signal 154339/183440 (executing program) 2022/09/13 15:33:41 fetching corpus: 1995, signal 156375/185544 (executing program) 2022/09/13 15:33:41 fetching corpus: 2045, signal 157903/187207 (executing program) 2022/09/13 15:33:42 fetching corpus: 2095, signal 159587/188973 (executing program) 2022/09/13 15:33:42 fetching corpus: 2145, signal 160868/190478 (executing program) 2022/09/13 15:33:42 fetching corpus: 2195, signal 161797/191817 (executing program) 2022/09/13 15:33:42 fetching corpus: 2245, signal 163066/193275 (executing program) 2022/09/13 15:33:42 fetching corpus: 2295, signal 163878/194410 (executing program) 2022/09/13 15:33:42 fetching corpus: 2345, signal 165520/196069 (executing program) 2022/09/13 15:33:42 fetching corpus: 2395, signal 166496/197273 (executing program) 2022/09/13 15:33:42 fetching corpus: 2445, signal 168190/198879 (executing program) 2022/09/13 15:33:42 fetching corpus: 2495, signal 169287/200112 (executing program) 2022/09/13 15:33:43 fetching corpus: 2545, signal 170370/201349 (executing program) 2022/09/13 15:33:43 fetching corpus: 2595, signal 171822/202769 (executing program) 2022/09/13 15:33:43 fetching corpus: 2645, signal 173823/204422 (executing program) 2022/09/13 15:33:43 fetching corpus: 2695, signal 175106/205691 (executing program) 2022/09/13 15:33:43 fetching corpus: 2745, signal 176400/206933 (executing program) 2022/09/13 15:33:43 fetching corpus: 2795, signal 177570/208106 (executing program) 2022/09/13 15:33:43 fetching corpus: 2845, signal 178424/209140 (executing program) 2022/09/13 15:33:44 fetching corpus: 2895, signal 179652/210246 (executing program) 2022/09/13 15:33:44 fetching corpus: 2945, signal 180756/211310 (executing program) 2022/09/13 15:33:44 fetching corpus: 2995, signal 182204/212529 (executing program) 2022/09/13 15:33:44 fetching corpus: 3045, signal 183712/213808 (executing program) 2022/09/13 15:33:44 fetching corpus: 3095, signal 184903/214899 (executing program) 2022/09/13 15:33:44 fetching corpus: 3145, signal 186009/215957 (executing program) 2022/09/13 15:33:45 fetching corpus: 3195, signal 186827/216816 (executing program) 2022/09/13 15:33:45 fetching corpus: 3245, signal 187500/217592 (executing program) 2022/09/13 15:33:45 fetching corpus: 3295, signal 189046/218720 (executing program) 2022/09/13 15:33:45 fetching corpus: 3345, signal 190413/219795 (executing program) 2022/09/13 15:33:45 fetching corpus: 3395, signal 191734/220769 (executing program) 2022/09/13 15:33:45 fetching corpus: 3445, signal 192798/221662 (executing program) 2022/09/13 15:33:46 fetching corpus: 3495, signal 193787/222525 (executing program) 2022/09/13 15:33:46 fetching corpus: 3545, signal 194768/223277 (executing program) 2022/09/13 15:33:46 fetching corpus: 3595, signal 195780/224094 (executing program) 2022/09/13 15:33:46 fetching corpus: 3645, signal 196712/224836 (executing program) 2022/09/13 15:33:46 fetching corpus: 3695, signal 197596/225547 (executing program) 2022/09/13 15:33:46 fetching corpus: 3745, signal 198313/226207 (executing program) 2022/09/13 15:33:46 fetching corpus: 3795, signal 199723/227128 (executing program) 2022/09/13 15:33:46 fetching corpus: 3845, signal 200272/227678 (executing program) 2022/09/13 15:33:47 fetching corpus: 3895, signal 201262/228382 (executing program) 2022/09/13 15:33:47 fetching corpus: 3945, signal 202032/229011 (executing program) 2022/09/13 15:33:47 fetching corpus: 3995, signal 202596/229513 (executing program) 2022/09/13 15:33:47 fetching corpus: 4045, signal 203282/230114 (executing program) 2022/09/13 15:33:47 fetching corpus: 4095, signal 204486/230827 (executing program) 2022/09/13 15:33:47 fetching corpus: 4145, signal 205113/231337 (executing program) 2022/09/13 15:33:47 fetching corpus: 4195, signal 205868/231881 (executing program) 2022/09/13 15:33:48 fetching corpus: 4245, signal 206458/232406 (executing program) 2022/09/13 15:33:48 fetching corpus: 4295, signal 207569/233035 (executing program) 2022/09/13 15:33:48 fetching corpus: 4345, signal 208744/233673 (executing program) 2022/09/13 15:33:48 fetching corpus: 4395, signal 209314/234121 (executing program) 2022/09/13 15:33:48 fetching corpus: 4445, signal 209967/234604 (executing program) 2022/09/13 15:33:48 fetching corpus: 4495, signal 210902/235084 (executing program) 2022/09/13 15:33:48 fetching corpus: 4545, signal 211908/235600 (executing program) 2022/09/13 15:33:49 fetching corpus: 4595, signal 212795/236037 (executing program) 2022/09/13 15:33:49 fetching corpus: 4645, signal 213432/236418 (executing program) 2022/09/13 15:33:49 fetching corpus: 4695, signal 214176/236811 (executing program) 2022/09/13 15:33:49 fetching corpus: 4745, signal 214913/237218 (executing program) 2022/09/13 15:33:49 fetching corpus: 4795, signal 215451/237568 (executing program) 2022/09/13 15:33:49 fetching corpus: 4845, signal 216111/237916 (executing program) 2022/09/13 15:33:49 fetching corpus: 4895, signal 216801/238280 (executing program) 2022/09/13 15:33:49 fetching corpus: 4945, signal 217545/238649 (executing program) 2022/09/13 15:33:50 fetching corpus: 4995, signal 218445/239030 (executing program) 2022/09/13 15:33:50 fetching corpus: 5045, signal 219097/239383 (executing program) 2022/09/13 15:33:50 fetching corpus: 5095, signal 219640/239652 (executing program) 2022/09/13 15:33:50 fetching corpus: 5145, signal 220118/239911 (executing program) 2022/09/13 15:33:50 fetching corpus: 5195, signal 220469/240191 (executing program) 2022/09/13 15:33:50 fetching corpus: 5245, signal 221287/240504 (executing program) 2022/09/13 15:33:50 fetching corpus: 5295, signal 221628/240771 (executing program) 2022/09/13 15:33:51 fetching corpus: 5345, signal 222359/241028 (executing program) 2022/09/13 15:33:51 fetching corpus: 5395, signal 223224/241311 (executing program) 2022/09/13 15:33:51 fetching corpus: 5445, signal 223856/241534 (executing program) 2022/09/13 15:33:51 fetching corpus: 5495, signal 224499/241728 (executing program) 2022/09/13 15:33:51 fetching corpus: 5545, signal 225004/241964 (executing program) 2022/09/13 15:33:51 fetching corpus: 5595, signal 225546/242145 (executing program) 2022/09/13 15:33:51 fetching corpus: 5645, signal 226092/242325 (executing program) 2022/09/13 15:33:51 fetching corpus: 5695, signal 226560/242503 (executing program) 2022/09/13 15:33:52 fetching corpus: 5745, signal 227021/242637 (executing program) 2022/09/13 15:33:52 fetching corpus: 5795, signal 227310/242773 (executing program) 2022/09/13 15:33:52 fetching corpus: 5845, signal 228059/242932 (executing program) 2022/09/13 15:33:52 fetching corpus: 5895, signal 228521/242992 (executing program) 2022/09/13 15:33:52 fetching corpus: 5945, signal 228884/243012 (executing program) 2022/09/13 15:33:52 fetching corpus: 5995, signal 229316/243012 (executing program) 2022/09/13 15:33:53 fetching corpus: 6045, signal 230227/243016 (executing program) 2022/09/13 15:33:53 fetching corpus: 6095, signal 230592/243034 (executing program) 2022/09/13 15:33:53 fetching corpus: 6145, signal 231414/243054 (executing program) 2022/09/13 15:33:53 fetching corpus: 6195, signal 231895/243067 (executing program) 2022/09/13 15:33:53 fetching corpus: 6245, signal 232387/243076 (executing program) 2022/09/13 15:33:53 fetching corpus: 6295, signal 232865/243103 (executing program) 2022/09/13 15:33:53 fetching corpus: 6345, signal 233360/243108 (executing program) 2022/09/13 15:33:53 fetching corpus: 6395, signal 233668/243131 (executing program) 2022/09/13 15:33:54 fetching corpus: 6430, signal 233967/243135 (executing program) 2022/09/13 15:33:54 fetching corpus: 6430, signal 233967/243135 (executing program) 2022/09/13 15:33:56 starting 8 fuzzer processes 15:33:56 executing program 0: execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000018c0), 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x125e, &(0x7f0000002340)) 15:33:56 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x2, 0xfa, 0xcb, 0x0, 0x0, 0x400000, 0x80018, 0x6222d24d17ef1fca, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x4000, 0x2e, 0x7fffffff, 0x7, 0x80000001, 0x1ff, 0x0, 0x0, 0x20, 0x0, 0x7}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000480)=""/197, 0xc5, 0x2002, &(0x7f0000000580)=@file={0x0, './file2\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x400, 0x0) syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="01e4ffffff000006002f66"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001c00)='cmdline\x00') chroot(&(0x7f0000000640)='./file0\x00') preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000001c40)=""/159, 0x9f}], 0x1, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROM_LOCKDOOR(r2, 0x5330, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file1\x00', 0x8800, &(0x7f00000006c0)={0x1, 0x100000, 0x80000, {r2}}, 0x20) 15:33:56 executing program 2: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) 15:33:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e36383530363930383600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020dbf4655fdbf4655fdbf4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000dbf4655fdbf4655fdbf4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00)) 15:33:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1, 0x0) 15:33:56 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}], 0x1, 0xfc) 15:33:56 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0x4a501, 0x0) 15:33:56 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000200)={'wlan0\x00', {0x2, 0x0, @multicast1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000066f80)={0xfff, [], 0x2, "25c0b04f6911ac"}) openat$incfs(0xffffffffffffffff, 0x0, 0xa202, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="090101000100000018080000", @ANYRES32=r0, @ANYBLOB="0100fe1a000000002e2f66696c653100"]) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) [ 79.701363] audit: type=1400 audit(1663083236.844:6): avc: denied { execmem } for pid=290 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 81.040511] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.043113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.044339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.046858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.048389] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.050180] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.052350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.053493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.055242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.058523] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.060154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.061388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.062437] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.063547] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.065711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.070421] Bluetooth: hci3: HCI_REQ-0x0c1a [ 81.073730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.089490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.089838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.091840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.093876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.094239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.099463] Bluetooth: hci1: HCI_REQ-0x0c1a [ 81.100811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.103111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.106566] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.108968] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.112488] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.114746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.115994] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.117039] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.121951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.129125] Bluetooth: hci0: HCI_REQ-0x0c1a [ 81.129997] Bluetooth: hci4: HCI_REQ-0x0c1a [ 81.134704] Bluetooth: hci2: HCI_REQ-0x0c1a [ 81.153442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.154953] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.156892] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.158490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.160057] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.163920] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.172535] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.174066] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.179748] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.181100] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.182223] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.183301] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.188363] Bluetooth: hci7: HCI_REQ-0x0c1a [ 81.191202] Bluetooth: hci5: HCI_REQ-0x0c1a [ 83.122466] Bluetooth: hci3: command 0x0409 tx timeout [ 83.122467] Bluetooth: hci1: command 0x0409 tx timeout [ 83.185665] Bluetooth: hci4: command 0x0409 tx timeout [ 83.185691] Bluetooth: hci2: command 0x0409 tx timeout [ 83.186701] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 83.189852] Bluetooth: hci0: command 0x0409 tx timeout [ 83.249765] Bluetooth: hci5: command 0x0409 tx timeout [ 83.250237] Bluetooth: hci7: command 0x0409 tx timeout [ 85.169744] Bluetooth: hci3: command 0x041b tx timeout [ 85.170839] Bluetooth: hci1: command 0x041b tx timeout [ 85.233766] Bluetooth: hci0: command 0x041b tx timeout [ 85.235544] Bluetooth: hci2: command 0x041b tx timeout [ 85.237438] Bluetooth: hci4: command 0x041b tx timeout [ 85.297796] Bluetooth: hci7: command 0x041b tx timeout [ 85.299062] Bluetooth: hci5: command 0x041b tx timeout [ 87.217725] Bluetooth: hci1: command 0x040f tx timeout [ 87.218297] Bluetooth: hci3: command 0x040f tx timeout [ 87.281661] Bluetooth: hci4: command 0x040f tx timeout [ 87.282162] Bluetooth: hci2: command 0x040f tx timeout [ 87.283793] Bluetooth: hci0: command 0x040f tx timeout [ 87.345680] Bluetooth: hci5: command 0x040f tx timeout [ 87.346161] Bluetooth: hci7: command 0x040f tx timeout [ 88.113718] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 89.266705] Bluetooth: hci3: command 0x0419 tx timeout [ 89.267197] Bluetooth: hci1: command 0x0419 tx timeout [ 89.329661] Bluetooth: hci0: command 0x0419 tx timeout [ 89.330099] Bluetooth: hci2: command 0x0419 tx timeout [ 89.330478] Bluetooth: hci4: command 0x0419 tx timeout [ 89.393832] Bluetooth: hci7: command 0x0419 tx timeout [ 89.394247] Bluetooth: hci5: command 0x0419 tx timeout [ 92.849727] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 97.586862] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 102.322848] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 105.001122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 105.002289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 105.004177] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 105.006305] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 105.007246] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 105.008498] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 105.023190] Bluetooth: hci6: HCI_REQ-0x0c1a [ 107.058689] Bluetooth: hci6: command 0x0409 tx timeout [ 109.105734] Bluetooth: hci6: command 0x041b tx timeout [ 111.154663] Bluetooth: hci6: command 0x040f tx timeout [ 113.202630] Bluetooth: hci6: command 0x0419 tx timeout 15:34:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1, 0x0) 15:34:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1, 0x0) 15:34:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1, 0x0) 15:34:46 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 15:34:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 15:34:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 15:34:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 15:34:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) [ 131.766996] audit: type=1400 audit(1663083288.909:7): avc: denied { open } for pid=3712 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.768555] audit: type=1400 audit(1663083288.910:8): avc: denied { kernel } for pid=3712 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.784247] ------------[ cut here ]------------ [ 131.784275] [ 131.784280] ====================================================== [ 131.784285] WARNING: possible circular locking dependency detected [ 131.784291] 6.0.0-rc5-next-20220913 #1 Not tainted [ 131.784300] ------------------------------------------------------ [ 131.784304] syz-executor.1/3714 is trying to acquire lock: [ 131.784314] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 131.784364] [ 131.784364] but task is already holding lock: [ 131.784368] ffff88800f9e6420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.784407] [ 131.784407] which lock already depends on the new lock. [ 131.784407] [ 131.784412] [ 131.784412] the existing dependency chain (in reverse order) is: [ 131.784417] [ 131.784417] -> #3 (&ctx->lock){....}-{2:2}: [ 131.784437] _raw_spin_lock+0x2a/0x40 [ 131.784462] __perf_event_task_sched_out+0x53b/0x18d0 [ 131.784481] __schedule+0xedd/0x2470 [ 131.784495] schedule+0xda/0x1b0 [ 131.784509] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.784540] syscall_exit_to_user_mode+0x19/0x40 [ 131.784566] do_syscall_64+0x48/0x90 [ 131.784587] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.784616] [ 131.784616] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 131.784637] _raw_spin_lock_nested+0x30/0x40 [ 131.784659] raw_spin_rq_lock_nested+0x1e/0x30 [ 131.784678] task_fork_fair+0x63/0x4d0 [ 131.784704] sched_cgroup_fork+0x3d0/0x540 [ 131.784725] copy_process+0x3f9e/0x6df0 [ 131.784740] kernel_clone+0xe7/0x890 [ 131.784754] user_mode_thread+0xad/0xf0 [ 131.784769] rest_init+0x24/0x250 [ 131.784794] arch_call_rest_init+0xf/0x14 [ 131.784823] start_kernel+0x4c1/0x4e6 [ 131.784849] secondary_startup_64_no_verify+0xe0/0xeb [ 131.784870] [ 131.784870] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 131.784890] _raw_spin_lock_irqsave+0x39/0x60 [ 131.784913] try_to_wake_up+0xab/0x1920 [ 131.784933] up+0x75/0xb0 [ 131.784950] __up_console_sem+0x6e/0x80 [ 131.784974] console_unlock+0x46a/0x590 [ 131.784998] vt_ioctl+0x2822/0x2ca0 [ 131.785016] tty_ioctl+0x7c4/0x1700 [ 131.785032] __x64_sys_ioctl+0x19a/0x210 [ 131.785054] do_syscall_64+0x3b/0x90 [ 131.785074] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.785100] [ 131.785100] -> #0 ((console_sem).lock){....}-{2:2}: [ 131.785121] __lock_acquire+0x2a02/0x5e70 [ 131.785146] lock_acquire+0x1a2/0x530 [ 131.785170] _raw_spin_lock_irqsave+0x39/0x60 [ 131.785193] down_trylock+0xe/0x70 [ 131.785212] __down_trylock_console_sem+0x3b/0xd0 [ 131.785237] vprintk_emit+0x16b/0x560 [ 131.785262] vprintk+0x84/0xa0 [ 131.785287] _printk+0xba/0xf1 [ 131.785314] report_bug.cold+0x72/0xab [ 131.785332] handle_bug+0x3c/0x70 [ 131.785351] exc_invalid_op+0x14/0x50 [ 131.785372] asm_exc_invalid_op+0x16/0x20 [ 131.785396] group_sched_out.part.0+0x2c7/0x460 [ 131.785412] ctx_sched_out+0x8f1/0xc10 [ 131.785426] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.785445] __schedule+0xedd/0x2470 [ 131.785459] schedule+0xda/0x1b0 [ 131.785473] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.785503] syscall_exit_to_user_mode+0x19/0x40 [ 131.785529] do_syscall_64+0x48/0x90 [ 131.785549] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.785578] [ 131.785578] other info that might help us debug this: [ 131.785578] [ 131.785582] Chain exists of: [ 131.785582] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 131.785582] [ 131.785604] Possible unsafe locking scenario: [ 131.785604] [ 131.785607] CPU0 CPU1 [ 131.785611] ---- ---- [ 131.785614] lock(&ctx->lock); [ 131.785623] lock(&rq->__lock); [ 131.785632] lock(&ctx->lock); [ 131.785641] lock((console_sem).lock); [ 131.785650] [ 131.785650] *** DEADLOCK *** [ 131.785650] [ 131.785653] 2 locks held by syz-executor.1/3714: [ 131.785663] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 131.785702] #1: ffff88800f9e6420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.785743] [ 131.785743] stack backtrace: [ 131.785747] CPU: 0 PID: 3714 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220913 #1 [ 131.785766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.785778] Call Trace: [ 131.785782] [ 131.785789] dump_stack_lvl+0x8b/0xb3 [ 131.785810] check_noncircular+0x263/0x2e0 [ 131.785836] ? format_decode+0x26c/0xb50 [ 131.785858] ? print_circular_bug+0x450/0x450 [ 131.785885] ? enable_ptr_key_workfn+0x20/0x20 [ 131.785905] ? __lockdep_reset_lock+0x180/0x180 [ 131.785931] ? format_decode+0x26c/0xb50 [ 131.785955] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 131.785982] __lock_acquire+0x2a02/0x5e70 [ 131.786015] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.786050] lock_acquire+0x1a2/0x530 [ 131.786076] ? down_trylock+0xe/0x70 [ 131.786098] ? rcu_read_unlock+0x40/0x40 [ 131.786125] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.786157] ? vprintk+0x84/0xa0 [ 131.786185] _raw_spin_lock_irqsave+0x39/0x60 [ 131.786209] ? down_trylock+0xe/0x70 [ 131.786230] down_trylock+0xe/0x70 [ 131.786250] ? vprintk+0x84/0xa0 [ 131.786276] __down_trylock_console_sem+0x3b/0xd0 [ 131.786303] vprintk_emit+0x16b/0x560 [ 131.786329] ? lock_downgrade+0x6d0/0x6d0 [ 131.786358] vprintk+0x84/0xa0 [ 131.786385] _printk+0xba/0xf1 [ 131.786412] ? record_print_text.cold+0x16/0x16 [ 131.786443] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 131.786463] ? lock_downgrade+0x6d0/0x6d0 [ 131.786490] ? report_bug.cold+0x66/0xab [ 131.786512] ? group_sched_out.part.0+0x2c7/0x460 [ 131.786529] report_bug.cold+0x72/0xab [ 131.786552] handle_bug+0x3c/0x70 [ 131.786573] exc_invalid_op+0x14/0x50 [ 131.786594] asm_exc_invalid_op+0x16/0x20 [ 131.786621] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.786640] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.786658] RSP: 0018:ffff88803fb57c48 EFLAGS: 00010006 [ 131.786671] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.786683] RDX: ffff8880103c5040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 131.786694] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 131.786705] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f9e6400 [ 131.786716] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 131.786733] ? group_sched_out.part.0+0x2c7/0x460 [ 131.786753] ? group_sched_out.part.0+0x2c7/0x460 [ 131.786772] ctx_sched_out+0x8f1/0xc10 [ 131.786791] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.786815] ? lock_is_held_type+0xd7/0x130 [ 131.786843] ? __perf_cgroup_move+0x160/0x160 [ 131.786861] ? set_next_entity+0x304/0x550 [ 131.786888] ? update_curr+0x267/0x740 [ 131.786917] ? lock_is_held_type+0xd7/0x130 [ 131.786945] __schedule+0xedd/0x2470 [ 131.786965] ? io_schedule_timeout+0x150/0x150 [ 131.786987] schedule+0xda/0x1b0 [ 131.787004] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.787036] syscall_exit_to_user_mode+0x19/0x40 [ 131.787082] do_syscall_64+0x48/0x90 [ 131.787104] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.787131] RIP: 0033:0x7f79c77a6b19 [ 131.787144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.787161] RSP: 002b:00007f79c4d1c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 131.787177] RAX: 0000000000000003 RBX: 00007f79c78b9f60 RCX: 00007f79c77a6b19 [ 131.787189] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 131.787200] RBP: 00007f79c7800f6d R08: 0000000000000000 R09: 0000000000000000 [ 131.787211] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 131.787222] R13: 00007ffc170b1d2f R14: 00007f79c4d1c300 R15: 0000000000022000 [ 131.787242] [ 131.869563] WARNING: CPU: 0 PID: 3714 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 131.870517] Modules linked in: [ 131.870858] CPU: 0 PID: 3714 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220913 #1 [ 131.871691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.872841] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.873398] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.875263] RSP: 0018:ffff88803fb57c48 EFLAGS: 00010006 [ 131.875811] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.876543] RDX: ffff8880103c5040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 131.877276] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 131.878003] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f9e6400 [ 131.878733] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 131.879483] FS: 00007f79c4d1c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 131.880309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.880908] CR2: 00007f151fa86000 CR3: 000000003f842000 CR4: 0000000000350ef0 [ 131.881645] Call Trace: [ 131.881918] [ 131.882158] ctx_sched_out+0x8f1/0xc10 [ 131.882562] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.883109] ? lock_is_held_type+0xd7/0x130 [ 131.883560] ? __perf_cgroup_move+0x160/0x160 [ 131.884031] ? set_next_entity+0x304/0x550 [ 131.884475] ? update_curr+0x267/0x740 [ 131.884890] ? lock_is_held_type+0xd7/0x130 [ 131.885347] __schedule+0xedd/0x2470 [ 131.885743] ? io_schedule_timeout+0x150/0x150 [ 131.886221] schedule+0xda/0x1b0 [ 131.886576] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.887108] syscall_exit_to_user_mode+0x19/0x40 [ 131.887603] do_syscall_64+0x48/0x90 [ 131.887988] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.888529] RIP: 0033:0x7f79c77a6b19 [ 131.888913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.890765] RSP: 002b:00007f79c4d1c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 131.891555] RAX: 0000000000000003 RBX: 00007f79c78b9f60 RCX: 00007f79c77a6b19 [ 131.892287] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 131.893011] RBP: 00007f79c7800f6d R08: 0000000000000000 R09: 0000000000000000 [ 131.893752] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 131.894491] R13: 00007ffc170b1d2f R14: 00007f79c4d1c300 R15: 0000000000022000 [ 131.895247] [ 131.895493] irq event stamp: 1632 [ 131.895853] hardirqs last enabled at (1631): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 131.896803] hardirqs last disabled at (1632): [] __schedule+0x1225/0x2470 [ 131.897642] softirqs last enabled at (1502): [] __irq_exit_rcu+0x11b/0x180 [ 131.898510] softirqs last disabled at (587): [] __irq_exit_rcu+0x11b/0x180 [ 131.899373] ---[ end trace 0000000000000000 ]--- [ 131.908041] process 'syz-executor.0' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 131.916076] loop1: detected capacity change from 0 to 256 [ 131.934847] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 132.159039] 9pnet_fd: p9_fd_create_tcp (3716): problem connecting socket to 127.0.0.1 [ 132.201285] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 132.735472] loop3: detected capacity change from 0 to 2048 [ 132.759303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.760314] ext4 filesystem being mounted at /syzkaller-testdir438865326/syzkaller.ItskW5/0/file0 supports timestamps until 2038 (0x7fffffff) [ 132.776499] EXT4-fs (loop3): unmounting filesystem. [ 139.527027] audit: type=1400 audit(1663083296.670:9): avc: denied { write } for pid=3979 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 139.561221] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 139.587612] hrtimer: interrupt took 19066 ns 15:34:57 executing program 0: execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000018c0), 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x125e, &(0x7f0000002340)) 15:34:57 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x2, 0xfa, 0xcb, 0x0, 0x0, 0x400000, 0x80018, 0x6222d24d17ef1fca, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x4000, 0x2e, 0x7fffffff, 0x7, 0x80000001, 0x1ff, 0x0, 0x0, 0x20, 0x0, 0x7}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000480)=""/197, 0xc5, 0x2002, &(0x7f0000000580)=@file={0x0, './file2\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x400, 0x0) syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="01e4ffffff000006002f66"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001c00)='cmdline\x00') chroot(&(0x7f0000000640)='./file0\x00') preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000001c40)=""/159, 0x9f}], 0x1, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROM_LOCKDOOR(r2, 0x5330, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file1\x00', 0x8800, &(0x7f00000006c0)={0x1, 0x100000, 0x80000, {r2}}, 0x20) 15:34:57 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x2, 0xfa, 0xcb, 0x0, 0x0, 0x400000, 0x80018, 0x6222d24d17ef1fca, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x4000, 0x2e, 0x7fffffff, 0x7, 0x80000001, 0x1ff, 0x0, 0x0, 0x20, 0x0, 0x7}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000480)=""/197, 0xc5, 0x2002, &(0x7f0000000580)=@file={0x0, './file2\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x400, 0x0) syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="01e4ffffff000006002f66"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001c00)='cmdline\x00') chroot(&(0x7f0000000640)='./file0\x00') preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000001c40)=""/159, 0x9f}], 0x1, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROM_LOCKDOOR(r2, 0x5330, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file1\x00', 0x8800, &(0x7f00000006c0)={0x1, 0x100000, 0x80000, {r2}}, 0x20) 15:34:57 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000200)={'wlan0\x00', {0x2, 0x0, @multicast1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000066f80)={0xfff, [], 0x2, "25c0b04f6911ac"}) openat$incfs(0xffffffffffffffff, 0x0, 0xa202, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="090101000100000018080000", @ANYRES32=r0, @ANYBLOB="0100fe1a000000002e2f66696c653100"]) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 15:34:57 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}], 0x1, 0xfc) 15:34:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 15:34:57 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 15:34:57 executing program 2: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) [ 140.510805] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 15:34:57 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x2, 0xfa, 0xcb, 0x0, 0x0, 0x400000, 0x80018, 0x6222d24d17ef1fca, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x4000, 0x2e, 0x7fffffff, 0x7, 0x80000001, 0x1ff, 0x0, 0x0, 0x20, 0x0, 0x7}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000480)=""/197, 0xc5, 0x2002, &(0x7f0000000580)=@file={0x0, './file2\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x400, 0x0) syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="01e4ffffff000006002f66"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001c00)='cmdline\x00') chroot(&(0x7f0000000640)='./file0\x00') preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000001c40)=""/159, 0x9f}], 0x1, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROM_LOCKDOOR(r2, 0x5330, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file1\x00', 0x8800, &(0x7f00000006c0)={0x1, 0x100000, 0x80000, {r2}}, 0x20) 15:34:57 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}], 0x1, 0xfc) 15:34:57 executing program 2: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) [ 140.751365] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 141.251543] loop3: detected capacity change from 0 to 256 [ 141.382743] loop1: detected capacity change from 0 to 256 [ 141.455011] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 141.465021] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 141.507904] loop5: detected capacity change from 0 to 256 [ 141.676183] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 141.695706] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:34:58 executing program 0: execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000018c0), 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x125e, &(0x7f0000002340)) 15:34:58 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x2, 0xfa, 0xcb, 0x0, 0x0, 0x400000, 0x80018, 0x6222d24d17ef1fca, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x4000, 0x2e, 0x7fffffff, 0x7, 0x80000001, 0x1ff, 0x0, 0x0, 0x20, 0x0, 0x7}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000480)=""/197, 0xc5, 0x2002, &(0x7f0000000580)=@file={0x0, './file2\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x400, 0x0) syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="01e4ffffff000006002f66"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001c00)='cmdline\x00') chroot(&(0x7f0000000640)='./file0\x00') preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000001c40)=""/159, 0x9f}], 0x1, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROM_LOCKDOOR(r2, 0x5330, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file1\x00', 0x8800, &(0x7f00000006c0)={0x1, 0x100000, 0x80000, {r2}}, 0x20) 15:34:58 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 15:34:58 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000200)={'wlan0\x00', {0x2, 0x0, @multicast1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000066f80)={0xfff, [], 0x2, "25c0b04f6911ac"}) openat$incfs(0xffffffffffffffff, 0x0, 0xa202, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="090101000100000018080000", @ANYRES32=r0, @ANYBLOB="0100fe1a000000002e2f66696c653100"]) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 15:34:58 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}], 0x1, 0xfc) VM DIAGNOSIS: 15:34:49 Registers: info registers vcpu 0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88803fb57698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000065 R11=0000000000000001 R12=0000000000000065 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0 RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f79c4d1c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f151fa86000 CR3=000000003f842000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=1ffff1100381cf3d RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff85b02310 RBP=0000000000000001 RSP=ffff88801c0e79d8 R8 =0000000000000000 R9 =ffffffff85b02317 R10=fffffbfff0b60462 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff88806cf3e2d0 R15=0000000000000000 RIP=ffffffff812a40fb RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556ab3400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f578fb316f4 CR3=0000000015cee000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ff00000000ff0000 00000000000000ff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000