Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:3120' (ECDSA) to the list of known hosts. 2022/10/02 08:48:58 fuzzer started 2022/10/02 08:48:58 dialing manager at localhost:35095 syzkaller login: [ 37.847021] cgroup: Unknown subsys name 'net' [ 37.932353] cgroup: Unknown subsys name 'rlimit' 2022/10/02 08:49:14 syscalls: 2215 2022/10/02 08:49:14 code coverage: enabled 2022/10/02 08:49:14 comparison tracing: enabled 2022/10/02 08:49:14 extra coverage: enabled 2022/10/02 08:49:14 setuid sandbox: enabled 2022/10/02 08:49:14 namespace sandbox: enabled 2022/10/02 08:49:14 Android sandbox: enabled 2022/10/02 08:49:14 fault injection: enabled 2022/10/02 08:49:14 leak checking: enabled 2022/10/02 08:49:14 net packet injection: enabled 2022/10/02 08:49:14 net device setup: enabled 2022/10/02 08:49:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 08:49:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 08:49:14 USB emulation: enabled 2022/10/02 08:49:14 hci packet injection: enabled 2022/10/02 08:49:14 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 08:49:14 802.15.4 emulation: enabled 2022/10/02 08:49:14 fetching corpus: 50, signal 32501/34259 (executing program) 2022/10/02 08:49:14 fetching corpus: 100, signal 39023/42443 (executing program) 2022/10/02 08:49:15 fetching corpus: 150, signal 47198/52134 (executing program) 2022/10/02 08:49:15 fetching corpus: 200, signal 51708/58154 (executing program) 2022/10/02 08:49:15 fetching corpus: 250, signal 57775/65576 (executing program) 2022/10/02 08:49:15 fetching corpus: 300, signal 62885/72048 (executing program) 2022/10/02 08:49:15 fetching corpus: 350, signal 65702/76295 (executing program) 2022/10/02 08:49:15 fetching corpus: 400, signal 69500/81398 (executing program) 2022/10/02 08:49:15 fetching corpus: 450, signal 74501/87549 (executing program) 2022/10/02 08:49:15 fetching corpus: 500, signal 76914/91240 (executing program) 2022/10/02 08:49:15 fetching corpus: 550, signal 78863/94427 (executing program) 2022/10/02 08:49:15 fetching corpus: 600, signal 82143/98833 (executing program) 2022/10/02 08:49:16 fetching corpus: 650, signal 85990/103636 (executing program) 2022/10/02 08:49:16 fetching corpus: 700, signal 88905/107620 (executing program) 2022/10/02 08:49:16 fetching corpus: 750, signal 91732/111543 (executing program) 2022/10/02 08:49:16 fetching corpus: 800, signal 95935/116603 (executing program) 2022/10/02 08:49:16 fetching corpus: 850, signal 97963/119721 (executing program) 2022/10/02 08:49:16 fetching corpus: 900, signal 100139/122932 (executing program) 2022/10/02 08:49:16 fetching corpus: 950, signal 101465/125339 (executing program) 2022/10/02 08:49:16 fetching corpus: 1000, signal 102819/127813 (executing program) 2022/10/02 08:49:17 fetching corpus: 1050, signal 105247/131073 (executing program) 2022/10/02 08:49:17 fetching corpus: 1100, signal 108040/134640 (executing program) 2022/10/02 08:49:17 fetching corpus: 1150, signal 112202/139257 (executing program) 2022/10/02 08:49:17 fetching corpus: 1200, signal 114455/142282 (executing program) 2022/10/02 08:49:17 fetching corpus: 1250, signal 117148/145665 (executing program) 2022/10/02 08:49:17 fetching corpus: 1300, signal 119919/149022 (executing program) 2022/10/02 08:49:17 fetching corpus: 1350, signal 121154/151146 (executing program) 2022/10/02 08:49:18 fetching corpus: 1400, signal 122995/153700 (executing program) 2022/10/02 08:49:18 fetching corpus: 1450, signal 123993/155576 (executing program) 2022/10/02 08:49:18 fetching corpus: 1500, signal 125133/157568 (executing program) 2022/10/02 08:49:18 fetching corpus: 1550, signal 126497/159765 (executing program) 2022/10/02 08:49:18 fetching corpus: 1600, signal 127684/161720 (executing program) 2022/10/02 08:49:18 fetching corpus: 1650, signal 129358/164086 (executing program) 2022/10/02 08:49:18 fetching corpus: 1700, signal 130353/165875 (executing program) 2022/10/02 08:49:18 fetching corpus: 1750, signal 131715/167957 (executing program) 2022/10/02 08:49:18 fetching corpus: 1800, signal 133298/170124 (executing program) 2022/10/02 08:49:18 fetching corpus: 1850, signal 134490/171988 (executing program) 2022/10/02 08:49:19 fetching corpus: 1900, signal 136751/174584 (executing program) 2022/10/02 08:49:19 fetching corpus: 1950, signal 137898/176338 (executing program) 2022/10/02 08:49:19 fetching corpus: 2000, signal 139555/178496 (executing program) 2022/10/02 08:49:19 fetching corpus: 2050, signal 141387/180777 (executing program) 2022/10/02 08:49:19 fetching corpus: 2100, signal 142778/182655 (executing program) 2022/10/02 08:49:19 fetching corpus: 2150, signal 144292/184645 (executing program) 2022/10/02 08:49:19 fetching corpus: 2200, signal 145826/186614 (executing program) 2022/10/02 08:49:19 fetching corpus: 2250, signal 146409/187869 (executing program) 2022/10/02 08:49:20 fetching corpus: 2300, signal 148334/190082 (executing program) 2022/10/02 08:49:20 fetching corpus: 2350, signal 149691/191873 (executing program) 2022/10/02 08:49:20 fetching corpus: 2400, signal 150744/193436 (executing program) 2022/10/02 08:49:20 fetching corpus: 2450, signal 152131/195219 (executing program) 2022/10/02 08:49:20 fetching corpus: 2500, signal 153585/197046 (executing program) 2022/10/02 08:49:20 fetching corpus: 2550, signal 154819/198732 (executing program) 2022/10/02 08:49:20 fetching corpus: 2600, signal 156221/200483 (executing program) 2022/10/02 08:49:20 fetching corpus: 2650, signal 156945/201779 (executing program) 2022/10/02 08:49:21 fetching corpus: 2700, signal 158329/203480 (executing program) 2022/10/02 08:49:21 fetching corpus: 2750, signal 159619/205099 (executing program) 2022/10/02 08:49:21 fetching corpus: 2800, signal 160764/206618 (executing program) 2022/10/02 08:49:21 fetching corpus: 2850, signal 161439/207825 (executing program) 2022/10/02 08:49:21 fetching corpus: 2900, signal 163050/209525 (executing program) 2022/10/02 08:49:21 fetching corpus: 2950, signal 163762/210716 (executing program) 2022/10/02 08:49:21 fetching corpus: 3000, signal 164960/212132 (executing program) 2022/10/02 08:49:21 fetching corpus: 3050, signal 165734/213310 (executing program) 2022/10/02 08:49:22 fetching corpus: 3100, signal 166304/214413 (executing program) 2022/10/02 08:49:22 fetching corpus: 3150, signal 167320/215699 (executing program) 2022/10/02 08:49:22 fetching corpus: 3200, signal 168211/216944 (executing program) 2022/10/02 08:49:22 fetching corpus: 3250, signal 169378/218344 (executing program) 2022/10/02 08:49:22 fetching corpus: 3300, signal 169990/219429 (executing program) 2022/10/02 08:49:22 fetching corpus: 3350, signal 171470/220986 (executing program) 2022/10/02 08:49:22 fetching corpus: 3400, signal 173133/222577 (executing program) 2022/10/02 08:49:22 fetching corpus: 3450, signal 173765/223603 (executing program) 2022/10/02 08:49:23 fetching corpus: 3500, signal 174471/224671 (executing program) 2022/10/02 08:49:23 fetching corpus: 3550, signal 175153/225732 (executing program) 2022/10/02 08:49:23 fetching corpus: 3600, signal 175850/226787 (executing program) 2022/10/02 08:49:23 fetching corpus: 3650, signal 176552/227819 (executing program) 2022/10/02 08:49:23 fetching corpus: 3700, signal 177556/229017 (executing program) 2022/10/02 08:49:23 fetching corpus: 3750, signal 178293/230042 (executing program) 2022/10/02 08:49:23 fetching corpus: 3800, signal 179547/231275 (executing program) 2022/10/02 08:49:23 fetching corpus: 3850, signal 179959/232130 (executing program) 2022/10/02 08:49:23 fetching corpus: 3900, signal 180441/232979 (executing program) 2022/10/02 08:49:24 fetching corpus: 3950, signal 180963/233862 (executing program) 2022/10/02 08:49:24 fetching corpus: 4000, signal 181977/234976 (executing program) 2022/10/02 08:49:24 fetching corpus: 4050, signal 182906/236051 (executing program) 2022/10/02 08:49:24 fetching corpus: 4100, signal 183521/236956 (executing program) 2022/10/02 08:49:24 fetching corpus: 4150, signal 184167/237814 (executing program) 2022/10/02 08:49:24 fetching corpus: 4200, signal 185064/238809 (executing program) 2022/10/02 08:49:24 fetching corpus: 4250, signal 185561/239651 (executing program) 2022/10/02 08:49:24 fetching corpus: 4300, signal 186135/240461 (executing program) 2022/10/02 08:49:24 fetching corpus: 4350, signal 186682/241333 (executing program) 2022/10/02 08:49:24 fetching corpus: 4400, signal 187519/242238 (executing program) 2022/10/02 08:49:25 fetching corpus: 4450, signal 188127/243072 (executing program) 2022/10/02 08:49:25 fetching corpus: 4500, signal 188453/243815 (executing program) 2022/10/02 08:49:25 fetching corpus: 4550, signal 189074/244625 (executing program) 2022/10/02 08:49:25 fetching corpus: 4600, signal 189958/245534 (executing program) 2022/10/02 08:49:25 fetching corpus: 4650, signal 190498/246315 (executing program) 2022/10/02 08:49:25 fetching corpus: 4700, signal 190937/247132 (executing program) 2022/10/02 08:49:25 fetching corpus: 4750, signal 191718/247959 (executing program) 2022/10/02 08:49:25 fetching corpus: 4800, signal 192716/248830 (executing program) 2022/10/02 08:49:25 fetching corpus: 4850, signal 193489/249618 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/250491 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/251075 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/251640 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/252215 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/252795 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/253351 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/253927 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/254472 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/255025 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/255577 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/256136 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/256673 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/257259 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/257807 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/258384 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/258922 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/259477 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/260046 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/260612 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/261188 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/261767 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/262349 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/262913 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/263520 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/264127 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/264673 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/265270 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/265845 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/266405 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/266983 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/267566 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/268158 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/268707 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/269290 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/269879 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/270449 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/270961 (executing program) 2022/10/02 08:49:26 fetching corpus: 4876, signal 194680/270961 (executing program) 2022/10/02 08:49:29 starting 8 fuzzer processes 08:49:29 executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x2) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 08:49:29 executing program 3: ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x7, 0x337d, 0x7, 0xfffffe00, 0x5, [{0xd26a, 0x0, 0x0, '\x00', 0x4}, {0x9, 0x0, 0x5, '\x00', 0x2}, {0x52, 0x2, 0xffffffffffffff04, '\x00', 0x1}, {0xfff, 0x0, 0x8b, '\x00', 0x1004}, {0xff, 0x7, 0x81, '\x00', 0x2180}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(r1, r0, &(0x7f00000001c0)=0x2, 0xff) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000200)=0x6) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x10200, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000280)={0x2, 0x45b9, "9111c4", 0x3f, 0x9}) r3 = fspick(r2, &(0x7f00000002c0)='./file0\x00', 0x1) pwrite64(r3, &(0x7f0000000300)="18290a8e20b51fac0541fd3cca7c088b25dde46301fa131d47c2e94e3b044a7aeeb38be764f4a55210145b958c24965ae6fc8b427ea2e4e70a20a7773f01e3123422855290c88b12e9d487558d294b6165530ddfdb8174b38d4a50d4277ef9e42a0be026f03e959ac1947d2a0418e526cff9e472b060877afed8d505d02fa1a562e19d7eadd08bed2db1f969bb67a23fa90e93598c0c29ab78f1dacf4b10d57191634e9c2b621116a8dcc2480c866a27e5f1063707e1a29f7360bd", 0xbb, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x16) ioctl$FICLONE(r4, 0x40049409, r5) link(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000b00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000110}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000580)={0x504, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7cb7, @remote, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5a7ff6f1, @mcast1, 0x7c3f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80000001, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @local, 0x800}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}}}}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "97714fa3997331103bd7dce8147e8b1ac98509b1286c63afac6fa9bb5c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x210, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xcb, 0x3, "2f94d8735892900503def0bf601f05c3c48ceceb0bab8b5101eea47a0f6f923c94c19ea83925205699f8c11a612ad24609dbbf2883dee74537aa9c73ac2a742e90914af06c4e42f1cf452e4fa52c7d4da4b0decafe01565e5f8656e89dcd4b41b4d11a08c9603b094f656cb63c3388e8ebac62edd0db07bd8b494b6baded2fe9158a04122cce640d1b285277a3230f38829431e267000f218076b8b6bc713dd1e80f90d4940a8b21f3396c37d5247d4667737edea9b6e3eb02df29629e028edde456f6e75f62be"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xad, 0x3, "265532ddcbd6410a2bbf675d623164ce9702fa440f1566ea467bd8630dd1b9f12451495864ffe7727ecd4fa6b2104d0f128e40363afbefc0d2dec320d9748145f67251a04fc8247c9d0da874ab0eab0a64d12fd4fe33a0cffb4d36f89e673c01391ebf17fab78b9b43809fb219f2ac92b742dcdd06eccd9ff6c0cb343498168658453d5e26e9caa9ad8c28ea344af98d9d9b75f99394d5ba192eeee03bac6b4363b8680052c5b71ebf"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "2268a540f62fa7dd916da818eaab009591136fb9dd"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "626e55f4dd50a56b57a1d66ffa8aa6c4d06e1fea9b1a"}}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x41}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x504}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000b80)={'IDLETIMER\x00'}, &(0x7f0000000bc0)=0x1e) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000c00)={0x4, @local, 0x4e23, 0x4, 'fo\x00', 0x1, 0x100, 0x5a}, 0x2c) 08:49:29 executing program 4: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) splice(r0, &(0x7f0000000000)=0x2, 0xffffffffffffffff, &(0x7f0000000040)=0x400, 0x200, 0x8) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x3) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x200003, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0}) r4 = accept$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={r3, 0x3, r4, 0x9}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x0, 0x0, 0x20, 0x1, @buffer={0x0, 0x53, &(0x7f00000002c0)=""/83}, &(0x7f0000000340)="56e17f372b78a88ceb3b5a2f2af4a7f475e00bb14245caf6a0a1250f80e670a4", &(0x7f0000000380)=""/102, 0x1, 0x0, 0x1, &(0x7f0000000400)}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0xc0, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x204000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x8000000000000000}}, {@access_user}, {@cache_fscache}], [{@measure}]}}) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/246, 0xf6}, {&(0x7f0000000700)=""/141, 0x8d}], 0x2) r6 = syz_open_dev$vcsu(&(0x7f0000000800), 0xfffffffffffeffff, 0x20000) r7 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000840)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x5cf, 0x7, 0x99d, 0x0, 0x7, 0x119}, {0xab, 0x2, 0x1, 0x65a, 0x10000, 0x8}], ['\x00']}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {r5}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000980)) 08:49:29 executing program 1: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040)=0x200, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@mss={0x2, 0x10000}, @window={0x3, 0x5316, 0x829}, @sack_perm, @mss={0x2, 0xfffffffb}, @sack_perm], 0x5) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0xd56, 0x521a41) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) pwritev(r2, &(0x7f00000016c0)=[{&(0x7f00000001c0)="e264b0bc08332047c750328653b56aefa65e58dc827d062b2c0b602e668511867a817d0ab3d72e9eb040b82dd14ab8e92a66092960e711bfc15b81fef42ba9d22e4ba44cf68f92a8fadb777ce8db916e64c1796fc8cc41d9f3c61f6c9b85e3149b987289baea093a042d75bed9d490d175e985d6c066e83704c291dca0eaa57007e824a1150ca11079df188ffc3b8b8e921ee364cd00f9cb4f816109ec3c1f5fc23e0971c7198e79", 0xa8}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="cf90ebe22c8754ab1fb7345a1d6bfc3ef20a27779047726a3f8637497ce03fbee8a2bce3a0356320b49aa13b0f6ee0532d6898b38bd6f73a1e8049bb7b392be6ce8cb671767599a3a20a8f4ac95f5cc4f43002c997d03a838cb7d860532b1fd4ec158d40cf27dafd3e67fd97987b19f1bcba7674b6b5", 0x76}, {&(0x7f0000001300)="71791764b5d3271e32a8221e13b32d84561276e4175d1c05a4a4", 0x1a}, {&(0x7f0000001340)="ece3b4af7c047fd6897632131fc91ad6c004ab7ee60d20fb59d1b8b93c3305e86d3acaba85193345da332bb0addf3911f744ebbe290c1751e00b81daab6cf5b4e4a77e2557c6dc6720939b1ebf87db2493abbbd9aaa7e88307a145875e1f1c48e0a45b90a4eaeab23e34852cad606b7de60b621f25d45a8d12fdc199ae78fda61606ce466b665c87456dfe0e4e16ab61de3a20489e2de9f1f3ea18acdd04e0e6022e63dad4b22a0cf88adbd0e87bd08cf1deb8a1f7f16b510a5fd9af36519998e3b551af469235ae7a803b423f450be56bd88d584f09de442701bf3ae7212a2e8cbc375cd3", 0xe5}, {&(0x7f0000001440)="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", 0xfe}, {&(0x7f0000001540)="0fa37b", 0x3}, {&(0x7f0000001580)="8d4e4056d898e3230d51a0396a0358c59bc903325d6d52fcab45e1fe7c61c89843fd050d3d2eb32398e83d8306437eecc20cf65c1e1c9c482a81e9038149af2dfdf5bc5a63e57ec2875fceb85e3410377d228663695b43", 0x57}, {&(0x7f0000001600)="2c26b7987a6b365963442caaca3b909938a0ca2aeb3beb1e2c42cf9b0d7dfb1a15807be4aa862687038c4a0352c0e07ef5c14c67ffbe89c293ce3af86535523eb890360a447794e024df92f266bb5531ec6a41d65886762794c7356db826a42329b50c38b00bc4e9563caf6de1994e170bc0ff91dab286501da3c1ed771ea6ea710155fa4d20a2a0bd4c729fb2d818b089729e3d8f08eef4134ad8ec66eb42a0ec7bd97866306bb86ff3fdf38abede071bbc8080fd6d5abc", 0xb8}], 0x9, 0x800, 0x1f) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001780)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000017c0)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000001800), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000001840)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000001940)={@multicast1, @initdev, 0x0}, &(0x7f0000001980)=0xc) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000019c0)={@empty, r4}, 0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x18, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = syz_mount_image$tmpfs(&(0x7f0000001b00), &(0x7f0000001b40)='./file0\x00', 0x2, 0x5, &(0x7f0000001e80)=[{&(0x7f0000001b80)="e959c209a39bdc14d943a845f4d670ce0f1f90d2b926976ff67ad9ed9c50bfaaa4cbcfbe35eb133aff8317a88c7ae926aa2f6dd9b5a897f179dcf040c653c4a06940e4c74cfd75548c6ce0fbe32297a6e8a57f66d4beb7cd964f0ba3853b91d9ccb301fb60ef781219e480cebc4072fa002dfa1004b2113c20cfd6919b22dd127468216393a68d2887e8ea1af97c417186d2d3464474e0", 0x97, 0x1c80}, {&(0x7f0000001c40)="9bec83052735d03b64ed906710ae0496bf745237f153f820a297c5ea2b07a423b1e01b32f0717aad6f6d04c667f9c4cab8c627028ff2b57b27f1216075d2c0b22a4c49c8635ada772092fb29ef42c5bc675e984fc036d40bcb1774a7b99337250f6740f43ae5b8c06316a9a650332bc97ea19c950198690a2f1286ca2ef74537", 0x80, 0x80000001}, {&(0x7f0000001cc0)="8ff9d501cb6e8e210c6ea3cdac88178ed8a71d559cacfb4c109ba31fb698634df195c0a1e4430afe3139ebb04e6d3cf5539a20b1a095dcb9c93fc025a210373c877dfea1c2458422f5f9537936f120ff3d4e3c3ee054bcdf153c8f750158b9fc47b380f6c2c9eee9c68de27f312e93077b4fc777a2ed8020879a14d843b397f94329f0436929111ae999ab0008a5fb7b87d833dbef68bec2d9a26a4a6e895051c11c12", 0xa3, 0x381}, {&(0x7f0000001d80)="7a962b8be5dd093cc7fed1fff318e97d789919d9780713e977501613d7366f1dd5c4863ef37c309045deaab8d129c08009b372813244cdbabdb4d7e614bbc32f29fe0d90023734c089adc4d66753bbe486ba62669b1da0c1f64eb2e0aee4063bc8259ae8d3b574352f41dc6d7ae3975a83de3fce917ccbb817460048e54c08a2611dd6eafd51578a3e0514a1cc15ff89911581", 0x93, 0x1}, {&(0x7f0000001e40)="ae73f0d6301b1cea24d8d83da8458d144358e00c8d79ba08c88cb83862e810c29695bdd380ee", 0x26, 0x8001}], 0xa, &(0x7f0000001f00)={[{@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x65]}}, {@mode={'mode', 0x3d, 0x1ee3964d}}], [{@uid_lt={'uid<', 0xee00}}, {@dont_hash}, {@appraise_type}]}) r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001f80), 0x2, 0x0) tee(r5, r6, 0x9, 0x1) 08:49:29 executing program 6: pipe2(&(0x7f0000006840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x81800) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000006980)={&(0x7f0000006880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006940)={&(0x7f00000068c0)={0x68, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x48ff4458}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40801}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000006a80)={&(0x7f00000069c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006a40)={&(0x7f0000006a00)={0x14, 0x7, 0x1, 0xf01, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20080880}, 0x4008840) r2 = signalfd(r1, &(0x7f0000006ac0)={[0x5]}, 0x8) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000006d00)={&(0x7f0000006b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006cc0)={&(0x7f0000006b40)={0x164, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc15}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc18}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf38e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x164}, 0x1, 0x0, 0x0, 0xc810}, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000006d40)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000006d80)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) r4 = signalfd4(r3, &(0x7f0000006dc0)={[0x80000001]}, 0x8, 0x1800) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) preadv(r5, &(0x7f00000082c0)=[{&(0x7f0000006e00)=""/222, 0xde}, {&(0x7f0000006f00)=""/210, 0xd2}, {&(0x7f0000007000)=""/211, 0xd3}, {&(0x7f0000007100)=""/7, 0x7}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000008140)=""/100, 0x64}, {&(0x7f00000081c0)=""/238, 0xee}], 0x7, 0x7, 0x0) r6 = openat2(r3, &(0x7f0000008340)='./file0\x00', &(0x7f0000008380)={0x300, 0x4, 0x5}, 0x18) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008400), r4) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000008580)={&(0x7f00000083c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000008540)={&(0x7f0000008440)={0xf8, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x763}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2e8b}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd34}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000001) syz_genetlink_get_family_id$team(&(0x7f00000085c0), r3) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000008700)={&(0x7f0000008600)={0x10, 0x0, 0x0, 0x220210}, 0xc, &(0x7f00000086c0)={&(0x7f0000008640)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x8, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x4081) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000008740)=0x1, 0x4) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000008780)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x46, 0x20000, 0x8, 0x7f, 0x2, 0x2}, {0x2, 0x20, 0x8, 0x0, 0x7, 0xffffffffffffffbc}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000008ac0)={&(0x7f0000008a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008a80)={&(0x7f0000008a40)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20800}, 0x8000) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000008bc0)={&(0x7f0000008b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000008b80)={&(0x7f0000008b40)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x800}]}, 0x28}, 0x1, 0x0, 0x0, 0x4841}, 0x10) 08:49:29 executing program 2: mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@fscache}, {@rq={'rq', 0x3d, 0x4}}, {@common=@privport}, {@sq={'sq', 0x3d, 0x8001}}, {@sq={'sq', 0x3d, 0x6}}, {@timeout={'timeout', 0x3d, 0x8}}]}}) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x8080, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@noextend}, {@cachetag={'cachetag', 0x3d, '[)'}}, {@msize={'msize', 0x3d, 0x9}}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x30, 0x31, 0x33, 0x31, 0x31, 0x64], 0x2d, [0x37, 0x61, 0x33, 0x39], 0x2d, [0x61, 0x34, 0x6a, 0x37], 0x2d, [0x62, 0x37, 0x65, 0x62], 0x2d, [0x34, 0x30, 0x66, 0x62, 0x64, 0x33, 0x32, 0x31]}}}]}}) r2 = openat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x178) r3 = syz_mount_image$nfs4(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x7, &(0x7f00000017c0)=[{&(0x7f0000000440)="888da21bba3cb1fee955bb65f67d054429a2877ca61807fdf307af0d7f31769c14518e3d4db19248f49f9940c9b0f55e24f82a1f39142687e70d362e25705e6044dd7c9cbacf8ebb43a5a00275f7ef870625eeb02fcbdb212862e44fb03f1514345a42ba28f3c3df3bdd0d496211b51411e2b215ad89ab25547ee9dd66ac008f870926adf17d9f932da52e6b814fdc6a5a49a4f824f0ce5bb4f897e06d05168dcb797cf4f629f12993af9ed9c2ea588bbad7a47574528cf62430ebc8dc34a19bcc016e8f78b3f79256c9fb4cf8672c838e78cc496d84f13bcbe9e0353eb491558a4fbc7174bd433e", 0xe8, 0x20}, {&(0x7f0000000540)="dedabb374205e1679a12d0583d5e28b4c65b30300ace4cae891bfaca79e89caf4d192d18b6156ae40fb259f95b6bb723bce94c777964f348797e190c5a3987515d7f0554d3f2e70f1036af3baa1c284d6bd5", 0x52, 0x4}, {&(0x7f00000005c0)="ea1ef893bd97275a0b38c0c8bb55667eee775dcdec5c206ef6749063dd45d1fefc5318907a28d466adc9d622acf722ae1e2c5d46fb1050c5ab1d9a0b77781e2315c111cdc9910c635aaaa84de47de35dd2d7280b9eb0b76c3300ad6abd1232eeb1726b0d0c66b0322b973d4ad5c50cbda7855a4299aab05b354122b71a0ab9c71539f0c79fcdd6ba9512b2abb104bccde671be729b5dcaa322e8e57d4dabde8d5f2130b25747d75327deb6f370be365c6c22d5b17d0df4652ac51290f2dc56d545ad403b29dfa854c31d558d0d5740dc9f4d61a6ffd558ccee1a0d7c25931e97d89b0e8a631634414c913cb8e2f40304d51d36b2448769bf7934b59657251e2e5de55659494f65911f58ba0e314d164c14519dde7b4524c976c57472c7a4aa21e3e4f4621116ffa7ea9d8c9861d04d810c7c848f2d8f7962a3fb7b686ba097bbefe7dc53a520097be4e431c1925f8654513a31702d0d6f88ff147a37092823846048ce1792a5d5a51d62cb898be574163d61b2812241c0f2ec548a002a11a319070a970f56aa8c6371e3cbcedc6e88a3a57be6f05627d7fc68868f523fdea9ea3867c09bddf6a66f9c47d8b4d901a4766ecc26464022c153481e07a71c036ed4352e0c2e3d38e499db9e179e86160c419e22e2e1d7f5e116e33bd04d1f64203c2897b48e2a8d4d24155c9fffb7f07cffcc1750a0dfee65f0b3c04f80f62c0e7e530412847a9665437bb076bb77bebf31feb522b582fe15c0c14f62885ae0d63147dfcb857a2a933ef78e7b89ddacb45c7bdc3f5f1935d2e8f46216f18ca94acc9b18d6be177eedf968f8ce6e507bb0ce6a2a92f97cf28cde995eb3ca92302e71724aceee0754687ac1c0dd358c6fa611fbbd15bb74b313cc1aaec6a8cf5de4716956f22da9f7a76ebcc37636f84dc0c14565509320a67038800cef4347fa919e64b648af81638a31a710d474cf233c7cc160725f4b9463d96f49b196c60bf055e9dad933adf055ecea8568dd6d29c1155a9070a6d9ed941adbfe5532a940de227b8ee981afadb0762895e78151db3106ade70a50ebf431700cfbd9ecaa967edc20fccaa8e8b7418dce69b4bf3e2c897aa029b690926ffc8f098d406997ce9405de3ef14c942a52d9de17dd6fdf9bbd767fa885ca5ad2f78258040aa11cfc438cf88a67a3754d771f7a301bf9e590ae1fe9d1cb1a45813e662d1e8e26936fa90eb3c184db49e184ab36536de517a97d42c3102849342c1dde403633a5da37918af5f01f27d1745bfe69a74628791cdff1edeee61fbd235a4b69382ce2d69008afa922b8f6b32922551cb2cd82a3ce4fe3d9962676bcf0ec8a462147dd9cf2a79cc48f780504213a803c3ad33d7c3a212db79b5bfc746de34240748693ef1043c81ff2a0c651665105fea7cc31a032e4839e617e40a886aa18fdb8e82760fbc56a6d6e83e7479263cdb7e5afb2ee4e0ceda847430acaa90a8aabd610d0c3ad01bea9ad58f3c97609d72e212cc780a40f3227c020c84276413615af64fcd400d7e60d3437b058a8f70ddef703c29199fb10a4492a4792db3e2ae0cab11225f40e0124fc5646b0abc5b917a3d906e553a0a7c4d67606d95ea146fb98dcc8c5eedac4228e95a274c76a146dbbbf11518e940d673550395da45c50618098d3d1c3e87a0ac4adfd9daa1cc24338a67d5e875e73d93b1c34e93f08bbb4d07c60b3d13fc12da7852ecb256bad4b2457d44d4303a259da4becb918ee542e03e3a29b61ac8b84a9c905f31bdc9f05b7ab7fe0afd1882e7085c16dc19ed212eeeb142c32d0483ae711ffa333b85228d12cb74a9d7787cbe0cdcf7caa6cd217697c75bedea4f6c7827af0fb2096f40f14b47efa85c25c4f1a5331e15d91e4d68453d5085ec68bc01142cf76f2ec6accfd31b6d8060784ce188423a489190408b8e4ae5910751b0d6ef112fed4690c93948af03fae6fae2bda8de8b6ac3bce47580d70d479597fe6b5230b312c387f5ed808bc6383645a6da858f0756c49c319785cdc0d941b8d97ced9c587d5c3d7807c797d637fe3d24cd6def37fdb1049e0d15e3aec079612355e1665156eeb3e0f21b59309301403d156f1b95be903abe37ec9310bdfcdf99379021c60151757fb752b5cbf7a52997a6ac886284d6645d8329a820fe85f7babe66739ea9017ba84e0708ee27b16aadf615dcdf090beff7370afc8aaf13a3b1743e6d2f0b72ba80deaa7f8b0df0c5b91237eee5ede62d76896a7a48e3d4de24fefe1a4973363908ca2b6f307ede265ec3e51ea56210bea22b42492b19e7075f35100cbb50857d0eab86ad2fd66fd1e625079bcbc085e15e3a4654d9d416d185b83ce565fbf846aef741f8d14e3ab803f067e658173624e2fc3d4dcbc3a69718ea558b0986c7a27bb1d3bee7608a5bfd6c1156ba1c5ffa3a2328f9e72718107cea31c8f9f449527edb9d8438e8daf5ae9ac64f0c4b7b4e6d7ece97b81e4f4369167f86681c6fe7167a38f1abf9fec352ee3b25fc0bd6578d79348fd20a8f55d5d27686530450fa97d7faff8096d5c39b6c71b5078f24ccb8b00402360213d4451649029f25c3d0923cb45fd0bae9493156230a0ebde0b5aabf18d425a5c6b90045b2872093a7e688e1315885460c67b53d4b04e663605757e77b7e226d8351c4cfd3ef51e0f7334bb4f6b6f2f29253c56c1207d7622db6f3a662d29b0a15cc5a1dc4174dc52fc6e2997225fd2609ebd32aeb4afb3f1a45aee434a28ebdb6e6c9182d6f4586edd2e4b6079ade2c3bf378a13c8fd3ab17182e0a0cb94ffeb23b22ec7d4143f0bd293382c22ce4de11fade25c8cd23cda13dc7ffb2aacbde70c950f0cb7961dfc3713bee0a84cfee53f62dfea576ed2cb8a17e9c47f9cafda2d830407a939348495e6f55011ab7d037a41333c1be741418ff07bdcb99c009f7f9197cd2d31be64315cec40944a5475240f9a431deb12f6072188edfc50dcd9a7280d187e90b6023607cfd74e4cbcadf5e6facce151bf6f80569a29962471b3db7162ba0d9bdf7df18a55ef06995d3c82157eaacb2f86dc0ee7a46b18156169653d7f3d931134a1cae85ae15fdd08bcfceee820cb9f523f296504d13bb19c2042edac13534ce2178131fda4365215cd405babe36d2c15635800e370f22b4b5339b2888adf7e0592825b3b4a72c8fbfd0a8602a784911c9d20b5379d7abf10bbf97b30b0b2eb92c14503509f883f9068684c9c8e7239097f4b66d693bd65876757cd07379bf0db4cf3453424b3f6a5549a03451a724bff3428371885ef841cfe0a49e54fcbba2cd6697daa53204829affa683dfcbef1e8734b0948d5bb152f49acb67693a99fb210676fc51707bcf0c80ed60bc0773f4e1c7a0d9b17d46ef5b10a530e62321296cf19fdd54a219f91cdec91397e0b868e2b487c8a961367bb9b80d4790ed3be8cc4e531b2ea6923c4f5fd7b9fafdd7eef40fb76dae723b93a744c00491192d4d9d0a7b87919598f11629c96c25d62b982e88c00a9b4865d2a4bea8d59ead98b3b8997144f4edf2155718f8f73a90755a0e001bdc16873236a58c2ab63431b61e3190b4a4d5afc4d1fae792c29e56065dd361b33469bc8731bffd4face7382caa7e7ae96c65041a029469fe1e1d034d5a24ccfd3e600b9b2e2c806c8cb1a2eb256d1c760643a533d653cabeda57122089540b3e978d400dd2f35450975f592dbee208609e9f022b9fb6eab8ba0ce017b6a3c28513345b4b7971d4c12deb4faacc4e302705eadc351716ff33d8f294a735426bf95da8fe6223f115e845f66afcaebbf8735bc1fe167dce0aa1a1797fae6b593e56e1eae3a45fd6b1d0a931e4094812648cb4e2834e0662f5b47cd2b635144592742e20f3ecb43ecd4ff51d0f941367372e2efaf4ee499ad606837251960684a703c806764408bbaae0fcc07ba3cf76bc95b9e20467ce06646abcc2ee36ea00d7f0f1c890b996e629b26407d32437c5e6819d77dedde415b5a80dd3ba0982effe79107b87c8cf462f9286cc04e3a6725a70a1d58c8b5b0ec4f096f50ab4a4f7786fffedffa64f95fb7dc9d585db5c9da430488001490469781e298e72e9c5a39865c9da756a921523cb2c33bbedcc85d825c76e63b590c3121912d5100f9e1ed1b1bf54e31df507bb9d98d5be47649bda369e9fbd70fd1397a9c801d58983d36c9d00b783410b1889621adc036acf61d02ab85266b2b0e0c4129cb0a5e8eb0fc34e3e222962992708269a9ff3efa205d57fc8d04afd098307e0e7d5c57876d7feffd79021709801981da770be3a5244e7c2226e98b283688354ebeaa86aa7cf3e2a443c2da80f12d6790bd5e02bd3e48c6f92976191dfc0bf85d83a236b42c095e11ce5eda17292ce9b46ab7c6db21c61437e0e7dad1fe83f16dd17415ef1b69e26973917c320d7298b24d8bb18f645ac1d35afa2c1912728ce1c1febe3aece50d8a9f51742f8f1b9150551ab2d58409d04cadde477ff0c1341d83f81161299730685c2f991d2212faedab5b0356caa94e7f56498c971cfb695f4ab06379b6fda61b3ee9d807441743f09113f846b8c340b3c02d31307e5c1437f0af3ca0e91e6e36f03ade02495a1e20dec5b72371b26c9391a674089985ae1293f4729220e0f3328b7326efe1f7b4dd742d264247f5b4ac1c5a69f4e92a34997171f198390abc9bd1612f88945493c86dff3e07d0c4be30cc77a240b04d7434bb20af4717658ba80968415c09d00a4a2e7ce46d289eec4ec11c4374c48a9521d984172f269203949f4528658cad93be748bb00d5ae4c4818aba0e5c99541e64e031f9519ce36ade5d65949b7bae98cc5ef3423b9954ffe5078c2fb68bea9b6f8bf5b3e1d56c9bd705296b3be1eae9a0ddd1327986d0a24ec125e54909721c6a3d57a652ce50a94c5e50ad85f6d3d806b7a8652d53fa012f1c53791e9ec6f9dbd8bfb0537f3e20dd5a16d75382ba0fd773af8c05fd6c7be41c2b94ea346bec4b71debe99108dce62e1c386c483535e3b6d776abc4fc349dc2d6382f8295c9435facdc5647810c5bf24516b1a7c804ce25aa71ee8b63cb541c13c8d3d94d67d5fd3cb8dee0305a8a15263a134b133b61e33f91ad0a56f6218acb838d98d88df88a7850452ed189c6550d826c38d46640c2cbc2a3c7da2b42a7e2b6e5eeec1fb5168fb352c003d880844643b008900e4dbc2e3ee389a63dc9454768290a6740c1c6e95a86e44f865cd43e2a359e2749f052752d1d5a7eaa37cbee0fb69bfd357ba14f3c14de2693a16e03d58f2bca2246af5eee60aad8f2403478b69c0f882b4990575e251136184a0819082093a30164ff68b95345c4f8bcdbca296c714b7d892cf8410b59c2ed4d814b648b7fd2e5898a7743588425e0c24ab6d5aa2c0ecb2a9ecd1f121baf6df88c5056ac70f6d4c2549f3137d28b8c486ed5682e97791b83c92974808072472a57c9f3fd798b3f65c248beeffa16f983a47c76b3aba5f454a12a68c3ab098a1ee8bd3a81ad1416654b5cec74c47a2c4b9c0bacc10eec2e0d67e1e556346393d868cadb402b3828a6850a60206f1be6d557fe6a5eb4dfe34a0fc722b059d250be6fc95d28c61b1bf3a995303d00d314626ea865668e47795788a3f81f767ab7e43c1e64687175291cc45c5001b32a7eac4d0ef99f146da06059bee4082ee176e8168db27e56f904e138d47b07ca512468c2cb0460ef4d59fa144aa6c6ba0f82791f728de78b1fd58b56401fe97863f7c95fdf9ff5229199895ef4dc603d9ebaa6b7559f3507598f36a", 0x1000, 0xa654}, {&(0x7f00000015c0)="088d094924e5f94692bc48961e9dc4a905a487682beb1e9c467483098fd01089734284ff", 0x24, 0x40}, {&(0x7f0000001600)="fdcd8bef8d199bb3c17d63dcfefa74ce510ecbd176657761217b32405d0d62e80a2bd549913aa43a7e9d070ca0fb7bffc319eb49d831e15e34de95050b9a60c0b8201b561e041c689a1642d074003eb89e346f6015403a66bf9da5f0e8a99796ff1149e4af4984c235b47bfe991cd5fd6e2f45354913a4f9c7", 0x79, 0x401}, {&(0x7f0000001680)="ef23f22bb6c9e98a26dae5", 0xb, 0x9}, {&(0x7f00000016c0)="5a7badbda935b6f5740ae0896fd00a298293dbc7f4158014554474e671f2929d4b09b86ca8254fe100c0555cd356ecbcf44d848e83d5587493feeef2f7de1aebd32a32f9df34a212a5a05ba78c5f495f39a45940b07b2ea3e2481653c1338cbebc7c1a38b0fcd43974485b1d4619c886a29a1da7db6f6a675e99947de6576f4bdc40c28785b39e1dd2de833ad4bbd6db3fc38bc15434f85af821934f3e8c154cda497736d1c6a50e3013a0f79e02f084fdce8d05ea23dd3675a3d4a787235bd6b5644e2f0f2651f26816eec98b47", 0xce, 0x9}], 0x2000, &(0x7f0000001880)={[], [{@hash}, {@dont_measure}, {@fowner_eq}, {@smackfstransmute}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) stat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)) io_submit(0x0, 0x0, &(0x7f00000019c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002e40), 0x800, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000002e80)={'\x00', 0x5, 0x0, 0xfffff001, 0x7, 0x0, 0xffffffffffffffff}) fallocate(r1, 0x16, 0x9, 0x8) recvmsg(r4, &(0x7f0000003140)={&(0x7f0000002f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/185, 0xb9}, {&(0x7f0000003040)=""/116, 0x74}], 0x2, &(0x7f0000003100)=""/13, 0xd}, 0x41) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000003180)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) openat(r3, &(0x7f00000031c0)='./file0\x00', 0x400000, 0x4) syz_mount_image$ext4(&(0x7f0000003200)='ext4\x00', &(0x7f0000003240)='./file0/file0\x00', 0xffff, 0x1, &(0x7f0000003380)=[{&(0x7f0000003280)="97b9bcb3d6667b966c0a299932b0d336cf8e7e1f86c950312415423e9066c97de505c53daa50dcc72b8e0fba7f75e4b69def6cbd5230dc59aae93826db411a8174a70494d1f66512edc2bc94d79d7a23a99a3d3819ae313b903a5e4dc43caba49e3e1137c3774339ec1e0428e0e7f5f786255205759c5963fdf0d110a03ab36a303b1210f04b000d3cf7477481daa4898f931cce4db2ae03025f3f25c8b4e24c16054241fbfbe8f1c57c1016c98a497b979d5a34a066bec259fd083ec898ebe83daafdbae20164a0a64e36ed7b255f29a68262ec58e98ad0af18cd26a41136537681033bc50429e5", 0xe8, 0x3}], 0x400001, &(0x7f00000033c0)={[{@grpid}], [{@obj_user={'obj_user', 0x3d, '\xc2'}}]}) r6 = accept4(r2, &(0x7f0000003400)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000003480)=0x80, 0x800) fcntl$dupfd(r6, 0x406, r0) pivot_root(&(0x7f00000034c0)='./file0/file0\x00', &(0x7f0000003500)='./file0/file0\x00') openat(0xffffffffffffffff, &(0x7f0000003540)='./file0/file0\x00', 0x0, 0xd) 08:49:29 executing program 5: setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "9fa1a49c0643e1bfb611"}, 0xb, 0x0) r0 = getgid() lchown(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, r0) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee00}}, './file0\x00'}) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) r9 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002940)={0x0, 0x0, 0x0}, &(0x7f0000002980)=0xc) r11 = getegid() setxattr$system_posix_acl(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000029c0)={{}, {}, [{0x2, 0x4, r1}, {0x2, 0x2, r5}, {0x2, 0x8, r1}, {0x2, 0x4, r3}, {0x2, 0x3, r1}, {0x2, 0x2, r3}], {0x4, 0x2}, [{0x8, 0x2, r7}, {0x8, 0xa, r8}, {0x8, 0x0, r9}, {0x8, 0x5, r4}, {0x8, 0x4, r10}, {0x8, 0x7, 0xee01}, {0x8, 0x1, r11}, {0x8, 0x7, r4}], {}, {0x20, 0x2}}, 0x94, 0x2) r12 = syz_mount_image$vfat(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0/file0\x00', 0x8, 0x5, &(0x7f0000002e40)=[{&(0x7f0000002b00)="2e1a40711a575fc7503f812d864456f40ebd879e928133e29d33e4c85ab96e3a0d6a907da1b34d712016dca9b7e5f33912b97612fdafc3ba63099442758522f78dfc6a6402aa055c6efe0ad5fd5a87c3a9902a8c82d4594c3baf4291fbd093112a411eb982e2b483668a265d1aa1fce354132baeb4a19e5e3e4a50afbc0dcf87a8c17520440ace0189c08df8b57351ef05db1b48dc50f203d4a28105b1bb919a0afa232c00331dad5bb1296492cf14dca38185c62b3d78257d920f3e01ead04cc3585e", 0xc3}, {&(0x7f0000002c00)="3dbc39a5e5894ee0df85921464ab5b668a073ef764e30c219e0233ad096bbd8420a2ed128b87573a3fd13f77e3cdb76208c5ad17685d8c9b9b8f6b23d33b883853f74798a14d73d921b25744a452061245ca90896203bb8d4ee6bdb37ce5f0", 0x5f, 0x1}, {&(0x7f0000002c80)="f18f887c92b69b36ac9dda91eaa02290745ef20889c67defaa5b4496d4bfadda1f619da1b9e7a5dfb0387e52c7a0ae41dfcaffae609b26ddf20ce74c190808d397cb55f3b9c54df0a5644cdb6de70b83032c431029e9760b928a652d5f8b6da1800940cb8f876ef862789108dcc7386fba972125d50d71ac40cb5c3877", 0x7d, 0x3}, {&(0x7f0000002d00)="52656333cde89a88ec66ae0d71c6fadb3eada24bc2c3f6cc9b9017e58fe7ad08f36e134b4d7cb5518929dcd39b8e3945ac640be671050377bec2ad5513fc5b6fb760a0590c4b3fdb97e49220a066b7473af363d1a9d20cc930b3e3bcbf596a06601e1fedead39017055d1edefb0d85564a7292ea4f514949ee5592ce1c11565687b5aff854036c4190ce4cb33b6101a2eba974168c518da88aca968ae9d0867419dea0dd74051e575a03daed4b3ab8fd680a26270d367cd546d65e36df714c3290fdcf", 0xc3, 0x6da8}, {&(0x7f0000002e00)="7fa365d9dc299a5d4a3f157fa1819601db06ca8cf30a4d08108825ec87d70583b44528fe8678ce5fd218cb855763fb3d6b7b7211bdb43e3b9c", 0x39, 0x4}], 0x10, &(0x7f0000002ec0)={[{@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@fat=@tz_utc}], [{@audit}, {@smackfstransmute}]}) r13 = openat$cgroup_type(r2, &(0x7f0000002f00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000002f40)={{0x1, 0x1, 0x18, r13, {0x7}}, './file0/file0/file0\x00'}) recvmsg$unix(r2, &(0x7f0000004480)={&(0x7f0000002f80)=@abs, 0x6e, &(0x7f0000004400)=[{&(0x7f0000003000)=""/184, 0xb8}, {&(0x7f00000030c0)=""/24, 0x18}, {&(0x7f0000003100)=""/164, 0xa4}, {&(0x7f00000031c0)=""/183, 0xb7}, {&(0x7f0000003280)}, {&(0x7f00000032c0)=""/221, 0xdd}, {&(0x7f00000033c0)=""/11, 0xb}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x8}, 0x20) r14 = syz_open_dev$vcsn(&(0x7f00000044c0), 0x1f, 0x464280) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r12, &(0x7f0000004500)) fchownat(r12, &(0x7f0000004540)='./file1\x00', r6, r0, 0x1000) openat$cgroup_freezer_state(r2, &(0x7f0000004580), 0x2, 0x0) [ 68.656839] audit: type=1400 audit(1664700569.451:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:49:29 executing program 7: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fchmod(0xffffffffffffffff, 0x64) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000280)={0x9, 0x10, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x88100) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8, 0x13, r0, 0x117f1000) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x1000006, 0x13, r1, 0x8000000) lseek(r2, 0x5, 0x2) r4 = openat$cgroup_pressure(r1, &(0x7f0000000340)='cpu.pressure\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000380)=""/121, 0x79}], 0x1, 0x3f, 0x7) syz_io_uring_setup(0x558d, &(0x7f0000000440)={0x0, 0x574a, 0x2, 0x0, 0xee, 0x0, r2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x563c, &(0x7f0000000540)={0x0, 0x5e18, 0x2, 0x3, 0x37, 0x0, r1}, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000640)) syz_io_uring_submit(r3, r5, &(0x7f0000000680)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x2}, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_void(r6, 0x1, 0x0, 0x0, 0x0) syncfs(r0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x101002, 0x0) dup3(r7, r8, 0x80000) [ 70.071006] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.072720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.074548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.076084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.077549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.091571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.092798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.094111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.095283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.096301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.103121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.108234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.109379] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.110602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.111580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.112857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.114067] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.115494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.119488] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.121533] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 70.125301] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 70.126155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 70.126705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.128247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 70.128890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.129749] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 70.130511] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.133597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.137098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.137978] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 70.138761] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 70.139301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.140573] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.141185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.143060] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.144473] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.145666] Bluetooth: hci3: HCI_REQ-0x0c1a [ 70.147015] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 70.149729] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.151102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.151593] Bluetooth: hci7: HCI_REQ-0x0c1a [ 70.152428] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 70.154044] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.155571] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 70.156933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.158795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.160059] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.161776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.163058] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 70.167340] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.174013] Bluetooth: hci1: HCI_REQ-0x0c1a [ 70.174510] Bluetooth: hci2: HCI_REQ-0x0c1a [ 70.177973] Bluetooth: hci0: HCI_REQ-0x0c1a [ 70.178750] Bluetooth: hci5: HCI_REQ-0x0c1a [ 70.182142] Bluetooth: hci4: HCI_REQ-0x0c1a [ 70.187422] Bluetooth: hci6: HCI_REQ-0x0c1a [ 72.191145] Bluetooth: hci1: command 0x0409 tx timeout [ 72.191973] Bluetooth: hci0: command 0x0409 tx timeout [ 72.192493] Bluetooth: hci3: command 0x0409 tx timeout [ 72.193034] Bluetooth: hci7: command 0x0409 tx timeout [ 72.255099] Bluetooth: hci4: command 0x0409 tx timeout [ 72.255626] Bluetooth: hci6: command 0x0409 tx timeout [ 72.256304] Bluetooth: hci2: command 0x0409 tx timeout [ 72.256766] Bluetooth: hci5: command 0x0409 tx timeout [ 74.238991] Bluetooth: hci7: command 0x041b tx timeout [ 74.239471] Bluetooth: hci3: command 0x041b tx timeout [ 74.239929] Bluetooth: hci0: command 0x041b tx timeout [ 74.240323] Bluetooth: hci1: command 0x041b tx timeout [ 74.302988] Bluetooth: hci5: command 0x041b tx timeout [ 74.303008] Bluetooth: hci2: command 0x041b tx timeout [ 74.303772] Bluetooth: hci6: command 0x041b tx timeout [ 74.304210] Bluetooth: hci4: command 0x041b tx timeout [ 76.287087] Bluetooth: hci1: command 0x040f tx timeout [ 76.287229] Bluetooth: hci0: command 0x040f tx timeout [ 76.287516] Bluetooth: hci3: command 0x040f tx timeout [ 76.287928] Bluetooth: hci7: command 0x040f tx timeout [ 76.350889] Bluetooth: hci6: command 0x040f tx timeout [ 76.351334] Bluetooth: hci4: command 0x040f tx timeout [ 76.351722] Bluetooth: hci2: command 0x040f tx timeout [ 76.352490] Bluetooth: hci5: command 0x040f tx timeout [ 78.334945] Bluetooth: hci7: command 0x0419 tx timeout [ 78.335397] Bluetooth: hci3: command 0x0419 tx timeout [ 78.335790] Bluetooth: hci0: command 0x0419 tx timeout [ 78.336237] Bluetooth: hci1: command 0x0419 tx timeout [ 78.398943] Bluetooth: hci5: command 0x0419 tx timeout [ 78.399420] Bluetooth: hci2: command 0x0419 tx timeout [ 78.399839] Bluetooth: hci4: command 0x0419 tx timeout [ 78.400260] Bluetooth: hci6: command 0x0419 tx timeout 08:50:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f00000012c0)='smaps_rollup\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = getpid() capget(&(0x7f0000000300)={0x19980330, r2}, &(0x7f0000000340)) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0xfb, 0x0, 0xff, 0x6, 0x0, 0x4, 0xe88, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x7ff}, 0x261, 0x61, 0x8, 0x4, 0x2, 0x851, 0x5, 0x0, 0xfffffffa, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x6, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0x4002, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xf7, 0x3148}, 0x0, 0x800, 0x6, 0x5, 0x2, 0x7, 0x200, 0x0, 0x7, 0x0, 0x7}, r2, 0x8, r3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) capget(&(0x7f0000000240)={0x20080522, r6}, &(0x7f0000000380)={0x20, 0x1, 0x3, 0x9c}) [ 122.402450] audit: type=1400 audit(1664700623.197:7): avc: denied { open } for pid=3781 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.403980] audit: type=1400 audit(1664700623.197:8): avc: denied { kernel } for pid=3781 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.422318] ------------[ cut here ]------------ [ 122.422342] [ 122.422345] ====================================================== [ 122.422349] WARNING: possible circular locking dependency detected [ 122.422353] 6.0.0-rc7-next-20220930 #1 Not tainted [ 122.422360] ------------------------------------------------------ [ 122.422363] syz-executor.6/3782 is trying to acquire lock: [ 122.422369] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 122.422410] [ 122.422410] but task is already holding lock: [ 122.422413] ffff88803f182420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.422440] [ 122.422440] which lock already depends on the new lock. [ 122.422440] [ 122.422443] [ 122.422443] the existing dependency chain (in reverse order) is: [ 122.422446] [ 122.422446] -> #3 (&ctx->lock){....}-{2:2}: [ 122.422460] _raw_spin_lock+0x2a/0x40 [ 122.422471] __perf_event_task_sched_out+0x53b/0x18d0 [ 122.422483] __schedule+0xedd/0x2470 [ 122.422497] schedule+0xda/0x1b0 [ 122.422510] exit_to_user_mode_prepare+0x114/0x1a0 [ 122.422522] syscall_exit_to_user_mode+0x19/0x40 [ 122.422535] do_syscall_64+0x48/0x90 [ 122.422553] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.422566] [ 122.422566] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 122.422579] _raw_spin_lock_nested+0x30/0x40 [ 122.422590] raw_spin_rq_lock_nested+0x1e/0x30 [ 122.422603] task_fork_fair+0x63/0x4d0 [ 122.422619] sched_cgroup_fork+0x3d0/0x540 [ 122.422634] copy_process+0x4183/0x6e20 [ 122.422644] kernel_clone+0xe7/0x890 [ 122.422654] user_mode_thread+0xad/0xf0 [ 122.422664] rest_init+0x24/0x250 [ 122.422675] arch_call_rest_init+0xf/0x14 [ 122.422693] start_kernel+0x4c6/0x4eb [ 122.422708] secondary_startup_64_no_verify+0xe0/0xeb [ 122.422722] [ 122.422722] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 122.422735] _raw_spin_lock_irqsave+0x39/0x60 [ 122.422746] try_to_wake_up+0xab/0x1930 [ 122.422759] up+0x75/0xb0 [ 122.422773] __up_console_sem+0x6e/0x80 [ 122.422788] console_unlock+0x46a/0x590 [ 122.422807] do_con_write+0xc05/0x1d50 [ 122.422818] con_write+0x21/0x40 [ 122.422827] n_tty_write+0x4d4/0xfe0 [ 122.422839] file_tty_write.constprop.0+0x455/0x8a0 [ 122.422850] vfs_write+0x9c3/0xd90 [ 122.422866] ksys_write+0x127/0x250 [ 122.422881] do_syscall_64+0x3b/0x90 [ 122.422898] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.422910] [ 122.422910] -> #0 ((console_sem).lock){....}-{2:2}: [ 122.422924] __lock_acquire+0x2a02/0x5e70 [ 122.422940] lock_acquire+0x1a2/0x530 [ 122.422956] _raw_spin_lock_irqsave+0x39/0x60 [ 122.422967] down_trylock+0xe/0x70 [ 122.422981] __down_trylock_console_sem+0x3b/0xd0 [ 122.422997] vprintk_emit+0x16b/0x560 [ 122.423013] vprintk+0x84/0xa0 [ 122.423028] _printk+0xba/0xf1 [ 122.423040] report_bug.cold+0x72/0xab [ 122.423056] handle_bug+0x3c/0x70 [ 122.423072] exc_invalid_op+0x14/0x50 [ 122.423088] asm_exc_invalid_op+0x16/0x20 [ 122.423101] group_sched_out.part.0+0x2c7/0x460 [ 122.423118] ctx_sched_out+0x8f1/0xc10 [ 122.423135] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.423145] __schedule+0xedd/0x2470 [ 122.423159] schedule+0xda/0x1b0 [ 122.423172] exit_to_user_mode_prepare+0x114/0x1a0 [ 122.423182] syscall_exit_to_user_mode+0x19/0x40 [ 122.423195] do_syscall_64+0x48/0x90 [ 122.423211] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.423223] [ 122.423223] other info that might help us debug this: [ 122.423223] [ 122.423226] Chain exists of: [ 122.423226] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 122.423226] [ 122.423241] Possible unsafe locking scenario: [ 122.423241] [ 122.423243] CPU0 CPU1 [ 122.423245] ---- ---- [ 122.423248] lock(&ctx->lock); [ 122.423254] lock(&rq->__lock); [ 122.423260] lock(&ctx->lock); [ 122.423266] lock((console_sem).lock); [ 122.423272] [ 122.423272] *** DEADLOCK *** [ 122.423272] [ 122.423274] 2 locks held by syz-executor.6/3782: [ 122.423281] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 122.423310] #1: ffff88803f182420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.423336] [ 122.423336] stack backtrace: [ 122.423339] CPU: 0 PID: 3782 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220930 #1 [ 122.423351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.423359] Call Trace: [ 122.423362] [ 122.423367] dump_stack_lvl+0x8b/0xb3 [ 122.423385] check_noncircular+0x263/0x2e0 [ 122.423401] ? format_decode+0x26c/0xb50 [ 122.423418] ? print_circular_bug+0x450/0x450 [ 122.423434] ? simple_strtoul+0x30/0x30 [ 122.423450] ? format_decode+0x26c/0xb50 [ 122.423467] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 122.423485] __lock_acquire+0x2a02/0x5e70 [ 122.423506] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 122.423528] lock_acquire+0x1a2/0x530 [ 122.423545] ? down_trylock+0xe/0x70 [ 122.423561] ? lock_release+0x750/0x750 [ 122.423582] ? vprintk+0x84/0xa0 [ 122.423599] _raw_spin_lock_irqsave+0x39/0x60 [ 122.423610] ? down_trylock+0xe/0x70 [ 122.423626] down_trylock+0xe/0x70 [ 122.423642] ? vprintk+0x84/0xa0 [ 122.423658] __down_trylock_console_sem+0x3b/0xd0 [ 122.423675] vprintk_emit+0x16b/0x560 [ 122.423694] vprintk+0x84/0xa0 [ 122.423711] _printk+0xba/0xf1 [ 122.423722] ? record_print_text.cold+0x16/0x16 [ 122.423738] ? report_bug.cold+0x66/0xab [ 122.423756] ? group_sched_out.part.0+0x2c7/0x460 [ 122.423774] report_bug.cold+0x72/0xab [ 122.423792] handle_bug+0x3c/0x70 [ 122.423809] exc_invalid_op+0x14/0x50 [ 122.423827] asm_exc_invalid_op+0x16/0x20 [ 122.423840] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.423861] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.423872] RSP: 0018:ffff88803f317c48 EFLAGS: 00010006 [ 122.423881] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.423889] RDX: ffff88803f120000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 122.423897] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 122.423904] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803f182400 [ 122.423912] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 122.423922] ? group_sched_out.part.0+0x2c7/0x460 [ 122.423942] ? group_sched_out.part.0+0x2c7/0x460 [ 122.423962] ctx_sched_out+0x8f1/0xc10 [ 122.423981] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.423995] ? lock_is_held_type+0xd7/0x130 [ 122.424008] ? __perf_cgroup_move+0x160/0x160 [ 122.424019] ? set_next_entity+0x304/0x550 [ 122.424037] ? update_curr+0x267/0x740 [ 122.424055] ? lock_is_held_type+0xd7/0x130 [ 122.424069] __schedule+0xedd/0x2470 [ 122.424085] ? io_schedule_timeout+0x150/0x150 [ 122.424102] ? rcu_read_lock_sched_held+0x3e/0x80 [ 122.424122] schedule+0xda/0x1b0 [ 122.424137] exit_to_user_mode_prepare+0x114/0x1a0 [ 122.424149] syscall_exit_to_user_mode+0x19/0x40 [ 122.424163] do_syscall_64+0x48/0x90 [ 122.424180] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.424193] RIP: 0033:0x7ff981162b19 [ 122.424202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.424212] RSP: 002b:00007ff97e6d8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.424223] RAX: 0000000000000001 RBX: 00007ff981275f68 RCX: 00007ff981162b19 [ 122.424230] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff981275f6c [ 122.424237] RBP: 00007ff981275f60 R08: 000000000000000e R09: 0000000000000000 [ 122.424244] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff981275f6c [ 122.424251] R13: 00007ffe2ceee45f R14: 00007ff97e6d8300 R15: 0000000000022000 [ 122.424264] [ 122.480663] WARNING: CPU: 0 PID: 3782 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 122.481347] Modules linked in: [ 122.481590] CPU: 0 PID: 3782 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220930 #1 [ 122.482191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.483014] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.483423] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.484753] RSP: 0018:ffff88803f317c48 EFLAGS: 00010006 [ 122.485148] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.485685] RDX: ffff88803f120000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 122.486209] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 122.486736] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803f182400 [ 122.487262] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 122.487795] FS: 00007ff97e6d8700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 122.488390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.488824] CR2: 00007fd43d79c1f0 CR3: 0000000017e16000 CR4: 0000000000350ef0 [ 122.489361] Call Trace: [ 122.489552] [ 122.489738] ctx_sched_out+0x8f1/0xc10 [ 122.490045] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.490436] ? lock_is_held_type+0xd7/0x130 [ 122.490761] ? __perf_cgroup_move+0x160/0x160 [ 122.491105] ? set_next_entity+0x304/0x550 [ 122.491423] ? update_curr+0x267/0x740 [ 122.491729] ? lock_is_held_type+0xd7/0x130 [ 122.492053] __schedule+0xedd/0x2470 [ 122.492334] ? io_schedule_timeout+0x150/0x150 [ 122.492686] ? rcu_read_lock_sched_held+0x3e/0x80 [ 122.493060] schedule+0xda/0x1b0 [ 122.493319] exit_to_user_mode_prepare+0x114/0x1a0 [ 122.493687] syscall_exit_to_user_mode+0x19/0x40 [ 122.494046] do_syscall_64+0x48/0x90 [ 122.494338] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.494727] RIP: 0033:0x7ff981162b19 [ 122.495009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.496347] RSP: 002b:00007ff97e6d8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.496912] RAX: 0000000000000001 RBX: 00007ff981275f68 RCX: 00007ff981162b19 [ 122.497443] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff981275f6c [ 122.497975] RBP: 00007ff981275f60 R08: 000000000000000e R09: 0000000000000000 [ 122.498509] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff981275f6c [ 122.499032] R13: 00007ffe2ceee45f R14: 00007ff97e6d8300 R15: 0000000000022000 [ 122.499567] [ 122.499747] irq event stamp: 726 [ 122.500000] hardirqs last enabled at (725): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 122.500687] hardirqs last disabled at (726): [] __schedule+0x1225/0x2470 [ 122.501301] softirqs last enabled at (620): [] __irq_exit_rcu+0x11b/0x180 [ 122.501944] softirqs last disabled at (497): [] __irq_exit_rcu+0x11b/0x180 [ 122.502566] ---[ end trace 0000000000000000 ]--- [ 122.720939] capability: warning: `syz-executor.6' uses 32-bit capabilities (legacy support in use) [ 122.723657] Zero length message leads to an empty skb 08:50:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f00000012c0)='smaps_rollup\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = getpid() capget(&(0x7f0000000300)={0x19980330, r2}, &(0x7f0000000340)) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0xfb, 0x0, 0xff, 0x6, 0x0, 0x4, 0xe88, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x7ff}, 0x261, 0x61, 0x8, 0x4, 0x2, 0x851, 0x5, 0x0, 0xfffffffa, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x6, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0x4002, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xf7, 0x3148}, 0x0, 0x800, 0x6, 0x5, 0x2, 0x7, 0x200, 0x0, 0x7, 0x0, 0x7}, r2, 0x8, r3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) capget(&(0x7f0000000240)={0x20080522, r6}, &(0x7f0000000380)={0x20, 0x1, 0x3, 0x9c}) 08:50:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f00000012c0)='smaps_rollup\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = getpid() capget(&(0x7f0000000300)={0x19980330, r2}, &(0x7f0000000340)) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0xfb, 0x0, 0xff, 0x6, 0x0, 0x4, 0xe88, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x7ff}, 0x261, 0x61, 0x8, 0x4, 0x2, 0x851, 0x5, 0x0, 0xfffffffa, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x6, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0x4002, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xf7, 0x3148}, 0x0, 0x800, 0x6, 0x5, 0x2, 0x7, 0x200, 0x0, 0x7, 0x0, 0x7}, r2, 0x8, r3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) capget(&(0x7f0000000240)={0x20080522, r6}, &(0x7f0000000380)={0x20, 0x1, 0x3, 0x9c}) 08:50:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f00000012c0)='smaps_rollup\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = getpid() capget(&(0x7f0000000300)={0x19980330, r2}, &(0x7f0000000340)) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0xfb, 0x0, 0xff, 0x6, 0x0, 0x4, 0xe88, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x7ff}, 0x261, 0x61, 0x8, 0x4, 0x2, 0x851, 0x5, 0x0, 0xfffffffa, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x6, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0x4002, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xf7, 0x3148}, 0x0, 0x800, 0x6, 0x5, 0x2, 0x7, 0x200, 0x0, 0x7, 0x0, 0x7}, r2, 0x8, r3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) capget(&(0x7f0000000240)={0x20080522, r6}, &(0x7f0000000380)={0x20, 0x1, 0x3, 0x9c}) 08:50:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f00000012c0)='smaps_rollup\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = getpid() capget(&(0x7f0000000300)={0x19980330, r2}, &(0x7f0000000340)) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0xfb, 0x0, 0xff, 0x6, 0x0, 0x4, 0xe88, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x7ff}, 0x261, 0x61, 0x8, 0x4, 0x2, 0x851, 0x5, 0x0, 0xfffffffa, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x6, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0x4002, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xf7, 0x3148}, 0x0, 0x800, 0x6, 0x5, 0x2, 0x7, 0x200, 0x0, 0x7, 0x0, 0x7}, r2, 0x8, r3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) capget(&(0x7f0000000240)={0x20080522}, &(0x7f0000000380)={0x20, 0x1, 0x3, 0x9c}) [ 123.573496] loop1: detected capacity change from 0 to 264192 [ 123.575333] tmpfs: Unsupported parameter 'huge' [ 123.595701] loop1: detected capacity change from 0 to 264192 08:50:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f00000012c0)='smaps_rollup\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = getpid() capget(&(0x7f0000000300)={0x19980330, r2}, &(0x7f0000000340)) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0xfb, 0x0, 0xff, 0x6, 0x0, 0x4, 0xe88, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x7ff}, 0x261, 0x61, 0x8, 0x4, 0x2, 0x851, 0x5, 0x0, 0xfffffffa, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x6, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0x4002, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xf7, 0x3148}, 0x0, 0x800, 0x6, 0x5, 0x2, 0x7, 0x200, 0x0, 0x7, 0x0, 0x7}, r2, 0x8, r3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) capget(&(0x7f0000000240)={0x20080522, r6}, &(0x7f0000000380)={0x20, 0x1, 0x3, 0x9c}) [ 123.696569] loop5: detected capacity change from 0 to 109 [ 123.710190] loop5: detected capacity change from 0 to 109 08:50:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f00000012c0)='smaps_rollup\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = getpid() capget(&(0x7f0000000300)={0x19980330, r2}, &(0x7f0000000340)) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0xfb, 0x0, 0xff, 0x6, 0x0, 0x4, 0xe88, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x7ff}, 0x261, 0x61, 0x8, 0x4, 0x2, 0x851, 0x5, 0x0, 0xfffffffa, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x6, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0x4002, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xf7, 0x3148}, 0x0, 0x800, 0x6, 0x5, 0x2, 0x7, 0x200, 0x0, 0x7, 0x0, 0x7}, r2, 0x8, r3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) capget(&(0x7f0000000240)={0x20080522}, &(0x7f0000000380)={0x20, 0x1, 0x3, 0x9c}) 08:50:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f00000012c0)='smaps_rollup\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = getpid() capget(&(0x7f0000000300)={0x19980330, r2}, &(0x7f0000000340)) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0xfb, 0x0, 0xff, 0x6, 0x0, 0x4, 0xe88, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x7ff}, 0x261, 0x61, 0x8, 0x4, 0x2, 0x851, 0x5, 0x0, 0xfffffffa, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x6, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0x4002, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xf7, 0x3148}, 0x0, 0x800, 0x6, 0x5, 0x2, 0x7, 0x200, 0x0, 0x7, 0x0, 0x7}, r2, 0x8, r3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) capget(&(0x7f0000000240)={0x20080522}, &(0x7f0000000380)={0x20, 0x1, 0x3, 0x9c}) [ 124.039024] audit: type=1400 audit(1664700624.833:9): avc: denied { map } for pid=3932 comm="syz-executor.7" path="pipe:[13713]" dev="pipefs" ino=13713 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 124.041059] audit: type=1400 audit(1664700624.834:10): avc: denied { execute } for pid=3932 comm="syz-executor.7" path="pipe:[13713]" dev="pipefs" ino=13713 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 124.207815] loop2: detected capacity change from 0 to 166 [ 124.212128] loop2: detected capacity change from 0 to 127 [ 124.213047] ext4: Unknown parameter 'obj_user' [ 124.253416] 9pnet: Could not find request transport: rdma [ 124.255134] loop2: detected capacity change from 0 to 166 [ 124.258845] loop2: detected capacity change from 0 to 127 [ 124.259385] ext4: Unknown parameter 'obj_user' VM DIAGNOSIS: 08:50:23 Registers: info registers vcpu 0 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803f317690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001 R12=0000000000000034 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff97e6d8700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd43d79c1f0 CR3=0000000017e16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff9812497c0 00007ff9812497c8 YMM02=0000000000000000 0000000000000000 00007ff9812497e0 00007ff9812497c0 YMM03=0000000000000000 0000000000000000 00007ff9812497c8 00007ff9812497c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff81359c40 RCX=0000000000000000 RDX=1ffff11007bc3edc RSI=ffffffff84109d40 RDI=ffff88803de1f750 RBP=ffff88803de1f720 RSP=ffff88803de1f680 R8 =ffffffff8622f88a R9 =ffffffff8622f88e R10=ffffed1007bc3ede R11=ffff88803de1f6c8 R12=ffff88803de1f750 R13=0000000000000000 R14=ffff88802101b580 R15=ffff8880187ba800 RIP=ffffffff81359c4a RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb9d4f3e368 CR3=000000003e80c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000