Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:2890' (ECDSA) to the list of known hosts. 2022/10/03 11:03:41 fuzzer started 2022/10/03 11:03:41 dialing manager at localhost:35095 syzkaller login: [ 36.354637] cgroup: Unknown subsys name 'net' [ 36.427178] cgroup: Unknown subsys name 'rlimit' 2022/10/03 11:03:55 syscalls: 2215 2022/10/03 11:03:55 code coverage: enabled 2022/10/03 11:03:55 comparison tracing: enabled 2022/10/03 11:03:55 extra coverage: enabled 2022/10/03 11:03:55 setuid sandbox: enabled 2022/10/03 11:03:55 namespace sandbox: enabled 2022/10/03 11:03:55 Android sandbox: enabled 2022/10/03 11:03:55 fault injection: enabled 2022/10/03 11:03:55 leak checking: enabled 2022/10/03 11:03:55 net packet injection: enabled 2022/10/03 11:03:55 net device setup: enabled 2022/10/03 11:03:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 11:03:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 11:03:55 USB emulation: enabled 2022/10/03 11:03:55 hci packet injection: enabled 2022/10/03 11:03:55 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 11:03:55 802.15.4 emulation: enabled 2022/10/03 11:03:56 fetching corpus: 50, signal 24668/26505 (executing program) 2022/10/03 11:03:56 fetching corpus: 100, signal 37710/41209 (executing program) 2022/10/03 11:03:56 fetching corpus: 150, signal 42375/47525 (executing program) 2022/10/03 11:03:56 fetching corpus: 200, signal 46587/53335 (executing program) 2022/10/03 11:03:56 fetching corpus: 250, signal 52007/60261 (executing program) 2022/10/03 11:03:56 fetching corpus: 300, signal 56157/65859 (executing program) 2022/10/03 11:03:56 fetching corpus: 350, signal 63189/74201 (executing program) 2022/10/03 11:03:56 fetching corpus: 400, signal 66162/78606 (executing program) 2022/10/03 11:03:56 fetching corpus: 450, signal 68200/82093 (executing program) 2022/10/03 11:03:57 fetching corpus: 500, signal 73131/88227 (executing program) 2022/10/03 11:03:57 fetching corpus: 550, signal 76111/92533 (executing program) 2022/10/03 11:03:57 fetching corpus: 600, signal 78450/96186 (executing program) 2022/10/03 11:03:57 fetching corpus: 650, signal 83039/101834 (executing program) 2022/10/03 11:03:57 fetching corpus: 700, signal 87026/106888 (executing program) 2022/10/03 11:03:57 fetching corpus: 750, signal 90806/111696 (executing program) 2022/10/03 11:03:57 fetching corpus: 800, signal 96202/117913 (executing program) 2022/10/03 11:03:57 fetching corpus: 850, signal 99478/122164 (executing program) 2022/10/03 11:03:58 fetching corpus: 900, signal 100836/124641 (executing program) 2022/10/03 11:03:58 fetching corpus: 950, signal 102494/127384 (executing program) 2022/10/03 11:03:58 fetching corpus: 1000, signal 104150/130117 (executing program) 2022/10/03 11:03:58 fetching corpus: 1050, signal 106516/133518 (executing program) 2022/10/03 11:03:58 fetching corpus: 1100, signal 109402/137259 (executing program) 2022/10/03 11:03:58 fetching corpus: 1150, signal 110434/139417 (executing program) 2022/10/03 11:03:58 fetching corpus: 1200, signal 112225/142209 (executing program) 2022/10/03 11:03:58 fetching corpus: 1250, signal 114713/145603 (executing program) 2022/10/03 11:03:58 fetching corpus: 1300, signal 115902/147795 (executing program) 2022/10/03 11:03:59 fetching corpus: 1350, signal 116896/149863 (executing program) 2022/10/03 11:03:59 fetching corpus: 1400, signal 118410/152357 (executing program) 2022/10/03 11:03:59 fetching corpus: 1450, signal 120363/155139 (executing program) 2022/10/03 11:03:59 fetching corpus: 1500, signal 122328/157917 (executing program) 2022/10/03 11:03:59 fetching corpus: 1550, signal 123895/160365 (executing program) 2022/10/03 11:03:59 fetching corpus: 1600, signal 127061/164043 (executing program) 2022/10/03 11:03:59 fetching corpus: 1650, signal 128260/166177 (executing program) 2022/10/03 11:03:59 fetching corpus: 1700, signal 129477/168269 (executing program) 2022/10/03 11:03:59 fetching corpus: 1750, signal 130481/170172 (executing program) 2022/10/03 11:04:00 fetching corpus: 1800, signal 131316/171959 (executing program) 2022/10/03 11:04:00 fetching corpus: 1850, signal 132427/173931 (executing program) 2022/10/03 11:04:00 fetching corpus: 1900, signal 134420/176570 (executing program) 2022/10/03 11:04:00 fetching corpus: 1950, signal 136690/179335 (executing program) 2022/10/03 11:04:00 fetching corpus: 2000, signal 139047/182135 (executing program) 2022/10/03 11:04:00 fetching corpus: 2050, signal 140364/184152 (executing program) 2022/10/03 11:04:00 fetching corpus: 2100, signal 141558/186081 (executing program) 2022/10/03 11:04:01 fetching corpus: 2150, signal 143624/188618 (executing program) 2022/10/03 11:04:01 fetching corpus: 2200, signal 144047/189955 (executing program) 2022/10/03 11:04:01 fetching corpus: 2250, signal 145452/192002 (executing program) 2022/10/03 11:04:01 fetching corpus: 2300, signal 146159/193565 (executing program) 2022/10/03 11:04:01 fetching corpus: 2350, signal 147160/195280 (executing program) 2022/10/03 11:04:01 fetching corpus: 2400, signal 147966/196919 (executing program) 2022/10/03 11:04:01 fetching corpus: 2450, signal 148957/198679 (executing program) 2022/10/03 11:04:01 fetching corpus: 2500, signal 149751/200238 (executing program) 2022/10/03 11:04:01 fetching corpus: 2550, signal 150563/201788 (executing program) 2022/10/03 11:04:02 fetching corpus: 2600, signal 151880/203679 (executing program) 2022/10/03 11:04:02 fetching corpus: 2650, signal 152907/205325 (executing program) 2022/10/03 11:04:02 fetching corpus: 2700, signal 153922/206988 (executing program) 2022/10/03 11:04:02 fetching corpus: 2750, signal 155385/208918 (executing program) 2022/10/03 11:04:02 fetching corpus: 2800, signal 156206/210376 (executing program) 2022/10/03 11:04:02 fetching corpus: 2850, signal 157632/212219 (executing program) 2022/10/03 11:04:02 fetching corpus: 2900, signal 158788/213886 (executing program) 2022/10/03 11:04:03 fetching corpus: 2950, signal 159853/215430 (executing program) 2022/10/03 11:04:03 fetching corpus: 3000, signal 161085/217075 (executing program) 2022/10/03 11:04:03 fetching corpus: 3050, signal 162404/218784 (executing program) 2022/10/03 11:04:03 fetching corpus: 3100, signal 162902/220038 (executing program) 2022/10/03 11:04:03 fetching corpus: 3150, signal 164433/221863 (executing program) 2022/10/03 11:04:03 fetching corpus: 3200, signal 165837/223617 (executing program) 2022/10/03 11:04:03 fetching corpus: 3250, signal 166801/225091 (executing program) 2022/10/03 11:04:03 fetching corpus: 3300, signal 167622/226420 (executing program) 2022/10/03 11:04:04 fetching corpus: 3350, signal 169099/228095 (executing program) 2022/10/03 11:04:04 fetching corpus: 3400, signal 169904/229428 (executing program) 2022/10/03 11:04:04 fetching corpus: 3450, signal 171212/231066 (executing program) 2022/10/03 11:04:04 fetching corpus: 3500, signal 171825/232219 (executing program) 2022/10/03 11:04:04 fetching corpus: 3550, signal 172891/233703 (executing program) 2022/10/03 11:04:04 fetching corpus: 3600, signal 173943/235065 (executing program) 2022/10/03 11:04:04 fetching corpus: 3650, signal 174646/236317 (executing program) 2022/10/03 11:04:04 fetching corpus: 3700, signal 175548/237661 (executing program) 2022/10/03 11:04:05 fetching corpus: 3750, signal 176658/239043 (executing program) 2022/10/03 11:04:05 fetching corpus: 3800, signal 177488/240296 (executing program) 2022/10/03 11:04:05 fetching corpus: 3850, signal 177954/241330 (executing program) 2022/10/03 11:04:05 fetching corpus: 3900, signal 178902/242612 (executing program) 2022/10/03 11:04:05 fetching corpus: 3950, signal 179621/243778 (executing program) 2022/10/03 11:04:05 fetching corpus: 4000, signal 180350/244905 (executing program) 2022/10/03 11:04:05 fetching corpus: 4050, signal 180881/245940 (executing program) 2022/10/03 11:04:05 fetching corpus: 4100, signal 181688/247114 (executing program) 2022/10/03 11:04:06 fetching corpus: 4150, signal 182527/248261 (executing program) 2022/10/03 11:04:06 fetching corpus: 4200, signal 183572/249543 (executing program) 2022/10/03 11:04:06 fetching corpus: 4250, signal 184372/250691 (executing program) 2022/10/03 11:04:06 fetching corpus: 4300, signal 185916/252082 (executing program) 2022/10/03 11:04:06 fetching corpus: 4350, signal 186635/253131 (executing program) 2022/10/03 11:04:06 fetching corpus: 4400, signal 187199/254153 (executing program) 2022/10/03 11:04:06 fetching corpus: 4450, signal 187783/255169 (executing program) 2022/10/03 11:04:06 fetching corpus: 4500, signal 188265/256135 (executing program) 2022/10/03 11:04:07 fetching corpus: 4550, signal 188743/257083 (executing program) 2022/10/03 11:04:07 fetching corpus: 4600, signal 189704/258269 (executing program) 2022/10/03 11:04:07 fetching corpus: 4650, signal 190466/259313 (executing program) 2022/10/03 11:04:07 fetching corpus: 4700, signal 191391/260399 (executing program) 2022/10/03 11:04:07 fetching corpus: 4750, signal 191789/261281 (executing program) 2022/10/03 11:04:07 fetching corpus: 4800, signal 192233/262158 (executing program) 2022/10/03 11:04:07 fetching corpus: 4850, signal 192990/263165 (executing program) 2022/10/03 11:04:07 fetching corpus: 4900, signal 193552/264115 (executing program) 2022/10/03 11:04:07 fetching corpus: 4950, signal 194177/265120 (executing program) 2022/10/03 11:04:07 fetching corpus: 4999, signal 194783/266057 (executing program) 2022/10/03 11:04:07 fetching corpus: 4999, signal 194783/266794 (executing program) 2022/10/03 11:04:07 fetching corpus: 4999, signal 194783/267542 (executing program) 2022/10/03 11:04:07 fetching corpus: 4999, signal 194783/268252 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/268973 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/269675 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/270392 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/271071 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/271767 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/272474 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/273190 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/273878 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/274571 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/275259 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/275997 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/276744 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/277477 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/278211 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/278896 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/279608 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/280299 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/281046 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/281781 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/282486 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/283198 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/283940 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/284672 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/285372 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/286095 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/286842 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/287552 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/288277 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/288993 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/289688 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/290393 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/291078 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/291791 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/292468 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/293157 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/293848 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/294592 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/295331 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/296035 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/296755 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/297442 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/298108 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/298843 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/299559 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/300231 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/300873 (executing program) 2022/10/03 11:04:08 fetching corpus: 4999, signal 194783/300873 (executing program) 2022/10/03 11:04:11 starting 8 fuzzer processes 11:04:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xb1, 0x100) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000040)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000440)) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000500)={0x77359400}, 0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x6000, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0xb, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x47}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004085}, 0x4c080) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000680), &(0x7f00000006c0)=0x40) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000780)={0x0, 0x3ff, [0x4, 0xffffffffffffff00, 0x8, 0x9, 0x3, 0x4]}) vmsplice(r3, &(0x7f00000008c0)=[{&(0x7f00000007c0)="fbc5aa6ec52059dfaa19d38dd6b0f8e9f41c50bea289dad0232adaee196418c44409befd018a624c7270656b45c23465efe2ef9429cf8bcd5525470f1d04550529e291e68f2933127b36780f1e875d6b0e2da082f45cf620a31c94ce5962339382032d34c5545613a1207fd9996d46da2e0abbdc729fb729d57d65317c46c42fc00f9ddf9e206c44640f2a924f905c41eba41a31d801fb85ead4a9725b1e1b42df4c19a7672eb4152989b085f802385ba243d8e0b1e010b5f20e381567e798e9a12e6297fe64340f373017c870d53e", 0xcf}], 0x1, 0x4) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000900), &(0x7f0000000940)=0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000980)={'erspan0\x00', {0x2, 0x0, @empty}}) r4 = dup3(r3, r1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000a00)={0x4, &(0x7f00000009c0)=[{0x8, 0x0, 0x6e, 0x3}, {0x2, 0x49, 0x3}, {0xfff, 0x2, 0xbf, 0x9}, {0x3, 0x8, 0x2, 0x68000000}]}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000a40)=[r5, r3, r0], 0x3) 11:04:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r2 = openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) close_range(r0, r2, 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x73, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000200)="471b5e77964d0f5461f32651cedd936c932838a95f930ac630526c9dcff1c9958505d58f9f3fd3db4332c816fd3e7341d819e55f78273126e6963b", 0x3b, 0x7}, {&(0x7f0000000240)="3e02755ea13909680f1d956225120199d6434a9e636dc92fca11abc2a23742cff909a104d0e7437550204df59ade53968720b209fbcc41f8d9313bf237dde41803b4c15164b7c26203ca34dd102fbadb027619cda7cb54d41aa60bdd342c2b47f1730039b55a34c14e6cdfe499a86a0b30f3bf92ff442591b9852ac9c10fd090c638291079555e4d8fc943cca49438c319d6bbf97c32ef1c088ac8a22796459a7622838198f57bd1517fac5f4a", 0xad}, {&(0x7f0000000300)="ad0d05d681a00f19ad5df09e273170b118166a4ed71910c51f3cf21879f42c4141acbcf076ff0c8046b815246a213687bb64710141eb9621cfb81cb83e105394ce99ba19a7f4aadc5baa5c54c890486b8541cbcbb4e1faa4acc0b487b2900519d291b7318900e4ff8de0d364718e1ebf5c8f9cca6c298cba3556db76f1f1978b97e806c91c284f802f19d72f822af540891bd7ee18b8e956514242aa53db696b6c0412a336026d419aa51f3dbe9d526fdd6bf442595bbc96349c866bb33c00a1d438d9262a5a521831fb5152a05282dd1a491f1ddb7fc4b327d626ca5e0cb6ee6da38aaa6bc2b8db958b5804e00feb2d", 0xf0}, {&(0x7f0000000400)="69597a9104f10c9ab7ac7c3d0d3fe453eca20bab1be2e4c7529c72b31604a18b16220a6aec472971ca19f291c65c447385ff0f00d1612a038515cf5e4b52a9e85e73ef816d3163f2b1ca072acd564c6759a666d286a75d294fc33f0385017e4b46770c197942156f4f982045985f826fb7e0f3dc12fe48de156e3384dd8358dd786b", 0x82, 0x3}], 0x80000, &(0x7f0000000540)={[{@map_off}, {@nojoliet}, {@cruft}, {@unhide}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, 'cgroup.type\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'cgroup.type\x00'}}, {@subj_user={'subj_user', 0x3d, 'cgroup.type\x00'}}, {@fowner_lt}, {@smackfsdef={'smackfsdef', 0x3d, 'cgroup.type\x00'}}, {@obj_type={'obj_type', 0x3d, 'cgroup.type\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'cgroup.type\x00'}}]}) ftruncate(r3, 0x5f) write$P9_RSTAT(r1, &(0x7f0000000640)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x8, 0x6, {0x40, 0x0, 0x8}, 0x840000, 0x2, 0xf0000000, 0x38014c9e, 0x7, 'map=off', 0x3, '][+', 0x2, ']$'}}, 0x46) write$P9_RRENAME(r1, &(0x7f00000006c0)={0x7, 0x15, 0x2}, 0x7) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x1b, 0x1}, 0x7) write$P9_RLOCK(r1, &(0x7f0000000740)={0x8, 0x35, 0x2, 0x3}, 0x8) r4 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) fcntl$setsig(r4, 0xa, 0x22) r5 = memfd_secret(0x80000) write$P9_RLOPEN(r5, &(0x7f0000000780)={0x18, 0xd, 0x2, {{0x0, 0x1, 0x1}, 0x9}}, 0x18) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/locks\x00', 0x0, 0x0) close(r6) ftruncate(r5, 0x0) 11:04:11 executing program 1: prctl$PR_SET_PDEATHSIG(0x1, 0x29) prctl$PR_SET_PDEATHSIG(0x1, 0x2a) prctl$PR_SET_PDEATHSIG(0x1, 0x2b) prctl$PR_SET_PDEATHSIG(0x1, 0x11) prctl$PR_SET_PDEATHSIG(0x1, 0x41) prctl$PR_SET_PDEATHSIG(0x1, 0x3) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) prctl$PR_SET_PDEATHSIG(0x1, 0x10) prctl$PR_SET_PDEATHSIG(0x1, 0x38) prctl$PR_SET_PDEATHSIG(0x1, 0x34) prctl$PR_SET_PDEATHSIG(0x1, 0x3c) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0xb) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x2e) prctl$PR_SET_PDEATHSIG(0x1, 0x41) prctl$PR_SET_PDEATHSIG(0x1, 0x3d) prctl$PR_SET_PDEATHSIG(0x1, 0xc) prctl$PR_SET_PDEATHSIG(0x1, 0x4) prctl$PR_SET_PDEATHSIG(0x1, 0x38) 11:04:11 executing program 7: r0 = shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x3800) r1 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/40) r2 = shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x2000) shmdt(r2) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/202) shmdt(r0) r3 = shmget(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmget(0x3, 0x1000, 0x10, &(0x7f0000ff9000/0x1000)=nil) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmat(r3, &(0x7f0000ff8000/0x1000)=nil, 0x800) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r5 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) shmat(r5, &(0x7f0000fff000/0x1000)=nil, 0x1000) shmget(0x2, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r6 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f0000003340)={{0x0, 0x0, 0xee01, 0x0, 0x0, 0x114, 0x1}, 0x1, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x6}) 11:04:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r2) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r3, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008840}, 0x40008d5) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r2) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "156e7cb64af3a79788d3724d1b61101e"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "3ac71cbe423c61505f1f5b97f13cd76f"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "06f4668c6c98ca5fe0cf71b9580033506a9a066b996173c9fcf434edd1ac7dca"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "38447139c56fc50484ab12f116906004"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x17b279f71997c8e1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040080}, 0x40080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x678e0d07a6336024) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x140, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f1e847c011d86346af868e31611bff189542134aee2803bd2ce6f0e45c04ea1d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e1ad852e8f0598a730d6c004db9d5dfd"}]}, @NL802154_ATTR_SEC_KEY={0xc0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4268c20f28453b449c17d6497a90fc635d361a23fe769923b4781f66240f3da6"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "90b60cf502b516b3e11d311a67928c9c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f9ac09c2fa0727384bcb246a26bb45925962a79e6934d2c67e78f60d7cdb240e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8a}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd7}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "469d6a5fe333426c6366f8034ade1570b2ba26067f0eba69cbca64ae8e418270"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9c65f0ceaa7238f7dcae4d7d702da58f"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4fb0f39f9bbef00a9bcd2b4a70fb3077"}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r7, 0x300, 0x15b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}}, 0x24008040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 65.982414] audit: type=1400 audit(1664795051.562:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:04:11 executing program 3: ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x100, [0x1, 0x5, 0xff, 0x0, 0x5, 0x7]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ca9000/0x4000)=nil, &(0x7f0000dc6000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00008ac000/0x9000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00009dd000/0x3000)=nil, &(0x7f0000d74000/0x1000)=nil, &(0x7f0000000140)="ed110fb3782084b87e4e35682bcd61b78b86958a30ca1852530d861fa2a4fae721860b48c941e89b826d79cefd3cc6786cc6821d106876a9eaf15f691991a2efc3bd01d426b9f7862bc493d5f7a479dbb7a8879b10ee50893f6bf95389eaca140ef43e19dc04d80196c06d461ce6cb8491debbed9b59685c76d0593032b833e3225c5b5ec805da960b639e1da93e956ae9aeab929a06580aab8c288989b96ba7ba322b3c7be34e88cc24702e517f1fdee369a2bd85a6346f8809c8904e40", 0xbe, r0}, 0x68) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r0], 0x1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x800) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x0) write$evdev(r1, &(0x7f0000000380)=[{{0x0, 0xea60}, 0x3, 0x1ff, 0x400}, {{}, 0x2, 0xfffb, 0x8001}, {{0x0, 0xea60}, 0x17, 0x0, 0x101}, {{}, 0x5, 0x1, 0x10001}], 0x60) r3 = dup2(r0, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000440)) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000480)={r2, 0xffffffffffffff81, 0x2, 0x8}) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) truncate(&(0x7f00000004c0)='./file0\x00', 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000001c00)=[{{&(0x7f0000000500)=@tipc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/159, 0x9f}], 0x1, &(0x7f0000000680)=""/94, 0x5e}, 0x7}, {{&(0x7f0000000700)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/188, 0xbc}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/235, 0xeb}, {&(0x7f0000001940)=""/225, 0xe1}, {&(0x7f0000001a40)=""/87, 0x57}, {&(0x7f0000001ac0)=""/21, 0x15}], 0x6, &(0x7f0000001b80)=""/96, 0x60}}], 0x2, 0x100a2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000001c80)={{0x3b, @loopback, 0x4e24, 0x4, 'dh\x00', 0x0, 0x95, 0x19}, {@empty, 0x4e20, 0x0, 0xb9d, 0x9, 0xffff3c03}}, 0x44) 11:04:11 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)={0x1, "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"}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000280)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000300)={0xee1a, 0x1, 0x0, 'queue0\x00', 0x4}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$notify(r2, 0x402, 0x10) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)=0x0) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r0, &(0x7f0000000400)={r1, r2, 0xffffffff}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000440)=0x3) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000480)=0x400, 0x4) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000004c0)=r3) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000500)=0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000580)={0x5, 0x2, 'client1\x00', 0xffffffff8000000d, "74dc86bad88203cb", "ef1fada563393ec70e0f15ea27212a9cfa85fae366044bb21157fabf96766c03", 0x20, 0x1}) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000640)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000680)=0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x1ff, 0x0, 'client1\x00', 0x2, "271178bbb5be9b5a", "8bf243b6e5bf585d1a5c672c249e13159680896416fc9df66850c25b7ad8cd39", 0x8, 0x5}) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 11:04:11 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x4, 0x8, 0xfff, 0x8, 0x101, 0x8000]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0xa}, {0x0, 0x2}, {0x6, 0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x8}, {0x3, 0x3}, {0x3}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x2}, {0x6, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x7}, {0x1, 0x7}, {0x5, 0x7}, {0x4, 0x9}, {0x4, 0x2}, {0x7, 0x4}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x6, 0xa}, {0x6, 0x9}, {0x7, 0x4}, {0x4, 0x2}, {0x6, 0x2}, {0x5, 0x6}, {0x7, 0x6}, {0x5}, {0x1, 0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0x5}, {0x5, 0x7}, {0x1, 0x9}, {0x6, 0x1}, {0x7, 0x7}, {0x1}, {0x1, 0x9}, {0x1}, {0x0, 0x5}, {0x4, 0x3}, {0x4, 0x9}, {0x6, 0x6}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0xa}, {0x2, 0x9}, {0x2, 0x3}, {0x6, 0x8}, {0x1}, {0x4, 0x5}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x70, 0x200, 0x6, 0x2, 0x5, 0x9, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x60, 0xb, 0x24, 0xb, 0x48, 0x5, 0x9, 0x6, 0x18, 0x6, 0x4, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xaeab, 0x7, 0x8, 0xdd5, 0x1, 0x4, 0x5, 0xec]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x48, 0x36, 0x0, 0x48, 0x1, 0x2, 0x12, 0x16, 0x1, 0x1, 0x1, 0x18, 0x18, 0x9]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x6, 0x5}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0xa}, {0x0, 0x6}, {0x7, 0x2}, {0x4, 0x7}, {0x6, 0x5}, {0x5, 0x6}, {0x7, 0x7}, {0x2, 0x3}, {0x5, 0x6}, {0x2, 0x9}, {0x3, 0x4}, {0x7, 0x1}, {0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x3, 0xa}, {0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7, 0x400, 0x3, 0x81, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x5}, {0x2, 0x4}, {0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x2, 0x7}, {0x6, 0x2}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x3, 0xa}, {0x2, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {}, {0x4, 0x9}, {0x2}, {0x5, 0x9}, {0x1, 0x8}, {0x5, 0x7}, {0x3, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x3}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xcb96, 0x400, 0x1ff, 0x80, 0x7ff, 0x2]}}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xb}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20048010}, 0x4040) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f6, 0x400, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, 0x2, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa265}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8800}, 0x1665aed9f6a98375) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000580), 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc8, 0x2, 0x1, 0x202, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3f}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x30000010}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x10) syz_open_dev$vcsa(&(0x7f0000000880), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) ftruncate(r3, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000900)={r3, 0x8d34, 0x5, 0x1ff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000940)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) r6 = syz_open_dev$mouse(&(0x7f0000000980), 0xad0e, 0x741080) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x3f7, 0x800, 0x70bd25, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) openat$cgroup_freezer_state(r3, &(0x7f0000000ac0), 0x2, 0x0) r7 = accept(r1, &(0x7f0000000b00)=@xdp, &(0x7f0000000b80)=0x80) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x194, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x90, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3f}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}, {0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xf, 0x1a, '/dev/vcsa#\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffff800}, @IPSET_ATTR_ADT={0xa8, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x81}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x16, 0x1a, '/dev/input/mouse#\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x194}, 0x1, 0x0, 0x0, 0x810}, 0x895) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x9) [ 67.294807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.296687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.298519] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.299649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.301555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.302731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.306890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.308010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.310306] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.311652] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.313264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.314170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.317293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.327223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.328482] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.329715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.335364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.336826] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.341527] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.342785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.344359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.345541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.346708] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.351150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.358881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.364233] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.366428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.367605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.372697] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.373803] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.375007] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.395800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.399071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.404120] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.418289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.420391] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.421871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.429115] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.429341] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.441898] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.443977] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.445422] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.450292] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.508079] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.514745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.539349] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.551264] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.554473] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.572510] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.368323] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 69.368475] Bluetooth: hci2: command 0x0409 tx timeout [ 69.432629] Bluetooth: hci0: command 0x0409 tx timeout [ 69.432641] Bluetooth: hci3: command 0x0409 tx timeout [ 69.433409] Bluetooth: hci1: command 0x0409 tx timeout [ 69.497636] Bluetooth: hci7: command 0x0409 tx timeout [ 69.498227] Bluetooth: hci4: command 0x0409 tx timeout [ 69.625191] Bluetooth: hci5: command 0x0409 tx timeout [ 71.417141] Bluetooth: hci2: command 0x041b tx timeout [ 71.480347] Bluetooth: hci3: command 0x041b tx timeout [ 71.481678] Bluetooth: hci0: command 0x041b tx timeout [ 71.482548] Bluetooth: hci1: command 0x041b tx timeout [ 71.545256] Bluetooth: hci4: command 0x041b tx timeout [ 71.546412] Bluetooth: hci7: command 0x041b tx timeout [ 71.673109] Bluetooth: hci5: command 0x041b tx timeout [ 73.464124] Bluetooth: hci2: command 0x040f tx timeout [ 73.529139] Bluetooth: hci0: command 0x040f tx timeout [ 73.529355] Bluetooth: hci1: command 0x040f tx timeout [ 73.529602] Bluetooth: hci3: command 0x040f tx timeout [ 73.592120] Bluetooth: hci7: command 0x040f tx timeout [ 73.592276] Bluetooth: hci4: command 0x040f tx timeout [ 73.720127] Bluetooth: hci5: command 0x040f tx timeout [ 74.488119] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 75.512131] Bluetooth: hci2: command 0x0419 tx timeout [ 75.576113] Bluetooth: hci1: command 0x0419 tx timeout [ 75.576629] Bluetooth: hci3: command 0x0419 tx timeout [ 75.577528] Bluetooth: hci0: command 0x0419 tx timeout [ 75.640082] Bluetooth: hci4: command 0x0419 tx timeout [ 75.640544] Bluetooth: hci7: command 0x0419 tx timeout [ 75.769084] Bluetooth: hci5: command 0x0419 tx timeout [ 79.032083] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 81.564562] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.569841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.572675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.576247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.579245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.581489] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.586256] Bluetooth: hci6: HCI_REQ-0x0c1a [ 83.640153] Bluetooth: hci6: command 0x0409 tx timeout [ 85.688170] Bluetooth: hci6: command 0x041b tx timeout [ 87.737121] Bluetooth: hci6: command 0x040f tx timeout [ 89.784198] Bluetooth: hci6: command 0x0419 tx timeout 11:05:04 executing program 7: r0 = shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x3800) r1 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/40) r2 = shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x2000) shmdt(r2) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/202) shmdt(r0) r3 = shmget(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmget(0x3, 0x1000, 0x10, &(0x7f0000ff9000/0x1000)=nil) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmat(r3, &(0x7f0000ff8000/0x1000)=nil, 0x800) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r5 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) shmat(r5, &(0x7f0000fff000/0x1000)=nil, 0x1000) shmget(0x2, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r6 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f0000003340)={{0x0, 0x0, 0xee01, 0x0, 0x0, 0x114, 0x1}, 0x1, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x6}) 11:05:23 executing program 3: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40800, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CDROMCLOSETRAY(0xffffffffffffffff, 0x5319) getpriority(0x0, 0x0) ioctl$CDROMRESUME(0xffffffffffffffff, 0x5302) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc2}) ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000200)={0x0, 0xad, 0x21}) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:05:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f0000004c80)=""/102392, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r1, r0, &(0x7f0000000000), 0xc31) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x80, 0xfa, 0x0, 0x3f, 0x0, 0x2, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xffffffffffffff43}, 0x8000, 0x0, 0x5, 0x1, 0x8, 0x8, 0x4, 0x0, 0xc6, 0x0, 0xd60}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r2) 11:05:23 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8c) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000d00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x9c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff0000}, {0x6, 0x11, 0x8000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x24000490) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000880)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30343636343439353900"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000c8b70d3c99374a58baa2fffdfaacb391010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="01000000000005000c0000000000000000000000040000004b00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000060000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x880, 0x1000}, {&(0x7f0000010e00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x2000}, {&(0x7f0000010f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x2800}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3002}, {&(0x7f0000011100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3800}, {&(0x7f0000011200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4000}, {&(0x7f0000011300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4800}, {&(0x7f0000011400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000011500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000000b00)="504d4d00504d4dffd8f4655f00000000647679756b6f762d676c6170746d70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f6505000000000000000000000000100000d3b0bb86efe73403c26c359944ae8f86512f918c0222078e88b82172c5c6daa49f1fd9d297d72bb1a05d72545ca3daa21e", 0xb1, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6800}, {&(0x7f0000011800)="0200"/32, 0x20, 0x6c00}, {&(0x7f0000011900)="0300"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="0400"/32, 0x20, 0x7400}, {&(0x7f0000011b00)="0500"/32, 0x20, 0x7800}, {&(0x7f0000011c00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x7c00}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x8000}, {&(0x7f00000001c0)="0200"/32, 0x20, 0x8400}, {&(0x7f0000011f00)="0300"/32, 0x20, 0x8800}, {&(0x7f0000012000)="0400"/32, 0x20, 0x8000000008c00}, {&(0x7f0000012100)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0500"/2080, 0x820, 0x9000}, {&(0x7f0000000a80)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x9c00}, {&(0x7f0000012b00)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x10000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x10800}, {&(0x7f0000012d00)="00000000000000000000000000000000786174747232000078617474723100000000000000000000d8f4655fd8f4655fd8f4655f00"/64, 0x40, 0x10fe0}, {&(0x7f00000006c0)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000004000400000000000800c186f70c5b4708be04000000000000000000000001000000030000003915030b671e3d9bd89508000000f08e711f2c4e63732bd235aacda162ff33ef3857feffca8621ca85f13b3415", 0x6d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d000000", 0x40, 0x11100}, {&(0x7f0000013000)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30200040000000000000000000000020000001000000002000000010000001300"/96, 0x60, 0x11180}, {&(0x7f0000013100)="c041000000400000d8f4655fd8f4655fd8f4655f00000000000002002000000000000800000000000af301000400000000000000000000000800000004000000", 0x40, 0x11500}, {&(0x7f0000013200)="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"/768, 0x300, 0x11580}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000013a00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000013b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000013c00)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x230002, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/250, 0xfa}], 0x1, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x12040) 11:05:23 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_to_batadv\x00'}) connect(r0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x10000, &(0x7f0000001080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) syz_mount_image$vfat(&(0x7f0000006180), &(0x7f00000061c0)='./file0\x00', 0x0, 0x0, &(0x7f0000006400), 0x0, &(0x7f0000001100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@shortname_mixed}, {@fat=@quiet}], [{@obj_type={'obj_type', 0x3d, 'iocharset'}}]}) 11:05:23 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x0, 0x800, 0x4) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = getegid() r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r11, @ANYRES32=r7, @ANYRES32=r10, @ANYRESHEX=r9, @ANYRES64, @ANYRESOCT, @ANYRES64=r8, @ANYRES32, @ANYRESOCT]) r12 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r16, @ANYRES32=r12, @ANYRES32=r15, @ANYRESHEX=r14, @ANYRES64, @ANYRESOCT, @ANYRES64=r13, @ANYRES32, @ANYRESOCT]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x6, r0}], {0x4, 0x2}, [{0x8, 0x4, r1}, {0x8, 0x3, r6}, {0x8, 0x4, r11}, {0x8, 0x1, r15}, {0x8, 0x2, 0xee00}], {0x10, 0x4}, {0x20, 0x4}}, 0x54, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 11:05:23 executing program 7: r0 = shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x3800) r1 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/40) r2 = shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x2000) shmdt(r2) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/202) shmdt(r0) r3 = shmget(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmget(0x3, 0x1000, 0x10, &(0x7f0000ff9000/0x1000)=nil) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmat(r3, &(0x7f0000ff8000/0x1000)=nil, 0x800) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r5 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) shmat(r5, &(0x7f0000fff000/0x1000)=nil, 0x1000) shmget(0x2, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r6 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f0000003340)={{0x0, 0x0, 0xee01, 0x0, 0x0, 0x114, 0x1}, 0x1, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x6}) [ 137.754195] audit: type=1400 audit(1664795123.333:7): avc: denied { open } for pid=3978 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:05:23 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r0, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd_index=0x6, 0x76, 0x9, 0x6, 0x2, 0x1}, 0x9) memfd_create(&(0x7f0000000300)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba', 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) 11:05:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}]}, 0x58}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800a900", @ANYRES16=r3, @ANYBLOB="000126bd7000fedbdf25020000001400020000000000000000000000ffffffffffff140006007767320000000000000000000000000014000300fe80000000000000000000000000003008000500ac1414aa"], 0x58}}, 0x8010) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) pwritev(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="e4", 0x1}], 0x1, 0x409e74, 0x8000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x200, 0x88800) signalfd4(r7, &(0x7f00000003c0)={[0x3]}, 0x8, 0x400) pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) sendfile(r5, r5, 0x0, 0x100000) [ 137.797517] audit: type=1400 audit(1664795123.377:8): avc: denied { kernel } for pid=3978 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.801925] ------------[ cut here ]------------ [ 137.801944] [ 137.801947] ====================================================== [ 137.801951] WARNING: possible circular locking dependency detected [ 137.801955] 6.0.0-rc7-next-20220930 #1 Not tainted [ 137.801961] ------------------------------------------------------ [ 137.801964] syz-executor.1/3979 is trying to acquire lock: [ 137.801971] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 137.802011] [ 137.802011] but task is already holding lock: [ 137.802013] ffff888040129020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.802043] [ 137.802043] which lock already depends on the new lock. [ 137.802043] [ 137.802046] [ 137.802046] the existing dependency chain (in reverse order) is: [ 137.802049] [ 137.802049] -> #3 (&ctx->lock){....}-{2:2}: 11:05:23 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) io_setup(0x6, &(0x7f0000000380)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r4, &(0x7f0000000180)=""/70, 0x18) getdents(r4, &(0x7f0000000300)=""/123, 0x7b) syz_mount_image$nfs4(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x1000, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="5cc56afefd0948996f88560af3e0cf88c5bcdafb4ac36a5f61809ef321b04dfe75814c745df272ea452f6707f9748272c404ee37fb1b8a06bd77cbb776d668c8ece8c8d88556c38df0d63cacba5013ec4772a42a7f630704fdbc5486a627ec7a816aaedbdf563043a92c9e60785e98957ccb1ce49cbbde053536dd81abfabf998a67eada5937f99d8bad022655d9b6e19eacc4d49759b10c7e6040603596d19649ed79d4a9975c3a7bad61ec6ce95410aef5ba52c8f1c0ee243e4a6bf6489b24f22462d130f063a5573070643e3f8dab0794cab5b5", 0xd5, 0x1ff}], 0x1000404, &(0x7f0000000140)=ANY=[@ANYBLOB=',personality\x00,attr\x00,*{,,euid=', @ANYRESDEC, @ANYBLOB="24d4e148bdf9"]) fcntl$dupfd(r0, 0x0, r2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x0, 0x4, 0xe1, 0x9, 0x0, 0x800000000000fff, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffffff9, 0xfffffffffffffffa}, 0x415c0, 0x4, 0x1, 0x0, 0x7, 0x1, 0x8000, 0x0, 0xa6cc, 0x0, 0x48}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8161317f64c884f4) [ 137.802064] _raw_spin_lock+0x2a/0x40 [ 137.802076] __perf_event_task_sched_out+0x53b/0x18d0 [ 137.802101] __schedule+0xedd/0x2470 [ 137.802115] schedule+0xda/0x1b0 11:05:23 executing program 7: r0 = shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x3800) r1 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/40) r2 = shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x2000) shmdt(r2) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/202) shmdt(r0) r3 = shmget(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmget(0x3, 0x1000, 0x10, &(0x7f0000ff9000/0x1000)=nil) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff8000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmat(r3, &(0x7f0000ff8000/0x1000)=nil, 0x800) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r5 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) shmat(r5, &(0x7f0000fff000/0x1000)=nil, 0x1000) shmget(0x2, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r6 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f0000003340)={{0x0, 0x0, 0xee01, 0x0, 0x0, 0x114, 0x1}, 0x1, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x6}) [ 137.802129] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.802141] syscall_exit_to_user_mode+0x19/0x40 [ 137.802154] do_syscall_64+0x48/0x90 [ 137.802172] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.802184] [ 137.802184] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 137.802198] _raw_spin_lock_nested+0x30/0x40 [ 137.802208] raw_spin_rq_lock_nested+0x1e/0x30 [ 137.802222] task_fork_fair+0x63/0x4d0 [ 137.802239] sched_cgroup_fork+0x3d0/0x540 [ 137.802253] copy_process+0x4183/0x6e20 [ 137.802264] kernel_clone+0xe7/0x890 [ 137.802273] user_mode_thread+0xad/0xf0 11:05:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) r1 = getpid() prlimit64(r1, 0x0, 0x0, &(0x7f0000000040)) r2 = getpid() r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r4, 0x0, 0x0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000009fc0)={0xa, 0x0, 0x0, @initdev}, &(0x7f000000a000)=0x1c) r6 = dup3(r0, r0, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f000000a040)='./file0\x00', &(0x7f000000a080)={0x4000, 0x12, 0x2}, 0x18) r8 = openat$random(0xffffffffffffff9c, &(0x7f000000a0c0), 0x341000, 0x0) r9 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f000000a100), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f000000a200)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc, &(0x7f0000000240), 0x0, &(0x7f000000a140)=[@rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r0, r0, r4, r5]}}, @rights={{0x2c, 0x1, 0x1, [r0, r6, r0, r0, r7, r8, r9]}}], 0xb8, 0x4000810}, 0xc0800) prlimit64(r2, 0x0, 0x0, &(0x7f0000000040)) [ 137.802283] rest_init+0x24/0x250 sendmsg$netlink(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000d00)={0x157c, 0x10, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x1112, 0x93, 0x0, 0x1, [@generic="67aad78b6f2fd89dba4741d19058752339eab281def0de1f8b7009b57508235d1e91e5e2bc6719bd04699e6dd308a2fd73300fadbe5d761aac8269435b26cb537e1e9893ea0d0f55443e33f6c11f178f18f3624d97910bd60e7117cc367ea58cc5627fd0c12112c630687627863b0ee68fa07bd661a2f49239868597ac56e5f4cf819b819755", @typed={0x1004, 0x33, 0x0, 0x0, @binary="522b4b4afd5007aa0dd9d19e0ea0db1065b8aac46181f9cc35e3dabeb8d441e4b81a66e69f9a102039d2032a4dcd8a2160af467a2f02ff9ccd78cf20cfac5079875e6582c7cfb9c546b5a4e89ec2a4bd3d1724659a76989d923787572521488c3a0fdcf30b9879b0a8b53cf3b27d71b0ca2e602824990184cd94c86f9b7813e48e4b9b15bf22e6cf16b47e72c692bc7d2cc9548eab650f72a40c77e23dbca1cd216c34ebf9a6bf27712cf58b2915c2390ab34cdd3749b284ad1be4b89820b022f93ab2f5bf7d261c04d2306947d99258ad3324b0e9b56e8e52e30359b0a1f37d27a029a16c9a915a15b7ba6587ce8570067ef3db85c725009292904976d4087f1d19e5ada6e201b4894175beb6f77d243652d3f563d439081d3cb638170e644bf58521ba3bcf73b579a440dad6be175e79057be9c987eefca6cf4e2de799dc764dd6d00b92acd209bca527c5cfcbea8e36ebedcd6718643eb8e049a92eeeda2208f2f253704f398a128080a38dd490b34d8416d30a43d88f7b1f52c8bef1d8fc62a4c86582df03d72c4678190bc88039340d0703b147cdc3de67d2927893416382651568b41d25114f2e91362b97077852167802de8784ef7228aa5d93e1098e956c3be61911276a3fe9a5423f00ca87ae686a8a9279c467ee942aa58c81c344d98b2403d074257743c7eb26b7cf32d960e307425e71032fc7e8bf5d62fafe941dc5dc6af6324a8e44edb95c9df4f3a0130726f502ea2134aa4a618c4ecfebe071cee3decc724550d553bb5cc5dd71e31bb7a633806b37eaddffdf4ec0665e9334daa8707c020e739353253322b71b78f7e52bb5f30a57348af35628360e643dba8236eb1d6ec27118897e57490afe3fdab2b653d56a1b6e6dec3e3878cfb849cdb46bb56d1a6311617e49a095491238aba81ff868817bd150fc6648c55b4207979990cfd26b0c1478824f70541c517f7ba6cab0de4dbab849d785b657732341882e09839b57382ca4af1b5cdb0592d3bcf59560801b95f5ff075840bb53e459d3497e29ad7949db1c6d06f13749fef00e2e1ad068dfe7c984bbaa29e3589d544694cf00e91d98745cbc74e872253409486aa213b3a8b6f8aa28a6517c4d16ecdbc5fde67228072506dbb3a866e0279814967ecd943a009833d8ad6cfdb85b9884445813ce12c54da19864661c46d6651128b62d37a203a006249c9b082a363891dc92d198f4bee176ffb10d20b4329a8f8d779ac05777e0aecfc29666ad55f3c5fc6df223481f9412aec715f68f2d324e499e343d5b170ae0afac313971bf600f7cb4b1a43a8b387678c13613afea78f38566f7e836a9c5f4c22b7e5e2e3e59716ef93bff18d7cc38c97b138be82771c69e0114c773e6b34bf777da4db301f478845b184083f3c13b772164093c8c1866da4d2f707b3c2742efff7e8479ad80552496ceed8df036f815f2d5c0ead1ef6abe97ad886d0d0a9d061a08ca7cb4c9768451bc24da13f6e14f6be55247d5c455454f905f3790f5b93180402929250124389a4f41b9b244601ffe643b3092bc7c8c87b684d1418c3561f5c7601bdbf42aee92ac5f8230478dbf803990fbcb4940b8d195bcba28682bd78c00dc0b95a468736c440c05a74c336a2b8774d89170ab6c30ee5d5b32fd94f2fd887c5522620cf7b91b364bcfab5e06e3cee855eab7453a31a8bbfc6f152bcda0f84577eca4fb2a708466aba8c14e731974885c6e190c28c2cfa51b8645b97701f3e24431f52532546e2f2b85483295970d235febad9d977dc399bc5443bda2bfe6c04b4324b1f6aa1f9a7d8fb5aa925f539bd6f8292620d4751ba746390d7dcc4949e42c5a1e74423304c09ab2b9b863f50d5c4f70bf0be5d1d8bacf12fd3a90273836a0a80ed36ffc09a813ad62c022b88a2719332f3e08022e288336ff0a48e1bdd984d8504c8d70d41d469d49aa4a67ed9525235ecd024555167ada703411fd87a6e7a70e3d9e44bec3df2f44df80f2e104a4a93ae740007e0d9edb25e0d62840d07116b50380fe0023a8d495f9581acf52ba348ac324f1bd39ebd5d0faa2ecf91f8d7b94d80cca9d79dee515dddbc1ad78127c3273c431dbde8b5790110a8022dd503315791be517c5b099f3818df7831076803ec36692ca473666f8dec6d17fe3c0fb29524922fe24f4cbbb7ed8d295aac437a917ee925643428477d610bd82da306a98205cd48df2747e02889057327055f3f81f8809a7eb74e6a93193b1a80f51c8f51a232555cb7b0b891f9e9963c54e07835b02e07746d0569c613ea73137a86f58c60df6901f5f7b4bf1e009cc8ec9ee97e8f915dee127e3a464b214e4a15e9ba7af8a2720680c5c2adc1963455c6b3cec5ecefd7c4fb89960c41fa91c0605c8e1d43682ba3151fefa24451259d38ceda23cba04d041b0de358ac0b935aa47e5231d708473ed817994503432e7c569ce33666ec984c6e209bda1deb7cc421c7aef9fb7d137822bbfc1bc987f58b44efba0456779404ac3448bf009094ca6738377f8de9ddd99f2946cdcadaf26699a05355bfa051f6e3a20995c771e4a824fbf611a9c553efe0591f8904b991af0f43c935af002ef13382ef5047c739c63657a254d8eb7342c34a67b403eb71194bcee5f72debde2a90f38ad49055ee5a6e900fe2d7b9c5d06fb7be8fcb5da7d2a61cf902c3b289dd6596df8173b29edf9e8e762d91bfed67993e19c0859bf7034111ea78c8163e1f07b0a96ba035299e5047a105c5ad7a68ffc1b59837da9d1363a3507ead765ab3d675108430602ebddabdd392fad8e2217dffa887ff2ae4e5bcda5b32562c59aeec8f2ada64ebbd9cf6c780cd2aa2c8c64f526e83d94bfbb71eb57622f9f36ded55e50a097e5d94fc9ca03ff2044689ce91e583de40ad85c07dbfe479bea9bd7c96ec38e0fc8a6cfb4e42ede4225977efd534ffd741d24965cfe8133264b7733c95596a202116d766b2409b6ae3f08c7a0ad2baf83fbff8313e3a43e8cdf59ff6b932c854211bd9ad18fe541a895dde2d675cab7861c9b09aade9317ecc0d2e0a08a7251f9ba37b4ad94f9f0ec00c81b12555cf6896f6d9a42ece107ebe3c2ea4b5f3c1330b902cec2fc0739cbb2d62f5cfb052934546618e8ed88d6123dd21d77e5997c982baee17aa692fb14e068850ab8b342e94cd291b5cb43c533448c6f49fb845e3b94d64fadf675553d4c832ea64af3cec70a9317440c58d6dad0267c45fd56eb08e7b0c6c13acd2b99b1596730d35974e5a93eacdcb76c3fb92514aa4dc754e3fe9e4083a3edfe1bb71f5e8958430313c341b06b388218944c0baa5d610611f1dc2cea66b2d7ed20eaf782fa5e8817523b826a22c567c44f1e2780528ae5391cb98c48a6f7975a9d1d29bdf3f1ffff0833f2382735d7c5413cadb44b1df70f262ea4661d586a3faeb441fed0e53182039c92d428a8ea2753e0eef0dc53404b6073fc0bd000bd122f96a318ef1ef1db7d51e7ca978bb15b7a178994803e95a94e2e933a0d01e8ebb551af9bd918f2ce953272a8d9424936be373d7e3fde78b0cb7e1239cc7a9d2e1ce0321b05022b978cb8fa040a61cc9e02d6a02e73a9b1e0aed11aa4791cbf1cb531b176b6786057da68b1b8e700f641b703ff5c97cf81dc9c7ae7951b58b9f19bed47472b894750d4d5aded9c5149a0247d7cba4c524af1aa627e1a7fd7b18eea3f79980e5388ef4e859be85b5109391cc021d65758ae28ae3714d234edc866e59386c36971e3231e2791e85081f5def687b9008762b58d0ed0dac2ec0b64b50867d32cb19f6cf58343523ac21cda9d66f92b75c8267cd485140a09404db2a0d593e8b6908a7fefce5c73801fb4a4fb9e0fefa283824a771e8f0f829b2771f2040ff56b6bf5094d2f6ac99ce4eb9500d776238f3b648b43c84f6926566d3b3923bfff5990943a6f3a3aecad7cb85ca519ffa31c66653f3ec745bbc9c706690569b4accf8b6fafda150237328c66a4952ff203cfee9c12ddef051792328d93f255986c84674f82c4c5e84d794be79b7e25e079b790260ea58b68acfd9a93c69edd7100ab61964618b8b4f5955f8c308769ba66f5dd0ba973f7363661a9951e35d2ce1a88062bb2230e5876c1aeeb5a081f0aa8301031c6c621bc68158b3d80109516e54359ca65c850508146fb6e24f9021411318eb8b05dd1b02db9ec9a09fb885e7c26d3513dce0f087f2ccea71201bffc133b4175c39ba85aa41977b60f4219c7cce294828253aa11c736b772ecb22eb2c3408862052f7cd3d0e7f54e2b43b41975f4756de78edf5b2492ce40948f1a12afdcadd0df9be23646bdad39cb8b3bbc17933a5840bc90af0f52547862e31df2492c0e2118fd09a83c443474515ae7de8edde8e06aa80f61adf0d57cc452299316ab63e0004d42d82219f3e816b85f57fc7fb9bcbe9a5e866db75f6631c9757e9f74551277f4ead3586fb21ea8e6b91a311d6e3e6383dca9ee1d61a0d6d639d22bb15788074e9ef5ee911967ddf6f56751d3ba58819a9ccfa90466d4dda48e12d03195a4bb102bcf6a001eacfd0f397cac1f8517a7ffe36c98890bf6d326bba934d47f827aec0624dab31a970df79545c07dac2598e2c33a43f49b6c9405c9d2c854444910912484d3b3421c28f51902df74e0f5578973cf0d9303cfeb913ce08e3e1bf1416da3e96464e081e16a2303c93f662cc0aef755b765715235699b2a5e9b1585d05f4c9f31ab7ac66a67f2125eb422176e4768d3452030c97529d10a6dc941732332f77987035e11b6e71128eca73f9e4f3a882f859ed24f8d2fb8037363e4f9fb86e0195034bec86c9b7e214e2ae304ed8cf62105e5d556b4d8d9bdea1fb9801b5289f43c21abf5922c6ea5569201da4ccd37eb6f3979b5e602d76f1ee2fac8fe0d0249cc44972d73bb158fbd31c8dcbd74c42165ca8c4e3366ca9f718a2b2f8a9f351ace421e2a2ba6f4d6323bff31a688447ce5899f749f2d013d76d1ae73ecba9e2b4fcf321b7d2a1bae15221eaa1261e1a5cace2266162b092b346e2d90532839a188fa2d0dca73efb906628f58c050752216330bf282a067363e0ab52ac868089b6e2e1b80944e31680df21d97d87b7013d6e91e6678981ab653e7162747eb1a39ba3a6f5b0c294346ffe3372802038d1c0c5644f3a0d0f9c00599781f393171ceec33d89ddbc9ecd096aebb25b58b35f06ca5ac21ab898dc74e5d4cfb02f6353366395927b19bb6679ad20023282bb336e4119d6f47bbc08550b97201278fa5590562228f6e4659d3eed89eb8635c946f002babc8f6e83ab503134440d0a7471d9017e83535ed81fcbde0c88eb26749243830e2f50065781f878ac3077f447e320efff17c6a949452103129300d8989482fb6a410c00c3cece0abc6daba3d304ca5e87a20764fa7b64ab985d5903695d22a93f00133861d248d86e50945c77450d530cb18ea17e628b4eb304d0c8ba34c900a9bb0865d20f9bc523c2d29fcff43c71805475c929bfa2b33dc6eb0bbba28cdbe095aec490ad2841ad47895a5edf280ecd8255dc3d4c3006bc638cd308628345e850d0776f44b6bac338c84022b669be66b16899e9cec7b7174bb436aca7a549602cf5082a52431db46245620a43b3a4222545658e4ac2c9057c23cafbe2bf8d7b1afbf2749cd36d3d1993e4376e4a4bef31764740a88e0e71732ccc7c94c02656e9c0e0faa6c1b7661e4e03c5b8546e32575226f0acfb289640fd4b62fed6c87b5d87e4103b3340bf9283d10d2558cc7e317ccd5"}, @generic="4f7f5e95163237ae8740ef194076e81074c651631449be1ca8285c4f5f8db78b9189435ad975a46a46eb555df9625e1c07aab7f31bc32519daa10c361cdafd4e8e0ba1ca11ea7f1c7266bdcf6858c42f97ea5d4222fbcbd4cedc021134147395c80bc703268bde5ac5c4fa12cdb5958fa1d6ccf55750de1a5c38de013e88440c07f41501"]}, @generic="54f0d39298bca65ea385b4c3f10ff994c8a40769044827e33cb0927f35c3255019e946a4af91f3ad7eaa5fd1758c78acf7e07bf2f887257433e38950e09fa1f13b59e52ce3192902fa2f865c8d1f37c477443f1c998a0f94734096e4526c31e2f45a89258a8b9f7910344f8e17231ed814f28bd3c35d84d27fd2803890da00068a9f0d62e9582b969deeadff686d9b083cacf909059b77beeb8993f73ebe812147e4d9", @nested={0x2a, 0x8, 0x0, 0x1, [@generic="ffda3e658e23936ca591f3e7a9bfd3", @generic="8eece1e3b5b88bbe5747b38b0af56c1a1c0888ee2d5466"]}, @typed={0x4, 0x79}, @typed={0x8, 0x8c, 0x0, 0x0, @pid}, @generic="7d329a547ab66d080737dd1a5600aa764b9e8023b000497760867043be1ede5803664dbfdce19aee15d5bd9d6aa49387f9131a550ddd7dc27ad6b208e4de7c026cf7638caf7e7c8950dbcfcaf467693d3edeb7ca5ae72684f37c4fc5892bdea1dde9a9208540efaab3d0ad83b938a8c5168e20eae1e7c6", @nested={0x2ea, 0x3c, 0x0, 0x1, [@typed={0x14, 0x75, 0x0, 0x0, @ipv6=@mcast1}, @generic="4e0b8f6a872595b51ff4e3a0541b9c767c457458225bede6d7d343316cb86d602d8cf0fa6d3e3368edfffd28da0fa27050038d7370884bd17c77e67fae8cd7a0bbc112ac9569670437e9546e7aeb3a91365b335d7f71fea21bb790d1d1942fa527b73b601d4ea5af41a0983412d95ceab4c709e6115d1a0a4cd2383e21260ddb0684b34e7551c84478aad149c799727310341a07d8e7df9733d5a3a86b0f92ecbb5b149b613271aaa5b519fc487bc56a58820ce1cfea9c7e538e702d02e7fe3bb4e16e36ecd0bb86709f522b8918d8170d922eb14963178d8527783012b79825726a82f11224ce68d3e764632cb97d5df9de00d5", @typed={0x8, 0x3f, 0x0, 0x0, @uid=0xee00}, @generic="3f747113f1e68a6575976a3fbeb71a246afce13bd43bf389b374bce5fc7a4a14da15be259e4321e6791ff8cad2e2fe344db6f232c14965f5194634e5d0a3fc4a67b73e66d8a646611f0f7ec1939bd5d8016de358d59a72082d66840c7660064023c81053b1c66f9b1584b18575bffef2f1ff04e85bc5f32d970aa4c9c09b3fb9e1fdf50c32f2947095312b095403d0f285d5d18fde8d2c3da3f5063c46c4f05d79bc680eecd9bcebabb57feacee800534deeed44381645310adfd28cb8c376ec7021034c76b8e67bc3b0a23dc48da87c6c818ac24f62ab1251614aad8eee", @typed={0x8, 0x5f, 0x0, 0x0, @u32=0x1}, @typed={0xe6, 0x6d, 0x0, 0x0, @binary="a21734554a6c11e9b8fe91247ba6d4d1bd396de351a3a834dbdb5130c44230cf7e91c3b13469e9f328bfdcb2249da939b4ac8fb04bf898944e67eab4d242d15a06bf052f8706404ef4c97e29efb1ba75b33786cb5920dcdb0732b5e435b1e845a434e1887f752c1d0a59d51b0ecb2b88546ae44aa438acdc3571803db6690954b71a7375bc26cd00a275395e53669e1f5675453882bf686dd595c8f4044106ff992f413d583e6c700f62c53ac18abc14f4a958fd54c12f0eeb0d35a4141d09fa5b2e2c6e803566274ad8f9ff1f2c4267faddd88bfcb40d962ede52fa6c35f01479e7"}, @typed={0x8, 0x72, 0x0, 0x0, @uid}]}, @generic="743f9e637296a5ed7d933ba58763eec93f7f216bc2c5786ff9e8"]}, 0x157c}, {&(0x7f0000002280)={0x10a0, 0x28, 0x100, 0x70bd27, 0x25dfdbfc, "", [@nested={0x108e, 0x11, 0x0, 0x1, [@typed={0x7, 0x45, 0x0, 0x0, @str=',@\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @pid=r1}, @generic="ce9598bd92e6bebff35adb181d87df24b1f2e43ae24b069825d1a3373f3b6eafc68aeb8a9b0702b38fab9bb361ac39294a68b7b8f64cfc237ced5878d80d9303f364d31676517b7089856670dc0feb874556a64cd2396b92b874c80c5a28f230ed3c61588cf667b37de5a612979ee1caa3ef", @typed={0x8, 0x1b, 0x0, 0x0, @pid=r2}, @generic="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"]}]}, 0x10a0}], 0x2, 0x0, 0x0, 0x4c004}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), 0xffffffffffffffff) r10 = epoll_create1(0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r10, 0x4004f506, &(0x7f0000000000)=0x1) syz_io_uring_setup(0x597b, &(0x7f0000000100)={0x0, 0x7b6e, 0x0, 0x0, 0x201}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 137.802295] arch_call_rest_init+0xf/0x14 [ 137.802313] start_kernel+0x4c6/0x4eb [ 137.802328] secondary_startup_64_no_verify+0xe0/0xeb [ 137.802342] [ 137.802342] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 137.802356] _raw_spin_lock_irqsave+0x39/0x60 [ 137.802366] try_to_wake_up+0xab/0x1930 [ 137.802379] up+0x75/0xb0 [ 137.802393] __up_console_sem+0x6e/0x80 [ 137.802409] console_unlock+0x46a/0x590 [ 137.802425] vprintk_emit+0x1bd/0x560 [ 137.802441] vprintk+0x84/0xa0 [ 137.802456] _printk+0xba/0xf1 [ 137.802468] kauditd_hold_skb.cold+0x3f/0x4e [ 137.802485] kauditd_send_queue+0x233/0x290 [ 137.802500] kauditd_thread+0x5f9/0x9c0 [ 137.802514] kthread+0x2ed/0x3a0 [ 137.802529] ret_from_fork+0x22/0x30 [ 137.802541] [ 137.802541] -> #0 ((console_sem).lock){....}-{2:2}: [ 137.802554] __lock_acquire+0x2a02/0x5e70 [ 137.802571] lock_acquire+0x1a2/0x530 [ 137.802587] _raw_spin_lock_irqsave+0x39/0x60 [ 137.802597] down_trylock+0xe/0x70 [ 137.802612] __down_trylock_console_sem+0x3b/0xd0 [ 137.802628] vprintk_emit+0x16b/0x560 [ 137.802644] vprintk+0x84/0xa0 [ 137.802659] _printk+0xba/0xf1 [ 137.802669] report_bug.cold+0x72/0xab [ 137.802685] handle_bug+0x3c/0x70 [ 137.802702] exc_invalid_op+0x14/0x50 [ 137.802718] asm_exc_invalid_op+0x16/0x20 11:05:23 executing program 7: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x59, 0x7d, 0x0, {{0x0, 0x40, 0x0, 0x0, {}, 0x0, 0x1a809ffd, 0x10001, 0x1, 0x2, '-#', 0x6, '\x02\x02\x02\x02\x02\x02', 0x5, '%}%@:'}, 0x4, ':\'@*', 0xee01, 0xffffffffffffffff, 0xee00}}, 0x59) syncfs(0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0xffffffffffffffe1, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0xf8, 0x2d, 0x7f, 0x0, 0x101, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x7fffffff}, 0x8800, 0x7, 0x0, 0x3, 0x9, 0xad00000, 0x3d, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x4, r0, 0x2) syncfs(r1) [ 137.802731] group_sched_out.part.0+0x2c7/0x460 [ 137.802749] ctx_sched_out+0x8f1/0xc10 [ 137.802765] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.802776] __schedule+0xedd/0x2470 11:05:23 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2080000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x2, 0x0, &(0x7f0000000480)=[r2]}, 0x1) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0x80, 0x8, 0x17, 0x0, 0x81, 0x10800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfeffffff, 0x4, @perf_bp={&(0x7f0000000200)}, 0x1000, 0x81, 0x4901, 0x8, 0xffffffffffff1001, 0x20, 0x84d4, 0x0, 0x1000, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000001c0)=0x3690dc48) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)={0x4200, 0x40, 0x19}, 0x3a) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000240)=0x20) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) copy_file_range(0xffffffffffffffff, 0x0, r4, &(0x7f0000000180)=0x3e, 0xffffffffffffffff, 0x0) [ 137.802790] schedule+0xda/0x1b0 [ 137.802803] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.802813] syscall_exit_to_user_mode+0x19/0x40 [ 137.802826] do_syscall_64+0x48/0x90 [ 137.802842] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.802854] [ 137.802854] other info that might help us debug this: [ 137.802854] [ 137.802857] Chain exists of: [ 137.802857] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 137.802857] [ 137.802872] Possible unsafe locking scenario: [ 137.802872] [ 137.802874] CPU0 CPU1 [ 137.802877] ---- ---- [ 137.802879] lock(&ctx->lock); [ 137.802885] lock(&rq->__lock); [ 137.802891] lock(&ctx->lock); [ 137.802897] lock((console_sem).lock); [ 137.802903] [ 137.802903] *** DEADLOCK *** [ 137.802903] [ 137.802905] 2 locks held by syz-executor.1/3979: [ 137.802912] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 137.802941] #1: ffff888040129020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.802967] [ 137.802967] stack backtrace: [ 137.802970] CPU: 0 PID: 3979 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 137.802982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.802990] Call Trace: [ 137.802994] [ 137.802998] dump_stack_lvl+0x8b/0xb3 [ 137.803019] check_noncircular+0x263/0x2e0 [ 137.803037] ? format_decode+0x26c/0xb50 [ 137.803053] ? print_circular_bug+0x450/0x450 [ 137.803070] ? simple_strtoul+0x30/0x30 [ 137.803085] ? __lockdep_reset_lock+0x180/0x180 [ 137.803101] ? format_decode+0x26c/0xb50 [ 137.803119] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 137.803136] __lock_acquire+0x2a02/0x5e70 [ 137.803157] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 137.803180] lock_acquire+0x1a2/0x530 [ 137.803196] ? down_trylock+0xe/0x70 [ 137.803213] ? lock_release+0x750/0x750 [ 137.803230] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 137.803251] ? vprintk+0x84/0xa0 [ 137.803268] _raw_spin_lock_irqsave+0x39/0x60 [ 137.803280] ? down_trylock+0xe/0x70 [ 137.803295] down_trylock+0xe/0x70 [ 137.803311] ? vprintk+0x84/0xa0 [ 137.803328] __down_trylock_console_sem+0x3b/0xd0 [ 137.803345] vprintk_emit+0x16b/0x560 [ 137.803362] ? lock_downgrade+0x6d0/0x6d0 [ 137.803380] vprintk+0x84/0xa0 [ 137.803397] _printk+0xba/0xf1 [ 137.803408] ? record_print_text.cold+0x16/0x16 [ 137.803422] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 137.803436] ? lock_downgrade+0x6d0/0x6d0 [ 137.803454] ? report_bug.cold+0x66/0xab [ 137.803472] ? group_sched_out.part.0+0x2c7/0x460 [ 137.803490] report_bug.cold+0x72/0xab [ 137.803508] handle_bug+0x3c/0x70 [ 137.803526] exc_invalid_op+0x14/0x50 [ 137.803543] asm_exc_invalid_op+0x16/0x20 [ 137.803556] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.803576] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.803588] RSP: 0018:ffff888020687c48 EFLAGS: 00010006 [ 137.803597] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.803604] RDX: ffff88801d565040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 137.803612] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 137.803619] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888040129000 [ 137.803627] R13: ffff88806ce3d2c0 R14: ffffffff8547d160 R15: 0000000000000002 [ 137.803637] ? group_sched_out.part.0+0x2c7/0x460 [ 137.803657] ? group_sched_out.part.0+0x2c7/0x460 [ 137.803677] ctx_sched_out+0x8f1/0xc10 [ 137.803696] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.803710] ? lock_is_held_type+0xd7/0x130 [ 137.803724] ? __perf_cgroup_move+0x160/0x160 [ 137.803734] ? set_next_entity+0x304/0x550 [ 137.803752] ? update_curr+0x267/0x740 [ 137.803770] ? lock_is_held_type+0xd7/0x130 [ 137.803784] __schedule+0xedd/0x2470 [ 137.803801] ? io_schedule_timeout+0x150/0x150 [ 137.803818] ? __x64_sys_futex_time32+0x480/0x480 [ 137.803832] schedule+0xda/0x1b0 [ 137.803847] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.803859] syscall_exit_to_user_mode+0x19/0x40 [ 137.803872] do_syscall_64+0x48/0x90 [ 137.803890] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.803903] RIP: 0033:0x7f8c10f64b19 [ 137.803912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.803922] RSP: 002b:00007f8c0e4da218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.803933] RAX: 0000000000000001 RBX: 00007f8c11077f68 RCX: 00007f8c10f64b19 [ 137.803940] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8c11077f6c [ 137.803947] RBP: 00007f8c11077f60 R08: 000000000000000e R09: 0000000000000000 [ 137.803954] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f8c11077f6c [ 137.803962] R13: 00007ffe40341b8f R14: 00007f8c0e4da300 R15: 0000000000022000 [ 137.803974] [ 137.803978] WARNING: CPU: 0 PID: 3979 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 137.804003] Modules linked in: [ 137.804008] CPU: 0 PID: 3979 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 137.804020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.804027] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.804047] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.804058] RSP: 0018:ffff888020687c48 EFLAGS: 00010006 [ 137.804067] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.804074] RDX: ffff88801d565040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 137.804082] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 137.804090] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888040129000 [ 137.804097] R13: ffff88806ce3d2c0 R14: ffffffff8547d160 R15: 0000000000000002 [ 137.804107] FS: 00007f8c0e4da700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 137.804120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.804128] CR2: 00007fc6c0860018 CR3: 0000000019e96000 CR4: 0000000000350ef0 [ 137.804137] Call Trace: [ 137.804140] [ 137.804145] ctx_sched_out+0x8f1/0xc10 [ 137.804165] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.804180] ? lock_is_held_type+0xd7/0x130 [ 137.804194] ? __perf_cgroup_move+0x160/0x160 [ 137.804205] ? set_next_entity+0x304/0x550 [ 137.804222] ? update_curr+0x267/0x740 [ 137.804241] ? lock_is_held_type+0xd7/0x130 [ 137.804255] __schedule+0xedd/0x2470 [ 137.804273] ? io_schedule_timeout+0x150/0x150 [ 137.804290] ? __x64_sys_futex_time32+0x480/0x480 [ 137.804304] schedule+0xda/0x1b0 [ 137.804319] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.804332] syscall_exit_to_user_mode+0x19/0x40 [ 137.804346] do_syscall_64+0x48/0x90 [ 137.804364] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.804377] RIP: 0033:0x7f8c10f64b19 [ 137.804385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.804396] RSP: 002b:00007f8c0e4da218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.804408] RAX: 0000000000000001 RBX: 00007f8c11077f68 RCX: 00007f8c10f64b19 [ 137.804416] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8c11077f6c [ 137.804423] RBP: 00007f8c11077f60 R08: 000000000000000e R09: 0000000000000000 [ 137.804431] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f8c11077f6c [ 137.804438] R13: 00007ffe40341b8f R14: 00007f8c0e4da300 R15: 0000000000022000 [ 137.804451] [ 137.804455] irq event stamp: 960 [ 137.804459] hardirqs last enabled at (959): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 137.804474] hardirqs last disabled at (960): [] __schedule+0x1225/0x2470 [ 137.804493] softirqs last enabled at (716): [] __irq_exit_rcu+0x11b/0x180 [ 137.804513] softirqs last disabled at (711): [] __irq_exit_rcu+0x11b/0x180 [ 137.804533] ---[ end trace 0000000000000000 ]--- [ 137.809036] hrtimer: interrupt took 12263 ns [ 137.815385] loop5: detected capacity change from 0 to 32908 [ 137.861728] EXT4-fs error (device loop5): __ext4_fill_super:5385: inode #2: comm syz-executor.5: iget: bad extended attribute block 876343685 [ 137.861996] EXT4-fs (loop5): get root inode failed [ 137.862013] EXT4-fs (loop5): mount failed [ 137.878467] loop5: detected capacity change from 0 to 32908 [ 137.878741] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 137.878833] FAT-fs (loop6): Unrecognized mount option "obj_type=iocharset" or missing value [ 137.910909] EXT4-fs error (device loop5): __ext4_fill_super:5385: inode #2: comm syz-executor.5: iget: bad extended attribute block 876343685 [ 137.911202] EXT4-fs (loop5): get root inode failed [ 137.911221] EXT4-fs (loop5): mount failed [ 137.936907] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 137.982521] loop0: detected capacity change from 0 to 8 [ 137.982963] nfs4: Unknown parameter 'personality' [ 138.039093] FAT-fs (loop6): Unrecognized mount option "obj_type=iocharset" or missing value [ 138.105952] loop0: detected capacity change from 0 to 8 [ 138.106156] nfs4: Unknown parameter 'personality' [ 138.214260] audit: type=1400 audit(1664795123.789:9): avc: denied { write } for pid=4028 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:05:23 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000340)="fd", 0x1, 0x5}], 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64, @ANYRESOCT, @ANYRES64=r1, @ANYRES32, @ANYRESOCT]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xffffffff, 0x2, &(0x7f0000000240)=[{&(0x7f0000000080)="4c7c08076996bc71b81e1592215994d5c0c047d36a25baca9e6af19485b10e1ccdb6f453fc4608352b59e12958e3c0c3ea1007ff7e88750a23e741ba6fc8738626844c603489a188b95aeb63ba280a0316d218c40fce4581483ee03723beee2b585c0183e214062b3d4fa1661d193ca3d50dc0f79245816cf423435cb1a32ad3b7cdfe9d3707a267de9119d2a232a2e93baebfa32eee42efb04fa12bd1754a01c22317a06ff107315b0a7d90d7c1109916df74f84f089edf6d2487032f82c29e478c96b54c0ef43191dedac2cfeaf3a36175ecb7d29a925a91b9ac98de05a7ba26ed742f6ee724a831265459c76c4b25a4addf", 0xf3, 0x1f}, {&(0x7f0000000180)="7738db9d5087e1537b0768eb2487856822e73eff41991f31ef909801e760c2c11dcdddf29176f18bee550a10e847d7fb95be5feac2845bef9de056cc9672576c9cb51092b5b0a482aa9f68e2fa08d9cd68de5b703ff886b74f448a3418b6f1142d7795773d631d9bdbdf868eecd17cc80457f022b2328a4a4f52c7f246e48b75bd6a5a62b876222fdafa7aa4f0adbee4154042835b842b8f9a46e545", 0x9c, 0x1}], 0x101002, &(0x7f00000003c0)={[{@session={'session', 0x3d, 0x46}}, {@block={'block', 0x3d, 0x800}}, {@block={'block', 0x3d, 0xc00}}, {@nojoliet}, {@overriderock}, {@gid={'gid', 0x3d, r3}}, {@block={'block', 0x3d, 0xe00}}], [{@dont_hash}, {@hash}, {@smackfsdef}, {@obj_type}, {@euid_gt={'euid>', r5}}, {@smackfsroot={'smackfsroot', 0x3d, '9+!'}}]}) read$char_usb(0xffffffffffffffff, &(0x7f0000000740)=""/218, 0xda) 11:05:23 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') readv(r0, 0x0, 0x0) setns(r0, 0x2000000) 11:05:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x14481, 0x0) stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) 11:05:24 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) io_setup(0x6, &(0x7f0000000380)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r4, &(0x7f0000000180)=""/70, 0x18) getdents(r4, &(0x7f0000000300)=""/123, 0x7b) syz_mount_image$nfs4(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x1000, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="5cc56afefd0948996f88560af3e0cf88c5bcdafb4ac36a5f61809ef321b04dfe75814c745df272ea452f6707f9748272c404ee37fb1b8a06bd77cbb776d668c8ece8c8d88556c38df0d63cacba5013ec4772a42a7f630704fdbc5486a627ec7a816aaedbdf563043a92c9e60785e98957ccb1ce49cbbde053536dd81abfabf998a67eada5937f99d8bad022655d9b6e19eacc4d49759b10c7e6040603596d19649ed79d4a9975c3a7bad61ec6ce95410aef5ba52c8f1c0ee243e4a6bf6489b24f22462d130f063a5573070643e3f8dab0794cab5b5", 0xd5, 0x1ff}], 0x1000404, &(0x7f0000000140)=ANY=[@ANYBLOB=',personality\x00,attr\x00,*{,,euid=', @ANYRESDEC, @ANYBLOB="24d4e148bdf9"]) fcntl$dupfd(r0, 0x0, r2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x0, 0x4, 0xe1, 0x9, 0x0, 0x800000000000fff, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffffff9, 0xfffffffffffffffa}, 0x415c0, 0x4, 0x1, 0x0, 0x7, 0x1, 0x8000, 0x0, 0xa6cc, 0x0, 0x48}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8161317f64c884f4) VM DIAGNOSIS: 11:05:23 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff8880188c65a0 RCX=0000000000000006 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff8880188c65a0 RBP=ffff888040d07af8 RSP=ffff888040d07ab0 R8 =ffff888008bfd220 R9 =dead0000800f000d R10=fffffbfff0b60dda R11=0000000000000000 R12=ffffea0000623180 R13=ffffffff816e8983 R14=0000000000000000 R15=ffff88800843c280 RIP=ffffffff817bb8e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f54eed53ea0 CR3=000000001825e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000001b50 RBX=ffff88800c3f0000 RCX=ffffc90011c61000 RDX=0000000000010177 RSI=ffffffff820bfd77 RDI=0000000000000007 RBP=00000000000003e7 RSP=ffff88803af56de8 R8 =0000000000000007 R9 =0000000000010000 R10=0000000000010177 R11=0000000000000001 R12=0000000000010177 R13=ffffed100187e001 R14=dffffc0000000000 R15=ffffffff857fd5c0 RIP=ffffffff820bfd7b RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3b4a690700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020003340 CR3=0000000035efe000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffff8109c0a0 ffffffff8109c070 YMM01=0000000000000000 0000000000000000 ffffffff814250a9 ffffffff8133e76a YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973 YMM03=0000000000000000 0000000000000000 00007fc6c08337c8 00007fc6c08337c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000