Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:58909' (ECDSA) to the list of known hosts. 2022/10/05 07:13:46 fuzzer started 2022/10/05 07:13:46 dialing manager at localhost:46847 syzkaller login: [ 35.798279] cgroup: Unknown subsys name 'net' [ 35.904060] cgroup: Unknown subsys name 'rlimit' 2022/10/05 07:14:00 syscalls: 2215 2022/10/05 07:14:00 code coverage: enabled 2022/10/05 07:14:00 comparison tracing: enabled 2022/10/05 07:14:00 extra coverage: enabled 2022/10/05 07:14:00 setuid sandbox: enabled 2022/10/05 07:14:00 namespace sandbox: enabled 2022/10/05 07:14:00 Android sandbox: enabled 2022/10/05 07:14:00 fault injection: enabled 2022/10/05 07:14:00 leak checking: enabled 2022/10/05 07:14:00 net packet injection: enabled 2022/10/05 07:14:00 net device setup: enabled 2022/10/05 07:14:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/05 07:14:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/05 07:14:00 USB emulation: enabled 2022/10/05 07:14:00 hci packet injection: enabled 2022/10/05 07:14:00 wifi device emulation: failed to parse kernel version (6.0.0-next-20221004) 2022/10/05 07:14:00 802.15.4 emulation: enabled 2022/10/05 07:14:00 fetching corpus: 50, signal 18690/20518 (executing program) 2022/10/05 07:14:00 fetching corpus: 100, signal 32580/35942 (executing program) 2022/10/05 07:14:00 fetching corpus: 150, signal 39788/44627 (executing program) 2022/10/05 07:14:00 fetching corpus: 200, signal 47689/53834 (executing program) 2022/10/05 07:14:00 fetching corpus: 250, signal 53088/60535 (executing program) 2022/10/05 07:14:00 fetching corpus: 300, signal 55567/64379 (executing program) 2022/10/05 07:14:00 fetching corpus: 350, signal 61573/71413 (executing program) 2022/10/05 07:14:00 fetching corpus: 400, signal 67293/78113 (executing program) 2022/10/05 07:14:00 fetching corpus: 450, signal 72046/83805 (executing program) 2022/10/05 07:14:01 fetching corpus: 500, signal 74406/87250 (executing program) 2022/10/05 07:14:01 fetching corpus: 550, signal 80111/93674 (executing program) 2022/10/05 07:14:01 fetching corpus: 600, signal 81900/96542 (executing program) 2022/10/05 07:14:01 fetching corpus: 650, signal 83145/98875 (executing program) 2022/10/05 07:14:01 fetching corpus: 700, signal 85608/102213 (executing program) 2022/10/05 07:14:01 fetching corpus: 750, signal 87057/104615 (executing program) 2022/10/05 07:14:01 fetching corpus: 800, signal 90989/109093 (executing program) 2022/10/05 07:14:01 fetching corpus: 850, signal 94283/112999 (executing program) 2022/10/05 07:14:02 fetching corpus: 900, signal 96779/116158 (executing program) 2022/10/05 07:14:02 fetching corpus: 950, signal 99708/119652 (executing program) 2022/10/05 07:14:02 fetching corpus: 1000, signal 100929/121741 (executing program) 2022/10/05 07:14:02 fetching corpus: 1050, signal 101969/123603 (executing program) 2022/10/05 07:14:02 fetching corpus: 1100, signal 104038/126252 (executing program) 2022/10/05 07:14:02 fetching corpus: 1150, signal 105717/128606 (executing program) 2022/10/05 07:14:02 fetching corpus: 1200, signal 108783/132025 (executing program) 2022/10/05 07:14:02 fetching corpus: 1250, signal 109669/133666 (executing program) 2022/10/05 07:14:02 fetching corpus: 1300, signal 110423/135156 (executing program) 2022/10/05 07:14:03 fetching corpus: 1350, signal 113286/138220 (executing program) 2022/10/05 07:14:03 fetching corpus: 1400, signal 114484/139963 (executing program) 2022/10/05 07:14:03 fetching corpus: 1450, signal 115877/141889 (executing program) 2022/10/05 07:14:03 fetching corpus: 1500, signal 117034/143617 (executing program) 2022/10/05 07:14:03 fetching corpus: 1550, signal 118129/145277 (executing program) 2022/10/05 07:14:03 fetching corpus: 1600, signal 119221/146935 (executing program) 2022/10/05 07:14:03 fetching corpus: 1650, signal 121073/149042 (executing program) 2022/10/05 07:14:03 fetching corpus: 1700, signal 122797/151066 (executing program) 2022/10/05 07:14:03 fetching corpus: 1750, signal 124632/153139 (executing program) 2022/10/05 07:14:04 fetching corpus: 1800, signal 125752/154704 (executing program) 2022/10/05 07:14:04 fetching corpus: 1850, signal 127292/156532 (executing program) 2022/10/05 07:14:04 fetching corpus: 1900, signal 128349/158012 (executing program) 2022/10/05 07:14:04 fetching corpus: 1950, signal 129566/159567 (executing program) 2022/10/05 07:14:04 fetching corpus: 2000, signal 130643/161002 (executing program) 2022/10/05 07:14:04 fetching corpus: 2050, signal 131694/162400 (executing program) 2022/10/05 07:14:04 fetching corpus: 2100, signal 132757/163794 (executing program) 2022/10/05 07:14:04 fetching corpus: 2150, signal 135283/165977 (executing program) 2022/10/05 07:14:04 fetching corpus: 2200, signal 136174/167201 (executing program) 2022/10/05 07:14:05 fetching corpus: 2250, signal 138168/169046 (executing program) 2022/10/05 07:14:05 fetching corpus: 2300, signal 139141/170324 (executing program) 2022/10/05 07:14:05 fetching corpus: 2350, signal 139979/171443 (executing program) 2022/10/05 07:14:05 fetching corpus: 2400, signal 140997/172593 (executing program) 2022/10/05 07:14:05 fetching corpus: 2450, signal 141858/173697 (executing program) 2022/10/05 07:14:05 fetching corpus: 2500, signal 142875/174873 (executing program) 2022/10/05 07:14:05 fetching corpus: 2550, signal 143809/176003 (executing program) 2022/10/05 07:14:05 fetching corpus: 2600, signal 144873/177193 (executing program) 2022/10/05 07:14:05 fetching corpus: 2650, signal 145743/178238 (executing program) 2022/10/05 07:14:05 fetching corpus: 2700, signal 146793/179305 (executing program) 2022/10/05 07:14:06 fetching corpus: 2750, signal 148021/180505 (executing program) 2022/10/05 07:14:06 fetching corpus: 2800, signal 148459/181316 (executing program) 2022/10/05 07:14:06 fetching corpus: 2850, signal 149002/182131 (executing program) 2022/10/05 07:14:06 fetching corpus: 2900, signal 149813/183112 (executing program) 2022/10/05 07:14:06 fetching corpus: 2950, signal 150306/183927 (executing program) 2022/10/05 07:14:06 fetching corpus: 3000, signal 151331/185000 (executing program) 2022/10/05 07:14:06 fetching corpus: 3050, signal 152523/186052 (executing program) 2022/10/05 07:14:06 fetching corpus: 3100, signal 153010/186810 (executing program) 2022/10/05 07:14:06 fetching corpus: 3150, signal 154032/187733 (executing program) 2022/10/05 07:14:07 fetching corpus: 3200, signal 154943/188622 (executing program) 2022/10/05 07:14:07 fetching corpus: 3250, signal 156302/189633 (executing program) 2022/10/05 07:14:07 fetching corpus: 3300, signal 157488/190570 (executing program) 2022/10/05 07:14:07 fetching corpus: 3350, signal 158143/191306 (executing program) 2022/10/05 07:14:07 fetching corpus: 3400, signal 159192/192279 (executing program) 2022/10/05 07:14:07 fetching corpus: 3450, signal 159635/192895 (executing program) 2022/10/05 07:14:07 fetching corpus: 3500, signal 160309/193615 (executing program) 2022/10/05 07:14:07 fetching corpus: 3550, signal 161232/194377 (executing program) 2022/10/05 07:14:07 fetching corpus: 3600, signal 162117/195136 (executing program) 2022/10/05 07:14:08 fetching corpus: 3650, signal 162504/195708 (executing program) 2022/10/05 07:14:08 fetching corpus: 3700, signal 163754/196514 (executing program) 2022/10/05 07:14:08 fetching corpus: 3750, signal 164375/197176 (executing program) 2022/10/05 07:14:08 fetching corpus: 3800, signal 165039/197797 (executing program) 2022/10/05 07:14:08 fetching corpus: 3850, signal 165819/198427 (executing program) 2022/10/05 07:14:08 fetching corpus: 3900, signal 166387/198946 (executing program) 2022/10/05 07:14:08 fetching corpus: 3950, signal 166848/199459 (executing program) 2022/10/05 07:14:08 fetching corpus: 4000, signal 167443/200025 (executing program) 2022/10/05 07:14:08 fetching corpus: 4050, signal 169402/200879 (executing program) 2022/10/05 07:14:08 fetching corpus: 4100, signal 169982/201395 (executing program) 2022/10/05 07:14:09 fetching corpus: 4150, signal 170544/201877 (executing program) 2022/10/05 07:14:09 fetching corpus: 4200, signal 170933/202345 (executing program) 2022/10/05 07:14:09 fetching corpus: 4250, signal 171416/202785 (executing program) 2022/10/05 07:14:09 fetching corpus: 4300, signal 172032/203258 (executing program) 2022/10/05 07:14:09 fetching corpus: 4350, signal 172627/203684 (executing program) 2022/10/05 07:14:09 fetching corpus: 4400, signal 173239/204139 (executing program) 2022/10/05 07:14:09 fetching corpus: 4450, signal 174022/204628 (executing program) 2022/10/05 07:14:09 fetching corpus: 4500, signal 174429/205015 (executing program) 2022/10/05 07:14:09 fetching corpus: 4550, signal 175034/205422 (executing program) 2022/10/05 07:14:10 fetching corpus: 4600, signal 176211/205911 (executing program) 2022/10/05 07:14:10 fetching corpus: 4650, signal 176591/206287 (executing program) 2022/10/05 07:14:10 fetching corpus: 4700, signal 177115/206657 (executing program) 2022/10/05 07:14:10 fetching corpus: 4750, signal 177757/207026 (executing program) 2022/10/05 07:14:10 fetching corpus: 4800, signal 178183/207366 (executing program) 2022/10/05 07:14:10 fetching corpus: 4850, signal 178923/207698 (executing program) 2022/10/05 07:14:10 fetching corpus: 4900, signal 179757/207987 (executing program) 2022/10/05 07:14:10 fetching corpus: 4950, signal 180328/208337 (executing program) 2022/10/05 07:14:10 fetching corpus: 5000, signal 180775/208634 (executing program) 2022/10/05 07:14:10 fetching corpus: 5050, signal 182331/208938 (executing program) 2022/10/05 07:14:11 fetching corpus: 5100, signal 182755/209188 (executing program) 2022/10/05 07:14:11 fetching corpus: 5150, signal 183573/209442 (executing program) 2022/10/05 07:14:11 fetching corpus: 5200, signal 183876/209547 (executing program) 2022/10/05 07:14:11 fetching corpus: 5250, signal 184597/209550 (executing program) 2022/10/05 07:14:11 fetching corpus: 5300, signal 185327/209550 (executing program) 2022/10/05 07:14:11 fetching corpus: 5350, signal 186428/209550 (executing program) 2022/10/05 07:14:11 fetching corpus: 5400, signal 187694/209556 (executing program) 2022/10/05 07:14:11 fetching corpus: 5431, signal 188310/209556 (executing program) 2022/10/05 07:14:11 fetching corpus: 5431, signal 188310/209556 (executing program) 2022/10/05 07:14:14 starting 8 fuzzer processes 07:14:14 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80000000}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xfd}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0xc8001}, 0x2000c000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}}, 0x4000051) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x4180, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x8080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r4) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0xc, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r5) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000980), 0x480180, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x70, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "80f60baab3ff3c589d5915d2d8e9c57e"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "6f16d78a604af5a05f31f318b98cec5e"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "d6771b6d841c8ab95c16c5c14d8a43b0"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x8048041) 07:14:14 executing program 0: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x7fff, 0xfff, 0x3ff, 0x5, "5f12485f9ea2f996"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x32c, 0x25, 0x400, 0x70bd28, 0x25dfdbff, {0x8}, [@typed={0xc, 0x48, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x59, 0x0, 0x0, @pid}, @nested={0x18, 0x88, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, @generic="914017af89471068f943b835cb5c24498f28596e6bfbef1afbbdd79a8124b30dd3cb4eb928e86d221788c603e2f9eaa4612b9479467221d2021061c065e5fabf5f52baf33b00199de89482b40857336206990a93146754428a44069f2d0e8b818296c2057667fc214825afb74dcae2df6f6808b3079a21960890c29414fd93640ec5b37fc0429a136b43abc81c6fd44007791363548ce1e5c1f4269df507933b12a73e1404291b0765c10daac824d487fda46afcecdd453225e17a20b6b22c2c7d8f7a76c51ae11de0d36995eab8", @nested={0x17a, 0x6f, 0x0, 0x1, [@typed={0x7, 0x91, 0x0, 0x0, @str='!/\x00'}, @typed={0x8, 0x61, 0x0, 0x0, @fd=r0}, @generic="d70190dba10841d2f760b7c787dab4f76bfa5f7c00d43ad5715c165129ed2f3463328c1fb100067ea77ae6146bc4362245136c0e3d88ffc8fa458b186cde2fe8cde7d34e11992dc7d26fa957edd36bac0ce5d1ba4785cf8163a934880064ac6031a83ad5e2213db4f5155849ef575ad2dfdcb1abedf522d238dc3c45f47ba6ae201e986783ccb67a053b9ddb3b55e4638b00afbf32c28b3cada960243fcd3380b7dc438dfd41121063b764b262a20e04c8588bfde26bf8cc74234c636a4f9d209d874c5cff25a4d1c8da11cc1e3c723338641389dc17095c0c5786cd", @generic="2151bd81b8b864031c8810afb001b49f97db9bc5834adac5c4b0656d9f4df7f3f33edce5add0cfe35c", @generic="8ab9915949eda76ce806b9acb43f914efbffe896e87cd6df2c14e1c48b732c62b98a3cec9d74914a99732083", @typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@remote}, @generic="cbaf7f1239987491ad49f4d4b9a01335c5fc1cfb8b8f967cfd"]}, @typed={0x8, 0x22, 0x0, 0x0, @u32=0x2}, @generic="640a8956cfc6dcc5a083d6fbb4371d7f3cafd8d0aa20be62b1b757a2d4cd8b4af0aae23fcb571602e5733de425a4c7cecef3f904b31d7b2c7016454abf0629508ee67d962e35945cee0e60824a37e6b8255624ef824c08d474f5a2489da235b5110e999d25f7432605b7433dc646d5ef9fef9f513f86d15b2e9173d4f5975e3ac9c3f203f5c4d7eafbdfb7e60ee9c3646d86ca239a7f1ed57b"]}, 0x32c}, 0x1, 0x0, 0x0, 0x8810}, 0x4) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x81000) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7d6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040000) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1b8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2b9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xea}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3c3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x74c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8915cf35}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbbcf}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4881}, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000880)={0xd, 0x9}) ioctl$TIOCEXCL(r1, 0x540c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000008c0)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000900)={0x3, 0x3, 0x9, 0x8, 0x4c, "99f38ff77bf97ad09ade7d593b53589e191ac1", 0x91d, 0x2}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000940)={0x215, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000003d40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x128, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x83}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x76}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x237}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x74b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe0}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000014}, 0x1) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) recvmsg$unix(r1, &(0x7f0000004000)={&(0x7f0000003d80), 0x6e, &(0x7f0000003f40)=[{&(0x7f0000003e00)=""/92, 0x5c}, {&(0x7f0000003e80)=""/189, 0xbd}], 0x2, &(0x7f0000003f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x40) ioctl$TIOCNOTTY(r3, 0x5422) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000004040)) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000041c0)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)={0x68, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x8008091) 07:14:14 executing program 2: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) open_by_handle_at(r1, &(0x7f0000000180)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x1, 0x4, 0x3, 0x1, 0x2, 0x100000000}}, 0x610000) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f00000001c0)={'\x00', 0x9, 0x2, 0x1f}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000440)="62f0f437c775fed1280d05ec22dc152e3441154509c3fe0b3a3feec4c9d102d34e25", 0x22, 0x80, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @mcast2, 0xfffffffc}, 0x1c) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f00000004c0)={'\x00', 0x81, 0x0, 0x1}) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000580)='cpu.pressure\x00', 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000005c0)=@dstopts={0x16, 0x2, '\x00', [@generic={0x4, 0x5, "fb74c9b4ae"}, @pad1, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x20) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x1, 0x102, 0xb}, 0x18) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000680)={{r4}, {@val, @max}}) r5 = memfd_create(&(0x7f00000006c0)='\x93\xab\x00', 0x6) flock(r5, 0x3) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000740)={0x8f78, 0x30, [0x2f97, 0x9, 0x7fff, 0x6], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000780)='*#\x00', 0x2) r6 = syz_io_uring_complete(0x0) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f00000007c0)={0x4}) 07:14:14 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f0000000080)) r0 = fork() waitid(0x2, r0, &(0x7f0000000140), 0x40000000, &(0x7f00000001c0)) ptrace$getsig(0x4202, 0xffffffffffffffff, 0xffff, &(0x7f0000000280)) r1 = getpid() ptrace$getsig(0x4202, r1, 0x2fc5, &(0x7f00000015c0)) geteuid() r2 = syz_open_dev$vcsa(&(0x7f0000001640), 0xfff, 0x20000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001680)=')/{\x00', 0x0, r3) ptrace$getsig(0x4202, r1, 0x2, &(0x7f00000016c0)) waitid(0x2, r0, 0x0, 0x2, &(0x7f0000001740)) r4 = socket(0x36, 0x800, 0x101) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000001800)) r5 = getpgid(r1) ptrace$getsig(0x4202, r5, 0x3ff, &(0x7f0000001840)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xcc, 0x15, 0x300, 0x70bd28, 0x25dfdbfb, {0xe}, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x81}, @nested={0x4, 0x4a}, @generic="3c43fa6567a688cee7ac2aff481ac1a33982e14fb8613e5db19ec002e1c549bfb3f98ea3041683e77b8f2454d7e929ae9f5c2e69235721fd860ba448c6df38cfcab3959a5787f128e34ad74c1d1acbcaa687041da5f238801e5c3bed43874163c76ae2b6717226a3bd68cd7d64789ba7bd9872aa673be9bbd3b2b5e1c31bbb407d448835d65d23898a6f92db3232723ecece449186d8089a4b774444ab0f7eca87e6a97311"]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000014}, 0x4814) close_range(r2, r6, 0x0) get_robust_list(r1, &(0x7f0000001c00)=&(0x7f0000001bc0)={&(0x7f0000001b00)={&(0x7f0000001ac0)}, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)}}, &(0x7f0000001c40)=0x18) 07:14:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) recvmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1, &(0x7f0000000140)=""/69, 0x45}, 0x1}, {{&(0x7f00000001c0)=@generic, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000480)=""/60, 0x3c}], 0x4, &(0x7f0000000500)=""/110, 0x6e}, 0x3}, {{&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000680)=""/177, 0xb1}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000900)=""/167, 0xa7}, {&(0x7f00000009c0)=""/6, 0x6}, {&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000c00)=""/114, 0x72}], 0x9, &(0x7f0000000d40)=""/87, 0x57}, 0x40}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1, &(0x7f0000001e00)=""/168, 0xa8}, 0xe84}, {{&(0x7f0000001ec0)=@generic, 0x80, &(0x7f0000002280)=[{&(0x7f0000001f40)=""/188, 0xbc}, {&(0x7f0000002000)=""/231, 0xe7}, {&(0x7f0000002100)=""/45, 0x2d}, {&(0x7f0000002140)=""/251, 0xfb}, {&(0x7f0000002240)=""/16, 0x10}], 0x5}, 0x80000001}], 0x5, 0x2102, &(0x7f0000002440)={0x77359400}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000002480)={0x0, r1, 0x5, 0x2, 0x40, 0x80000000}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r2 = socket$inet(0x2, 0x80000, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000025c0)={'ip6gre0\x00', &(0x7f0000002540)={'syztnl0\x00', r3, 0x29, 0x1, 0x1, 0x2, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}, @empty, 0x7, 0x7800, 0x1, 0x68b}}) recvfrom(r4, &(0x7f0000002500), 0x0, 0x0, &(0x7f0000002600)=@xdp={0x2c, 0x9, r5, 0x21}, 0x80) sendmsg$inet(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002680)="6df1ee904155dfad601bafaa7919576862bf448bc468b826a6d37a1e25eb08a46403066c1386c33e307ea4b3385d9736ef50cc456d28dd9ff4dd286d19eb9000576dfb79808fab71651018ca85939646a4d5003a2bbe746edffb649e95e98c4c321f4d606ef8a4886eed95c6ccc740d94501c68c57772a0ee0540fecbe5b8555e0e652aa6c70bf44052aacd186c5ff8d39601217c9dfb244ceef8d4926f362be08835e8c607185f4d252afdebd29e655af22f1a10203dcc29cbc35675df2d7225245ba04e83357b956fc45eb16cd61f3213a5974919c7b9d4b86448476bb09a04c0350151ebb60e0f24283dc", 0xec}, {&(0x7f0000002780)="c9a9df24b0ab7a3bc4d6fe9ace5dd6d66e8ba0075e34974026bbbd239feb3c5dc1b4b3081ebdaeaa55f376b3bfdbe4196e4004685061", 0x36}, {&(0x7f00000027c0)="aef863e2cadd86dfe14fb141dbeff4c8768c87cabadc60656361ab167b39d97d06984ec43d1d4b37141e7335967f1ef154c28c8b3d48f0eeb3c0b5b62da828ce83eab28fa3f1613562aa05f60f928d05c3e520a5e0027fe2380280fd7304ef5730bd50a135cec65e6280081d80b90cde8d46", 0x72}], 0x3, &(0x7f0000002880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x17}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0xb, 0x3e, [@multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0xcb, 0x3, 0x9, [{@broadcast, 0xefa}, {@loopback}]}, @rr={0x7, 0x27, 0x85, [@private=0xa010101, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xa4, [@multicast1]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0xd0}, 0x840) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000029c0)='/sys/bus/snd_seq', 0x202900, 0x3) lseek(r6, 0x5da3bffd, 0x1) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000002a00), 0x2, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000002a40)='ns/ipc\x00') close_range(r7, r8, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000002a80)={0xa, 0x4e20, 0x1000, @mcast1, 0x4}, 0x1c) syz_mount_image$nfs(&(0x7f0000002ac0), &(0x7f0000002b00)='./file0/file0\x00', 0x8000, 0x4, &(0x7f0000002d00)=[{&(0x7f0000002b40)="decca0073885e7d1b00401e717682bc6a1262edc21cf701bf3c7e114dfbc2975faafcdec22a33cdd8cd663e1750484a96abd45424638a34b4dcfd1bcc2214ea7e69718e9f0da44d559e7e9f6bdcf8886664c03f83d9f967baa5db4a66035e68adf0b863eeaff4170", 0x68, 0x2}, {&(0x7f0000002bc0)="59d63a3fa0a386a26cf648a01fb53829", 0x10, 0x69}, {&(0x7f0000002c00)="5742ee6ae6018c7de0cd8dd43c597085bd87b3d1c94c16afd58ed3061ce3339e4c8396a8ebbe6b31216d6335ca21f6bfc347eabe02f1571648ac1859587ec705e0d3b5018b7615e9abf208709b47490b31523563dd9cd0de", 0x58, 0x8}, {&(0x7f0000002c80)="841d6888d8fde33c3f939009cc1d7f347b314e0524a9952693fc48679373cfc31803b3156e01128c235fee5e2e0cfb6b0776910680c94f6aacc3152b1d33518dc1bd2895a772413d31927b68dacbb0ea747fb07125eabae417559a9b3eac56aa326f8d3380badd9fac4f49472fe22cc47c0f00240c20bde4573e18", 0x7b, 0x4}], 0x211422, &(0x7f0000002d80)={[{'/%'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'wlan0\x00'}}, {@euid_gt={'euid>', 0xee01}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) 07:14:14 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@newsa={0x118, 0x10, 0x400, 0x70bd2a, 0x25dfdbfd, {{@in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x800, 0x4e24, 0x6, 0x2, 0x0, 0x0, 0x2c}, {@in6=@loopback, 0x4d6, 0x6c}, @in=@empty, {0x6, 0x2, 0x1, 0xde1b, 0x20, 0x7ff, 0x5, 0x1}, {0x5, 0x6, 0x8f, 0xa01}, {0xbd96, 0x9}, 0x70bd2d, 0x3507, 0x2, 0x2, 0x7, 0xa}, [@coaddr={0x14, 0xe, @in6=@mcast2}, @coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x118}, 0x1, 0x0, 0x0, 0x16}, 0x4000000) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000240)={@rand_addr, 0x0}, &(0x7f0000000280)=0x14) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f38a0a3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20c}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x42d94d41}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040091}, 0x4000) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000008c0)={0x2, 0x0, @empty}, &(0x7f0000000900)=0x10, 0x80000) fcntl$getown(r2, 0x9) fallocate(r0, 0x12, 0x1, 0x7) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x204000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6tnl0\x00', r1, 0x4, 0x3, 0x3, 0x7fffffff, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x0, 0x1, 0x2}}) sendmsg$nl_xfrm(r3, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)=@flushsa={0x1c8, 0x1c, 0x8, 0x70bd27, 0x25dfdbfb, {0x33}, [@mark={0xc, 0x15, {0x350759, 0x1}}, @sa={0xe4, 0x6, {{@in=@multicast2, @in=@empty, 0x4e20, 0x0, 0x4e22, 0xee0, 0x2, 0xa0, 0x180, 0x5e, r4, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x4d4, 0x6c}, @in=@multicast2, {0xf8, 0xc2f, 0x7, 0x9, 0x3a9, 0x401, 0x40000000000, 0x100}, {0x80000000, 0x7, 0x0, 0x12}, {0x34, 0x482}, 0x70bd29, 0x3506, 0x2, 0x1, 0x6, 0x1}}, @algo_auth_trunc={0xba, 0x14, {{'sha256-arm64\x00'}, 0x370, 0xc0, "aa04eb7d8d1a5bc320fa7d08f88c442fcea29eb89d89b196df6d5ffe62ad72ca5412def6201956c61dc335d0243bf5d57a09a8de464f72df7c63059c44252498207649221fdf2077f5563f098179664cac85f83439183d5d51ee49deef70a4e2c862fa499e7352f84c39b5b0777e"}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000040}, 0x2400e004) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000d00)) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x78, 0x0, 0x12, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x10}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x52, 0xc5, "520bb44955bc73a5327a2ce660a91a28628f58376183a4fe26bda71a0bb4fcdc5692b66d0e89766008c63a5750602f7a911f42d4d8cc57c231846039da0b31cd58b7c0f3f08174061825b2c46be3"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x8014) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000f00)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private2}}, &(0x7f0000001000)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001040)={@ipv4={'\x00', '\xff\xff', @broadcast}, r5}, 0x14) socketpair(0x8, 0x6, 0x6, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet(r7, &(0x7f00000010c0)={0x2, 0x0, @multicast1}, &(0x7f0000001100)=0x10, 0x80800) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000001140)=0x7, &(0x7f0000001180)=0x4) bind$inet(r6, &(0x7f00000011c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001380)={'filter\x00', 0x0, 0x3, 0xe2, [0x4, 0x80, 0x549, 0x3f, 0x10001, 0x9], 0x5, &(0x7f0000001200)=[{}, {}, {}, {}, {}], &(0x7f0000001280)=""/226}, &(0x7f0000001400)=0x78) 07:14:14 executing program 5: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x8, 0x7f, 0x1, 0x7, 0x0, 0x20, 0x20008, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x848, 0x4af, 0x0, 0x6, 0x8, 0xfff, 0xa2, 0x0, 0x5c4e, 0x0, 0x1000}, 0x0, 0x2, r1, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000180)={0x4}) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x189080, 0x114) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/virtio_gpu', 0x200000, 0xca) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000480)={0x1, 0x1ff, 0x8}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000004c0)={0x8f3, 0x100}) sendfile(r6, r2, 0x0, 0x2afa348a) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) fcntl$setownex(r0, 0xf, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r3, &(0x7f0000000580)={{0x10b, 0x3, 0x40, 0x360, 0xa3, 0xf045, 0x116, 0xab}, "4dbfe317465342f7366dda3500735a9636330b989b21a11c8c4401d374531702fea1260441ff36192e8b8171feb19bc8eb5fb6e5a8158a53a118d3fbd956088a5bab1ff0eade4c37e9d0c9735820c23cce8da0aed6f3d793876ee8ad1022e097092eeab65fe6672a77b5aa5116f6548d4311c4fac036b9524bdd65c1dff14622473ce965074c4b568fa4e46033c540f0a389636b6780e91fe08d0dde6f0a9f70c5e654627590063b0f02670475d775c10f5ee90d59e780086772b01ec2f87f22002e639727fe67c1d98ed4269b34a4d28c3f35d12bbb5dba7c0e0c20", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6fc) r8 = memfd_secret(0x80000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000000c80)={r5, r4, "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", "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"}) 07:14:14 executing program 6: ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x12) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x8, 'ip6erspan0\x00', {'netpci0\x00'}, 0x3}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1d) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x91}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x200, @private2, 0x4}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000400)={0x12, 0x384518a95430f41e, {0xb1, @struct={0x1, 0xfffffffb}, 0x0, 0x2, 0xda, 0x5, 0x5, 0x9, 0x15, @usage, 0x30f9, 0x1, [0x8, 0xd24, 0x5, 0x3, 0x2e950acb, 0x4]}, {0x3, @usage=0x401, 0x0, 0x7fffffff, 0x9, 0xfffffffffffffff8, 0xfb11, 0x1, 0x0, @usage=0x3, 0x6, 0xffffffff, [0x5, 0xb2e, 0x6f6, 0x1ff, 0x4, 0x1f]}, {0x4, @usage=0x80000001, 0x0, 0x100000000, 0x5, 0x6, 0x0, 0x400, 0x0, @usage=0x3, 0x10001, 0x0, [0x100, 0x200, 0x1e0, 0x1, 0x7, 0x61]}, {0x200, 0x2, 0x3}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000800)={r3, "0cffa9c4a7b5be7f34e980dc1669ebe8"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001800)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r5 = fsmount(r4, 0x1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000001840), r5) ioctl$CDROMGETSPINDOWN(r5, 0x531d, &(0x7f0000001880)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10) [ 63.058564] audit: type=1400 audit(1664954054.195:6): avc: denied { execmem } for pid=284 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 64.215629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.217578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.219146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.222517] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.226177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.228114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.229703] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.234585] Bluetooth: hci1: HCI_REQ-0x0c1a [ 64.255058] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.256332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.260989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.262084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.264608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.268718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.270801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.272687] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.274583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.275651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.278109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.283130] Bluetooth: hci0: HCI_REQ-0x0c1a [ 64.292860] Bluetooth: hci3: HCI_REQ-0x0c1a [ 64.374349] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.376657] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.378727] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.381085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.387984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.389388] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.392942] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.394362] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.396143] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.398144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.399394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.401161] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.403447] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.407028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.408226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.412247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.414385] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.416203] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.417581] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 64.423623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.425143] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.426354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.431052] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 64.432383] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.436061] Bluetooth: hci6: HCI_REQ-0x0c1a [ 64.438555] Bluetooth: hci4: HCI_REQ-0x0c1a [ 64.438933] Bluetooth: hci2: HCI_REQ-0x0c1a [ 64.461717] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.294312] Bluetooth: hci0: command 0x0409 tx timeout [ 66.294334] Bluetooth: hci1: command 0x0409 tx timeout [ 66.358131] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 66.358941] Bluetooth: hci3: command 0x0409 tx timeout [ 66.485874] Bluetooth: hci7: command 0x0409 tx timeout [ 66.486442] Bluetooth: hci4: command 0x0409 tx timeout [ 66.486973] Bluetooth: hci6: command 0x0409 tx timeout [ 66.487464] Bluetooth: hci2: command 0x0409 tx timeout [ 68.341803] Bluetooth: hci1: command 0x041b tx timeout [ 68.342842] Bluetooth: hci0: command 0x041b tx timeout [ 68.405835] Bluetooth: hci3: command 0x041b tx timeout [ 68.533850] Bluetooth: hci2: command 0x041b tx timeout [ 68.534296] Bluetooth: hci6: command 0x041b tx timeout [ 68.534708] Bluetooth: hci4: command 0x041b tx timeout [ 68.535182] Bluetooth: hci7: command 0x041b tx timeout [ 69.165171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.168596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.169558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.180423] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.184497] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 69.186652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.191259] Bluetooth: hci5: HCI_REQ-0x0c1a [ 70.389872] Bluetooth: hci0: command 0x040f tx timeout [ 70.390327] Bluetooth: hci1: command 0x040f tx timeout [ 70.453792] Bluetooth: hci3: command 0x040f tx timeout [ 70.581869] Bluetooth: hci7: command 0x040f tx timeout [ 70.582291] Bluetooth: hci4: command 0x040f tx timeout [ 70.582674] Bluetooth: hci6: command 0x040f tx timeout [ 70.583092] Bluetooth: hci2: command 0x040f tx timeout [ 71.221840] Bluetooth: hci5: command 0x0409 tx timeout [ 72.437850] Bluetooth: hci1: command 0x0419 tx timeout [ 72.438323] Bluetooth: hci0: command 0x0419 tx timeout [ 72.501875] Bluetooth: hci3: command 0x0419 tx timeout [ 72.630211] Bluetooth: hci2: command 0x0419 tx timeout [ 72.630636] Bluetooth: hci6: command 0x0419 tx timeout [ 72.631067] Bluetooth: hci4: command 0x0419 tx timeout [ 72.631467] Bluetooth: hci7: command 0x0419 tx timeout [ 73.269844] Bluetooth: hci5: command 0x041b tx timeout [ 75.317834] Bluetooth: hci5: command 0x040f tx timeout [ 77.365798] Bluetooth: hci5: command 0x0419 tx timeout 07:15:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0xa824}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x3, 0x42, 0x3f, 0x5d, 0x0, 0x9, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000009, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x12198, 0x1000, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x9, 0x0, 0x5}, r3, 0x2, 0xffffffffffffffff, 0x3) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e7390a15ba47b28803dce31140d294091dc31655df04a2c38b41389c2d277c75f06b768", @ANYRESHEX, @ANYBLOB="2c6a62267c2885e717862c6f9e4928", @ANYRESOCT, @ANYBLOB=',cache=fscache,version=9p2000.u,privport,nodevmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x40000, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0xee01, 0xee01) recvmmsg$unix(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000001040)=""/151, 0x97}, {&(0x7f00000008c0)=""/240, 0xf0}], 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000016010000000c0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/221, 0xdd}, {&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f0000000d00)=""/153, 0x99}], 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f2ec4a84"], 0x78}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e80)=""/9, 0x9}, {&(0x7f0000000ec0)=""/37, 0x25}, {&(0x7f0000000f00)=""/182, 0xb6}, {&(0x7f0000000fc0)=""/109, 0x6d}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000002040)=""/132, 0x84}, {&(0x7f0000002100)=""/202, 0xca}, {&(0x7f0000002200)=""/149, 0x95}], 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0066b253b4f65107e4c524f400000000000200000000000000000000000000655fe90df394012edc4ba0dfc4bf32ca4f41f6cf9d5d3e35a3791f269b6ce8351d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f00000023c0), 0x6e, &(0x7f0000002580)=[{&(0x7f0000002440)=""/102, 0x66}, {&(0x7f00000024c0)=""/91, 0x5b}, {&(0x7f0000002540)=""/39, 0x27}], 0x3}}], 0x4, 0x10001, &(0x7f00000026c0)) execveat(r4, &(0x7f0000002700)='./file0\x00', &(0x7f0000002800)=[&(0x7f0000002740)='\x00', &(0x7f0000002780)='O!/+\\E)\x00', &(0x7f00000027c0)='xfs\x00'], &(0x7f0000002a40)=[&(0x7f0000002840)='$(\x00', &(0x7f0000002880)='/dev/hpet\x00', &(0x7f00000028c0)='#{\x00', &(0x7f0000002900)='xfs\x00', &(0x7f0000002940)='..#^\x00', &(0x7f0000002980)='[.]{-\x00', &(0x7f00000029c0)='\x00', &(0x7f0000002a00)='xfs\x00'], 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r5, 0x6801, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 114.978166] audit: type=1400 audit(1664954106.118:7): avc: denied { open } for pid=3804 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 114.979637] audit: type=1400 audit(1664954106.118:8): avc: denied { kernel } for pid=3804 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 115.002086] ------------[ cut here ]------------ [ 115.002109] [ 115.002113] ====================================================== [ 115.002117] WARNING: possible circular locking dependency detected [ 115.002121] 6.0.0-next-20221004 #1 Not tainted [ 115.002127] ------------------------------------------------------ [ 115.002131] syz-executor.2/3805 is trying to acquire lock: [ 115.002137] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 115.002178] [ 115.002178] but task is already holding lock: [ 115.002181] ffff88803fe2f820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 115.002208] [ 115.002208] which lock already depends on the new lock. [ 115.002208] [ 115.002211] [ 115.002211] the existing dependency chain (in reverse order) is: [ 115.002214] [ 115.002214] -> #3 (&ctx->lock){....}-{2:2}: [ 115.002228] _raw_spin_lock+0x2a/0x40 [ 115.002240] __perf_event_task_sched_out+0x53b/0x18d0 [ 115.002252] __schedule+0xedd/0x2470 [ 115.002266] schedule+0xda/0x1b0 [ 115.002280] exit_to_user_mode_prepare+0x114/0x1a0 [ 115.002293] syscall_exit_to_user_mode+0x19/0x40 [ 115.002306] do_syscall_64+0x48/0x90 [ 115.002324] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 115.002337] [ 115.002337] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 115.002351] _raw_spin_lock_nested+0x30/0x40 [ 115.002362] raw_spin_rq_lock_nested+0x1e/0x30 [ 115.002375] task_fork_fair+0x63/0x4d0 [ 115.002391] sched_cgroup_fork+0x3d0/0x540 [ 115.002406] copy_process+0x4183/0x6e20 [ 115.002416] kernel_clone+0xe7/0x890 [ 115.002426] user_mode_thread+0xad/0xf0 [ 115.002436] rest_init+0x24/0x250 [ 115.002448] arch_call_rest_init+0xf/0x14 [ 115.002467] start_kernel+0x4c6/0x4eb [ 115.002483] secondary_startup_64_no_verify+0xe0/0xeb [ 115.002497] [ 115.002497] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 115.002511] _raw_spin_lock_irqsave+0x39/0x60 [ 115.002522] try_to_wake_up+0xab/0x1930 [ 115.002535] up+0x75/0xb0 [ 115.002550] __up_console_sem+0x6e/0x80 [ 115.002566] console_unlock+0x46a/0x590 [ 115.002581] vprintk_emit+0x1bd/0x560 [ 115.002597] vprintk+0x84/0xa0 [ 115.002613] _printk+0xba/0xf1 [ 115.002625] regdb_fw_cb.cold+0x6c/0xa7 [ 115.002643] request_firmware_work_func+0x12e/0x240 [ 115.002663] process_one_work+0xa17/0x16a0 [ 115.002683] worker_thread+0x637/0x1260 [ 115.002699] kthread+0x2ed/0x3a0 [ 115.002714] ret_from_fork+0x22/0x30 [ 115.002726] [ 115.002726] -> #0 ((console_sem).lock){....}-{2:2}: [ 115.002739] __lock_acquire+0x2a02/0x5e70 [ 115.002759] lock_acquire+0x1a2/0x530 [ 115.002775] _raw_spin_lock_irqsave+0x39/0x60 [ 115.002786] down_trylock+0xe/0x70 [ 115.002801] __down_trylock_console_sem+0x3b/0xd0 [ 115.002817] vprintk_emit+0x16b/0x560 [ 115.002833] vprintk+0x84/0xa0 [ 115.002849] _printk+0xba/0xf1 [ 115.002860] report_bug.cold+0x72/0xab [ 115.002876] handle_bug+0x3c/0x70 [ 115.002885] exc_invalid_op+0x14/0x50 [ 115.002894] asm_exc_invalid_op+0x16/0x20 [ 115.002907] group_sched_out.part.0+0x2c7/0x460 [ 115.002925] ctx_sched_out+0x8f1/0xc10 [ 115.002941] __perf_event_task_sched_out+0x6d0/0x18d0 [ 115.002952] __schedule+0xedd/0x2470 [ 115.002966] schedule+0xda/0x1b0 [ 115.002980] exit_to_user_mode_prepare+0x114/0x1a0 [ 115.002990] syscall_exit_to_user_mode+0x19/0x40 [ 115.003003] do_syscall_64+0x48/0x90 [ 115.003020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 115.003033] [ 115.003033] other info that might help us debug this: [ 115.003033] [ 115.003036] Chain exists of: [ 115.003036] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 115.003036] [ 115.003051] Possible unsafe locking scenario: [ 115.003051] [ 115.003053] CPU0 CPU1 [ 115.003055] ---- ---- [ 115.003058] lock(&ctx->lock); [ 115.003063] lock(&rq->__lock); [ 115.003070] lock(&ctx->lock); [ 115.003076] lock((console_sem).lock); [ 115.003081] [ 115.003081] *** DEADLOCK *** [ 115.003081] [ 115.003083] 2 locks held by syz-executor.2/3805: [ 115.003090] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 115.003120] #1: ffff88803fe2f820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 115.003146] [ 115.003146] stack backtrace: [ 115.003149] CPU: 0 PID: 3805 Comm: syz-executor.2 Not tainted 6.0.0-next-20221004 #1 [ 115.003161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 115.003169] Call Trace: [ 115.003173] [ 115.003177] dump_stack_lvl+0x8b/0xb3 [ 115.003196] check_noncircular+0x263/0x2e0 [ 115.003212] ? format_decode+0x26c/0xb50 [ 115.003229] ? print_circular_bug+0x450/0x450 [ 115.003246] ? simple_strtoul+0x30/0x30 [ 115.003262] ? format_decode+0x26c/0xb50 [ 115.003280] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 115.003297] __lock_acquire+0x2a02/0x5e70 [ 115.003318] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 115.003341] lock_acquire+0x1a2/0x530 [ 115.003357] ? down_trylock+0xe/0x70 [ 115.003375] ? lock_release+0x750/0x750 [ 115.003395] ? vprintk+0x84/0xa0 [ 115.003413] _raw_spin_lock_irqsave+0x39/0x60 [ 115.003425] ? down_trylock+0xe/0x70 [ 115.003441] down_trylock+0xe/0x70 [ 115.003457] ? vprintk+0x84/0xa0 [ 115.003474] __down_trylock_console_sem+0x3b/0xd0 [ 115.003491] vprintk_emit+0x16b/0x560 [ 115.003510] vprintk+0x84/0xa0 [ 115.003528] _printk+0xba/0xf1 [ 115.003539] ? record_print_text.cold+0x16/0x16 [ 115.003556] ? report_bug.cold+0x66/0xab [ 115.003574] ? group_sched_out.part.0+0x2c7/0x460 [ 115.003592] report_bug.cold+0x72/0xab [ 115.003611] handle_bug+0x3c/0x70 [ 115.003621] exc_invalid_op+0x14/0x50 [ 115.003632] asm_exc_invalid_op+0x16/0x20 [ 115.003645] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 115.003666] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 115.003677] RSP: 0018:ffff888015fafc48 EFLAGS: 00010006 [ 115.003686] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 115.003694] RDX: ffff888015d45040 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 115.003702] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 115.003709] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88803fe2f800 [ 115.003717] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 115.003728] ? group_sched_out.part.0+0x2c7/0x460 [ 115.003748] ? group_sched_out.part.0+0x2c7/0x460 [ 115.003768] ctx_sched_out+0x8f1/0xc10 [ 115.003787] __perf_event_task_sched_out+0x6d0/0x18d0 [ 115.003801] ? lock_is_held_type+0xd7/0x130 [ 115.003815] ? __perf_cgroup_move+0x160/0x160 [ 115.003826] ? set_next_entity+0x304/0x550 [ 115.003844] ? update_curr+0x267/0x740 [ 115.003862] ? lock_is_held_type+0xd7/0x130 [ 115.003876] __schedule+0xedd/0x2470 [ 115.003894] ? io_schedule_timeout+0x150/0x150 [ 115.003911] ? rcu_read_lock_sched_held+0x3e/0x80 [ 115.003931] schedule+0xda/0x1b0 [ 115.003947] exit_to_user_mode_prepare+0x114/0x1a0 [ 115.003959] syscall_exit_to_user_mode+0x19/0x40 [ 115.003973] do_syscall_64+0x48/0x90 [ 115.003991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 115.004005] RIP: 0033:0x7f2fe1518b19 [ 115.004013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 115.004024] RSP: 002b:00007f2fdea8e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.004035] RAX: 0000000000000001 RBX: 00007f2fe162bf68 RCX: 00007f2fe1518b19 [ 115.004042] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2fe162bf6c [ 115.004050] RBP: 00007f2fe162bf60 R08: 000000000000000e R09: 0000000000000000 [ 115.004057] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2fe162bf6c [ 115.004064] R13: 00007ffdf53eb5bf R14: 00007f2fdea8e300 R15: 0000000000022000 [ 115.004077] [ 115.057263] WARNING: CPU: 0 PID: 3805 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 115.057906] Modules linked in: [ 115.058135] CPU: 0 PID: 3805 Comm: syz-executor.2 Not tainted 6.0.0-next-20221004 #1 [ 115.058673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 115.059440] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 115.059826] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 115.061069] RSP: 0018:ffff888015fafc48 EFLAGS: 00010006 [ 115.061456] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 115.061944] RDX: ffff888015d45040 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 115.062441] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 115.062930] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88803fe2f800 [ 115.063422] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 115.063918] FS: 00007f2fdea8e700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 115.064478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.064881] CR2: 0000564bd7dcb4c8 CR3: 000000003fcb8000 CR4: 0000000000350ef0 [ 115.065379] Call Trace: [ 115.065563] [ 115.065726] ctx_sched_out+0x8f1/0xc10 [ 115.066015] __perf_event_task_sched_out+0x6d0/0x18d0 [ 115.066389] ? lock_is_held_type+0xd7/0x130 [ 115.066697] ? __perf_cgroup_move+0x160/0x160 [ 115.067017] ? set_next_entity+0x304/0x550 [ 115.067324] ? update_curr+0x267/0x740 [ 115.067612] ? lock_is_held_type+0xd7/0x130 [ 115.067923] __schedule+0xedd/0x2470 [ 115.068196] ? io_schedule_timeout+0x150/0x150 [ 115.068527] ? rcu_read_lock_sched_held+0x3e/0x80 [ 115.068877] schedule+0xda/0x1b0 [ 115.069126] exit_to_user_mode_prepare+0x114/0x1a0 [ 115.069481] syscall_exit_to_user_mode+0x19/0x40 [ 115.069819] do_syscall_64+0x48/0x90 [ 115.070094] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 115.070478] RIP: 0033:0x7f2fe1518b19 [ 115.070754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 115.072054] RSP: 002b:00007f2fdea8e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.072598] RAX: 0000000000000001 RBX: 00007f2fe162bf68 RCX: 00007f2fe1518b19 [ 115.073107] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2fe162bf6c [ 115.073636] RBP: 00007f2fe162bf60 R08: 000000000000000e R09: 0000000000000000 [ 115.074149] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2fe162bf6c [ 115.074662] R13: 00007ffdf53eb5bf R14: 00007f2fdea8e300 R15: 0000000000022000 [ 115.075174] [ 115.075348] irq event stamp: 690 [ 115.075590] hardirqs last enabled at (689): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 115.076258] hardirqs last disabled at (690): [] __schedule+0x1225/0x2470 [ 115.076853] softirqs last enabled at (646): [] __irq_exit_rcu+0x11b/0x180 [ 115.077478] softirqs last disabled at (641): [] __irq_exit_rcu+0x11b/0x180 [ 115.078087] ---[ end trace 0000000000000000 ]--- 07:15:06 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f0000000080)) r0 = fork() waitid(0x2, r0, &(0x7f0000000140), 0x40000000, &(0x7f00000001c0)) ptrace$getsig(0x4202, 0xffffffffffffffff, 0xffff, &(0x7f0000000280)) r1 = getpid() ptrace$getsig(0x4202, r1, 0x2fc5, &(0x7f00000015c0)) geteuid() r2 = syz_open_dev$vcsa(&(0x7f0000001640), 0xfff, 0x20000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001680)=')/{\x00', 0x0, r3) ptrace$getsig(0x4202, r1, 0x2, &(0x7f00000016c0)) waitid(0x2, r0, 0x0, 0x2, &(0x7f0000001740)) r4 = socket(0x36, 0x800, 0x101) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000001800)) r5 = getpgid(r1) ptrace$getsig(0x4202, r5, 0x3ff, &(0x7f0000001840)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xcc, 0x15, 0x300, 0x70bd28, 0x25dfdbfb, {0xe}, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x81}, @nested={0x4, 0x4a}, @generic="3c43fa6567a688cee7ac2aff481ac1a33982e14fb8613e5db19ec002e1c549bfb3f98ea3041683e77b8f2454d7e929ae9f5c2e69235721fd860ba448c6df38cfcab3959a5787f128e34ad74c1d1acbcaa687041da5f238801e5c3bed43874163c76ae2b6717226a3bd68cd7d64789ba7bd9872aa673be9bbd3b2b5e1c31bbb407d448835d65d23898a6f92db3232723ecece449186d8089a4b774444ab0f7eca87e6a97311"]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000014}, 0x4814) close_range(r2, r6, 0x0) get_robust_list(r1, &(0x7f0000001c00)=&(0x7f0000001bc0)={&(0x7f0000001b00)={&(0x7f0000001ac0)}, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)}}, &(0x7f0000001c40)=0x18) 07:15:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0xa824}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x3, 0x42, 0x3f, 0x5d, 0x0, 0x9, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000009, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x12198, 0x1000, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x9, 0x0, 0x5}, r3, 0x2, 0xffffffffffffffff, 0x3) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e7390a15ba47b28803dce31140d294091dc31655df04a2c38b41389c2d277c75f06b768", @ANYRESHEX, @ANYBLOB="2c6a62267c2885e717862c6f9e4928", @ANYRESOCT, @ANYBLOB=',cache=fscache,version=9p2000.u,privport,nodevmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x40000, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0xee01, 0xee01) recvmmsg$unix(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000001040)=""/151, 0x97}, {&(0x7f00000008c0)=""/240, 0xf0}], 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000016010000000c0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/221, 0xdd}, {&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f0000000d00)=""/153, 0x99}], 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f2ec4a84"], 0x78}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e80)=""/9, 0x9}, {&(0x7f0000000ec0)=""/37, 0x25}, {&(0x7f0000000f00)=""/182, 0xb6}, {&(0x7f0000000fc0)=""/109, 0x6d}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000002040)=""/132, 0x84}, {&(0x7f0000002100)=""/202, 0xca}, {&(0x7f0000002200)=""/149, 0x95}], 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0066b253b4f65107e4c524f400000000000200000000000000000000000000655fe90df394012edc4ba0dfc4bf32ca4f41f6cf9d5d3e35a3791f269b6ce8351d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f00000023c0), 0x6e, &(0x7f0000002580)=[{&(0x7f0000002440)=""/102, 0x66}, {&(0x7f00000024c0)=""/91, 0x5b}, {&(0x7f0000002540)=""/39, 0x27}], 0x3}}], 0x4, 0x10001, &(0x7f00000026c0)) execveat(r4, &(0x7f0000002700)='./file0\x00', &(0x7f0000002800)=[&(0x7f0000002740)='\x00', &(0x7f0000002780)='O!/+\\E)\x00', &(0x7f00000027c0)='xfs\x00'], &(0x7f0000002a40)=[&(0x7f0000002840)='$(\x00', &(0x7f0000002880)='/dev/hpet\x00', &(0x7f00000028c0)='#{\x00', &(0x7f0000002900)='xfs\x00', &(0x7f0000002940)='..#^\x00', &(0x7f0000002980)='[.]{-\x00', &(0x7f00000029c0)='\x00', &(0x7f0000002a00)='xfs\x00'], 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r5, 0x6801, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:15:06 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f0000000080)) r0 = fork() waitid(0x2, r0, &(0x7f0000000140), 0x40000000, &(0x7f00000001c0)) ptrace$getsig(0x4202, 0xffffffffffffffff, 0xffff, &(0x7f0000000280)) r1 = getpid() ptrace$getsig(0x4202, r1, 0x2fc5, &(0x7f00000015c0)) geteuid() r2 = syz_open_dev$vcsa(&(0x7f0000001640), 0xfff, 0x20000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001680)=')/{\x00', 0x0, r3) ptrace$getsig(0x4202, r1, 0x2, &(0x7f00000016c0)) waitid(0x2, r0, 0x0, 0x2, &(0x7f0000001740)) r4 = socket(0x36, 0x800, 0x101) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000001800)) r5 = getpgid(r1) ptrace$getsig(0x4202, r5, 0x3ff, &(0x7f0000001840)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xcc, 0x15, 0x300, 0x70bd28, 0x25dfdbfb, {0xe}, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x81}, @nested={0x4, 0x4a}, @generic="3c43fa6567a688cee7ac2aff481ac1a33982e14fb8613e5db19ec002e1c549bfb3f98ea3041683e77b8f2454d7e929ae9f5c2e69235721fd860ba448c6df38cfcab3959a5787f128e34ad74c1d1acbcaa687041da5f238801e5c3bed43874163c76ae2b6717226a3bd68cd7d64789ba7bd9872aa673be9bbd3b2b5e1c31bbb407d448835d65d23898a6f92db3232723ecece449186d8089a4b774444ab0f7eca87e6a97311"]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000014}, 0x4814) close_range(r2, r6, 0x0) get_robust_list(r1, &(0x7f0000001c00)=&(0x7f0000001bc0)={&(0x7f0000001b00)={&(0x7f0000001ac0)}, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)}}, &(0x7f0000001c40)=0x18) [ 115.684745] hrtimer: interrupt took 9067 ns 07:15:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0xa824}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x3, 0x42, 0x3f, 0x5d, 0x0, 0x9, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000009, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x12198, 0x1000, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x9, 0x0, 0x5}, r3, 0x2, 0xffffffffffffffff, 0x3) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e7390a15ba47b28803dce31140d294091dc31655df04a2c38b41389c2d277c75f06b768", @ANYRESHEX, @ANYBLOB="2c6a62267c2885e717862c6f9e4928", @ANYRESOCT, @ANYBLOB=',cache=fscache,version=9p2000.u,privport,nodevmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x40000, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0xee01, 0xee01) recvmmsg$unix(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000001040)=""/151, 0x97}, {&(0x7f00000008c0)=""/240, 0xf0}], 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000016010000000c0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/221, 0xdd}, {&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f0000000d00)=""/153, 0x99}], 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f2ec4a84"], 0x78}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e80)=""/9, 0x9}, {&(0x7f0000000ec0)=""/37, 0x25}, {&(0x7f0000000f00)=""/182, 0xb6}, {&(0x7f0000000fc0)=""/109, 0x6d}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000002040)=""/132, 0x84}, {&(0x7f0000002100)=""/202, 0xca}, {&(0x7f0000002200)=""/149, 0x95}], 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0066b253b4f65107e4c524f400000000000200000000000000000000000000655fe90df394012edc4ba0dfc4bf32ca4f41f6cf9d5d3e35a3791f269b6ce8351d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f00000023c0), 0x6e, &(0x7f0000002580)=[{&(0x7f0000002440)=""/102, 0x66}, {&(0x7f00000024c0)=""/91, 0x5b}, {&(0x7f0000002540)=""/39, 0x27}], 0x3}}], 0x4, 0x10001, &(0x7f00000026c0)) execveat(r4, &(0x7f0000002700)='./file0\x00', &(0x7f0000002800)=[&(0x7f0000002740)='\x00', &(0x7f0000002780)='O!/+\\E)\x00', &(0x7f00000027c0)='xfs\x00'], &(0x7f0000002a40)=[&(0x7f0000002840)='$(\x00', &(0x7f0000002880)='/dev/hpet\x00', &(0x7f00000028c0)='#{\x00', &(0x7f0000002900)='xfs\x00', &(0x7f0000002940)='..#^\x00', &(0x7f0000002980)='[.]{-\x00', &(0x7f00000029c0)='\x00', &(0x7f0000002a00)='xfs\x00'], 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r5, 0x6801, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:15:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0xa824}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x3, 0x42, 0x3f, 0x5d, 0x0, 0x9, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000009, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x12198, 0x1000, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x9, 0x0, 0x5}, r3, 0x2, 0xffffffffffffffff, 0x3) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e7390a15ba47b28803dce31140d294091dc31655df04a2c38b41389c2d277c75f06b768", @ANYRESHEX, @ANYBLOB="2c6a62267c2885e717862c6f9e4928", @ANYRESOCT, @ANYBLOB=',cache=fscache,version=9p2000.u,privport,nodevmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x40000, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0xee01, 0xee01) recvmmsg$unix(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000001040)=""/151, 0x97}, {&(0x7f00000008c0)=""/240, 0xf0}], 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000016010000000c0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/221, 0xdd}, {&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f0000000d00)=""/153, 0x99}], 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f2ec4a84"], 0x78}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e80)=""/9, 0x9}, {&(0x7f0000000ec0)=""/37, 0x25}, {&(0x7f0000000f00)=""/182, 0xb6}, {&(0x7f0000000fc0)=""/109, 0x6d}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000002040)=""/132, 0x84}, {&(0x7f0000002100)=""/202, 0xca}, {&(0x7f0000002200)=""/149, 0x95}], 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0066b253b4f65107e4c524f400000000000200000000000000000000000000655fe90df394012edc4ba0dfc4bf32ca4f41f6cf9d5d3e35a3791f269b6ce8351d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f00000023c0), 0x6e, &(0x7f0000002580)=[{&(0x7f0000002440)=""/102, 0x66}, {&(0x7f00000024c0)=""/91, 0x5b}, {&(0x7f0000002540)=""/39, 0x27}], 0x3}}], 0x4, 0x10001, &(0x7f00000026c0)) execveat(r4, &(0x7f0000002700)='./file0\x00', &(0x7f0000002800)=[&(0x7f0000002740)='\x00', &(0x7f0000002780)='O!/+\\E)\x00', &(0x7f00000027c0)='xfs\x00'], &(0x7f0000002a40)=[&(0x7f0000002840)='$(\x00', &(0x7f0000002880)='/dev/hpet\x00', &(0x7f00000028c0)='#{\x00', &(0x7f0000002900)='xfs\x00', &(0x7f0000002940)='..#^\x00', &(0x7f0000002980)='[.]{-\x00', &(0x7f00000029c0)='\x00', &(0x7f0000002a00)='xfs\x00'], 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r5, 0x6801, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:15:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0xa824}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x3, 0x42, 0x3f, 0x5d, 0x0, 0x9, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000009, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x12198, 0x1000, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x9, 0x0, 0x5}, r3, 0x2, 0xffffffffffffffff, 0x3) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e7390a15ba47b28803dce31140d294091dc31655df04a2c38b41389c2d277c75f06b768", @ANYRESHEX, @ANYBLOB="2c6a62267c2885e717862c6f9e4928", @ANYRESOCT, @ANYBLOB=',cache=fscache,version=9p2000.u,privport,nodevmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x40000, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0xee01, 0xee01) recvmmsg$unix(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000001040)=""/151, 0x97}, {&(0x7f00000008c0)=""/240, 0xf0}], 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000016010000000c0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/221, 0xdd}, {&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f0000000d00)=""/153, 0x99}], 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f2ec4a84"], 0x78}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e80)=""/9, 0x9}, {&(0x7f0000000ec0)=""/37, 0x25}, {&(0x7f0000000f00)=""/182, 0xb6}, {&(0x7f0000000fc0)=""/109, 0x6d}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000002040)=""/132, 0x84}, {&(0x7f0000002100)=""/202, 0xca}, {&(0x7f0000002200)=""/149, 0x95}], 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0066b253b4f65107e4c524f400000000000200000000000000000000000000655fe90df394012edc4ba0dfc4bf32ca4f41f6cf9d5d3e35a3791f269b6ce8351d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f00000023c0), 0x6e, &(0x7f0000002580)=[{&(0x7f0000002440)=""/102, 0x66}, {&(0x7f00000024c0)=""/91, 0x5b}, {&(0x7f0000002540)=""/39, 0x27}], 0x3}}], 0x4, 0x10001, &(0x7f00000026c0)) execveat(r4, &(0x7f0000002700)='./file0\x00', &(0x7f0000002800)=[&(0x7f0000002740)='\x00', &(0x7f0000002780)='O!/+\\E)\x00', &(0x7f00000027c0)='xfs\x00'], &(0x7f0000002a40)=[&(0x7f0000002840)='$(\x00', &(0x7f0000002880)='/dev/hpet\x00', &(0x7f00000028c0)='#{\x00', &(0x7f0000002900)='xfs\x00', &(0x7f0000002940)='..#^\x00', &(0x7f0000002980)='[.]{-\x00', &(0x7f00000029c0)='\x00', &(0x7f0000002a00)='xfs\x00'], 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r5, 0x6801, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:15:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0xa824}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x3, 0x42, 0x3f, 0x5d, 0x0, 0x9, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000009, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x12198, 0x1000, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x9, 0x0, 0x5}, r3, 0x2, 0xffffffffffffffff, 0x3) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e7390a15ba47b28803dce31140d294091dc31655df04a2c38b41389c2d277c75f06b768", @ANYRESHEX, @ANYBLOB="2c6a62267c2885e717862c6f9e4928", @ANYRESOCT, @ANYBLOB=',cache=fscache,version=9p2000.u,privport,nodevmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x40000, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0xee01, 0xee01) recvmmsg$unix(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000001040)=""/151, 0x97}, {&(0x7f00000008c0)=""/240, 0xf0}], 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000016010000000c0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/221, 0xdd}, {&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f0000000d00)=""/153, 0x99}], 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f2ec4a84"], 0x78}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e80)=""/9, 0x9}, {&(0x7f0000000ec0)=""/37, 0x25}, {&(0x7f0000000f00)=""/182, 0xb6}, {&(0x7f0000000fc0)=""/109, 0x6d}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000002040)=""/132, 0x84}, {&(0x7f0000002100)=""/202, 0xca}, {&(0x7f0000002200)=""/149, 0x95}], 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0066b253b4f65107e4c524f400000000000200000000000000000000000000655fe90df394012edc4ba0dfc4bf32ca4f41f6cf9d5d3e35a3791f269b6ce8351d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f00000023c0), 0x6e, &(0x7f0000002580)=[{&(0x7f0000002440)=""/102, 0x66}, {&(0x7f00000024c0)=""/91, 0x5b}, {&(0x7f0000002540)=""/39, 0x27}], 0x3}}], 0x4, 0x10001, &(0x7f00000026c0)) execveat(r4, &(0x7f0000002700)='./file0\x00', &(0x7f0000002800)=[&(0x7f0000002740)='\x00', &(0x7f0000002780)='O!/+\\E)\x00', &(0x7f00000027c0)='xfs\x00'], &(0x7f0000002a40)=[&(0x7f0000002840)='$(\x00', &(0x7f0000002880)='/dev/hpet\x00', &(0x7f00000028c0)='#{\x00', &(0x7f0000002900)='xfs\x00', &(0x7f0000002940)='..#^\x00', &(0x7f0000002980)='[.]{-\x00', &(0x7f00000029c0)='\x00', &(0x7f0000002a00)='xfs\x00'], 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r5, 0x6801, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 116.064487] loop4: detected capacity change from 0 to 64 [ 116.894962] loop4: detected capacity change from 0 to 64 VM DIAGNOSIS: 07:15:06 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bd531 RDI=ffffffff8765c9a0 RBP=ffffffff8765c960 RSP=ffff888015faf690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8765c960 R14=0000000000000010 R15=ffffffff823bd520 RIP=ffffffff823bd589 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2fdea8e700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564bd7dcb4c8 CR3=000000003fcb8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f2fe15ff7c0 00007f2fe15ff7c8 YMM02=0000000000000000 0000000000000000 00007f2fe15ff7e0 00007f2fe15ff7c0 YMM03=0000000000000000 0000000000000000 00007f2fe15ff7c8 00007f2fe15ff7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=1ffff11002bc5e87 RSI=0000000000000001 RDI=ffffffff85b88148 RBP=ffff888015e2f448 RSP=ffff888015e2f370 R8 =ffffffff85e919d0 R9 =ffffffff85e919d4 R10=ffffed1002bc5e8b R11=000000000003603d R12=ffff888015e2f431 R13=ffff888015e2f450 R14=ffff888015e2f3f0 R15=ffffffff85e919d5 RIP=ffffffff8111b668 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555720d400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f44ccc686f4 CR3=0000000033950000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f44ccc77470 00007f44ccc76f20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000