Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:34551' (ECDSA) to the list of known hosts. 2022/10/05 20:04:49 fuzzer started 2022/10/05 20:04:49 dialing manager at localhost:37193 syzkaller login: [ 35.586070] cgroup: Unknown subsys name 'net' [ 35.695764] cgroup: Unknown subsys name 'rlimit' 2022/10/05 20:05:05 syscalls: 2215 2022/10/05 20:05:05 code coverage: enabled 2022/10/05 20:05:05 comparison tracing: enabled 2022/10/05 20:05:05 extra coverage: enabled 2022/10/05 20:05:05 setuid sandbox: enabled 2022/10/05 20:05:05 namespace sandbox: enabled 2022/10/05 20:05:05 Android sandbox: enabled 2022/10/05 20:05:05 fault injection: enabled 2022/10/05 20:05:05 leak checking: enabled 2022/10/05 20:05:05 net packet injection: enabled 2022/10/05 20:05:05 net device setup: enabled 2022/10/05 20:05:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/05 20:05:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/05 20:05:05 USB emulation: enabled 2022/10/05 20:05:05 hci packet injection: enabled 2022/10/05 20:05:05 wifi device emulation: failed to parse kernel version (6.0.0-next-20221005) 2022/10/05 20:05:05 802.15.4 emulation: enabled 2022/10/05 20:05:05 fetching corpus: 50, signal 19180/20978 (executing program) 2022/10/05 20:05:05 fetching corpus: 100, signal 30388/33771 (executing program) 2022/10/05 20:05:05 fetching corpus: 150, signal 42749/47483 (executing program) 2022/10/05 20:05:05 fetching corpus: 200, signal 49682/55697 (executing program) 2022/10/05 20:05:05 fetching corpus: 250, signal 52793/60157 (executing program) 2022/10/05 20:05:05 fetching corpus: 300, signal 58094/66582 (executing program) 2022/10/05 20:05:05 fetching corpus: 350, signal 62054/71707 (executing program) 2022/10/05 20:05:05 fetching corpus: 400, signal 68309/78854 (executing program) 2022/10/05 20:05:05 fetching corpus: 450, signal 72552/84031 (executing program) 2022/10/05 20:05:05 fetching corpus: 500, signal 76219/88633 (executing program) 2022/10/05 20:05:06 fetching corpus: 550, signal 78736/92140 (executing program) 2022/10/05 20:05:06 fetching corpus: 600, signal 81299/95619 (executing program) 2022/10/05 20:05:06 fetching corpus: 650, signal 83119/98383 (executing program) 2022/10/05 20:05:06 fetching corpus: 700, signal 85695/101786 (executing program) 2022/10/05 20:05:06 fetching corpus: 750, signal 88012/104945 (executing program) 2022/10/05 20:05:06 fetching corpus: 800, signal 90701/108311 (executing program) 2022/10/05 20:05:06 fetching corpus: 850, signal 93928/112076 (executing program) 2022/10/05 20:05:06 fetching corpus: 900, signal 96380/115150 (executing program) 2022/10/05 20:05:06 fetching corpus: 950, signal 97878/117401 (executing program) 2022/10/05 20:05:06 fetching corpus: 1000, signal 99748/119910 (executing program) 2022/10/05 20:05:07 fetching corpus: 1050, signal 101302/122159 (executing program) 2022/10/05 20:05:07 fetching corpus: 1100, signal 104932/125986 (executing program) 2022/10/05 20:05:07 fetching corpus: 1150, signal 106267/127982 (executing program) 2022/10/05 20:05:07 fetching corpus: 1200, signal 108734/130802 (executing program) 2022/10/05 20:05:07 fetching corpus: 1250, signal 110690/133183 (executing program) 2022/10/05 20:05:07 fetching corpus: 1300, signal 112809/135687 (executing program) 2022/10/05 20:05:07 fetching corpus: 1350, signal 113697/137220 (executing program) 2022/10/05 20:05:07 fetching corpus: 1400, signal 114803/138927 (executing program) 2022/10/05 20:05:07 fetching corpus: 1450, signal 115956/140573 (executing program) 2022/10/05 20:05:08 fetching corpus: 1500, signal 119501/143917 (executing program) 2022/10/05 20:05:08 fetching corpus: 1550, signal 120518/145449 (executing program) 2022/10/05 20:05:08 fetching corpus: 1600, signal 121299/146812 (executing program) 2022/10/05 20:05:08 fetching corpus: 1650, signal 122485/148430 (executing program) 2022/10/05 20:05:08 fetching corpus: 1700, signal 123524/149885 (executing program) 2022/10/05 20:05:08 fetching corpus: 1750, signal 124832/151510 (executing program) 2022/10/05 20:05:08 fetching corpus: 1800, signal 126823/153516 (executing program) 2022/10/05 20:05:08 fetching corpus: 1850, signal 129138/155731 (executing program) 2022/10/05 20:05:08 fetching corpus: 1900, signal 130584/157357 (executing program) 2022/10/05 20:05:09 fetching corpus: 1950, signal 131593/158674 (executing program) 2022/10/05 20:05:09 fetching corpus: 2000, signal 132815/160101 (executing program) 2022/10/05 20:05:09 fetching corpus: 2050, signal 133899/161374 (executing program) 2022/10/05 20:05:09 fetching corpus: 2100, signal 135091/162742 (executing program) 2022/10/05 20:05:09 fetching corpus: 2150, signal 137032/164542 (executing program) 2022/10/05 20:05:09 fetching corpus: 2200, signal 137844/165638 (executing program) 2022/10/05 20:05:09 fetching corpus: 2250, signal 139217/167076 (executing program) 2022/10/05 20:05:09 fetching corpus: 2300, signal 140648/168484 (executing program) 2022/10/05 20:05:09 fetching corpus: 2350, signal 141923/169732 (executing program) 2022/10/05 20:05:10 fetching corpus: 2400, signal 143265/171039 (executing program) 2022/10/05 20:05:10 fetching corpus: 2450, signal 143914/171918 (executing program) 2022/10/05 20:05:10 fetching corpus: 2500, signal 145634/173355 (executing program) 2022/10/05 20:05:10 fetching corpus: 2550, signal 147518/174811 (executing program) 2022/10/05 20:05:10 fetching corpus: 2600, signal 148020/175603 (executing program) 2022/10/05 20:05:10 fetching corpus: 2650, signal 148836/176534 (executing program) 2022/10/05 20:05:10 fetching corpus: 2700, signal 150349/177753 (executing program) 2022/10/05 20:05:10 fetching corpus: 2750, signal 150782/178460 (executing program) 2022/10/05 20:05:11 fetching corpus: 2800, signal 151874/179419 (executing program) 2022/10/05 20:05:11 fetching corpus: 2850, signal 152880/180332 (executing program) 2022/10/05 20:05:11 fetching corpus: 2900, signal 154443/181560 (executing program) 2022/10/05 20:05:11 fetching corpus: 2950, signal 155844/182598 (executing program) 2022/10/05 20:05:11 fetching corpus: 3000, signal 156425/183300 (executing program) 2022/10/05 20:05:11 fetching corpus: 3050, signal 157450/184141 (executing program) 2022/10/05 20:05:11 fetching corpus: 3100, signal 158531/185065 (executing program) 2022/10/05 20:05:11 fetching corpus: 3150, signal 159190/185761 (executing program) 2022/10/05 20:05:11 fetching corpus: 3200, signal 159993/186503 (executing program) 2022/10/05 20:05:11 fetching corpus: 3250, signal 160725/187194 (executing program) 2022/10/05 20:05:12 fetching corpus: 3300, signal 161367/187850 (executing program) 2022/10/05 20:05:12 fetching corpus: 3350, signal 161857/188484 (executing program) 2022/10/05 20:05:12 fetching corpus: 3400, signal 162664/189170 (executing program) 2022/10/05 20:05:12 fetching corpus: 3450, signal 163247/189740 (executing program) 2022/10/05 20:05:12 fetching corpus: 3500, signal 164514/190430 (executing program) 2022/10/05 20:05:12 fetching corpus: 3550, signal 165136/190982 (executing program) 2022/10/05 20:05:12 fetching corpus: 3600, signal 165647/191484 (executing program) 2022/10/05 20:05:12 fetching corpus: 3650, signal 166079/191955 (executing program) 2022/10/05 20:05:12 fetching corpus: 3700, signal 166773/192500 (executing program) 2022/10/05 20:05:12 fetching corpus: 3750, signal 167209/192964 (executing program) 2022/10/05 20:05:12 fetching corpus: 3800, signal 168595/193631 (executing program) 2022/10/05 20:05:13 fetching corpus: 3850, signal 169167/194095 (executing program) 2022/10/05 20:05:13 fetching corpus: 3900, signal 169636/194525 (executing program) 2022/10/05 20:05:13 fetching corpus: 3950, signal 170401/195019 (executing program) 2022/10/05 20:05:13 fetching corpus: 4000, signal 171701/195597 (executing program) 2022/10/05 20:05:13 fetching corpus: 4050, signal 172277/196022 (executing program) 2022/10/05 20:05:13 fetching corpus: 4100, signal 173307/196516 (executing program) 2022/10/05 20:05:13 fetching corpus: 4150, signal 174635/197030 (executing program) 2022/10/05 20:05:13 fetching corpus: 4200, signal 175302/197403 (executing program) 2022/10/05 20:05:13 fetching corpus: 4250, signal 176007/197768 (executing program) 2022/10/05 20:05:14 fetching corpus: 4300, signal 176856/198155 (executing program) 2022/10/05 20:05:14 fetching corpus: 4350, signal 177937/198494 (executing program) 2022/10/05 20:05:14 fetching corpus: 4400, signal 178232/198766 (executing program) 2022/10/05 20:05:14 fetching corpus: 4450, signal 179194/199155 (executing program) 2022/10/05 20:05:14 fetching corpus: 4500, signal 179785/199426 (executing program) 2022/10/05 20:05:14 fetching corpus: 4550, signal 180522/199800 (executing program) 2022/10/05 20:05:14 fetching corpus: 4600, signal 181179/200064 (executing program) 2022/10/05 20:05:14 fetching corpus: 4650, signal 181634/200310 (executing program) 2022/10/05 20:05:14 fetching corpus: 4700, signal 182005/200558 (executing program) 2022/10/05 20:05:14 fetching corpus: 4750, signal 182499/200776 (executing program) 2022/10/05 20:05:15 fetching corpus: 4800, signal 182865/200977 (executing program) 2022/10/05 20:05:15 fetching corpus: 4850, signal 183285/201217 (executing program) 2022/10/05 20:05:15 fetching corpus: 4900, signal 183639/201394 (executing program) 2022/10/05 20:05:15 fetching corpus: 4950, signal 184127/201581 (executing program) 2022/10/05 20:05:15 fetching corpus: 5000, signal 184373/201737 (executing program) 2022/10/05 20:05:15 fetching corpus: 5050, signal 185011/201777 (executing program) 2022/10/05 20:05:15 fetching corpus: 5100, signal 185885/201831 (executing program) 2022/10/05 20:05:15 fetching corpus: 5150, signal 186415/201831 (executing program) 2022/10/05 20:05:15 fetching corpus: 5156, signal 186466/201831 (executing program) 2022/10/05 20:05:15 fetching corpus: 5156, signal 186466/201831 (executing program) 2022/10/05 20:05:18 starting 8 fuzzer processes 20:05:18 executing program 0: ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x3) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x2b74797c) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000000c0)) pread64(r0, &(0x7f0000000100)=""/52, 0x34, 0x81) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000140)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xc}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008051}, 0x4008000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000280)) r3 = openat$incfs(r1, &(0x7f00000002c0)='.pending_reads\x00', 0x44001, 0x12c) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfff, 0x0, 0x2, 0x6, 0xd889}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000740)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000780)={0xffff, 0x1, 0x1f}) 20:05:18 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='{U*}\\\'\x00', &(0x7f0000000080)='&@!,+\x00', &(0x7f00000000c0)='],#\x00'], &(0x7f0000000180)=[&(0x7f0000000140)='\x00'], 0x400) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x8000, 0x136) fallocate(r0, 0x20, 0x626ee33c, 0x9) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000200)=0x20) renameat2(r0, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000280)='./file1\x00', 0x7) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x200000, 0x2) r1 = signalfd(r0, &(0x7f0000000300)={[0xffff]}, 0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000340), 0x4, 0x101000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000003c0)={0x20000000}) r5 = accept$inet6(r4, 0x0, &(0x7f0000000400)) fallocate(r5, 0x1, 0x0, 0x1f) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r2, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x3) r7 = dup2(r3, r3) move_mount(r7, &(0x7f0000000480)='./file1\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x12) r8 = syz_open_dev$rtc(&(0x7f0000000500), 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8, {0x20}}, './file0\x00'}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x40010, r7, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x3, &(0x7f0000000680)}, 0x2) 20:05:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8044}, 0x4000104) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x44}}, 0x20008014) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2900240}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "4e54bd466ca43843375b2739ad9bc18eb2d49283d7f64686a126"}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040041}, 0x90) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x174, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d9b4e80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @remote, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000040}, 0x4011) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) write$binfmt_misc(r2, &(0x7f0000000900)={'syz0', "1cf7f6d93d8e8d8115c680b5a10b908ce2f3336b0c6abcece44248454b2bed9d9192da5e82626e133f16c53affd43353e588c3493fb9b1bb0cf74fc6603b260d46e44659b169b92596f13256805751e69987cc73f9ef5ec5c860dd7c18b36471eda2015987eaa517969a471079bf5af11409fb4231f540cc8adeb5600b92ab6feec4bbfb31a7237389c86354fd789f6bde364e2a59a3ab7771b1e4602250c4bfcfb5c4a90e785237dca219109572e4fa848135015a6ec4c93a8453d8e83fe307a1b04f06ac4930e25128cba25414b6cc5c891e19"}, 0xd8) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000a40)={&(0x7f0000000a00)=""/20, 0x14}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x24000000) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r5, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x80) socketpair(0x5, 0x5, 0x4, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x48, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c40}, 0x24040040) 20:05:18 executing program 2: lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x0, @fd_index=0x5, 0x5, 0xdb, 0x1, 0x8, 0x0, {0x3}}, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)={0x5e4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x20}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1c000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000001}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7fff}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x200}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1000}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x578, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffd5ad}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, 'com.apple.FinderInfo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, 'com.apple.FinderInfo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, 'com.apple.FinderInfo\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']-**#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}]}, @ETHTOOL_A_BITSET_MASK={0x6d, 0x5, "d674a1dbfc53d2627efba70477b584f1b38ad479a30db146abc17ab54b9f94ad163d67e71e25abb61b48da4880c187bbedeacc2b793d2e7a570887feb324d0e3ac82a9a250eb228ed6510afdc20c84c415cff79c89201e79f3e626ae235d8c488658da34996839be02"}, @ETHTOOL_A_BITSET_BITS={0x208, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, 'com.apple.FinderInfo\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff3a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5443}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, 'com.apple.FinderInfo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '!@^/*{:[,}[$(\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{*}++\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x364e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa1}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, 'com.apple.FinderInfo\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '),{(\'!,+@}$\'$}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ')@]%&(^#\\$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%[\'@-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, 'com.apple.FinderInfo\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_MASK={0xce, 0x5, "52af56013efec22e95601a2c39d9660fbfd4d6439cc8df7cdd17331cc341600fff85f4918b7596d582d77281e04de66495f0567d17b4cb822d7f494f10ded2bacc61e7a902a080c94dfcebebc303c6ec3c0fd67b4b2c0efd83bce7e40c1ad6a3b700f3d532af5688995ea10d46bb37fbd0aba58762c6bbaafddeeff287010d57213f09e8299649d1385766e7a36cb3b34fc2244bad8829853428c6cff1bd72b2a219623b3a4b7965ae8aba014049cb451599604cf0bdd4b42877a80b6ee0aa4b46d4f1b05be66fe9752c"}, @ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "d2de2a3eca30805b73f64ac912b5ac5c10574977df0acf322a1699a9e440da70f6703c68"}, @ETHTOOL_A_BITSET_MASK={0x71, 0x5, "b82552e77991842efd519ec6f60f608d527eb0057465d2fd850064c9b5fb77e1eca5f23f442d39b37663c05da17cc6be3cfd7aa97cad121eeb8afba5def5a0e08e5bf380a976cc8a50e7471c73f84572806f60211dd49423bbea4fa3b9bc14c5be4be092afd79aa2b664804eb5"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/)!'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*)/\\{{@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0xc090}, 0x44044) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3ff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x40801) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0xffffffffffffffff, 0x60010) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xf4, r0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x882b}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd99}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40800}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x24000850) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000000ec0)=0xe8) r3 = syz_mount_image$tmpfs(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x200, 0x4, &(0x7f0000000d40)=[{&(0x7f0000000b40)="1a7d0a11ddea57c6fc7caa133dc33ebb0781ad52bf538aaf13138f28f5f167b9b70794c66c5ee7bf35fb5c0ba125e45e", 0x30, 0x4}, {&(0x7f0000000b80)="2af7aab468a3497bdf2a3727ed775eda1b8ea6f06a823c554e8bc9abe760eef40f420ec9d3c7fb8b001e8d5414c48cfd0de4c928d00125664097d3b0631163655de8c6b2017b88b96b0c7e6b99e255fa3a9fcc62b4336d9d3b75219eec66b70b9a77367475c738ad5430b7ab4267a5914344525500b115d4862bd965bd98c07cf3acc81cd6a40ab19362c7a5ddcb6c16125a9c", 0x93, 0xfffffffffffffff8}, {&(0x7f0000000c40)="fd5ba504161d639a1d716678ec478b13fa9b797aa808dd6205e5949b6d2ba61638dbb0b5720329961601f9ea3eae60d09720b93ad9e5a7b6e7732d332c525f0c752f587e590337e1cfd77408550cbddcb725f066d48dd577523a8270ca51022af4a929355fb3d87dcec0014b92bb76b245f071756cc4c9c468d8e2bf9e3a9e5b82636da3b9a0622196fff26f8b65", 0x8e, 0x4}, {&(0x7f0000000d00)="5468a75e6328aac386cd6a94471fc1f83eb9c6430f5c8f306278c2b30c278536558f5816f4bb876e695a40b7adbe8e", 0x2f, 0x1}], 0x0, &(0x7f0000000f00)={[{@mode={'mode', 0x3d, 0x8}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x36, 0x31, 0x37]}}}}, {@huge_within_size}, {@huge_within_size}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@mode={'mode', 0x3d, 0x6}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '}\\-'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-])!-'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@dont_measure}, {@euid_lt={'euid<', r2}}, {@hash}]}) setxattr$incfs_size(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040), &(0x7f0000001080)=0x80000000, 0x8, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001100)={@remote, @loopback, 0x0}, &(0x7f0000001140)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000012c0)=@gcm_256={{0x303}, "6983f98af1509926", "09802e1d47e3e5e1a806a8fb662c3c48438e53e30d157c8e4af3c5ec5a8f96b1", "15427dee", "24ba1258a511c244"}, 0x38) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001300), 0x10001, 0x0) mknodat(r6, &(0x7f0000001340)='./file0\x00', 0x4, 0x10001) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1200a00}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0xb8, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x984d}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) r7 = signalfd4(r6, &(0x7f0000001500)={[0xffffffff]}, 0x8, 0x800) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8002}, 0x8000) 20:05:18 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/245, 0xf5}, {&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/119, 0x77}, {&(0x7f0000001280)=""/104, 0x68}, {&(0x7f0000001300)=""/137, 0x89}], 0x6, &(0x7f0000001440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001580)=""/10, 0xa}, {&(0x7f00000015c0)=""/177, 0xb1}, {&(0x7f0000001680)=""/210, 0xd2}, {&(0x7f0000001780)=""/255, 0xff}, {&(0x7f0000001880)=""/94, 0x5e}, {&(0x7f0000001900)=""/223, 0xdf}, {&(0x7f0000001a00)=""/45, 0x2d}, {&(0x7f0000001a40)=""/148, 0x94}], 0x8, &(0x7f0000001b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c80)=""/182, 0xb6}], 0x1}}, {{&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000001e00)}}, {{&(0x7f0000001e40)=@abs, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/156, 0x9c}], 0x1, &(0x7f0000001fc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/244, 0xf4}, {&(0x7f0000003240)=""/234, 0xea}, {&(0x7f0000003340)=""/97, 0x61}, {&(0x7f00000033c0)=""/81, 0x51}], 0x5, &(0x7f00000034c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000005a00)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/149, 0x95}, {&(0x7f0000005700)=""/179, 0xb3}, {&(0x7f00000057c0)=""/98, 0x62}, {&(0x7f0000005840)=""/95, 0x5f}, {&(0x7f00000058c0)=""/214, 0xd6}, {&(0x7f00000059c0)}], 0x8, &(0x7f0000005a80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000005b80)=@abs, 0x6e, &(0x7f0000005c00), 0x0, &(0x7f0000005c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005cc0)=@abs, 0x6e, &(0x7f0000006140)=[{&(0x7f0000005d40)=""/93, 0x5d}, {&(0x7f0000005dc0)=""/18, 0x12}, {&(0x7f0000005e00)=""/5, 0x5}, {&(0x7f0000005e40)=""/251, 0xfb}, {&(0x7f0000005f40)=""/255, 0xff}, {&(0x7f0000006040)=""/129, 0x81}, {&(0x7f0000006100)=""/43, 0x2b}], 0x7, &(0x7f00000061c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x9, 0x2022, &(0x7f0000006440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000006480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r14 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000064c0)={0x1f, 0x0, @none}, &(0x7f0000006500)=0xe, 0x80800) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, r13, 0xffffffffffffffff, r14, 0xffffffffffffffff], 0x6) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000006580), 0x102, 0x0) ioctl$FS_IOC_GETFLAGS(r15, 0x80086601, &(0x7f00000065c0)) process_mrelease(r12, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000006600)={{0x1, 0x1, 0x18, r11}, './file0/file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006640)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r3, 0xfffffffffffffe01, 0x0, 0x1ff}, 0x0) ioctl(r7, 0x1, &(0x7f0000006680)="12870fbbe3e57249d2af0cfbf1d949a0f01fd168815038e1f393225d090362db3fbd5b2bb4e2f6c788581e3b4188dde8d0bc467321e355674c62153792484f1bbb0b95fa19c55eb6462c93af66d1f3ab53dd0c26f0f2a9fb4b9ef98a647eca0496a3570f122670091ffc19b89ad7289f3746c345c027c640730de787cf5ff98c66c2b5dd4c40fb8eb330fef6acbbfc369efc80e3b7a13970d4f938826e2562c9a12a421d11b3dc26a5768b0f39370766755e95b5d4fe0b61246ae85a151772eacc0b1e586405e43a8b8bb928c4cb4aae924a1ed9ae9cdcf3ac037459ad") close(r8) openat(r1, &(0x7f0000006780)='./file0\x00', 0x20000, 0xa0) accept4(r5, &(0x7f00000067c0)=@x25={0x9, @remote}, &(0x7f0000006840)=0x80, 0x40000) r16 = openat$rtc(0xffffffffffffff9c, &(0x7f0000006880), 0x20802, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r16, 0x80049370, &(0x7f00000068c0)) r17 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000006900)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000006a00)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000006a40)={{0x1, 0x1, 0x18, r17, {r18, r2}}, './file0\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000006a80)={{0x9, 0x9ade}, 0x100, './file0/file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000006bc0)={0xec09, 0x0, 0x81, 0x9, 0x6}) 20:05:18 executing program 5: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000000)={0x10f0, 0x40, 0x200, 0x70bd25, 0x25dfdbff, "", [@nested={0x10be, 0x69, 0x0, 0x1, [@generic="c4b5c9ec24ba7a8e7c01eb4382ccbfcfb17c9b423e64d1f11b3876018504986a16793d4c16a411abac28bbeccccee3051ac2", @typed={0x8, 0x72, 0x0, 0x0, @fd}, @generic="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", @generic="b25263fdd6e409d9b8b9d6e0b2662d5fc21b2ac5627c8096a0e09f56094656d70ea6a51862d8e517ab360c4d36fd71483530ca5d2fcb33ff27d481a10fddeb04b9a8b5", @generic="fead74e370e86222d4d2ad5f3c8dca9fe28c7c342c374398ec4a57fadcc62d5ba177ed194d869a80370d2591cfc97d4fc12637a39c7f5214cb68dd68ae"]}, @generic="b97d5be8b91cbbcc9b76c18c759e34f461", @nested={0xc, 0x7c, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @u32=0x6}]}]}, 0x10f0}], 0x1, 0x0, 0x0, 0x800}, 0x8000841) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001180)={0x0, 0x0}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = inotify_init1(0x80000) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000001200)={0xffffffffffffffff, r2}) r3 = getpid() perf_event_open(&(0x7f0000001240)={0x6, 0x80, 0x39, 0x9, 0xc, 0x1, 0x0, 0xa, 0x84190, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x6, 0xe6}, 0x200, 0x2, 0x7, 0x0, 0x8fd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4}, r3, 0x3, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002440)=0x0) r5 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002480)={0x0}, &(0x7f00000024c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002500)={0x0, 0x0}) recvmsg$unix(r1, &(0x7f0000002900)={&(0x7f0000002580), 0x6e, &(0x7f0000002880)=[{&(0x7f0000002600)=""/171, 0xab}, {&(0x7f00000026c0)=""/156, 0x9c}, {&(0x7f0000002780)=""/242, 0xf2}], 0x3, &(0x7f00000028c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) clone3(&(0x7f00000029c0)={0xa218ecf8fa853b92, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)=0x0, {0x33}, &(0x7f0000001380)=""/4096, 0x1000, &(0x7f0000002380)=""/143, &(0x7f0000002940)=[r3, r4, r5, r6, r7, r8, r3, r0], 0x8, {r9}}, 0x58) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x410140, 0x0) fsetxattr$trusted_overlay_redirect(r11, &(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', 0x8, 0x0) r12 = getpgrp(r10) kcmp(r4, r12, 0x6, r9, r9) openat(r1, &(0x7f0000002b00)='./file0\x00', 0xa48c0, 0x85) [ 63.631869] audit: type=1400 audit(1665000318.083:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:05:18 executing program 7: ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0xa9, "cf8f97ee906e7ecb7f78aef53565925fe3fc8719b061a4e6f63083aecf246efa5dc918ddb8f4073cb519a4d4005660c26836c0d7f544d2941052b0f79b93233ad1cc199cde108bca16f6a2f9b3602fb40de63ba897eeab6f4928c105ea583c383af1ac1586d4f85175c4f8a8c1cc32c61d63ab2c965e711434413ed453e10ef5c4987e8641e72a09923bb3b3ad3def92979b88f1baeddd20f0be274c10a0cd3a7312b243259ec171fe"}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x1) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000100)={0x1, 0xffffffff, 0x40fa2932, 0xffffff54, 0xded, 0x9}) syncfs(r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)="6e1a2030d1fbcf919056d1b4d33c25e5b4193afb6af47f97d324de4f1ea1f5c1486c674e2ff8f573e5e1d1dd64e3f99f53bde1a1685990f3273e36dcccefe0770ab9f91f43f8800bcaddd982cfc1ecf201cd075abf20566634e23256dbacd579830d4a0d39a02a62adf14265a5e3ed6db475b9a35113acc5a803ebda19bf1bb791ee5390204fe436da6cfd4b0fd55b0c55a878ef6eb3a44bb93bb7ae2ad23fe87b65c6a41a195c7e4b2d3ed8e5642294508caa0f4c3aa189910c48a3771d1180ad99cae3d673d406ee126fcc603bf2336aac99c1be", 0xd5, r1}, 0x68) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000300)={0x58b11dc, 0xfffffffb}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x442, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xdc, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8000}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20008005}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd8, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x60, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0xfff}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_MASTER={0x28, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x10, 0x17, [0x0, 0x10000, 0xff]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8080}, 0x4000090) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000780)={0x2, 0x0, @multicast1}, &(0x7f00000007c0)=0x10) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000900)=0x8, 0x10001) 20:05:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20e00, 0x120) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x401, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @loopback}, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x421}}, './file0/file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5, 0x6}}, './file0\x00'}) renameat2(r0, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0/file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x10003, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x3f7, 0x8000}}, './file0\x00'}) r6 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x6, 0x4, &(0x7f0000000540)=[{&(0x7f0000000340)="5fd2f5b736a97e6f70590eaf0f658ced173efdeade4d86dbc7a9911315d7f2063d7b85664608e18bc3ad159683c7299cb27b95b5d723a2f1a5c7aec597a0f180ac2c69190e2cabe1a884c58428a7cb0e3cc1999d4cac81248a83c540c29936510ef46a84b6e242c2ec423a2a61", 0x6d, 0x6}, {&(0x7f00000003c0)="e8e80deed46dce0f2aadc36cc327731429369de4", 0x14}, {&(0x7f0000000400)="0ed68453c4c0eca01d6bb192428a37d6c4d8b188405d3b0bea738ceebc2e2f8f145c4eb48601909e8b1d22bd515a02f09fae688a2f494aa97f99fde0a572743f38f7173194df6ae6b52afdba8d07ab02284570fb8aee99150d0ca4bcbfa7d8f47fd7927bb476aabce3104ffd6ffa1e1917d9e6d8", 0x74, 0x1}, {&(0x7f0000000480)="d53b788b911d370c4558e542464ec4055b8f3a63da1e65e7e5a43f0d322928917b12c4c47548b3b4566cf807813d7e6f0928139288a545435c500934984286ce09d12cb9c26d9ef27dd6ed29dbe77a2fd185cc9d91f8e085e705ffc6ee6406ef91d4b22baa855acc8a3fe9bd29e3e64063e6e9994fbb45fa05dc42b5aee40ac66350bb083810e1a8a5e5f59755786cb3487f371b267fab4090fdc1c6fb89", 0x9e, 0x3}], 0x3104000, &(0x7f00000005c0)={[{@grpid}, {@i_version}, {@lazytime}, {@delalloc}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_hash}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_eq}, {@uid_gt={'uid>', 0xee01}}]}) openat(r6, &(0x7f0000000680)='./file0\x00', 0x40400, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000006c0)={'ip6erspan0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008080}, 0x40000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000800)={'dummy0\x00', {0x2, 0x0, @multicast2}}) r8 = openat2(r5, &(0x7f0000000840)='./file0/file1\x00', &(0x7f0000000880)={0x4440, 0x0, 0x16}, 0x18) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000008c0)=0x10) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000940)='/dev/full\x00', &(0x7f0000000980)='./file0/file0\x00', 0xffffffffffffffff) [ 64.828858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.833378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.844211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.851077] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.852723] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.854321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.859291] Bluetooth: hci0: HCI_REQ-0x0c1a [ 64.880594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.882913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.884942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.887898] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.890105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.891931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.897223] Bluetooth: hci1: HCI_REQ-0x0c1a [ 64.997393] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.004208] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.005437] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.009525] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.012088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.014067] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.015845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.017775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.019238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.020435] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.024456] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.025452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.026684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.027627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.030299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.031469] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.035190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.037542] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.038601] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.039626] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 65.041022] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.043800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.044907] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.046419] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.048782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.059166] Bluetooth: hci2: HCI_REQ-0x0c1a [ 65.063386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.064550] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.071114] Bluetooth: hci5: HCI_REQ-0x0c1a [ 65.072854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.075327] Bluetooth: hci6: HCI_REQ-0x0c1a [ 65.076380] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.114198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.114305] Bluetooth: hci4: HCI_REQ-0x0c1a [ 65.207114] Bluetooth: hci3: HCI_REQ-0x0c1a [ 65.293451] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.301801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.316254] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.336447] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.342224] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 65.355778] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.380192] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.919474] Bluetooth: hci0: command 0x0409 tx timeout [ 66.983647] Bluetooth: hci1: command 0x0409 tx timeout [ 67.110040] Bluetooth: hci5: command 0x0409 tx timeout [ 67.110591] Bluetooth: hci6: command 0x0409 tx timeout [ 67.111070] Bluetooth: hci2: command 0x0409 tx timeout [ 67.174119] Bluetooth: hci4: command 0x0409 tx timeout [ 67.239087] Bluetooth: hci3: command 0x0409 tx timeout [ 67.431027] Bluetooth: hci7: command 0x0409 tx timeout [ 68.967010] Bluetooth: hci0: command 0x041b tx timeout [ 69.031027] Bluetooth: hci1: command 0x041b tx timeout [ 69.159031] Bluetooth: hci2: command 0x041b tx timeout [ 69.159412] Bluetooth: hci6: command 0x041b tx timeout [ 69.159764] Bluetooth: hci5: command 0x041b tx timeout [ 69.223019] Bluetooth: hci4: command 0x041b tx timeout [ 69.287043] Bluetooth: hci3: command 0x041b tx timeout [ 69.479017] Bluetooth: hci7: command 0x041b tx timeout [ 71.014046] Bluetooth: hci0: command 0x040f tx timeout [ 71.078521] Bluetooth: hci1: command 0x040f tx timeout [ 71.207043] Bluetooth: hci5: command 0x040f tx timeout [ 71.207423] Bluetooth: hci6: command 0x040f tx timeout [ 71.207771] Bluetooth: hci2: command 0x040f tx timeout [ 71.269999] Bluetooth: hci4: command 0x040f tx timeout [ 71.335067] Bluetooth: hci3: command 0x040f tx timeout [ 71.527008] Bluetooth: hci7: command 0x040f tx timeout [ 73.063030] Bluetooth: hci0: command 0x0419 tx timeout [ 73.126049] Bluetooth: hci1: command 0x0419 tx timeout [ 73.254069] Bluetooth: hci2: command 0x0419 tx timeout [ 73.254773] Bluetooth: hci6: command 0x0419 tx timeout [ 73.255870] Bluetooth: hci5: command 0x0419 tx timeout [ 73.318032] Bluetooth: hci4: command 0x0419 tx timeout [ 73.382551] Bluetooth: hci3: command 0x0419 tx timeout [ 73.575034] Bluetooth: hci7: command 0x0419 tx timeout 20:06:13 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='{U*}\\\'\x00', &(0x7f0000000080)='&@!,+\x00', &(0x7f00000000c0)='],#\x00'], &(0x7f0000000180)=[&(0x7f0000000140)='\x00'], 0x400) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x8000, 0x136) fallocate(r0, 0x20, 0x626ee33c, 0x9) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000200)=0x20) renameat2(r0, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000280)='./file1\x00', 0x7) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x200000, 0x2) r1 = signalfd(r0, &(0x7f0000000300)={[0xffff]}, 0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000340), 0x4, 0x101000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000003c0)={0x20000000}) r5 = accept$inet6(r4, 0x0, &(0x7f0000000400)) fallocate(r5, 0x1, 0x0, 0x1f) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r2, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x3) r7 = dup2(r3, r3) move_mount(r7, &(0x7f0000000480)='./file1\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x12) r8 = syz_open_dev$rtc(&(0x7f0000000500), 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8, {0x20}}, './file0\x00'}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x40010, r7, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x3, &(0x7f0000000680)}, 0x2) [ 118.589111] audit: type=1400 audit(1665000373.040:7): avc: denied { open } for pid=3844 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.590439] audit: type=1400 audit(1665000373.040:8): avc: denied { kernel } for pid=3844 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 20:06:13 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x10001, 0x8, 0x13}) r2 = eventfd(0xf8c) sendfile(r1, r2, &(0x7f0000000040)=0xec1, 0x10000) 20:06:13 executing program 4: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 20:06:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x9, 0x7f, 0x3, 0x6, 0xb, "d1d4400bd58c41bfccbf75be69ba944846b47c"}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3f, 0x100000001, 0x8}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x7fffffff) ioctl$TCSETA(r1, 0x5406, 0x0) 20:06:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20e00, 0x120) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x401, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @loopback}, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x421}}, './file0/file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5, 0x6}}, './file0\x00'}) renameat2(r0, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0/file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x10003, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x3f7, 0x8000}}, './file0\x00'}) r6 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x6, 0x4, &(0x7f0000000540)=[{&(0x7f0000000340)="5fd2f5b736a97e6f70590eaf0f658ced173efdeade4d86dbc7a9911315d7f2063d7b85664608e18bc3ad159683c7299cb27b95b5d723a2f1a5c7aec597a0f180ac2c69190e2cabe1a884c58428a7cb0e3cc1999d4cac81248a83c540c29936510ef46a84b6e242c2ec423a2a61", 0x6d, 0x6}, {&(0x7f00000003c0)="e8e80deed46dce0f2aadc36cc327731429369de4", 0x14}, {&(0x7f0000000400)="0ed68453c4c0eca01d6bb192428a37d6c4d8b188405d3b0bea738ceebc2e2f8f145c4eb48601909e8b1d22bd515a02f09fae688a2f494aa97f99fde0a572743f38f7173194df6ae6b52afdba8d07ab02284570fb8aee99150d0ca4bcbfa7d8f47fd7927bb476aabce3104ffd6ffa1e1917d9e6d8", 0x74, 0x1}, {&(0x7f0000000480)="d53b788b911d370c4558e542464ec4055b8f3a63da1e65e7e5a43f0d322928917b12c4c47548b3b4566cf807813d7e6f0928139288a545435c500934984286ce09d12cb9c26d9ef27dd6ed29dbe77a2fd185cc9d91f8e085e705ffc6ee6406ef91d4b22baa855acc8a3fe9bd29e3e64063e6e9994fbb45fa05dc42b5aee40ac66350bb083810e1a8a5e5f59755786cb3487f371b267fab4090fdc1c6fb89", 0x9e, 0x3}], 0x3104000, &(0x7f00000005c0)={[{@grpid}, {@i_version}, {@lazytime}, {@delalloc}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_hash}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_eq}, {@uid_gt={'uid>', 0xee01}}]}) openat(r6, &(0x7f0000000680)='./file0\x00', 0x40400, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000006c0)={'ip6erspan0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008080}, 0x40000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000800)={'dummy0\x00', {0x2, 0x0, @multicast2}}) r8 = openat2(r5, &(0x7f0000000840)='./file0/file1\x00', &(0x7f0000000880)={0x4440, 0x0, 0x16}, 0x18) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000008c0)=0x10) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000940)='/dev/full\x00', &(0x7f0000000980)='./file0/file0\x00', 0xffffffffffffffff) 20:06:13 executing program 4: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 20:06:13 executing program 5: statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x6000, 0x0, &(0x7f0000000480)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000}) sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2) r3 = getpgid(0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 119.000427] ------------[ cut here ]------------ [ 119.000450] [ 119.000454] ====================================================== [ 119.000457] WARNING: possible circular locking dependency detected [ 119.000462] 6.0.0-next-20221005 #1 Not tainted [ 119.000468] ------------------------------------------------------ [ 119.000472] syz-executor.5/3886 is trying to acquire lock: [ 119.000478] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 119.000519] [ 119.000519] but task is already holding lock: [ 119.000522] ffff888008c5d420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.000556] [ 119.000556] which lock already depends on the new lock. [ 119.000556] [ 119.000559] [ 119.000559] the existing dependency chain (in reverse order) is: [ 119.000562] [ 119.000562] -> #3 (&ctx->lock){....}-{2:2}: [ 119.000576] _raw_spin_lock+0x2a/0x40 [ 119.000588] __perf_event_task_sched_out+0x53b/0x18d0 [ 119.000600] __schedule+0xedd/0x2470 [ 119.000614] schedule+0xda/0x1b0 [ 119.000628] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.000641] syscall_exit_to_user_mode+0x19/0x40 [ 119.000654] do_syscall_64+0x48/0x90 [ 119.000664] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.000678] [ 119.000678] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 119.000691] _raw_spin_lock_nested+0x30/0x40 [ 119.000702] raw_spin_rq_lock_nested+0x1e/0x30 [ 119.000716] task_fork_fair+0x63/0x4d0 [ 119.000733] sched_cgroup_fork+0x3d0/0x540 [ 119.000747] copy_process+0x4183/0x6e20 [ 119.000758] kernel_clone+0xe7/0x890 [ 119.000767] user_mode_thread+0xad/0xf0 [ 119.000778] rest_init+0x24/0x250 [ 119.000790] arch_call_rest_init+0xf/0x14 [ 119.000809] start_kernel+0x4c6/0x4eb [ 119.000826] secondary_startup_64_no_verify+0xe0/0xeb [ 119.000840] [ 119.000840] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 119.000853] _raw_spin_lock_irqsave+0x39/0x60 [ 119.000865] try_to_wake_up+0xab/0x1930 [ 119.000878] up+0x75/0xb0 [ 119.000892] __up_console_sem+0x6e/0x80 [ 119.000908] console_unlock+0x46a/0x590 [ 119.000924] vt_ioctl+0x2822/0x2ca0 [ 119.000937] tty_ioctl+0x785/0x16b0 [ 119.000950] __x64_sys_ioctl+0x19a/0x210 [ 119.000965] do_syscall_64+0x3b/0x90 [ 119.000974] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.000987] [ 119.000987] -> #0 ((console_sem).lock){....}-{2:2}: [ 119.001001] __lock_acquire+0x2a02/0x5e70 [ 119.001017] lock_acquire+0x1a2/0x530 [ 119.001033] _raw_spin_lock_irqsave+0x39/0x60 [ 119.001044] down_trylock+0xe/0x70 [ 119.001060] __down_trylock_console_sem+0x3b/0xd0 [ 119.001076] vprintk_emit+0x16b/0x560 [ 119.001092] vprintk+0x84/0xa0 [ 119.001108] _printk+0xba/0xf1 [ 119.001120] report_bug.cold+0x72/0xab [ 119.001137] handle_bug+0x3c/0x70 [ 119.001146] exc_invalid_op+0x14/0x50 [ 119.001156] asm_exc_invalid_op+0x16/0x20 [ 119.001169] group_sched_out.part.0+0x2c7/0x460 [ 119.001187] ctx_sched_out+0x8f1/0xc10 [ 119.001203] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.001214] __schedule+0xedd/0x2470 [ 119.001228] schedule+0xda/0x1b0 [ 119.001242] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.001253] syscall_exit_to_user_mode+0x19/0x40 [ 119.001266] do_syscall_64+0x48/0x90 [ 119.001275] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.001289] [ 119.001289] other info that might help us debug this: [ 119.001289] [ 119.001291] Chain exists of: [ 119.001291] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 119.001291] [ 119.001306] Possible unsafe locking scenario: [ 119.001306] [ 119.001308] CPU0 CPU1 [ 119.001311] ---- ---- [ 119.001313] lock(&ctx->lock); [ 119.001318] lock(&rq->__lock); [ 119.001325] lock(&ctx->lock); [ 119.001331] lock((console_sem).lock); [ 119.001337] [ 119.001337] *** DEADLOCK *** [ 119.001337] [ 119.001338] 2 locks held by syz-executor.5/3886: [ 119.001345] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 119.001375] #1: ffff888008c5d420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.001402] [ 119.001402] stack backtrace: [ 119.001404] CPU: 0 PID: 3886 Comm: syz-executor.5 Not tainted 6.0.0-next-20221005 #1 [ 119.001417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.001424] Call Trace: [ 119.001427] [ 119.001431] dump_stack_lvl+0x8b/0xb3 [ 119.001451] check_noncircular+0x263/0x2e0 [ 119.001468] ? format_decode+0x26c/0xb50 [ 119.001485] ? print_circular_bug+0x450/0x450 [ 119.001503] ? simple_strtoul+0x30/0x30 [ 119.001520] ? format_decode+0x26c/0xb50 [ 119.001538] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 119.001556] __lock_acquire+0x2a02/0x5e70 [ 119.001578] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 119.001600] lock_acquire+0x1a2/0x530 [ 119.001617] ? down_trylock+0xe/0x70 [ 119.001635] ? lock_release+0x750/0x750 [ 119.001656] ? vprintk+0x84/0xa0 [ 119.001674] _raw_spin_lock_irqsave+0x39/0x60 [ 119.001686] ? down_trylock+0xe/0x70 [ 119.001704] down_trylock+0xe/0x70 [ 119.001720] ? vprintk+0x84/0xa0 [ 119.001738] __down_trylock_console_sem+0x3b/0xd0 [ 119.001755] vprintk_emit+0x16b/0x560 [ 119.001775] vprintk+0x84/0xa0 [ 119.001792] _printk+0xba/0xf1 [ 119.001805] ? record_print_text.cold+0x16/0x16 [ 119.001821] ? report_bug.cold+0x66/0xab [ 119.001840] ? group_sched_out.part.0+0x2c7/0x460 [ 119.001859] report_bug.cold+0x72/0xab [ 119.001879] handle_bug+0x3c/0x70 [ 119.001889] exc_invalid_op+0x14/0x50 [ 119.001900] asm_exc_invalid_op+0x16/0x20 [ 119.001913] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.001934] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.001945] RSP: 0018:ffff88803f0f7c48 EFLAGS: 00010006 [ 119.001954] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.001962] RDX: ffff8880176b0000 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 119.001970] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 119.001977] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff888008c5d400 [ 119.001985] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 119.001996] ? group_sched_out.part.0+0x2c7/0x460 [ 119.002016] ? group_sched_out.part.0+0x2c7/0x460 [ 119.002036] ctx_sched_out+0x8f1/0xc10 [ 119.002055] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.002069] ? lock_is_held_type+0xd7/0x130 [ 119.002083] ? __perf_cgroup_move+0x160/0x160 [ 119.002094] ? set_next_entity+0x304/0x550 [ 119.002111] ? update_curr+0x267/0x740 [ 119.002130] ? lock_is_held_type+0xd7/0x130 [ 119.002144] __schedule+0xedd/0x2470 [ 119.002162] ? io_schedule_timeout+0x150/0x150 [ 119.002179] ? rcu_read_lock_sched_held+0x3e/0x80 [ 119.002200] schedule+0xda/0x1b0 [ 119.002215] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.002228] syscall_exit_to_user_mode+0x19/0x40 [ 119.002242] do_syscall_64+0x48/0x90 [ 119.002252] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.002266] RIP: 0033:0x7f556c829b19 [ 119.002274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.002285] RSP: 002b:00007f5569d9f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.002296] RAX: 0000000000000001 RBX: 00007f556c93cf68 RCX: 00007f556c829b19 [ 119.002304] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f556c93cf6c [ 119.002311] RBP: 00007f556c93cf60 R08: 000000000000000e R09: 0000000000000000 [ 119.002318] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f556c93cf6c [ 119.002325] R13: 00007ffd8ea9056f R14: 00007f5569d9f300 R15: 0000000000022000 [ 119.002338] [ 119.054804] WARNING: CPU: 0 PID: 3886 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 119.055428] Modules linked in: [ 119.055646] CPU: 0 PID: 3886 Comm: syz-executor.5 Not tainted 6.0.0-next-20221005 #1 [ 119.056173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.056724] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.057098] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.058322] RSP: 0018:ffff88803f0f7c48 EFLAGS: 00010006 [ 119.058683] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.059167] RDX: ffff8880176b0000 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 119.059652] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 119.060136] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff888008c5d400 [ 119.060621] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 119.061104] FS: 00007f5569d9f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 119.061651] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.062043] CR2: 00007fc238192710 CR3: 00000000180f0000 CR4: 0000000000350ef0 [ 119.062520] Call Trace: [ 119.062697] [ 119.062856] ctx_sched_out+0x8f1/0xc10 [ 119.063136] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.063495] ? lock_is_held_type+0xd7/0x130 [ 119.063798] ? __perf_cgroup_move+0x160/0x160 [ 119.064101] ? set_next_entity+0x304/0x550 [ 119.064399] ? update_curr+0x267/0x740 [ 119.064686] ? lock_is_held_type+0xd7/0x130 [ 119.064986] __schedule+0xedd/0x2470 [ 119.065254] ? io_schedule_timeout+0x150/0x150 [ 119.065573] ? rcu_read_lock_sched_held+0x3e/0x80 [ 119.065918] schedule+0xda/0x1b0 [ 119.066167] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.066501] syscall_exit_to_user_mode+0x19/0x40 [ 119.066830] do_syscall_64+0x48/0x90 [ 119.067091] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.067443] RIP: 0033:0x7f556c829b19 [ 119.067704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.068905] RSP: 002b:00007f5569d9f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.069421] RAX: 0000000000000001 RBX: 00007f556c93cf68 RCX: 00007f556c829b19 [ 119.069910] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f556c93cf6c [ 119.070395] RBP: 00007f556c93cf60 R08: 000000000000000e R09: 0000000000000000 [ 119.070880] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f556c93cf6c [ 119.071363] R13: 00007ffd8ea9056f R14: 00007f5569d9f300 R15: 0000000000022000 [ 119.071854] [ 119.072024] irq event stamp: 342 [ 119.072256] hardirqs last enabled at (341): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 119.072885] hardirqs last disabled at (342): [] __schedule+0x1225/0x2470 [ 119.073448] softirqs last enabled at (186): [] __irq_exit_rcu+0x11b/0x180 [ 119.074031] softirqs last disabled at (177): [] __irq_exit_rcu+0x11b/0x180 [ 119.074615] ---[ end trace 0000000000000000 ]--- 20:06:13 executing program 4: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) [ 120.137435] loop2: detected capacity change from 0 to 16383 [ 120.138540] tmpfs: Unsupported parameter 'huge' [ 120.147477] loop2: detected capacity change from 0 to 16383 [ 120.148357] tmpfs: Unsupported parameter 'huge' VM DIAGNOSIS: 20:06:13 Registers: info registers vcpu 0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bda91 RDI=ffffffff8765c9a0 RBP=ffffffff8765c960 RSP=ffff88803f0f7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000066 R11=0000000000000001 R12=0000000000000066 R13=ffffffff8765c960 R14=0000000000000010 R15=ffffffff823bda80 RIP=ffffffff823bdae9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5569d9f700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc238192710 CR3=00000000180f0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f556c9107c000007f556c9107c8 XMM02=00007f556c9107e000007f556c9107c0 XMM03=00007f556c9107c800007f556c9107c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff842786a7 RDX=ffffed100d9c6fd1 RSI=0000000000000004 RDI=ffff88806ce37e80 RBP=ffff88806ce37e80 RSP=ffff88803f027a98 R8 =0000000000000000 R9 =ffff88806ce37e83 R10=ffffed100d9c6fd0 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9c6fd0 R14=0000000000000001 R15=1ffff11007e04f54 RIP=ffffffff84278724 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555560fc400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffb41253718 CR3=0000000018026000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007ffb43de57c000007ffb43de57c8 XMM02=00007ffb43de57e000007ffb43de57c0 XMM03=00007ffb43de57c800007ffb43de57c0 XMM04=ffffffff8185af88ffffffff8185ae54 XMM05=ffffffff8185ad93ffffffff8185ad19 XMM06=ffffffff8185aa6dffffffff8185aa63 XMM07=ffffffff8185aa46ffffffff8185a898 XMM08=e329bde93f8acc5a85aa2bb2d491ef06 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000