Warning: Permanently added '[localhost]:20119' (ECDSA) to the list of known hosts. 2022/09/16 08:12:26 fuzzer started 2022/09/16 08:12:27 dialing manager at localhost:36559 syzkaller login: [ 36.325731] cgroup: Unknown subsys name 'net' [ 36.440530] cgroup: Unknown subsys name 'rlimit' 2022/09/16 08:12:39 syscalls: 2215 2022/09/16 08:12:39 code coverage: enabled 2022/09/16 08:12:39 comparison tracing: enabled 2022/09/16 08:12:39 extra coverage: enabled 2022/09/16 08:12:39 setuid sandbox: enabled 2022/09/16 08:12:39 namespace sandbox: enabled 2022/09/16 08:12:39 Android sandbox: enabled 2022/09/16 08:12:39 fault injection: enabled 2022/09/16 08:12:39 leak checking: enabled 2022/09/16 08:12:39 net packet injection: enabled 2022/09/16 08:12:39 net device setup: enabled 2022/09/16 08:12:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/16 08:12:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/16 08:12:39 USB emulation: enabled 2022/09/16 08:12:39 hci packet injection: enabled 2022/09/16 08:12:39 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220915) 2022/09/16 08:12:39 802.15.4 emulation: enabled 2022/09/16 08:12:39 fetching corpus: 50, signal 29504/31280 (executing program) 2022/09/16 08:12:40 fetching corpus: 100, signal 44308/47685 (executing program) 2022/09/16 08:12:40 fetching corpus: 150, signal 56036/60771 (executing program) 2022/09/16 08:12:40 fetching corpus: 200, signal 62315/68443 (executing program) 2022/09/16 08:12:40 fetching corpus: 250, signal 67436/74854 (executing program) 2022/09/16 08:12:40 fetching corpus: 300, signal 74642/83259 (executing program) 2022/09/16 08:12:40 fetching corpus: 350, signal 78848/88679 (executing program) 2022/09/16 08:12:40 fetching corpus: 400, signal 83783/94701 (executing program) 2022/09/16 08:12:40 fetching corpus: 450, signal 87994/100022 (executing program) 2022/09/16 08:12:40 fetching corpus: 500, signal 90438/103602 (executing program) 2022/09/16 08:12:41 fetching corpus: 550, signal 95650/109725 (executing program) 2022/09/16 08:12:41 fetching corpus: 600, signal 99888/114911 (executing program) 2022/09/16 08:12:41 fetching corpus: 650, signal 101858/117931 (executing program) 2022/09/16 08:12:41 fetching corpus: 700, signal 105644/122545 (executing program) 2022/09/16 08:12:41 fetching corpus: 750, signal 109606/127305 (executing program) 2022/09/16 08:12:41 fetching corpus: 800, signal 112543/131034 (executing program) 2022/09/16 08:12:41 fetching corpus: 850, signal 114190/133645 (executing program) 2022/09/16 08:12:42 fetching corpus: 900, signal 116540/136856 (executing program) 2022/09/16 08:12:42 fetching corpus: 950, signal 118537/139732 (executing program) 2022/09/16 08:12:42 fetching corpus: 1000, signal 120810/142752 (executing program) 2022/09/16 08:12:42 fetching corpus: 1050, signal 124593/147002 (executing program) 2022/09/16 08:12:42 fetching corpus: 1100, signal 127425/150447 (executing program) 2022/09/16 08:12:42 fetching corpus: 1150, signal 128599/152451 (executing program) 2022/09/16 08:12:43 fetching corpus: 1200, signal 131906/156194 (executing program) 2022/09/16 08:12:43 fetching corpus: 1250, signal 134445/159254 (executing program) 2022/09/16 08:12:43 fetching corpus: 1300, signal 136570/161999 (executing program) 2022/09/16 08:12:43 fetching corpus: 1350, signal 137790/163945 (executing program) 2022/09/16 08:12:43 fetching corpus: 1400, signal 139592/166349 (executing program) 2022/09/16 08:12:43 fetching corpus: 1450, signal 140943/168370 (executing program) 2022/09/16 08:12:43 fetching corpus: 1500, signal 142230/170314 (executing program) 2022/09/16 08:12:43 fetching corpus: 1550, signal 144449/172962 (executing program) 2022/09/16 08:12:44 fetching corpus: 1600, signal 146050/175018 (executing program) 2022/09/16 08:12:44 fetching corpus: 1650, signal 148450/177780 (executing program) 2022/09/16 08:12:44 fetching corpus: 1700, signal 149527/179462 (executing program) 2022/09/16 08:12:44 fetching corpus: 1750, signal 151735/181994 (executing program) 2022/09/16 08:12:44 fetching corpus: 1800, signal 152898/183717 (executing program) 2022/09/16 08:12:44 fetching corpus: 1850, signal 153976/185407 (executing program) 2022/09/16 08:12:44 fetching corpus: 1900, signal 155628/187458 (executing program) 2022/09/16 08:12:45 fetching corpus: 1950, signal 156695/189050 (executing program) 2022/09/16 08:12:45 fetching corpus: 2000, signal 157863/190693 (executing program) 2022/09/16 08:12:45 fetching corpus: 2050, signal 159252/192515 (executing program) 2022/09/16 08:12:45 fetching corpus: 2100, signal 160816/194390 (executing program) 2022/09/16 08:12:45 fetching corpus: 2150, signal 161965/195954 (executing program) 2022/09/16 08:12:45 fetching corpus: 2200, signal 162702/197213 (executing program) 2022/09/16 08:12:45 fetching corpus: 2250, signal 164088/198955 (executing program) 2022/09/16 08:12:45 fetching corpus: 2300, signal 165007/200396 (executing program) 2022/09/16 08:12:46 fetching corpus: 2350, signal 166246/201934 (executing program) 2022/09/16 08:12:46 fetching corpus: 2400, signal 167227/203319 (executing program) 2022/09/16 08:12:46 fetching corpus: 2450, signal 169049/205223 (executing program) 2022/09/16 08:12:46 fetching corpus: 2500, signal 170311/206735 (executing program) 2022/09/16 08:12:46 fetching corpus: 2550, signal 171777/208392 (executing program) 2022/09/16 08:12:46 fetching corpus: 2600, signal 172623/209581 (executing program) 2022/09/16 08:12:46 fetching corpus: 2650, signal 173341/210741 (executing program) 2022/09/16 08:12:46 fetching corpus: 2700, signal 174905/212442 (executing program) 2022/09/16 08:12:46 fetching corpus: 2750, signal 176815/214288 (executing program) 2022/09/16 08:12:47 fetching corpus: 2800, signal 177543/215414 (executing program) 2022/09/16 08:12:47 fetching corpus: 2850, signal 178857/216906 (executing program) 2022/09/16 08:12:47 fetching corpus: 2900, signal 180139/218276 (executing program) 2022/09/16 08:12:47 fetching corpus: 2950, signal 181021/219521 (executing program) 2022/09/16 08:12:47 fetching corpus: 3000, signal 181810/220602 (executing program) 2022/09/16 08:12:47 fetching corpus: 3050, signal 182750/221800 (executing program) 2022/09/16 08:12:48 fetching corpus: 3100, signal 183795/222992 (executing program) 2022/09/16 08:12:48 fetching corpus: 3150, signal 184566/224028 (executing program) 2022/09/16 08:12:48 fetching corpus: 3200, signal 185475/225140 (executing program) 2022/09/16 08:12:48 fetching corpus: 3250, signal 186545/226350 (executing program) 2022/09/16 08:12:48 fetching corpus: 3300, signal 187523/227546 (executing program) 2022/09/16 08:12:48 fetching corpus: 3350, signal 188234/228532 (executing program) 2022/09/16 08:12:48 fetching corpus: 3400, signal 189454/229794 (executing program) 2022/09/16 08:12:49 fetching corpus: 3450, signal 190321/230772 (executing program) 2022/09/16 08:12:49 fetching corpus: 3500, signal 190959/231628 (executing program) 2022/09/16 08:12:49 fetching corpus: 3550, signal 191882/232716 (executing program) 2022/09/16 08:12:49 fetching corpus: 3600, signal 192760/233686 (executing program) 2022/09/16 08:12:49 fetching corpus: 3650, signal 194452/234992 (executing program) 2022/09/16 08:12:49 fetching corpus: 3700, signal 195614/236096 (executing program) 2022/09/16 08:12:49 fetching corpus: 3750, signal 196531/237018 (executing program) 2022/09/16 08:12:50 fetching corpus: 3800, signal 197308/237860 (executing program) 2022/09/16 08:12:50 fetching corpus: 3850, signal 197849/238583 (executing program) 2022/09/16 08:12:50 fetching corpus: 3900, signal 198383/239337 (executing program) 2022/09/16 08:12:50 fetching corpus: 3950, signal 198828/240042 (executing program) 2022/09/16 08:12:50 fetching corpus: 4000, signal 199818/240910 (executing program) 2022/09/16 08:12:50 fetching corpus: 4050, signal 200693/241788 (executing program) 2022/09/16 08:12:50 fetching corpus: 4100, signal 201596/242647 (executing program) 2022/09/16 08:12:51 fetching corpus: 4150, signal 202479/243529 (executing program) 2022/09/16 08:12:51 fetching corpus: 4200, signal 202975/244183 (executing program) 2022/09/16 08:12:51 fetching corpus: 4250, signal 203771/244969 (executing program) 2022/09/16 08:12:51 fetching corpus: 4300, signal 204508/245750 (executing program) 2022/09/16 08:12:51 fetching corpus: 4350, signal 204803/246328 (executing program) 2022/09/16 08:12:51 fetching corpus: 4400, signal 206004/247201 (executing program) 2022/09/16 08:12:51 fetching corpus: 4450, signal 206903/247994 (executing program) 2022/09/16 08:12:51 fetching corpus: 4500, signal 208006/248784 (executing program) 2022/09/16 08:12:52 fetching corpus: 4550, signal 208645/249452 (executing program) 2022/09/16 08:12:52 fetching corpus: 4600, signal 209285/250133 (executing program) 2022/09/16 08:12:52 fetching corpus: 4650, signal 210602/251066 (executing program) 2022/09/16 08:12:52 fetching corpus: 4700, signal 211304/251733 (executing program) 2022/09/16 08:12:52 fetching corpus: 4750, signal 212200/252496 (executing program) 2022/09/16 08:12:52 fetching corpus: 4800, signal 212748/253069 (executing program) 2022/09/16 08:12:52 fetching corpus: 4850, signal 213250/253628 (executing program) 2022/09/16 08:12:52 fetching corpus: 4900, signal 213710/254181 (executing program) 2022/09/16 08:12:53 fetching corpus: 4950, signal 214327/254734 (executing program) 2022/09/16 08:12:53 fetching corpus: 5000, signal 215421/255497 (executing program) 2022/09/16 08:12:53 fetching corpus: 5050, signal 216055/256059 (executing program) 2022/09/16 08:12:53 fetching corpus: 5100, signal 216651/256602 (executing program) 2022/09/16 08:12:53 fetching corpus: 5150, signal 216976/257095 (executing program) 2022/09/16 08:12:53 fetching corpus: 5200, signal 217545/257633 (executing program) 2022/09/16 08:12:53 fetching corpus: 5250, signal 217961/258089 (executing program) 2022/09/16 08:12:53 fetching corpus: 5300, signal 218545/258632 (executing program) 2022/09/16 08:12:54 fetching corpus: 5350, signal 219259/259142 (executing program) 2022/09/16 08:12:54 fetching corpus: 5400, signal 219811/259674 (executing program) 2022/09/16 08:12:54 fetching corpus: 5450, signal 220527/260215 (executing program) 2022/09/16 08:12:54 fetching corpus: 5500, signal 221254/260702 (executing program) 2022/09/16 08:12:54 fetching corpus: 5550, signal 221700/261115 (executing program) 2022/09/16 08:12:54 fetching corpus: 5600, signal 222213/261599 (executing program) 2022/09/16 08:12:55 fetching corpus: 5650, signal 222852/262115 (executing program) 2022/09/16 08:12:55 fetching corpus: 5700, signal 223344/262581 (executing program) 2022/09/16 08:12:55 fetching corpus: 5750, signal 224110/263045 (executing program) 2022/09/16 08:12:55 fetching corpus: 5800, signal 225161/263514 (executing program) 2022/09/16 08:12:55 fetching corpus: 5850, signal 226251/264024 (executing program) 2022/09/16 08:12:55 fetching corpus: 5900, signal 227022/264446 (executing program) 2022/09/16 08:12:55 fetching corpus: 5950, signal 227576/264841 (executing program) 2022/09/16 08:12:55 fetching corpus: 6000, signal 228262/265214 (executing program) 2022/09/16 08:12:56 fetching corpus: 6050, signal 229300/265640 (executing program) 2022/09/16 08:12:56 fetching corpus: 6100, signal 230158/266006 (executing program) 2022/09/16 08:12:56 fetching corpus: 6150, signal 230650/266352 (executing program) 2022/09/16 08:12:56 fetching corpus: 6200, signal 231127/266677 (executing program) 2022/09/16 08:12:56 fetching corpus: 6250, signal 231968/267008 (executing program) 2022/09/16 08:12:56 fetching corpus: 6300, signal 232644/267351 (executing program) 2022/09/16 08:12:57 fetching corpus: 6350, signal 233240/267651 (executing program) 2022/09/16 08:12:57 fetching corpus: 6400, signal 233625/267911 (executing program) 2022/09/16 08:12:57 fetching corpus: 6450, signal 234104/268204 (executing program) 2022/09/16 08:12:57 fetching corpus: 6500, signal 234445/268495 (executing program) 2022/09/16 08:12:57 fetching corpus: 6550, signal 234915/268574 (executing program) 2022/09/16 08:12:57 fetching corpus: 6600, signal 236195/268670 (executing program) 2022/09/16 08:12:57 fetching corpus: 6650, signal 236845/268693 (executing program) 2022/09/16 08:12:57 fetching corpus: 6700, signal 237432/268735 (executing program) 2022/09/16 08:12:58 fetching corpus: 6750, signal 237796/268735 (executing program) 2022/09/16 08:12:58 fetching corpus: 6800, signal 238180/268738 (executing program) 2022/09/16 08:12:58 fetching corpus: 6850, signal 238530/268747 (executing program) 2022/09/16 08:12:58 fetching corpus: 6900, signal 238972/268747 (executing program) 2022/09/16 08:12:58 fetching corpus: 6950, signal 239902/268752 (executing program) 2022/09/16 08:12:58 fetching corpus: 7000, signal 240519/268784 (executing program) 2022/09/16 08:12:58 fetching corpus: 7050, signal 241071/268815 (executing program) 2022/09/16 08:12:58 fetching corpus: 7100, signal 241504/268815 (executing program) 2022/09/16 08:12:59 fetching corpus: 7150, signal 242220/268882 (executing program) 2022/09/16 08:12:59 fetching corpus: 7200, signal 242618/268885 (executing program) 2022/09/16 08:12:59 fetching corpus: 7250, signal 243439/268885 (executing program) 2022/09/16 08:12:59 fetching corpus: 7300, signal 243859/268887 (executing program) 2022/09/16 08:12:59 fetching corpus: 7350, signal 244949/268891 (executing program) 2022/09/16 08:12:59 fetching corpus: 7400, signal 245339/268921 (executing program) 2022/09/16 08:12:59 fetching corpus: 7450, signal 245779/268923 (executing program) 2022/09/16 08:12:59 fetching corpus: 7500, signal 246436/268956 (executing program) 2022/09/16 08:13:00 fetching corpus: 7550, signal 246949/268956 (executing program) 2022/09/16 08:13:00 fetching corpus: 7600, signal 247532/268956 (executing program) 2022/09/16 08:13:00 fetching corpus: 7650, signal 247894/268965 (executing program) 2022/09/16 08:13:00 fetching corpus: 7700, signal 248221/268972 (executing program) 2022/09/16 08:13:00 fetching corpus: 7750, signal 248591/268974 (executing program) 2022/09/16 08:13:00 fetching corpus: 7784, signal 248878/268977 (executing program) 2022/09/16 08:13:00 fetching corpus: 7784, signal 248878/268977 (executing program) 2022/09/16 08:13:03 starting 8 fuzzer processes 08:13:03 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0xffffffffb50aa465, [0x849d, 0x279a0eea, 0x6, 0xec0, 0x848, 0x3]}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1', "fb4c5fa68dd70aa4e14abec4e4fa0db3c6405ece01aa5618504cc8631987239776c4287af23737a432226f6a32026e34b266745b4ae130a2db85763d91c7eb3689d8e497b830af29be47a82bacee2fca4bb361b32ce9643e187f6dbcf830470d26b89f4145b7a3cfa44a1d18dee45b37c7fafcd319a098dba31a514834bb7ef7bf3573d4b633c375b82bc44405fc88905cc164b5f52fb91645cf8c"}, 0x9f) write$P9_RREMOVE(r0, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)={0x8}) r1 = open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x80001) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x801) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r3 = openat(r2, &(0x7f00000003c0)='./file0\x00', 0x250000, 0x40) r4 = syz_open_dev$vcsn(&(0x7f0000000400), 0x8001, 0x100000) r5 = syz_open_dev$vcsn(&(0x7f0000000440), 0x5, 0x241) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x10400, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740), 0x42, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000780)={0xa0002018}) 08:13:03 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/105) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, &(0x7f0000000080)={0x0, "ba4d923f97b5d9e5369d3497c5631492bab85948b7e44c87ad41dbd1c5b263387ea12decef4701b4a2c287b27bf58efe1536c95b4def66ee491b8d983003b017c382c971d109d9b3c58cd3f83b5d88e229d539fb0c055169894e21193bf344d31575b2cbd37bfd45a7cfc3bc0e2638ffb3f1118ff4b9c32f384d3bdc8af3a06409804f8cb0a0f98702216874bb6bfe960fd56af060fe81a84d48c9c2fcd15dd8f854efd9f296841986a78c4cc00bd861f2f500d11e192bae371f025f6fa67c89"}, 0xc8, 0x800) r0 = msgget$private(0x0, 0x1) msgrcv(r0, &(0x7f0000000180)={0x0, ""/232}, 0xf0, 0x1, 0x2800) r1 = msgget$private(0x0, 0xb4) msgrcv(r1, &(0x7f0000000280)={0x0, ""/227}, 0xeb, 0x0, 0x1800) r2 = msgget$private(0x0, 0x7) msgsnd(r2, &(0x7f0000000380)={0x2, "4b81559bc7ecd3762bb9d39401f560268c85b4681c207f1027669a47e8864ee930d0ebdaeaf3106e223d829dd48dc55d3b77538a5b242bf03f3d27eb86ed24ef0bd42aec17ccf9bf09f3de444ee55986534b44d5eafae117eaac94"}, 0x63, 0x800) r3 = msgget$private(0x0, 0x327) msgsnd(r3, &(0x7f0000000400)={0x2, "b85d3d31136ac7695f6c13bdf1816347f3aa3804786bb806dfb841ea945f08d7ab7c27ec1156f038ddb2b804fab8572638961e3f87a5fea3d2fbeab31aee24bfba22223b1bee63e4e8abe4ff60c3b2809ae470600649571d5940fbc4bb10c5e872116b3a22d528f04d1836a0b7f532f8f4b8833aa6ae32d24206379c2a647735a7170c31782da9d8b38ed6c49979052be14570988031a19c5c338417c35e8b3a7d07752369b2bfa8dc407f7d86"}, 0xb5, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000004c0)=""/6) msgrcv(0xffffffffffffffff, &(0x7f0000000500)={0x0, ""/218}, 0xe2, 0x1, 0x2400) r4 = msgget$private(0x0, 0x20) msgsnd(r1, &(0x7f0000000600)={0x1, "92aa58ee8a37131fc00bb9daf5eadf93567ec82ed9d3f05df12324f9bb22239c4c0a2d5eee3b940f4185c8f869a7d940440cfdd4c342aa1336c27b4750365f5a064cc47b54f8966f1693777ef0395714715aa63be4cb938314301bbf81fd14591b1e63232127176ebcaadb7c53d4825e5f2e98ffe9f867dd2c110b406e3ee7de1f5b8f1c363f3f03a40281a89e66fd7c68fe71b42aceff434e8a3bd97081c1a94946b2f2991c8f1080188d0bd8c76e4b3f036aad7edac51ed2744c3ab8a9e8b764c69b8c46aadde0f7be6cd54298b9edec7dd8cac00cf6a9103f47203cedb43b9221a4"}, 0xeb, 0x0) msgctl$IPC_RMID(r3, 0x0) msgsnd(r4, &(0x7f0000000700)={0x3, "187debba833b6eced6caeb457b7da76c9efaf3cc4a83107158079366ddc16e43ecfbf9171dd666807b6ed30304bf0829eae22eec9a677281a59180a932107e0a239db2a4fe692e28c161420958a661aac97e5c32ca3fbb90db9b084a9fa32c7526b5e5603ee80618e32554f34208c5977ff8841fee11d14b9d82ab16"}, 0x84, 0x800) msgrcv(r0, &(0x7f00000007c0)={0x0, ""/243}, 0xfb, 0x2, 0x1000) msgctl$IPC_RMID(r3, 0x0) 08:13:03 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x80, 0x40, 0x407, 0xfffffa72, {{0x12, 0x4, 0x2, 0x2b, 0x48, 0x65, 0x0, 0x81, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0xf, 0x20, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x5, 0x4, "8ac4"}, {0x6, 0x6, "3cb54c12"}]}, @ssrr={0x89, 0x7, 0x66, [@local]}, @generic={0x94, 0xb, "bb791fc6bc58b0e62a"}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x12c, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8d, 0x5, "c62089734c1aeea65c6358d6d2f1b6218c097336f2d2bc14b7635741b9d6e403def7433b27bcffa526a9e978092c37d173e95379e4fde4a4049bf9481629c5b9b222839e42cb49ae34bcd5af7e9babffd193629edaa663eec4a300c65ce05cea770410fb08c5d49965e079543b6e10c4a9cef3319d5e6ee61057b81da8e025e61a8cf54426d5008b06"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}]}, 0x12c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x250, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x114, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4bd41007947bd583}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x610, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x76}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x20040001) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0x7fffffff}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) chroot(&(0x7f0000000940)='./file0/file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0/file0\x00', 0x121440, 0x14a) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, r7, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x200}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xff74}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7fffffff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x400}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010844}, 0x8011) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8811}, 0x40000) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x64, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x6, 0x400]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x20}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x880) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbbb, 0x6b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x48090}, 0x814) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4014}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c845}, 0x81) 08:13:03 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x400800, 0x1) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x22, 0x8, 0x4, 0x18, 0x6, 0xffffff1f, 0x4, 0xd6}}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000140)) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)={0x34, 0x3a, 0xf, 0x1b, 0x9, 0x5, 0x0, 0x31, 0x1}) r1 = accept$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) fsync(r1) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8, 0x3) lsetxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x8, 0x3) r2 = syz_open_dev$usbmon(&(0x7f00000003c0), 0x1, 0x440001) ioctl$FIOCLEX(r2, 0x5451) lsetxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000002600), 0xc414, 0x10100) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000002640), &(0x7f0000002680)=0x4) pwrite64(r1, &(0x7f00000026c0)="d2ec2428c6912591ab5cf43e1ae548923667948a80b1446e66144b806f91a5edec062b1f8f20bc6385f2c5166e66aa954598491b416d315c7f5be792b34ee05666e631a30a3e68152f0b6e76611f4fad2f", 0x51, 0x20) lsetxattr$trusted_overlay_redirect(&(0x7f0000002740)='./file1\x00', &(0x7f0000002780), &(0x7f00000027c0)='./file1\x00', 0x8, 0x1) r4 = signalfd(r1, &(0x7f0000002800)={[0x9]}, 0x8) fstatfs(r4, &(0x7f0000002840)=""/130) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000002900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000002940)={0x0, "0c3e7a3664dc2885b023d7b8ba346ebe"}) 08:13:03 executing program 5: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x1, 0x8, 0x400, 0x6, 0x15fb5f6a, 0x4}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x3b5) r1 = epoll_create(0x9) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x2e8d, 0x67a) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000100)={0x0, 0x2, [0xffff, 0x7, 0xffffffffffffffc1, 0x4, 0x27, 0x4]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x8, 0x101, 0x0, 0x6, 0xf}}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000180)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000001c0)={0xfc90, 0x1, 0x3, 0x1, 0x2, [0x2, 0x98b4, 0x9, 0x6]}) r2 = socket(0x26, 0xa, 0x9) r3 = fcntl$dupfd(r0, 0x0, r2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000200)=0x5, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x408) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x21000, 0x0) io_submit(0x0, 0x1, &(0x7f0000001400)=[&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x599, r0, &(0x7f00000003c0)="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", 0x1000, 0x4, 0x0, 0x2}]) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000001480)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000014c0)) [ 72.643386] audit: type=1400 audit(1663315983.679:6): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:13:03 executing program 4: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x87c0000000000, 0xdf17, 0x6}) r1 = fsmount(r0, 0x0, 0xd) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x8, 0x1, 0xa2, 0x7f, 0x0, 0x1800000, 0x28322, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9c, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x80, 0xfffffffffffff800, 0xffffbb98, 0x2, 0x6, 0x1, 0x20, 0x0, 0x1, 0x0, 0xd1f9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = accept4$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f00000003c0)={{r3}, r4, 0x4, @unused=[0x7, 0x10000, 0x3, 0x8c], @name="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"}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r3, {0x7f}}, './file0\x00'}) perf_event_open(&(0x7f0000001440)={0x4, 0x80, 0x9, 0x6, 0x5, 0x6, 0x0, 0x8, 0x28620, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000001400)}, 0x41622, 0xfffffffffffffffb, 0xfff, 0x0, 0xf62, 0x9, 0x20, 0x0, 0x2, 0x0, 0x101}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r5 = fsmount(r1, 0x0, 0x2) r6 = perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x80, 0x83, 0x20, 0x7f, 0x0, 0x5, 0x84040, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x926, 0xe0}, 0x512c0, 0x4, 0x0, 0x7, 0xa294, 0x6, 0x5, 0x0, 0x7, 0x0, 0x8000}, 0x0, 0x2, r1, 0x1) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f0000001540)=0x1) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, r7) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r9, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2dcf3f2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000880) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r5) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x44, r10, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x47}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40008}, 0xc000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000001840)) dup2(r6, r7) 08:13:03 executing program 6: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x83) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x6, 0x80, 0x101}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x4001, 0x24) recvmsg(r1, &(0x7f0000001400)={&(0x7f0000000100)=@qipcrtr, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/223, 0xdf}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)}], 0x4, &(0x7f0000000400)=""/4096, 0x1000}, 0x10023) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fallocate(r2, 0x40, 0x4, 0x8) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x4000) openat2(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x400800, 0x5c, 0x31}, 0x18) readlinkat(r0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)=""/109, 0x6d) r4 = creat(&(0x7f00000015c0)='./file0\x00', 0xc) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000001600)={0x7fffffff, 0x20, 0xffffffff, 0xffff, 0x9, 0x7}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001680)={0x1c, 0x0, &(0x7f0000001640)=[@increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0xfffffffffffffffd}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000016c0), 0x440400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000001780)={'ip6gre0\x00', &(0x7f0000001700)={'syztnl1\x00', 0x0, 0x2d, 0x3f, 0x1, 0x95, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x700, 0x8, 0xfff, 0x3}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) openat(r6, &(0x7f0000001800)='./file0\x00', 0x40000, 0x84) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0x2, 0x7f, 0x5d74, 0x2}) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000018c0)={0x3, 0x101}) 08:13:03 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x60) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000080), 0x80000) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) close_range(r0, r3, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001100)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/239, 0xef}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/99, 0x63}], 0x5}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000800)=""/246, 0xf6}], 0x1, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/80, 0x50}, {&(0x7f0000000a80)=""/135, 0x87}, {&(0x7f0000000b40)=""/124, 0x7c}], 0x3, &(0x7f0000000c00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/45, 0x2d}, {&(0x7f0000000d40)=""/45, 0x2d}, {&(0x7f0000000d80)=""/195, 0xc3}, {&(0x7f0000000e80)=""/13, 0xd}, {&(0x7f0000000ec0)=""/123, 0x7b}, {&(0x7f0000000f40)=""/141, 0x8d}], 0x6, &(0x7f0000001080)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x5, 0x40002021, &(0x7f0000001240)={0x0, 0x989680}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001280)={{{@in=@broadcast, @in6=@loopback, 0x4e21, 0x81, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, r6}, {0x8, 0x0, 0x2, 0x7d2e, 0x4, 0x59, 0xf6, 0x3}, {0xffffffffffffff34, 0x3, 0x80000000000, 0xbec3}, 0x8, 0x6e6bbc, 0x2, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d2, 0x2b}, 0x2, @in=@multicast2, 0x34ff, 0x2, 0x1, 0x5, 0x7, 0x3, 0x876}}, 0xe8) recvmmsg$unix(r5, &(0x7f0000003d40)=[{{&(0x7f0000001380), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/23, 0x17}, {&(0x7f0000001480)=""/203, 0xcb}, {&(0x7f0000001580)=""/57, 0x39}, {&(0x7f00000015c0)=""/123, 0x7b}, {&(0x7f0000001640)=""/41, 0x29}, {&(0x7f0000001680)=""/225, 0xe1}, {&(0x7f0000001780)=""/252, 0xfc}, {&(0x7f0000001880)=""/101, 0x65}, {&(0x7f0000001900)=""/216, 0xd8}], 0xa, &(0x7f0000001ac0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001bc0)=""/71, 0x47}, {&(0x7f0000001c40)=""/70, 0x46}, {&(0x7f0000001cc0)=""/230, 0xe6}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)=""/24, 0x18}, {&(0x7f0000001e40)=""/128, 0x80}], 0x6, &(0x7f0000001f40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002040)=""/130, 0x82}, {&(0x7f0000002100)=""/204, 0xcc}, {&(0x7f0000002200)=""/145, 0x91}, {&(0x7f00000022c0)=""/72, 0x48}, {&(0x7f0000002340)=""/171, 0xab}], 0x5, &(0x7f0000002480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000002600), 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/54, 0x36}, {&(0x7f00000036c0)=""/229, 0xe5}, {&(0x7f00000037c0)=""/224, 0xe0}, {&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/125, 0x7d}, {&(0x7f00000039c0)=""/28, 0x1c}, {&(0x7f0000003a00)=""/187, 0xbb}], 0x8, &(0x7f0000003b40)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000003c00)=@abs, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003c80)=""/121, 0x79}], 0x1}}], 0x5, 0x12040, &(0x7f0000003e80)) recvmmsg$unix(r8, &(0x7f0000007880)=[{{&(0x7f0000003f80)=@abs, 0x6e, &(0x7f0000004040)=[{&(0x7f0000004000)=""/44, 0x2c}], 0x1, &(0x7f0000004080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/68, 0x44}], 0x1, &(0x7f0000004200)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000004240), 0x6e, &(0x7f0000005400)=[{&(0x7f00000042c0)=""/169, 0xa9}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/91, 0x5b}], 0x3, &(0x7f0000005440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f00000055c0), 0x6e, &(0x7f00000077c0)=[{&(0x7f0000005640)=""/67, 0x43}, {&(0x7f00000056c0)=""/3, 0x3}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/171, 0xab}, {&(0x7f00000067c0)=""/4096, 0x1000}], 0x5, &(0x7f0000007840)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x4, 0x0, &(0x7f0000007980)) perf_event_open(&(0x7f0000003f00)={0x4, 0x80, 0x45, 0x9, 0x9a, 0x8, 0x0, 0x9, 0xa0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x65, 0x1, @perf_bp={&(0x7f0000003ec0)}, 0x4000, 0x9, 0xfffffffa, 0x2, 0x9349, 0x7f, 0x0, 0x0, 0x7ff, 0x0, 0x2}, r13, 0xc, r7, 0x9) getsockopt$SO_TIMESTAMPING(r14, 0x1, 0x25, &(0x7f00000079c0), &(0x7f0000007a00)=0x4) execveat(r14, &(0x7f0000007a40)='./file0\x00', &(0x7f0000007ac0)=[&(0x7f0000007a80)='\x00'], &(0x7f0000007b80)=[&(0x7f0000007b00)='\x00', &(0x7f0000007b40)='\xaa\xaa\xaa\xaa\xaa'], 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r11, 0xc038943b, &(0x7f0000007c00)={0x3, 0x18, '\x00', 0x1, &(0x7f0000007bc0)=[0x0, 0x0, 0x0]}) ioctl$sock_inet_SIOCRTMSG(r12, 0x890d, &(0x7f0000007c80)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x245, 0x0, 0x0, 0x0, 0x8, &(0x7f0000007c40)='veth0_to_hsr\x00', 0xfffffffffffffff7, 0x3, 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000007d00)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) ioctl$FIBMAP(r15, 0x1, &(0x7f0000007d40)=0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007d80)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r9, 0x7fffffff, 0x0, 0x5c6ff049, 0x4, 0x1}, 0x401) [ 73.992480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.995350] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.998366] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.999678] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.001185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.003274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.005103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.005688] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.008800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.013654] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.015065] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.032148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.033703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.043269] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.044983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.047328] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.061071] Bluetooth: hci1: HCI_REQ-0x0c1a [ 74.102390] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.104269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.105552] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.107869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.110052] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.111510] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.113468] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.114742] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.116178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.116889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.120146] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.121724] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.123006] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.130182] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.137313] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.138167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.145249] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.150195] Bluetooth: hci2: HCI_REQ-0x0c1a [ 74.168561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.169105] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.175258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.184324] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.185648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.190797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.191831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.192983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.195415] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.212449] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.213688] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.227319] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.228516] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.229500] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.231655] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.233215] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.234866] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.239649] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.242537] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.246416] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.264860] Bluetooth: hci5: HCI_REQ-0x0c1a [ 76.152463] Bluetooth: hci3: command 0x0409 tx timeout [ 76.153229] Bluetooth: hci1: command 0x0409 tx timeout [ 76.153635] Bluetooth: hci0: command 0x0409 tx timeout [ 76.191017] Bluetooth: hci7: command 0x0409 tx timeout [ 76.191024] Bluetooth: hci2: command 0x0409 tx timeout [ 76.255999] Bluetooth: hci4: command 0x0409 tx timeout [ 76.319039] Bluetooth: hci5: command 0x0409 tx timeout [ 76.319975] Bluetooth: hci6: command 0x0409 tx timeout [ 78.175062] Bluetooth: hci0: command 0x041b tx timeout [ 78.175542] Bluetooth: hci1: command 0x041b tx timeout [ 78.175987] Bluetooth: hci3: command 0x041b tx timeout [ 78.238983] Bluetooth: hci7: command 0x041b tx timeout [ 78.239008] Bluetooth: hci2: command 0x041b tx timeout [ 78.302971] Bluetooth: hci4: command 0x041b tx timeout [ 78.366992] Bluetooth: hci6: command 0x041b tx timeout [ 78.367473] Bluetooth: hci5: command 0x041b tx timeout [ 80.222995] Bluetooth: hci3: command 0x040f tx timeout [ 80.223544] Bluetooth: hci1: command 0x040f tx timeout [ 80.224642] Bluetooth: hci0: command 0x040f tx timeout [ 80.286975] Bluetooth: hci2: command 0x040f tx timeout [ 80.287455] Bluetooth: hci7: command 0x040f tx timeout [ 80.350975] Bluetooth: hci4: command 0x040f tx timeout [ 80.414990] Bluetooth: hci5: command 0x040f tx timeout [ 80.415816] Bluetooth: hci6: command 0x040f tx timeout [ 82.271041] Bluetooth: hci0: command 0x0419 tx timeout [ 82.273397] Bluetooth: hci1: command 0x0419 tx timeout [ 82.273805] Bluetooth: hci3: command 0x0419 tx timeout [ 82.334957] Bluetooth: hci7: command 0x0419 tx timeout [ 82.335434] Bluetooth: hci2: command 0x0419 tx timeout [ 82.398952] Bluetooth: hci4: command 0x0419 tx timeout [ 82.462948] Bluetooth: hci6: command 0x0419 tx timeout [ 82.463430] Bluetooth: hci5: command 0x0419 tx timeout 08:14:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000600)=ANY=[@ANYBLOB="e37df459f12e1afb03754b0e7ed50795558775b218f56e0e0fd3732a3a5fac9afc246415f0fafc6f45b2ee0cb05c4ebb55ac0a892f549ed6cef992c8db727463edcc592f57b3269457d8e09182da3585880b26ab690e4cd607dffa320a0f7a85aeeb05ab6b39ebca0d8dc3a28b1877f5924dcfa01948d8ddf0081f5f30c3f504d92a4841ed41acd4dc3e335800e9117ef29342524c4a0c0753cda0655914532873119518e25a7b69e721ccf667240d9850d7ebaaf51be05469c1a5069cac9ec00d1d1c", @ANYRES32=r0, @ANYBLOB="ffff0000000000002e2f66696c653000"]) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = dup(r6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r9) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x3b8}], 0x1) [ 129.461153] audit: type=1400 audit(1663316040.496:7): avc: denied { open } for pid=3845 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.463956] audit: type=1400 audit(1663316040.497:8): avc: denied { kernel } for pid=3845 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.469751] ------------[ cut here ]------------ [ 129.469789] [ 129.469794] ====================================================== [ 129.469797] WARNING: possible circular locking dependency detected [ 129.469802] 6.0.0-rc5-next-20220915 #1 Not tainted [ 129.469808] ------------------------------------------------------ [ 129.469811] syz-executor.3/3846 is trying to acquire lock: [ 129.469818] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 129.469855] [ 129.469855] but task is already holding lock: [ 129.469858] ffff88800e367c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.469886] [ 129.469886] which lock already depends on the new lock. [ 129.469886] [ 129.469892] [ 129.469892] the existing dependency chain (in reverse order) is: [ 129.469895] [ 129.469895] -> #3 (&ctx->lock){....}-{2:2}: [ 129.469909] _raw_spin_lock+0x2a/0x40 [ 129.469926] __perf_event_task_sched_out+0x53b/0x18d0 [ 129.469938] __schedule+0xedd/0x2470 [ 129.469949] schedule+0xda/0x1b0 [ 129.469959] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.469978] syscall_exit_to_user_mode+0x19/0x40 [ 129.469996] do_syscall_64+0x48/0x90 [ 129.470010] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.470028] [ 129.470028] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 129.470041] _raw_spin_lock_nested+0x30/0x40 [ 129.470056] raw_spin_rq_lock_nested+0x1e/0x30 [ 129.470069] task_fork_fair+0x63/0x4d0 [ 129.470086] sched_cgroup_fork+0x3d0/0x540 [ 129.470099] copy_process+0x4183/0x6e20 [ 129.470110] kernel_clone+0xe7/0x890 [ 129.470119] user_mode_thread+0xad/0xf0 [ 129.470129] rest_init+0x24/0x250 [ 129.470145] arch_call_rest_init+0xf/0x14 [ 129.470157] start_kernel+0x4c1/0x4e6 [ 129.470167] secondary_startup_64_no_verify+0xe0/0xeb [ 129.470182] [ 129.470182] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 129.470195] _raw_spin_lock_irqsave+0x39/0x60 [ 129.470210] try_to_wake_up+0xab/0x1920 [ 129.470223] up+0x75/0xb0 [ 129.470234] __up_console_sem+0x6e/0x80 [ 129.470249] console_unlock+0x46a/0x590 [ 129.470265] vt_ioctl+0x2822/0x2ca0 [ 129.470278] tty_ioctl+0x7c4/0x1700 [ 129.470289] __x64_sys_ioctl+0x19a/0x210 [ 129.470305] do_syscall_64+0x3b/0x90 [ 129.470318] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.470335] [ 129.470335] -> #0 ((console_sem).lock){....}-{2:2}: [ 129.470348] __lock_acquire+0x2a02/0x5e70 [ 129.470364] lock_acquire+0x1a2/0x530 [ 129.470380] _raw_spin_lock_irqsave+0x39/0x60 [ 129.470394] down_trylock+0xe/0x70 [ 129.470406] __down_trylock_console_sem+0x3b/0xd0 [ 129.470422] vprintk_emit+0x16b/0x560 [ 129.470438] vprintk+0x84/0xa0 [ 129.470454] _printk+0xba/0xf1 [ 129.470471] report_bug.cold+0x72/0xab [ 129.470484] handle_bug+0x3c/0x70 [ 129.470497] exc_invalid_op+0x14/0x50 [ 129.470510] asm_exc_invalid_op+0x16/0x20 [ 129.470526] group_sched_out.part.0+0x2c7/0x460 [ 129.470536] ctx_sched_out+0x8f1/0xc10 [ 129.470546] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.470558] __schedule+0xedd/0x2470 [ 129.470568] schedule+0xda/0x1b0 [ 129.470578] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.470596] syscall_exit_to_user_mode+0x19/0x40 [ 129.470613] do_syscall_64+0x48/0x90 [ 129.470626] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.470643] [ 129.470643] other info that might help us debug this: [ 129.470643] [ 129.470645] Chain exists of: [ 129.470645] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 129.470645] [ 129.470660] Possible unsafe locking scenario: [ 129.470660] [ 129.470663] CPU0 CPU1 [ 129.470665] ---- ---- [ 129.470667] lock(&ctx->lock); [ 129.470673] lock(&rq->__lock); [ 129.470679] lock(&ctx->lock); [ 129.470686] lock((console_sem).lock); [ 129.470691] [ 129.470691] *** DEADLOCK *** [ 129.470691] [ 129.470693] 2 locks held by syz-executor.3/3846: [ 129.470700] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 129.470726] #1: ffff88800e367c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.470753] [ 129.470753] stack backtrace: [ 129.470756] CPU: 0 PID: 3846 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220915 #1 [ 129.470769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.470777] Call Trace: [ 129.470781] [ 129.470786] dump_stack_lvl+0x8b/0xb3 [ 129.470800] check_noncircular+0x263/0x2e0 [ 129.470817] ? format_decode+0x26c/0xb50 [ 129.470832] ? print_circular_bug+0x450/0x450 [ 129.470848] ? enable_ptr_key_workfn+0x20/0x20 [ 129.470862] ? __lockdep_reset_lock+0x180/0x180 [ 129.470879] ? format_decode+0x26c/0xb50 [ 129.470894] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 129.470911] __lock_acquire+0x2a02/0x5e70 [ 129.470932] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 129.470954] lock_acquire+0x1a2/0x530 [ 129.470970] ? down_trylock+0xe/0x70 [ 129.470985] ? rcu_read_unlock+0x40/0x40 [ 129.471001] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 129.471022] ? vprintk+0x84/0xa0 [ 129.471039] _raw_spin_lock_irqsave+0x39/0x60 [ 129.471055] ? down_trylock+0xe/0x70 [ 129.471068] down_trylock+0xe/0x70 [ 129.471081] ? vprintk+0x84/0xa0 [ 129.471098] __down_trylock_console_sem+0x3b/0xd0 [ 129.471115] vprintk_emit+0x16b/0x560 [ 129.471131] ? lock_downgrade+0x6d0/0x6d0 [ 129.471149] vprintk+0x84/0xa0 [ 129.471166] _printk+0xba/0xf1 [ 129.471183] ? record_print_text.cold+0x16/0x16 [ 129.471203] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 129.471216] ? lock_downgrade+0x6d0/0x6d0 [ 129.471234] ? report_bug.cold+0x66/0xab [ 129.471248] ? group_sched_out.part.0+0x2c7/0x460 [ 129.471259] report_bug.cold+0x72/0xab [ 129.471274] handle_bug+0x3c/0x70 [ 129.471288] exc_invalid_op+0x14/0x50 [ 129.471303] asm_exc_invalid_op+0x16/0x20 [ 129.471320] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.471333] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.471344] RSP: 0018:ffff88800feffc48 EFLAGS: 00010006 [ 129.471354] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.471361] RDX: ffff88803efc9ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 129.471369] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 129.471376] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e367c00 [ 129.471384] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 129.471395] ? group_sched_out.part.0+0x2c7/0x460 [ 129.471408] ? group_sched_out.part.0+0x2c7/0x460 [ 129.471421] ctx_sched_out+0x8f1/0xc10 [ 129.471433] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.471449] ? lock_is_held_type+0xd7/0x130 [ 129.471467] ? __perf_cgroup_move+0x160/0x160 [ 129.471479] ? set_next_entity+0x304/0x550 [ 129.471496] ? update_curr+0x267/0x740 [ 129.471514] ? lock_is_held_type+0xd7/0x130 [ 129.471532] __schedule+0xedd/0x2470 [ 129.471546] ? io_schedule_timeout+0x150/0x150 [ 129.471559] ? __x64_sys_futex_time32+0x480/0x480 [ 129.471573] schedule+0xda/0x1b0 [ 129.471584] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.471604] syscall_exit_to_user_mode+0x19/0x40 [ 129.471622] do_syscall_64+0x48/0x90 [ 129.471636] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.471653] RIP: 0033:0x7f25c7297b19 [ 129.471662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.471673] RSP: 002b:00007f25c480d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.471684] RAX: 0000000000000001 RBX: 00007f25c73aaf68 RCX: 00007f25c7297b19 [ 129.471691] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f25c73aaf6c [ 129.471698] RBP: 00007f25c73aaf60 R08: 000000000000000e R09: 0000000000000000 [ 129.471706] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f25c73aaf6c [ 129.471713] R13: 00007ffd1a49f58f R14: 00007f25c480d300 R15: 0000000000022000 [ 129.471726] [ 129.529233] WARNING: CPU: 0 PID: 3846 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 129.529941] Modules linked in: [ 129.530182] CPU: 0 PID: 3846 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220915 #1 [ 129.530795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.531639] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.532046] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.533419] RSP: 0018:ffff88800feffc48 EFLAGS: 00010006 [ 129.533845] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.534387] RDX: ffff88803efc9ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 129.534912] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 129.535455] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e367c00 [ 129.535987] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 129.536525] FS: 00007f25c480d700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 129.537133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.537558] CR2: 00007faef57656f4 CR3: 000000001b86c000 CR4: 0000000000350ef0 [ 129.538111] Call Trace: [ 129.538301] [ 129.538471] ctx_sched_out+0x8f1/0xc10 [ 129.538771] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.539179] ? lock_is_held_type+0xd7/0x130 [ 129.539510] ? __perf_cgroup_move+0x160/0x160 [ 129.539851] ? set_next_entity+0x304/0x550 [ 129.540181] ? update_curr+0x267/0x740 [ 129.540496] ? lock_is_held_type+0xd7/0x130 [ 129.540833] __schedule+0xedd/0x2470 [ 129.541127] ? io_schedule_timeout+0x150/0x150 [ 129.541477] ? __x64_sys_futex_time32+0x480/0x480 [ 129.541861] schedule+0xda/0x1b0 [ 129.542128] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.542510] syscall_exit_to_user_mode+0x19/0x40 [ 129.542889] do_syscall_64+0x48/0x90 [ 129.543179] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.543572] RIP: 0033:0x7f25c7297b19 [ 129.543855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.545238] RSP: 002b:00007f25c480d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.545806] RAX: 0000000000000001 RBX: 00007f25c73aaf68 RCX: 00007f25c7297b19 [ 129.546339] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f25c73aaf6c [ 129.546871] RBP: 00007f25c73aaf60 R08: 000000000000000e R09: 0000000000000000 [ 129.547401] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f25c73aaf6c [ 129.547943] R13: 00007ffd1a49f58f R14: 00007f25c480d300 R15: 0000000000022000 [ 129.548481] [ 129.548657] irq event stamp: 4502 [ 129.548920] hardirqs last enabled at (4501): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 129.549646] hardirqs last disabled at (4502): [] __schedule+0x1225/0x2470 [ 129.550271] softirqs last enabled at (4176): [] __irq_exit_rcu+0x11b/0x180 [ 129.550940] softirqs last disabled at (4145): [] __irq_exit_rcu+0x11b/0x180 [ 129.551566] ---[ end trace 0000000000000000 ]--- [ 129.842793] audit: type=1400 audit(1663316040.878:9): avc: denied { write } for pid=3845 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:14:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3b61, 0x0, 0x2, 0x278}, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="b0cabfc4e6e8db1f6046e8f1816d2210267bfcfa857fbd89192a1d2b2d0ba19e067d9a594886f2e5b09bd54fa57a6e280fd454b178d17b86c4595133ce0c923e"]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x430840, 0x2) 08:14:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000600)=ANY=[@ANYBLOB="e37df459f12e1afb03754b0e7ed50795558775b218f56e0e0fd3732a3a5fac9afc246415f0fafc6f45b2ee0cb05c4ebb55ac0a892f549ed6cef992c8db727463edcc592f57b3269457d8e09182da3585880b26ab690e4cd607dffa320a0f7a85aeeb05ab6b39ebca0d8dc3a28b1877f5924dcfa01948d8ddf0081f5f30c3f504d92a4841ed41acd4dc3e335800e9117ef29342524c4a0c0753cda0655914532873119518e25a7b69e721ccf667240d9850d7ebaaf51be05469c1a5069cac9ec00d1d1c", @ANYRES32=r0, @ANYBLOB="ffff0000000000002e2f66696c653000"]) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = dup(r6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r9) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x3b8}], 0x1) 08:14:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000600)=ANY=[@ANYBLOB="e37df459f12e1afb03754b0e7ed50795558775b218f56e0e0fd3732a3a5fac9afc246415f0fafc6f45b2ee0cb05c4ebb55ac0a892f549ed6cef992c8db727463edcc592f57b3269457d8e09182da3585880b26ab690e4cd607dffa320a0f7a85aeeb05ab6b39ebca0d8dc3a28b1877f5924dcfa01948d8ddf0081f5f30c3f504d92a4841ed41acd4dc3e335800e9117ef29342524c4a0c0753cda0655914532873119518e25a7b69e721ccf667240d9850d7ebaaf51be05469c1a5069cac9ec00d1d1c", @ANYRES32=r0, @ANYBLOB="ffff0000000000002e2f66696c653000"]) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = dup(r6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r9) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x3b8}], 0x1) 08:14:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3b61, 0x0, 0x2, 0x278}, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="b0cabfc4e6e8db1f6046e8f1816d2210267bfcfa857fbd89192a1d2b2d0ba19e067d9a594886f2e5b09bd54fa57a6e280fd454b178d17b86c4595133ce0c923e"]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x430840, 0x2) 08:14:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3b61, 0x0, 0x2, 0x278}, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="b0cabfc4e6e8db1f6046e8f1816d2210267bfcfa857fbd89192a1d2b2d0ba19e067d9a594886f2e5b09bd54fa57a6e280fd454b178d17b86c4595133ce0c923e"]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x430840, 0x2) 08:14:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3b61, 0x0, 0x2, 0x278}, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="b0cabfc4e6e8db1f6046e8f1816d2210267bfcfa857fbd89192a1d2b2d0ba19e067d9a594886f2e5b09bd54fa57a6e280fd454b178d17b86c4595133ce0c923e"]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x430840, 0x2) 08:14:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3b61, 0x0, 0x2, 0x278}, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="b0cabfc4e6e8db1f6046e8f1816d2210267bfcfa857fbd89192a1d2b2d0ba19e067d9a594886f2e5b09bd54fa57a6e280fd454b178d17b86c4595133ce0c923e"]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x430840, 0x2) VM DIAGNOSIS: 08:14:00 Registers: info registers vcpu 0 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b29f1 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88800feff698 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006e R11=0000000000000001 R12=000000000000006e R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b29e0 RIP=ffffffff822b2a49 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f25c480d700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faef57656f4 CR3=000000001b86c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f25c737e7c0 00007f25c737e7c8 YMM02=0000000000000000 0000000000000000 00007f25c737e7e0 00007f25c737e7c0 YMM03=0000000000000000 0000000000000000 00007f25c737e7c8 00007f25c737e7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=fffff9400036751f RBX=fffff9400036751f RCX=ffffffff815b5b71 RDX=fffff9400036751f RSI=0000000000000004 RDI=ffffea0001b3a8f4 RBP=fffff9400036751e RSP=ffff88801c9f7b28 R8 =0000000000000001 R9 =ffffea0001b3a8f7 R10=fffff9400036751e R11=0000000000000001 R12=0000000000000000 R13=dffffc0000000000 R14=ffffea0001b3a8f4 R15=00000000000000ff RIP=ffffffff8178871d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd67aa17540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd67ab34710 CR3=0000000040cec000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffff00ffffffffff ffffffffffff00ff YMM02=0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000470035 YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000