Warning: Permanently added '[localhost]:7557' (ECDSA) to the list of known hosts. 2022/09/19 07:37:28 fuzzer started 2022/09/19 07:37:29 dialing manager at localhost:36051 syzkaller login: [ 40.747828] cgroup: Unknown subsys name 'net' [ 40.861952] cgroup: Unknown subsys name 'rlimit' 2022/09/19 07:37:42 syscalls: 2215 2022/09/19 07:37:42 code coverage: enabled 2022/09/19 07:37:42 comparison tracing: enabled 2022/09/19 07:37:42 extra coverage: enabled 2022/09/19 07:37:42 setuid sandbox: enabled 2022/09/19 07:37:42 namespace sandbox: enabled 2022/09/19 07:37:42 Android sandbox: enabled 2022/09/19 07:37:42 fault injection: enabled 2022/09/19 07:37:42 leak checking: enabled 2022/09/19 07:37:42 net packet injection: enabled 2022/09/19 07:37:42 net device setup: enabled 2022/09/19 07:37:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/19 07:37:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/19 07:37:42 USB emulation: enabled 2022/09/19 07:37:42 hci packet injection: enabled 2022/09/19 07:37:42 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220916) 2022/09/19 07:37:42 802.15.4 emulation: enabled 2022/09/19 07:37:42 fetching corpus: 50, signal 30550/32340 (executing program) 2022/09/19 07:37:42 fetching corpus: 100, signal 39355/42800 (executing program) 2022/09/19 07:37:43 fetching corpus: 150, signal 54662/59526 (executing program) 2022/09/19 07:37:43 fetching corpus: 200, signal 60872/67184 (executing program) 2022/09/19 07:37:43 fetching corpus: 250, signal 66448/74184 (executing program) 2022/09/19 07:37:43 fetching corpus: 300, signal 70631/79751 (executing program) 2022/09/19 07:37:43 fetching corpus: 350, signal 76804/87165 (executing program) 2022/09/19 07:37:43 fetching corpus: 400, signal 80978/92577 (executing program) 2022/09/19 07:37:43 fetching corpus: 450, signal 83105/95971 (executing program) 2022/09/19 07:37:43 fetching corpus: 500, signal 86505/100594 (executing program) 2022/09/19 07:37:43 fetching corpus: 550, signal 89327/104609 (executing program) 2022/09/19 07:37:44 fetching corpus: 600, signal 92720/109131 (executing program) 2022/09/19 07:37:44 fetching corpus: 650, signal 95384/112952 (executing program) 2022/09/19 07:37:44 fetching corpus: 700, signal 97637/116306 (executing program) 2022/09/19 07:37:44 fetching corpus: 750, signal 99642/119427 (executing program) 2022/09/19 07:37:44 fetching corpus: 800, signal 104288/124850 (executing program) 2022/09/19 07:37:44 fetching corpus: 850, signal 107535/129001 (executing program) 2022/09/19 07:37:44 fetching corpus: 900, signal 110266/132636 (executing program) 2022/09/19 07:37:44 fetching corpus: 950, signal 112526/135829 (executing program) 2022/09/19 07:37:45 fetching corpus: 1000, signal 115596/139691 (executing program) 2022/09/19 07:37:45 fetching corpus: 1050, signal 119363/144102 (executing program) 2022/09/19 07:37:45 fetching corpus: 1100, signal 120964/146619 (executing program) 2022/09/19 07:37:45 fetching corpus: 1150, signal 124199/150507 (executing program) 2022/09/19 07:37:45 fetching corpus: 1200, signal 127523/154448 (executing program) 2022/09/19 07:37:45 fetching corpus: 1250, signal 129629/157287 (executing program) 2022/09/19 07:37:45 fetching corpus: 1300, signal 131790/160131 (executing program) 2022/09/19 07:37:46 fetching corpus: 1350, signal 135068/163890 (executing program) 2022/09/19 07:37:46 fetching corpus: 1400, signal 135958/165704 (executing program) 2022/09/19 07:37:46 fetching corpus: 1450, signal 136853/167470 (executing program) 2022/09/19 07:37:46 fetching corpus: 1500, signal 137914/169388 (executing program) 2022/09/19 07:37:46 fetching corpus: 1550, signal 140627/172633 (executing program) 2022/09/19 07:37:46 fetching corpus: 1600, signal 142117/174813 (executing program) 2022/09/19 07:37:46 fetching corpus: 1650, signal 145089/178219 (executing program) 2022/09/19 07:37:46 fetching corpus: 1700, signal 146230/180092 (executing program) 2022/09/19 07:37:46 fetching corpus: 1750, signal 147331/181937 (executing program) 2022/09/19 07:37:47 fetching corpus: 1800, signal 148767/184017 (executing program) 2022/09/19 07:37:47 fetching corpus: 1850, signal 150580/186303 (executing program) 2022/09/19 07:37:47 fetching corpus: 1900, signal 151921/188319 (executing program) 2022/09/19 07:37:47 fetching corpus: 1950, signal 153096/190157 (executing program) 2022/09/19 07:37:47 fetching corpus: 2000, signal 154611/192141 (executing program) 2022/09/19 07:37:47 fetching corpus: 2050, signal 155688/193882 (executing program) 2022/09/19 07:37:47 fetching corpus: 2100, signal 156786/195617 (executing program) 2022/09/19 07:37:47 fetching corpus: 2150, signal 157907/197327 (executing program) 2022/09/19 07:37:47 fetching corpus: 2200, signal 159389/199262 (executing program) 2022/09/19 07:37:48 fetching corpus: 2250, signal 160302/200779 (executing program) 2022/09/19 07:37:48 fetching corpus: 2300, signal 161228/202288 (executing program) 2022/09/19 07:37:48 fetching corpus: 2350, signal 162045/203721 (executing program) 2022/09/19 07:37:48 fetching corpus: 2400, signal 163143/205340 (executing program) 2022/09/19 07:37:48 fetching corpus: 2450, signal 164289/206979 (executing program) 2022/09/19 07:37:48 fetching corpus: 2500, signal 165583/208755 (executing program) 2022/09/19 07:37:48 fetching corpus: 2550, signal 166824/210436 (executing program) 2022/09/19 07:37:49 fetching corpus: 2600, signal 168159/212160 (executing program) 2022/09/19 07:37:49 fetching corpus: 2650, signal 168842/213418 (executing program) 2022/09/19 07:37:49 fetching corpus: 2700, signal 170089/215036 (executing program) 2022/09/19 07:37:49 fetching corpus: 2750, signal 170910/216362 (executing program) 2022/09/19 07:37:49 fetching corpus: 2800, signal 171729/217687 (executing program) 2022/09/19 07:37:49 fetching corpus: 2850, signal 172824/219192 (executing program) 2022/09/19 07:37:49 fetching corpus: 2900, signal 173959/220711 (executing program) 2022/09/19 07:37:49 fetching corpus: 2950, signal 175002/222146 (executing program) 2022/09/19 07:37:50 fetching corpus: 3000, signal 176515/223827 (executing program) 2022/09/19 07:37:50 fetching corpus: 3050, signal 177141/224946 (executing program) 2022/09/19 07:37:50 fetching corpus: 3100, signal 178265/226308 (executing program) 2022/09/19 07:37:50 fetching corpus: 3150, signal 179282/227711 (executing program) 2022/09/19 07:37:50 fetching corpus: 3200, signal 180314/229042 (executing program) 2022/09/19 07:37:50 fetching corpus: 3250, signal 180952/230176 (executing program) 2022/09/19 07:37:50 fetching corpus: 3300, signal 181591/231312 (executing program) 2022/09/19 07:37:50 fetching corpus: 3350, signal 182872/232800 (executing program) 2022/09/19 07:37:50 fetching corpus: 3400, signal 184083/234187 (executing program) 2022/09/19 07:37:50 fetching corpus: 3450, signal 184895/235365 (executing program) 2022/09/19 07:37:51 fetching corpus: 3500, signal 185465/236311 (executing program) 2022/09/19 07:37:51 fetching corpus: 3550, signal 186137/237358 (executing program) 2022/09/19 07:37:51 fetching corpus: 3600, signal 187214/238583 (executing program) 2022/09/19 07:37:51 fetching corpus: 3650, signal 188027/239733 (executing program) 2022/09/19 07:37:51 fetching corpus: 3700, signal 188988/240937 (executing program) 2022/09/19 07:37:51 fetching corpus: 3750, signal 190091/242153 (executing program) 2022/09/19 07:37:52 fetching corpus: 3800, signal 190773/243119 (executing program) 2022/09/19 07:37:52 fetching corpus: 3850, signal 191780/244294 (executing program) 2022/09/19 07:37:52 fetching corpus: 3900, signal 192489/245333 (executing program) 2022/09/19 07:37:52 fetching corpus: 3950, signal 193383/246352 (executing program) 2022/09/19 07:37:52 fetching corpus: 4000, signal 194056/247321 (executing program) 2022/09/19 07:37:53 fetching corpus: 4050, signal 195139/248480 (executing program) 2022/09/19 07:37:53 fetching corpus: 4100, signal 195657/249399 (executing program) 2022/09/19 07:37:53 fetching corpus: 4150, signal 196070/250272 (executing program) 2022/09/19 07:37:53 fetching corpus: 4200, signal 196781/251239 (executing program) 2022/09/19 07:37:53 fetching corpus: 4250, signal 197515/252161 (executing program) 2022/09/19 07:37:53 fetching corpus: 4300, signal 198690/253288 (executing program) 2022/09/19 07:37:53 fetching corpus: 4350, signal 199351/254205 (executing program) 2022/09/19 07:37:53 fetching corpus: 4400, signal 200439/255229 (executing program) 2022/09/19 07:37:54 fetching corpus: 4450, signal 201719/256393 (executing program) 2022/09/19 07:37:54 fetching corpus: 4500, signal 202529/257396 (executing program) 2022/09/19 07:37:54 fetching corpus: 4550, signal 203244/258275 (executing program) 2022/09/19 07:37:54 fetching corpus: 4600, signal 203874/259089 (executing program) 2022/09/19 07:37:54 fetching corpus: 4650, signal 204387/259865 (executing program) 2022/09/19 07:37:54 fetching corpus: 4700, signal 205003/260683 (executing program) 2022/09/19 07:37:54 fetching corpus: 4750, signal 206754/261857 (executing program) 2022/09/19 07:37:54 fetching corpus: 4800, signal 207084/262591 (executing program) 2022/09/19 07:37:55 fetching corpus: 4850, signal 208126/263534 (executing program) 2022/09/19 07:37:55 fetching corpus: 4900, signal 208943/264383 (executing program) 2022/09/19 07:37:55 fetching corpus: 4950, signal 209616/265152 (executing program) 2022/09/19 07:37:55 fetching corpus: 5000, signal 210317/265941 (executing program) 2022/09/19 07:37:55 fetching corpus: 5050, signal 211233/266820 (executing program) 2022/09/19 07:37:55 fetching corpus: 5100, signal 211764/267490 (executing program) 2022/09/19 07:37:55 fetching corpus: 5150, signal 212036/268089 (executing program) 2022/09/19 07:37:56 fetching corpus: 5200, signal 212665/268844 (executing program) 2022/09/19 07:37:56 fetching corpus: 5250, signal 213284/269543 (executing program) 2022/09/19 07:37:56 fetching corpus: 5300, signal 213764/270232 (executing program) 2022/09/19 07:37:56 fetching corpus: 5350, signal 214284/270884 (executing program) 2022/09/19 07:37:56 fetching corpus: 5400, signal 214756/271577 (executing program) 2022/09/19 07:37:56 fetching corpus: 5450, signal 215417/272245 (executing program) 2022/09/19 07:37:56 fetching corpus: 5500, signal 216363/273027 (executing program) 2022/09/19 07:37:56 fetching corpus: 5550, signal 217064/273727 (executing program) 2022/09/19 07:37:57 fetching corpus: 5600, signal 217430/274280 (executing program) 2022/09/19 07:37:57 fetching corpus: 5650, signal 218084/274901 (executing program) 2022/09/19 07:37:57 fetching corpus: 5700, signal 218584/275486 (executing program) 2022/09/19 07:37:57 fetching corpus: 5750, signal 218973/276049 (executing program) 2022/09/19 07:37:57 fetching corpus: 5800, signal 219831/276706 (executing program) 2022/09/19 07:37:57 fetching corpus: 5850, signal 220775/277406 (executing program) 2022/09/19 07:37:57 fetching corpus: 5900, signal 220951/277902 (executing program) 2022/09/19 07:37:57 fetching corpus: 5950, signal 221369/278438 (executing program) 2022/09/19 07:37:58 fetching corpus: 6000, signal 221858/279016 (executing program) 2022/09/19 07:37:58 fetching corpus: 6050, signal 222203/279547 (executing program) 2022/09/19 07:37:58 fetching corpus: 6100, signal 222749/280117 (executing program) 2022/09/19 07:37:58 fetching corpus: 6150, signal 223469/280696 (executing program) 2022/09/19 07:37:58 fetching corpus: 6200, signal 224690/281317 (executing program) 2022/09/19 07:37:58 fetching corpus: 6250, signal 225229/281860 (executing program) 2022/09/19 07:37:58 fetching corpus: 6300, signal 225456/282325 (executing program) 2022/09/19 07:37:58 fetching corpus: 6350, signal 226392/282836 (executing program) 2022/09/19 07:37:59 fetching corpus: 6400, signal 227232/283372 (executing program) 2022/09/19 07:37:59 fetching corpus: 6450, signal 227841/283873 (executing program) 2022/09/19 07:37:59 fetching corpus: 6500, signal 228280/284372 (executing program) 2022/09/19 07:37:59 fetching corpus: 6550, signal 228713/284836 (executing program) 2022/09/19 07:37:59 fetching corpus: 6600, signal 229248/285358 (executing program) 2022/09/19 07:37:59 fetching corpus: 6650, signal 229855/285819 (executing program) 2022/09/19 07:37:59 fetching corpus: 6700, signal 230420/286295 (executing program) 2022/09/19 07:37:59 fetching corpus: 6750, signal 230801/286764 (executing program) 2022/09/19 07:38:00 fetching corpus: 6800, signal 231676/287203 (executing program) 2022/09/19 07:38:00 fetching corpus: 6850, signal 232082/287660 (executing program) 2022/09/19 07:38:00 fetching corpus: 6900, signal 232674/288106 (executing program) 2022/09/19 07:38:00 fetching corpus: 6950, signal 233239/288536 (executing program) 2022/09/19 07:38:00 fetching corpus: 7000, signal 233812/288985 (executing program) 2022/09/19 07:38:00 fetching corpus: 7050, signal 234279/289395 (executing program) 2022/09/19 07:38:00 fetching corpus: 7100, signal 234732/289812 (executing program) 2022/09/19 07:38:00 fetching corpus: 7150, signal 235290/289990 (executing program) 2022/09/19 07:38:01 fetching corpus: 7200, signal 235974/290017 (executing program) 2022/09/19 07:38:01 fetching corpus: 7250, signal 236418/290017 (executing program) 2022/09/19 07:38:01 fetching corpus: 7300, signal 236942/290043 (executing program) 2022/09/19 07:38:01 fetching corpus: 7350, signal 237546/290051 (executing program) 2022/09/19 07:38:01 fetching corpus: 7400, signal 238025/290052 (executing program) 2022/09/19 07:38:01 fetching corpus: 7450, signal 238469/290052 (executing program) 2022/09/19 07:38:01 fetching corpus: 7500, signal 239369/290111 (executing program) 2022/09/19 07:38:01 fetching corpus: 7550, signal 239898/290113 (executing program) 2022/09/19 07:38:02 fetching corpus: 7600, signal 240592/290113 (executing program) 2022/09/19 07:38:02 fetching corpus: 7650, signal 240833/290119 (executing program) 2022/09/19 07:38:02 fetching corpus: 7700, signal 241194/290119 (executing program) 2022/09/19 07:38:02 fetching corpus: 7750, signal 241975/290123 (executing program) 2022/09/19 07:38:02 fetching corpus: 7800, signal 242544/290123 (executing program) 2022/09/19 07:38:02 fetching corpus: 7850, signal 243218/290123 (executing program) 2022/09/19 07:38:02 fetching corpus: 7900, signal 243751/290136 (executing program) 2022/09/19 07:38:03 fetching corpus: 7950, signal 244413/290177 (executing program) 2022/09/19 07:38:03 fetching corpus: 8000, signal 245245/290189 (executing program) 2022/09/19 07:38:03 fetching corpus: 8050, signal 245597/290193 (executing program) 2022/09/19 07:38:03 fetching corpus: 8100, signal 246170/290221 (executing program) 2022/09/19 07:38:03 fetching corpus: 8150, signal 246455/290224 (executing program) 2022/09/19 07:38:03 fetching corpus: 8154, signal 246460/290224 (executing program) 2022/09/19 07:38:03 fetching corpus: 8154, signal 246460/290224 (executing program) 2022/09/19 07:38:06 starting 8 fuzzer processes 07:38:06 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bond_slave_0\x00'}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x20) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x12) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv0\x00'}) r1 = syz_io_uring_complete(0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x1, 0x7, [@remote, @multicast, @random="7645fbde5aa1", @link_local, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @empty]}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xffffffffffffffff) r2 = socket(0x0, 0x80000, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r2, 0xff, 0x32, 0x1000}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000140)=0x222700) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xec3, 0x0) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x4a0002, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) timerfd_settime(r5, 0x1, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002440), 0x10000, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x40, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xfff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000002580)=0x5) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) 07:38:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x82000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0xffffff01, 0x0, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r3 = inotify_init1(0x1000) r4 = dup3(r2, r3, 0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) fsetxattr$security_selinux(r5, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:gpg_helper_exec_t:s0\x00', 0x27, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockname$inet6(r5, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000440)=0x1c) readv(r1, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/2, 0x2}, {&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/238, 0xee}, {&(0x7f0000001640)=""/251, 0xfb}, {&(0x7f0000001740)=""/192, 0xc0}, {&(0x7f0000001800)=""/184, 0xb8}, {&(0x7f00000018c0)=""/121, 0x79}, {&(0x7f0000001940)=""/92, 0x5c}], 0x9) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x81240000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x1, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044054}, 0x6000080) r6 = openat(r5, &(0x7f0000001b80)='./file0\x00', 0x1, 0x76) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000001bc0)=0xb0b) inotify_rm_watch(r1, 0x0) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000001c00), &(0x7f0000001c40)=0x8) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000001c80)={{0x210, 0x1ff}, {0x5}, 0x7fff, 0x1}) r7 = openat$cgroup_procs(r4, &(0x7f0000001cc0)='cgroup.procs\x00', 0x2, 0x0) fcntl$getflags(r7, 0xb) getpeername(0xffffffffffffffff, &(0x7f0000001d40)=@x25={0x9, @remote}, &(0x7f0000001dc0)=0x80) 07:38:06 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x0, @dev}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x2, [{}, {}]}, 0x48) r2 = open(&(0x7f0000000200)='./file0\x00', 0x8980, 0x30) openat(r2, &(0x7f0000000240)='./file0\x00', 0x400602, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000280)=0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r3, &(0x7f00000002c0)=@ethernet={0x306, @broadcast}, 0x80) close_range(r0, r3, 0x2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x581500, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0xffffffff}}, './file0\x00'}) fsync(r5) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)='system_u:object_r:modules_object_t:s0\x00', 0x26, 0x3) r6 = socket(0x27, 0x1, 0x7) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000004c0), &(0x7f0000000500)=0x4) openat(r5, &(0x7f0000000540)='./file0\x00', 0x20000, 0x41) 07:38:06 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x10000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x250d8b77290dce84) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x2, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x54}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x6d8, 0x62, 0x4f, 0x81, 0x80000001, 0x1, 0xde1c605, 0x1, 0xff]}]}, 0x60}}, 0x20000084) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0x2, 0x208000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x21012c0}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xbc, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7ff}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x71, 0xa9, @random="4f0ed86d89e464631c4359ad4498f6d0a312b3ee37e854e41db10b4e0b921bce056282c85ed7aac396a9d1d6e8aebde829f19bec60e30fb243c8dab4ffc90eb052f9ab12c13fa50160f27bcf4b4ee01487ac3fc2db1a70c323e1d60a14cadfe92ae9be7fdeccd5a52cf02016a1"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000580)={0x7fff, 0xffffffffffff6cf0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @rand_addr, @initdev}, &(0x7f0000000640)=0xc) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x14, 0x1b, 0x8, 0x6, 0x68, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x8, 0x8, 0xbb7d}}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000840)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x1, 0x37, 0x9, 0x4, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8000, 0x5, 0x2}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x138, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r8 = accept4$unix(r0, &(0x7f0000000b00), &(0x7f0000000b80)=0x6e, 0x800) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r8, 0xf50f, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r9, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x804) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000d00)=0x3, 0x4) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x400, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) [ 77.609532] audit: type=1400 audit(1663573086.106:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:38:06 executing program 4: keyctl$update(0x2, 0x0, &(0x7f0000000000)="4250b57871302289834fa096871d905830a8ac5152d0ec692f8779371e1e2578f7a7e085cd5f9165c3dc893144b00cf883b2a2", 0x33) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "ea2025c87bdcc23d73361f61a0e0f9c0c08381f8c14c98eafb5ca56efdfd748b6dea813ea208053c7ac2c4b7c22ca1e7a22a13b26d6084431213c00067c50af9", 0x13}, 0x48, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x2000) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="2be6654f6051c18a5c3c09b36acad57f2261cb41e94ff388b71da220", 0x1c, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000280)=@chain={'key_or_keyring:', r2}) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x6, 0x50, 0x5, 0xe, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xffffffffffff9a56, 0x7}, 0x1212a, 0x7f, 0xfffff161, 0x7, 0x69, 0x24, 0x8, 0x0, 0x2, 0x0, 0xffffffffffffff80}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000340)='\x00', &(0x7f0000000380)) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="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", 0x1000, r2) keyctl$read(0xb, r4, &(0x7f0000001440)=""/103, 0x67) keyctl$search(0xa, r1, &(0x7f00000014c0)='rxrpc\x00', &(0x7f0000001500)={'syz', 0x1}, r2) r5 = add_key(&(0x7f0000001580)='dns_resolver\x00', &(0x7f00000015c0)={'syz', 0x2}, &(0x7f0000001600)="3aa8a942ee7932d6e0e6dba7baf72f86a89d1e1ba1bc217700343939acaeb20995a7f9a0feda89114cf54fa52400622ea150074de5f4a116df3bd6cc02c3ff8407850171ce6a66ca6d744df2184f0304afd62ce02cd7dca53fbfaec9e746c3784ab63ee0bbda5af38786fe141cf1e87d1c0cd2ebff460d7b24af84f83b6cce362b0841db9b200c96e6969bfcc461d11722791318d635d5eff9faab3b554f5db2c9677c913ee47aba22aca458c9372022b77300bd495aa92704670a98c48282a1", 0xc0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, r5) perf_event_open(&(0x7f00000016c0)={0x3, 0x80, 0xd3, 0xff, 0x2, 0x81, 0x0, 0x8, 0x40114, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x80000001, 0x26}, 0x22c, 0x81, 0x2, 0x0, 0x400, 0x2, 0x0, 0x0, 0x200, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x0) r6 = add_key$keyring(&(0x7f0000001740), &(0x7f0000001780)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$search(0xa, r6, &(0x7f00000017c0)='asymmetric\x00', &(0x7f0000001800)={'syz', 0x3}, r5) add_key$fscrypt_provisioning(&(0x7f0000001840), &(0x7f0000001880)={'syz', 0x1}, &(0x7f00000018c0)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000001940), &(0x7f0000001980)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$setperm(0x5, r4, 0x804) keyctl$assume_authority(0x10, r6) 07:38:06 executing program 6: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'btrfs.', ']!-\'@\x00'}, &(0x7f00000000c0)='(^\x00', 0x3, 0x3) sync_file_range(0xffffffffffffffff, 0x5, 0x2, 0x5) r1 = dup3(0xffffffffffffffff, r0, 0x80000) finit_module(r1, &(0x7f0000000100)='\x00', 0x0) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x8809}, @val={0x0, 0x0, 0x504, 0x4, 0xfffb, 0x400}, @x25={0x0, 0x2, 0x1f, "06a7eb1ee33ce58c9e805bfeae80c725df57211cd49454162a41ef3b9d6c1f081c751076a459d1535938ad8c171aaba030bd303b5e15df3dbf8bc5c6e2c34a46b2c605ee7adce8b9343caa5515137601b18def8531ef592ef90f844f977bd7dbd37ff41bad6ecc5615cd4661757073f933943ce142d3eb6f9d0794a431c064c68ffba1980ebee0e659d2748bf2d892b6128eb38254201e71517830fc8b68"}}, 0xaf) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x208000, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000240)={'ip6gretap0\x00'}) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000280)={0x3, 0x1, 0x20}) r3 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x8, 0x20001) close(r3) r4 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300)="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", 0xfd, r4}, 0x68) ioctl$int_out(r2, 0x5460, &(0x7f0000000480)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f00000004c0)={0x0, 0x5, [0x6, 0x1, 0x2, 0x8, 0x4, 0x7b5]}) ioctl$VT_RELDISP(r2, 0x5605) r5 = openat(r2, &(0x7f0000000500)='./file0\x00', 0x3, 0xa4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) 07:38:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x302, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x44004) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x400d1) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x4, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}]}, 0x30}}, 0x40080) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x79a}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7, 0x0, 0x4, 0xfffffffc, 0xfff]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc080) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000009c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000640)={0x340, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x4}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bee1d0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71ac0a90}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x407bbe7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa180}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8da5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67519f61}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3772}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x632c83da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e61eeba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75ee5073}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32c07de7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67d9}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a483984}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7211798a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x633fab78}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f47}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x251}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6caf6dd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3815c0b2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c0da1a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x695f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb32e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49d542b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70973e83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20e4d599}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x318db2dc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fac3d0a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f551f6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45e777f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46a5a9b3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa9a243b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x447ffb98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2311a342}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c8ab7bf}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3238abea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1483bd8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x195faad9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xad87897}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a40d1e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42dfe9e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1847cc2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64a2eee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x467281de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbbeb092}]}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x240040c1}, 0x20000040) preadv(r2, &(0x7f0000002e00)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/157, 0x9d}, {&(0x7f0000001ac0)=""/141, 0x8d}, {&(0x7f0000001b80)=""/47, 0x2f}, {&(0x7f0000001bc0)=""/242, 0xf2}, {&(0x7f0000001cc0)=""/61, 0x3d}, {&(0x7f0000001d00)=""/229, 0xe5}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x8, 0x20, 0x0) setxattr$security_ima(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), &(0x7f0000002f00)=@md5={0x1, "0a3aae8513ab09f380d27166404d736a"}, 0x11, 0x2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000002f40), 0x8480, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002fc0), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x18, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003500)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000034c0)={&(0x7f0000003200)={0x2b8, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x7fff, 0x40, 0x5, 0x2]}, @NL80211_ATTR_FRAME={0x275, 0x33, @assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="c01aa24a82a4", {0x5, 0x2e0}}, @ver_80211n={0x0, 0x2, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x2020, 0x3e, @default, @val={0x1, 0x6, [{0x5}, {0x36}, {0xc, 0x1}, {0x6, 0x1}, {0x6c}, {0x18}]}, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x5a0, 0x20, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x3c7}}, [{0xdd, 0xdc, "beace0563a51ec9332f4d71c5dfc2272a5798c5fb6aa860a5e5610e517223ca97e24ee9900eee60b1d7cb97384c8c2650dc6ff02b443acebb36b153a40014dd128178e3194fc82d69f34e7f772e13be4a637426535ff3fcb588c4a73860cbd503b40e9b98134dcc3a7051ac61db285b4ff6055e81ff2d64aa54f74f7e4b3e25fb2e0d0e1ee994239b250e1b68cbc1b13a0543acfb682e66816573ef92e5139821d6eae61c810792f625d6f04c3b6f88f5910d4d2e5c4e83e7a9e613e91d8bbcde7723f19edb9c63cf561f91dcf0c2ec3a3540fdbd64bcc482d3f7300"}, {0xdd, 0xc, "2038af194158de94190d723e"}, {0xdd, 0xdc, "0b46b0997156582d688dd028f4813cb4f9a58e37a1ed37922db05e30a6dbbcbb103c32ba1888adc7ff3e9d1eafc5c64f694b909c6f8fb63167c950f39d3dbbbb1255ca0b67b2f2fb855013bc92e91431f267885ff95ad261efdb2b8951e8acfdef48ab9862bbb4d46d8930b1b0a8c156596c700016a37096fb5f793788b1b9ecb51dc5e8fb77632a1ad9680a9af99ad9fe0963c2a8cdb66d75e4d1b72c4690dce961d6a69baf7efcf65afb6360894fcab174c7606edc1a39264153f936917a9ac56f31286ad09381c4fe77b814e13d044bca21d481f83003a64341d7"}, {0xdd, 0x7, "ea3a9c87237237"}, {0xdd, 0x24, "3b76e2f84248162732145fa4ea2c2ae4f28d0a508058da684e752e58cfb651c6ab80eab0"}, {0xdd, 0x30, "e28b1b2f73acd4aab8968b206cf60282d751c2c1378a0939bb9a80936caab25ea11c0ba50dd74bf83e287a11aaf29a66"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x8, 0x1, 0x4]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0x2b8}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000003600)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x9, 0x8001, 0x100, 0x627c}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003640), r0) 07:38:06 executing program 7: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008094}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x1a5040, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa8, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x35}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0xc1}, {0xe0, 0x2}, {0x9, 0x7}, {0x6, 0x7}, {0x1f, 0x4}, {0xf9, 0x5}, {0x7, 0x1}, {0x4, 0x6}, {0x20, 0x1}, {0x9, 0x6}, {0x9, 0x5}, {0x56, 0x4}, {0x98, 0x2}, {0x5, 0x1}, {0x7e, 0x1}, {0x1f, 0x2}, {0xf6, 0x2}, {0x5, 0x5}, {0x3, 0x6}, {0x4, 0x2}, {0x4, 0x4}], "defb1452a1d717f2"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x2, 0x1}, {0xe, 0x4}, {0x0, 0x5}, {0x58, 0x5}, {0x3, 0x7}], "c4cf39f5b2b52963"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x7f, 0x3}, {0x81, 0x2}, {0x3, 0x3}, {0x8}, {0x6}, {0x20, 0x4}, {0x9b, 0x7}], "e6a76fbf8b48d184"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x6, 0x5}, {0x1}, {0x5, 0x5}, {0xe0, 0x6}, {0x8b, 0x4}, {0x0, 0x1}, {0x5, 0x3}, {0x0, 0x6}], "037c09a0b5788427"}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1f0, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0x48801) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc4) sendmsg$nl_generic(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa8, 0x28, 0x2, 0x70bd2d, 0x25dfdbff, {0x7}, [@typed={0xe, 0x2, 0x0, 0x0, @str='/dev/vcsa\x00'}, @generic="fa235de8f73e704a8fa504204708b3ec540c6e0c3e34c780e0dca48ffd3de3c1929c4a4d855ecf08f4fe1df3c007bcaf3f6c65df225b428166ec77f58caa43d32f87166bdc7c8b24134fedbb4100a09a567458f62536a5261267d2cdfad18cc6eb87e8f2a34cd2c49fdfda1decfc27e8d32da7fd07bac0a25677b4b771aad647b8d11e"]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r6) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10008080}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008080) ioctl$sock_ifreq(r6, 0x891e, &(0x7f0000000d00)={'batadv_slave_1\x00', @ifru_hwaddr=@random}) r8 = syz_open_dev$vcsu(&(0x7f0000000d40), 0x6e0f, 0x1) sendmsg$AUDIT_LIST_RULES(r8, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x10, 0x3f5, 0x800, 0x70bd25, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) [ 78.957986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.959752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.968510] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.970116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.971951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.973403] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.974802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.975972] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.978122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.979903] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.981503] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.982676] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.983988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.985042] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.986269] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.987559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.991654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.992954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.994268] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.995306] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.996544] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.997569] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.998912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.001370] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 79.003513] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.005020] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.007011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.011823] Bluetooth: hci5: HCI_REQ-0x0c1a [ 79.017205] Bluetooth: hci2: HCI_REQ-0x0c1a [ 79.028545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.030302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.031896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.033951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.035405] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.039335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.040870] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 79.042553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.044295] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.045787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.047399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.048892] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.050516] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.052400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.054615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.068381] Bluetooth: hci0: HCI_REQ-0x0c1a [ 79.068481] Bluetooth: hci1: HCI_REQ-0x0c1a [ 79.069400] Bluetooth: hci3: HCI_REQ-0x0c1a [ 79.073292] Bluetooth: hci4: HCI_REQ-0x0c1a [ 79.073853] Bluetooth: hci6: HCI_REQ-0x0c1a [ 79.153768] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.156398] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.160390] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.170841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.177319] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 79.180933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.189220] Bluetooth: hci7: HCI_REQ-0x0c1a [ 81.072453] Bluetooth: hci2: command 0x0409 tx timeout [ 81.073271] Bluetooth: hci5: command 0x0409 tx timeout [ 81.137172] Bluetooth: hci6: command 0x0409 tx timeout [ 81.138605] Bluetooth: hci1: command 0x0409 tx timeout [ 81.139041] Bluetooth: hci4: command 0x0409 tx timeout [ 81.139497] Bluetooth: hci3: command 0x0409 tx timeout [ 81.139992] Bluetooth: hci0: command 0x0409 tx timeout [ 81.200163] Bluetooth: hci7: command 0x0409 tx timeout [ 83.120231] Bluetooth: hci5: command 0x041b tx timeout [ 83.121148] Bluetooth: hci2: command 0x041b tx timeout [ 83.184198] Bluetooth: hci0: command 0x041b tx timeout [ 83.185012] Bluetooth: hci3: command 0x041b tx timeout [ 83.188085] Bluetooth: hci4: command 0x041b tx timeout [ 83.188884] Bluetooth: hci1: command 0x041b tx timeout [ 83.192724] Bluetooth: hci6: command 0x041b tx timeout [ 83.248158] Bluetooth: hci7: command 0x041b tx timeout [ 85.168124] Bluetooth: hci2: command 0x040f tx timeout [ 85.168717] Bluetooth: hci5: command 0x040f tx timeout [ 85.233251] Bluetooth: hci6: command 0x040f tx timeout [ 85.233802] Bluetooth: hci1: command 0x040f tx timeout [ 85.235618] Bluetooth: hci4: command 0x040f tx timeout [ 85.236509] Bluetooth: hci3: command 0x040f tx timeout [ 85.237019] Bluetooth: hci0: command 0x040f tx timeout [ 85.296141] Bluetooth: hci7: command 0x040f tx timeout [ 87.216223] Bluetooth: hci5: command 0x0419 tx timeout [ 87.217218] Bluetooth: hci2: command 0x0419 tx timeout [ 87.280310] Bluetooth: hci0: command 0x0419 tx timeout [ 87.281124] Bluetooth: hci3: command 0x0419 tx timeout [ 87.281855] Bluetooth: hci4: command 0x0419 tx timeout [ 87.285540] Bluetooth: hci1: command 0x0419 tx timeout [ 87.286334] Bluetooth: hci6: command 0x0419 tx timeout [ 87.344136] Bluetooth: hci7: command 0x0419 tx timeout [ 132.277481] audit: type=1400 audit(1663573140.774:7): avc: denied { open } for pid=3851 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.287279] audit: type=1400 audit(1663573140.785:8): avc: denied { kernel } for pid=3851 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 07:39:00 executing program 4: io_submit(0x0, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000500), 0x8) process_madvise(r1, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00'}) 07:39:01 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getpgrp(0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') r3 = eventfd2(0x1, 0x0) close(r3) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0x7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001600)=ANY=[@ANYBLOB="00000d4484491d534fa508b46eb28742c1cda5000036010000ecb4f05a8924627cbd7c827740700c750ae2592ad8bddc2e22ad3b5b52c83585b1e07f9a6f208fc3676a2fdd55231cc5ed0c07c9820000", @ANYRES32, @ANYBLOB="000000000066696c653100e4b1449a9566676e2f683fc29a7ee430f93ab0b3c5b5797caa9eb2e1aedf68fba4aea4daa1b2c4f845145448e643b41603278e568a6b7e8ba81c37e73242cd2d815d3b8ea28ff8d1437c6d94ca1ee6f1426d3783b5a6579eb1d60e6ef0fb0218ded85caead628bc7072c14dcde7614528bae68c78c9f4af521c6c447b8d40062357216c73a9654ca8b88e9c072b53026b784f383899558f9232b08c27988fb2d081d86d7ac6ff8a8c5cccb6607cef46a30792dac92a72c8f300134bb4788010e8ed6540f1ba358d5dcd39a2e231f80d6ccf1185f535d5248a10f1121c3775710e82de3736ee2a1741503d67e37f209a4e70b96f678a6ab4c51c820969a7753baf2435e50db761075975a922a4f00cd680f9b441fd7547abc7acf169886531d9dedaebc7261b719e9ba33a5"]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000340)=0xffffffffffffffde) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) mq_timedreceive(r0, &(0x7f0000001540)=""/158, 0x9e, 0x100000001, &(0x7f0000000140)={0x77359400}) sendfile(r1, r0, 0x0, 0x80000001) r4 = creat(&(0x7f0000001480)='./file1\x00', 0x8) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000380)=0x8) clone3(&(0x7f00000014c0)={0xd00, &(0x7f0000000300), 0x0, 0x0, {0x41}, &(0x7f00000003c0)=""/97, 0x61, &(0x7f0000000440)=""/4096, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, {r4}}, 0x58) [ 132.706254] hrtimer: interrupt took 33182 ns [ 132.713912] ------------[ cut here ]------------ [ 132.713943] [ 132.713948] ====================================================== [ 132.713954] WARNING: possible circular locking dependency detected [ 132.713960] 6.0.0-rc5-next-20220916 #1 Not tainted [ 132.713972] ------------------------------------------------------ [ 132.713977] syz-executor.4/3878 is trying to acquire lock: [ 132.713988] ffffffff853fa878 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0xe/0x70 [ 132.714052] [ 132.714052] but task is already holding lock: [ 132.714057] ffff88800e2dd820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 132.714106] [ 132.714106] which lock already depends on the new lock. [ 132.714106] [ 132.714111] [ 132.714111] the existing dependency chain (in reverse order) is: [ 132.714116] [ 132.714116] -> #3 (&ctx->lock){....}-{2:2}: [ 132.714141] _raw_spin_lock+0x2a/0x40 [ 132.714172] __perf_event_task_sched_out+0x53b/0x18d0 [ 132.714194] __schedule+0xedd/0x2470 [ 132.714214] preempt_schedule_common+0x45/0xc0 [ 132.714235] __cond_resched+0x17/0x30 [ 132.714254] __mutex_lock+0xa3/0x14d0 [ 132.714276] __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.714299] do_syscall_64+0x3b/0x90 [ 132.714325] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.714358] [ 132.714358] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 132.714383] _raw_spin_lock_nested+0x30/0x40 [ 132.714412] raw_spin_rq_lock_nested+0x1e/0x30 [ 132.714434] task_fork_fair+0x63/0x4d0 [ 132.714466] sched_cgroup_fork+0x3d0/0x540 [ 132.714492] copy_process+0x4183/0x6e20 [ 132.714511] kernel_clone+0xe7/0x890 [ 132.714528] user_mode_thread+0xad/0xf0 [ 132.714546] rest_init+0x24/0x250 [ 132.714578] arch_call_rest_init+0xf/0x14 [ 132.714599] start_kernel+0x4c1/0x4e6 [ 132.714617] secondary_startup_64_no_verify+0xe0/0xeb [ 132.714642] [ 132.714642] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 132.714667] _raw_spin_lock_irqsave+0x39/0x60 [ 132.714699] try_to_wake_up+0xab/0x1920 [ 132.714725] up+0x75/0xb0 [ 132.714746] __up_console_sem+0x6e/0x80 [ 132.714774] console_unlock+0x46a/0x590 [ 132.714804] vprintk_emit+0x1bd/0x560 [ 132.714835] vprintk+0x84/0xa0 [ 132.714866] _printk+0xba/0xf1 [ 132.714899] kauditd_hold_skb.cold+0x3f/0x4e [ 132.714926] kauditd_send_queue+0x233/0x290 [ 132.714952] kauditd_thread+0x5da/0x9a0 [ 132.714978] kthread+0x2ed/0x3a0 [ 132.715004] ret_from_fork+0x22/0x30 [ 132.715027] [ 132.715027] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 132.715052] __lock_acquire+0x2a02/0x5e70 [ 132.715083] lock_acquire+0x1a2/0x530 [ 132.715113] _raw_spin_lock_irqsave+0x39/0x60 [ 132.715142] down_trylock+0xe/0x70 [ 132.715165] __down_trylock_console_sem+0x3b/0xd0 [ 132.715195] vprintk_emit+0x16b/0x560 [ 132.715226] vprintk+0x84/0xa0 [ 132.715256] _printk+0xba/0xf1 [ 132.715288] report_bug.cold+0x72/0xab [ 132.715312] handle_bug+0x3c/0x70 [ 132.715336] exc_invalid_op+0x14/0x50 [ 132.715362] asm_exc_invalid_op+0x16/0x20 [ 132.715394] group_sched_out.part.0+0x2c7/0x460 [ 132.715413] ctx_sched_out+0x8f1/0xc10 [ 132.715430] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.715474] __schedule+0xedd/0x2470 [ 132.715493] preempt_schedule_common+0x45/0xc0 [ 132.715514] __cond_resched+0x17/0x30 [ 132.715533] __mutex_lock+0xa3/0x14d0 [ 132.715555] __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.715578] do_syscall_64+0x3b/0x90 [ 132.715603] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.715636] [ 132.715636] other info that might help us debug this: [ 132.715636] [ 132.715640] Chain exists of: [ 132.715640] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 132.715640] [ 132.715668] Possible unsafe locking scenario: [ 132.715668] [ 132.715672] CPU0 CPU1 [ 132.715676] ---- ---- [ 132.715680] lock(&ctx->lock); [ 132.715690] lock(&rq->__lock); [ 132.715702] lock(&ctx->lock); [ 132.715713] lock((console_sem).lock); [ 132.715724] [ 132.715724] *** DEADLOCK *** [ 132.715724] [ 132.715727] 2 locks held by syz-executor.4/3878: [ 132.715740] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 132.715788] #1: ffff88800e2dd820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 132.715838] [ 132.715838] stack backtrace: [ 132.715843] CPU: 0 PID: 3878 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220916 #1 [ 132.715866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.715879] Call Trace: [ 132.715885] [ 132.715892] dump_stack_lvl+0x8b/0xb3 [ 132.715920] check_noncircular+0x263/0x2e0 [ 132.715951] ? format_decode+0x26c/0xb50 [ 132.715979] ? print_circular_bug+0x450/0x450 [ 132.716012] ? enable_ptr_key_workfn+0x20/0x20 [ 132.716038] ? __lockdep_reset_lock+0x180/0x180 [ 132.716070] ? format_decode+0x26c/0xb50 [ 132.716100] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 132.716133] __lock_acquire+0x2a02/0x5e70 [ 132.716174] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 132.716216] lock_acquire+0x1a2/0x530 [ 132.716248] ? down_trylock+0xe/0x70 [ 132.716276] ? rcu_read_unlock+0x40/0x40 [ 132.716308] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 132.716348] ? vprintk+0x84/0xa0 [ 132.716382] _raw_spin_lock_irqsave+0x39/0x60 [ 132.716412] ? down_trylock+0xe/0x70 [ 132.716438] down_trylock+0xe/0x70 [ 132.716463] ? vprintk+0x84/0xa0 [ 132.716495] __down_trylock_console_sem+0x3b/0xd0 [ 132.716528] vprintk_emit+0x16b/0x560 [ 132.716560] ? lock_downgrade+0x6d0/0x6d0 [ 132.716595] vprintk+0x84/0xa0 [ 132.716629] _printk+0xba/0xf1 [ 132.716663] ? record_print_text.cold+0x16/0x16 [ 132.716706] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 132.716731] ? lock_downgrade+0x6d0/0x6d0 [ 132.716764] ? report_bug.cold+0x66/0xab [ 132.716792] ? group_sched_out.part.0+0x2c7/0x460 [ 132.716813] report_bug.cold+0x72/0xab [ 132.716842] handle_bug+0x3c/0x70 [ 132.716869] exc_invalid_op+0x14/0x50 [ 132.716897] asm_exc_invalid_op+0x16/0x20 [ 132.716930] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 132.716954] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 132.716975] RSP: 0018:ffff88804174f978 EFLAGS: 00010006 [ 132.716991] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.717005] RDX: ffff888015e3d040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 132.717019] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 132.717033] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e2dd800 [ 132.717046] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 132.717067] ? group_sched_out.part.0+0x2c7/0x460 [ 132.717091] ? group_sched_out.part.0+0x2c7/0x460 [ 132.717115] ctx_sched_out+0x8f1/0xc10 [ 132.717138] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.717167] ? lock_is_held_type+0xd7/0x130 [ 132.717202] ? __perf_cgroup_move+0x160/0x160 [ 132.717224] ? set_next_entity+0x304/0x550 [ 132.717258] ? update_curr+0x267/0x740 [ 132.717293] ? lock_is_held_type+0xd7/0x130 [ 132.717329] __schedule+0xedd/0x2470 [ 132.717354] ? io_schedule_timeout+0x150/0x150 [ 132.717375] ? find_held_lock+0x2c/0x110 [ 132.717406] ? lock_is_held_type+0xd7/0x130 [ 132.717440] ? __cond_resched+0x17/0x30 [ 132.717462] preempt_schedule_common+0x45/0xc0 [ 132.717487] __cond_resched+0x17/0x30 [ 132.717508] __mutex_lock+0xa3/0x14d0 [ 132.717533] ? irqentry_enter+0x26/0x60 [ 132.717566] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.717591] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.717629] ? mutex_lock_io_nested+0x1310/0x1310 [ 132.717654] ? lockdep_hardirqs_on+0x79/0x100 [ 132.717688] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.717730] ? __do_sys_perf_event_open+0x1eb1/0x32c0 [ 132.717759] __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.717789] ? __up_read+0x192/0x730 [ 132.717815] ? perf_compat_ioctl+0x130/0x130 [ 132.717839] ? up_write+0x480/0x480 [ 132.717873] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.717909] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.717947] do_syscall_64+0x3b/0x90 [ 132.717975] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.718009] RIP: 0033:0x7fc287206b19 [ 132.718024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.718045] RSP: 002b:00007fc28477c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 132.718064] RAX: ffffffffffffffda RBX: 00007fc287319f60 RCX: 00007fc287206b19 [ 132.718079] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 132.718093] RBP: 00007fc287260f6d R08: 0000000000000000 R09: 0000000000000000 [ 132.718106] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 132.718119] R13: 00007ffd5eab727f R14: 00007fc28477c300 R15: 0000000000022000 [ 132.718143] [ 132.832949] WARNING: CPU: 0 PID: 3878 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 132.834167] Modules linked in: [ 132.834603] CPU: 0 PID: 3878 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220916 #1 [ 132.835706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.837189] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 132.837909] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 132.840293] RSP: 0018:ffff88804174f978 EFLAGS: 00010006 [ 132.840999] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.841932] RDX: ffff888015e3d040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 132.842879] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 132.843832] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e2dd800 [ 132.844781] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 132.845711] FS: 00007fc28477c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 132.846767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.847537] CR2: 00007f5260c16478 CR3: 0000000040004000 CR4: 0000000000350ef0 [ 132.848496] Call Trace: [ 132.848848] [ 132.849161] ctx_sched_out+0x8f1/0xc10 [ 132.849686] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.850381] ? lock_is_held_type+0xd7/0x130 [ 132.850968] ? __perf_cgroup_move+0x160/0x160 [ 132.851616] ? set_next_entity+0x304/0x550 [ 132.852199] ? update_curr+0x267/0x740 [ 132.852758] ? lock_is_held_type+0xd7/0x130 [ 132.853357] __schedule+0xedd/0x2470 [ 132.853872] ? io_schedule_timeout+0x150/0x150 [ 132.854492] ? find_held_lock+0x2c/0x110 [ 132.855048] ? lock_is_held_type+0xd7/0x130 [ 132.855656] ? __cond_resched+0x17/0x30 [ 132.856198] preempt_schedule_common+0x45/0xc0 [ 132.856825] __cond_resched+0x17/0x30 [ 132.857342] __mutex_lock+0xa3/0x14d0 [ 132.857863] ? irqentry_enter+0x26/0x60 [ 132.858414] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.859111] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.859861] ? mutex_lock_io_nested+0x1310/0x1310 [ 132.860519] ? lockdep_hardirqs_on+0x79/0x100 [ 132.861144] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.861890] ? __do_sys_perf_event_open+0x1eb1/0x32c0 [ 132.862594] __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.863274] ? __up_read+0x192/0x730 [ 132.863783] ? perf_compat_ioctl+0x130/0x130 [ 132.864357] ? up_write+0x480/0x480 [ 132.864842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.865510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.866173] do_syscall_64+0x3b/0x90 [ 132.866656] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.867343] RIP: 0033:0x7fc287206b19 [ 132.867832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.870046] RSP: 002b:00007fc28477c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 132.870976] RAX: ffffffffffffffda RBX: 00007fc287319f60 RCX: 00007fc287206b19 [ 132.871878] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 132.872758] RBP: 00007fc287260f6d R08: 0000000000000000 R09: 0000000000000000 [ 132.873733] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 132.874725] R13: 00007ffd5eab727f R14: 00007fc28477c300 R15: 0000000000022000 [ 132.875740] [ 132.876081] irq event stamp: 872 [ 132.876554] hardirqs last enabled at (871): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.877913] hardirqs last disabled at (872): [] __schedule+0x1225/0x2470 [ 132.879083] softirqs last enabled at (828): [] __irq_exit_rcu+0x11b/0x180 [ 132.880299] softirqs last disabled at (197): [] __irq_exit_rcu+0x11b/0x180 [ 132.881464] ---[ end trace 0000000000000000 ]--- 07:39:01 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x0, @dev}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x2, [{}, {}]}, 0x48) r2 = open(&(0x7f0000000200)='./file0\x00', 0x8980, 0x30) openat(r2, &(0x7f0000000240)='./file0\x00', 0x400602, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000280)=0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r3, &(0x7f00000002c0)=@ethernet={0x306, @broadcast}, 0x80) close_range(r0, r3, 0x2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x581500, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0xffffffff}}, './file0\x00'}) fsync(r5) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)='system_u:object_r:modules_object_t:s0\x00', 0x26, 0x3) r6 = socket(0x27, 0x1, 0x7) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000004c0), &(0x7f0000000500)=0x4) openat(r5, &(0x7f0000000540)='./file0\x00', 0x20000, 0x41) 07:39:01 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x0, @dev}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x2, [{}, {}]}, 0x48) r2 = open(&(0x7f0000000200)='./file0\x00', 0x8980, 0x30) openat(r2, &(0x7f0000000240)='./file0\x00', 0x400602, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000280)=0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r3, &(0x7f00000002c0)=@ethernet={0x306, @broadcast}, 0x80) close_range(r0, r3, 0x2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x581500, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0xffffffff}}, './file0\x00'}) fsync(r5) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)='system_u:object_r:modules_object_t:s0\x00', 0x26, 0x3) r6 = socket(0x27, 0x1, 0x7) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000004c0), &(0x7f0000000500)=0x4) openat(r5, &(0x7f0000000540)='./file0\x00', 0x20000, 0x41) 07:39:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x110) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000500), 0x8) process_madvise(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="314d64504e0c2c19935c5e3e09599307bd464b5b0a730ac6a00570b563b1ae9335e93c486e48b008a3fa8cf63039b2f906c739bf6ac5e94fe3d64010a7e34181a4191523000091ccd89f8599185708e50e8af0c509ecf8e94e14060b629e01e2f8cc8e965c89619f82f3161683079f31970b9c4d4b5649549771f9db73f6c43e714741fe9ef07cafb81a25ccafd477dc279f4a598c123706c00aa458353818f3b814da90f44d59ba8dd03c772ba7eb7efa4b15888c02dbd8d6071d10cefc380dcc731562dc9a2023a37017a430b7b6f6c14cf3b7b0508dca84fd9427400b19", 0xdf}, {&(0x7f0000000300)="e22cd97db5cef694002840aebada4715a7d683f46468daf164b8705bf395adec8afcb3b657b6e67d79e401706686bad5d7c2f77d415ba139e2b453521df60446871d54bb08adb9487de089cb915af6fc1be75ff2fd749b3a4c75f3268f431bbecdbf86c683a8ff0bd1871298c1ee72b7e4f621e031e86b51e02f24697aaf848ce9b7aed770b318be5433de31570b129594002a72643ede8e04e99f5c57e73c1e1ee83135ff72956a6cde057791366f72eeae", 0xb2}], 0x2, 0x12, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000000000000040000000000000006000000020000000200000000000000010000000000000000000080ffffffff060000000000000000000000000000000000000000000000840200000000000000000000000000000900000000000000fdffffff0000000000000000000000000000000000000000020800"/144]) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0x5c}}, 0x40051) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x3ffffff, 0x10001}) 07:39:01 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000001800)=[{&(0x7f0000000600)='*', 0x1}, {&(0x7f0000000700)="fc", 0x1}], 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 07:39:01 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x0, @dev}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x2, [{}, {}]}, 0x48) r2 = open(&(0x7f0000000200)='./file0\x00', 0x8980, 0x30) openat(r2, &(0x7f0000000240)='./file0\x00', 0x400602, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000280)=0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r3, &(0x7f00000002c0)=@ethernet={0x306, @broadcast}, 0x80) close_range(r0, r3, 0x2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x581500, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0xffffffff}}, './file0\x00'}) fsync(r5) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)='system_u:object_r:modules_object_t:s0\x00', 0x26, 0x3) r6 = socket(0x27, 0x1, 0x7) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000004c0), &(0x7f0000000500)=0x4) openat(r5, &(0x7f0000000540)='./file0\x00', 0x20000, 0x41) 07:39:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x20480, 0x35) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x119) VM DIAGNOSIS: 07:39:01 Registers: info registers vcpu 0 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b3251 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88804174f3c8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000072 R11=0000000000000001 R12=0000000000000072 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b3240 RIP=ffffffff822b32a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc28477c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5260c16478 CR3=0000000040004000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=000000000002b080 RCX=0000000000000000 RDX=1ffffffff0a86a67 RSI=ffffffff813fa818 RDI=ffffffff85434f90 RBP=ffffffff8515b8a8 RSP=ffff888017fd7b70 R8 =0000000000000000 R9 =ffffea0001016887 R10=fffff94000202d10 R11=0000000000000001 R12=ffffffff85434f90 R13=0000000000000001 R14=ffff88806cf00000 R15=ffffffff85435338 RIP=ffffffff813fa858 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f23462d6540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2346797008 CR3=0000000017e20000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffff00ffffffffff ffffffffffff00ff YMM02=0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000470035 YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000