Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:12164' (ECDSA) to the list of known hosts. 2022/09/24 20:40:44 fuzzer started 2022/09/24 20:40:44 dialing manager at localhost:38881 syzkaller login: [ 37.629098] cgroup: Unknown subsys name 'net' [ 37.737320] cgroup: Unknown subsys name 'rlimit' 2022/09/24 20:40:58 syscalls: 2215 2022/09/24 20:40:58 code coverage: enabled 2022/09/24 20:40:58 comparison tracing: enabled 2022/09/24 20:40:58 extra coverage: enabled 2022/09/24 20:40:58 setuid sandbox: enabled 2022/09/24 20:40:58 namespace sandbox: enabled 2022/09/24 20:40:58 Android sandbox: enabled 2022/09/24 20:40:58 fault injection: enabled 2022/09/24 20:40:58 leak checking: enabled 2022/09/24 20:40:58 net packet injection: enabled 2022/09/24 20:40:58 net device setup: enabled 2022/09/24 20:40:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/24 20:40:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/24 20:40:58 USB emulation: enabled 2022/09/24 20:40:58 hci packet injection: enabled 2022/09/24 20:40:58 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/24 20:40:58 802.15.4 emulation: enabled 2022/09/24 20:40:59 fetching corpus: 50, signal 21417/23267 (executing program) 2022/09/24 20:40:59 fetching corpus: 100, signal 34562/38038 (executing program) 2022/09/24 20:40:59 fetching corpus: 150, signal 43929/48865 (executing program) 2022/09/24 20:40:59 fetching corpus: 200, signal 48333/54786 (executing program) 2022/09/24 20:40:59 fetching corpus: 250, signal 54047/61894 (executing program) 2022/09/24 20:40:59 fetching corpus: 300, signal 59771/68894 (executing program) 2022/09/24 20:40:59 fetching corpus: 350, signal 63147/73613 (executing program) 2022/09/24 20:40:59 fetching corpus: 400, signal 68169/79867 (executing program) 2022/09/24 20:41:00 fetching corpus: 450, signal 73579/86331 (executing program) 2022/09/24 20:41:00 fetching corpus: 500, signal 76215/90170 (executing program) 2022/09/24 20:41:00 fetching corpus: 550, signal 78608/93730 (executing program) 2022/09/24 20:41:00 fetching corpus: 600, signal 82078/98224 (executing program) 2022/09/24 20:41:00 fetching corpus: 650, signal 85926/103027 (executing program) 2022/09/24 20:41:00 fetching corpus: 700, signal 91836/109515 (executing program) 2022/09/24 20:41:00 fetching corpus: 750, signal 94187/112817 (executing program) 2022/09/24 20:41:00 fetching corpus: 800, signal 96670/116184 (executing program) 2022/09/24 20:41:00 fetching corpus: 850, signal 99531/119879 (executing program) 2022/09/24 20:41:01 fetching corpus: 900, signal 103211/124210 (executing program) 2022/09/24 20:41:01 fetching corpus: 950, signal 105546/127337 (executing program) 2022/09/24 20:41:01 fetching corpus: 1000, signal 107705/130331 (executing program) 2022/09/24 20:41:01 fetching corpus: 1050, signal 109417/132927 (executing program) 2022/09/24 20:41:01 fetching corpus: 1100, signal 113864/137754 (executing program) 2022/09/24 20:41:01 fetching corpus: 1150, signal 115600/140208 (executing program) 2022/09/24 20:41:01 fetching corpus: 1200, signal 117788/143047 (executing program) 2022/09/24 20:41:02 fetching corpus: 1250, signal 119262/145288 (executing program) 2022/09/24 20:41:02 fetching corpus: 1300, signal 121428/148035 (executing program) 2022/09/24 20:41:02 fetching corpus: 1350, signal 123383/150571 (executing program) 2022/09/24 20:41:02 fetching corpus: 1400, signal 125893/153577 (executing program) 2022/09/24 20:41:02 fetching corpus: 1450, signal 127055/155460 (executing program) 2022/09/24 20:41:02 fetching corpus: 1500, signal 128742/157717 (executing program) 2022/09/24 20:41:02 fetching corpus: 1550, signal 129740/159437 (executing program) 2022/09/24 20:41:02 fetching corpus: 1600, signal 131378/161631 (executing program) 2022/09/24 20:41:03 fetching corpus: 1650, signal 133318/163993 (executing program) 2022/09/24 20:41:03 fetching corpus: 1700, signal 135230/166273 (executing program) 2022/09/24 20:41:03 fetching corpus: 1750, signal 137033/168636 (executing program) 2022/09/24 20:41:03 fetching corpus: 1800, signal 138902/170856 (executing program) 2022/09/24 20:41:03 fetching corpus: 1850, signal 140145/172639 (executing program) 2022/09/24 20:41:03 fetching corpus: 1900, signal 140974/174098 (executing program) 2022/09/24 20:41:03 fetching corpus: 1950, signal 142601/176067 (executing program) 2022/09/24 20:41:03 fetching corpus: 2000, signal 143335/177418 (executing program) 2022/09/24 20:41:04 fetching corpus: 2050, signal 144729/179210 (executing program) 2022/09/24 20:41:04 fetching corpus: 2100, signal 146062/180966 (executing program) 2022/09/24 20:41:04 fetching corpus: 2150, signal 146945/182368 (executing program) 2022/09/24 20:41:04 fetching corpus: 2200, signal 148434/184157 (executing program) 2022/09/24 20:41:04 fetching corpus: 2250, signal 150251/186129 (executing program) 2022/09/24 20:41:04 fetching corpus: 2300, signal 151617/187845 (executing program) 2022/09/24 20:41:04 fetching corpus: 2350, signal 153164/189615 (executing program) 2022/09/24 20:41:04 fetching corpus: 2400, signal 153906/190805 (executing program) 2022/09/24 20:41:04 fetching corpus: 2450, signal 155321/192460 (executing program) 2022/09/24 20:41:05 fetching corpus: 2500, signal 156349/193810 (executing program) 2022/09/24 20:41:05 fetching corpus: 2550, signal 157129/195015 (executing program) 2022/09/24 20:41:05 fetching corpus: 2600, signal 158343/196473 (executing program) 2022/09/24 20:41:05 fetching corpus: 2650, signal 159007/197595 (executing program) 2022/09/24 20:41:05 fetching corpus: 2700, signal 159841/198828 (executing program) 2022/09/24 20:41:05 fetching corpus: 2750, signal 160978/200195 (executing program) 2022/09/24 20:41:05 fetching corpus: 2800, signal 161990/201470 (executing program) 2022/09/24 20:41:05 fetching corpus: 2850, signal 163576/203016 (executing program) 2022/09/24 20:41:05 fetching corpus: 2900, signal 164718/204302 (executing program) 2022/09/24 20:41:06 fetching corpus: 2950, signal 165664/205496 (executing program) 2022/09/24 20:41:06 fetching corpus: 3000, signal 166706/206708 (executing program) 2022/09/24 20:41:06 fetching corpus: 3050, signal 167269/207677 (executing program) 2022/09/24 20:41:06 fetching corpus: 3100, signal 168353/208852 (executing program) 2022/09/24 20:41:06 fetching corpus: 3150, signal 169158/209897 (executing program) 2022/09/24 20:41:06 fetching corpus: 3200, signal 170278/211077 (executing program) 2022/09/24 20:41:06 fetching corpus: 3250, signal 171765/212427 (executing program) 2022/09/24 20:41:07 fetching corpus: 3300, signal 172847/213514 (executing program) 2022/09/24 20:41:07 fetching corpus: 3350, signal 173428/214357 (executing program) 2022/09/24 20:41:07 fetching corpus: 3400, signal 174404/215431 (executing program) 2022/09/24 20:41:07 fetching corpus: 3450, signal 175768/216657 (executing program) 2022/09/24 20:41:07 fetching corpus: 3500, signal 176693/217673 (executing program) 2022/09/24 20:41:07 fetching corpus: 3550, signal 178150/218848 (executing program) 2022/09/24 20:41:07 fetching corpus: 3600, signal 178525/219606 (executing program) 2022/09/24 20:41:07 fetching corpus: 3650, signal 180023/220762 (executing program) 2022/09/24 20:41:07 fetching corpus: 3700, signal 180549/221509 (executing program) 2022/09/24 20:41:07 fetching corpus: 3750, signal 181055/222231 (executing program) 2022/09/24 20:41:08 fetching corpus: 3800, signal 181938/223107 (executing program) 2022/09/24 20:41:08 fetching corpus: 3850, signal 182712/223910 (executing program) 2022/09/24 20:41:08 fetching corpus: 3900, signal 183395/224690 (executing program) 2022/09/24 20:41:08 fetching corpus: 3950, signal 183959/225444 (executing program) 2022/09/24 20:41:08 fetching corpus: 4000, signal 184523/226165 (executing program) 2022/09/24 20:41:08 fetching corpus: 4050, signal 185402/226968 (executing program) 2022/09/24 20:41:08 fetching corpus: 4100, signal 186032/227671 (executing program) 2022/09/24 20:41:09 fetching corpus: 4150, signal 186758/228482 (executing program) 2022/09/24 20:41:09 fetching corpus: 4200, signal 187468/229249 (executing program) 2022/09/24 20:41:09 fetching corpus: 4250, signal 188180/229972 (executing program) 2022/09/24 20:41:09 fetching corpus: 4300, signal 189068/230677 (executing program) 2022/09/24 20:41:09 fetching corpus: 4350, signal 190035/231480 (executing program) 2022/09/24 20:41:09 fetching corpus: 4400, signal 190743/232160 (executing program) 2022/09/24 20:41:09 fetching corpus: 4450, signal 191227/232791 (executing program) 2022/09/24 20:41:09 fetching corpus: 4500, signal 191930/233453 (executing program) 2022/09/24 20:41:10 fetching corpus: 4550, signal 192617/234087 (executing program) 2022/09/24 20:41:10 fetching corpus: 4600, signal 193415/234731 (executing program) 2022/09/24 20:41:10 fetching corpus: 4650, signal 193880/235317 (executing program) 2022/09/24 20:41:10 fetching corpus: 4700, signal 194386/235900 (executing program) 2022/09/24 20:41:10 fetching corpus: 4750, signal 195165/236482 (executing program) 2022/09/24 20:41:10 fetching corpus: 4800, signal 195946/237120 (executing program) 2022/09/24 20:41:10 fetching corpus: 4850, signal 196719/237708 (executing program) 2022/09/24 20:41:10 fetching corpus: 4900, signal 197348/238271 (executing program) 2022/09/24 20:41:10 fetching corpus: 4950, signal 198195/238888 (executing program) 2022/09/24 20:41:11 fetching corpus: 5000, signal 198664/239386 (executing program) 2022/09/24 20:41:11 fetching corpus: 5050, signal 199249/239913 (executing program) 2022/09/24 20:41:11 fetching corpus: 5100, signal 199938/240441 (executing program) 2022/09/24 20:41:11 fetching corpus: 5150, signal 200550/240945 (executing program) 2022/09/24 20:41:11 fetching corpus: 5200, signal 200822/241358 (executing program) 2022/09/24 20:41:11 fetching corpus: 5250, signal 201568/241915 (executing program) 2022/09/24 20:41:11 fetching corpus: 5300, signal 201864/242320 (executing program) 2022/09/24 20:41:11 fetching corpus: 5350, signal 202562/242802 (executing program) 2022/09/24 20:41:12 fetching corpus: 5400, signal 203394/243288 (executing program) 2022/09/24 20:41:12 fetching corpus: 5450, signal 203994/243691 (executing program) 2022/09/24 20:41:12 fetching corpus: 5500, signal 204579/244120 (executing program) 2022/09/24 20:41:12 fetching corpus: 5550, signal 204942/244521 (executing program) 2022/09/24 20:41:12 fetching corpus: 5600, signal 205577/244906 (executing program) 2022/09/24 20:41:12 fetching corpus: 5650, signal 206372/245339 (executing program) 2022/09/24 20:41:12 fetching corpus: 5700, signal 206900/245785 (executing program) 2022/09/24 20:41:12 fetching corpus: 5750, signal 207332/246143 (executing program) 2022/09/24 20:41:13 fetching corpus: 5800, signal 208069/246529 (executing program) 2022/09/24 20:41:13 fetching corpus: 5850, signal 208397/246878 (executing program) 2022/09/24 20:41:13 fetching corpus: 5900, signal 208773/247229 (executing program) 2022/09/24 20:41:13 fetching corpus: 5950, signal 209375/247572 (executing program) 2022/09/24 20:41:13 fetching corpus: 6000, signal 210133/247904 (executing program) 2022/09/24 20:41:13 fetching corpus: 6050, signal 210591/248255 (executing program) 2022/09/24 20:41:13 fetching corpus: 6100, signal 210969/248580 (executing program) 2022/09/24 20:41:13 fetching corpus: 6150, signal 211614/248755 (executing program) 2022/09/24 20:41:13 fetching corpus: 6200, signal 211978/248755 (executing program) 2022/09/24 20:41:13 fetching corpus: 6250, signal 212395/248755 (executing program) 2022/09/24 20:41:14 fetching corpus: 6300, signal 212811/248777 (executing program) 2022/09/24 20:41:14 fetching corpus: 6350, signal 213180/248785 (executing program) 2022/09/24 20:41:14 fetching corpus: 6400, signal 213639/248796 (executing program) 2022/09/24 20:41:14 fetching corpus: 6450, signal 213983/248801 (executing program) 2022/09/24 20:41:14 fetching corpus: 6500, signal 214697/248826 (executing program) 2022/09/24 20:41:14 fetching corpus: 6550, signal 214990/248826 (executing program) 2022/09/24 20:41:14 fetching corpus: 6569, signal 215112/248826 (executing program) 2022/09/24 20:41:14 fetching corpus: 6569, signal 215112/248826 (executing program) 2022/09/24 20:41:17 starting 8 fuzzer processes 20:41:17 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r1 = openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80, 0x89, 0x2}, 0x18) r2 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x4}) fstat(r1, &(0x7f0000000180)) bind(r1, &(0x7f0000000200)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000280)=0x3, 0x4) r3 = socket$netlink(0x10, 0x3, 0x2) preadv(r3, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/179, 0xb3}], 0x1, 0xfff, 0x9) sendfile(r2, r1, 0x0, 0x0) r4 = signalfd4(r2, &(0x7f00000003c0)={[0x9]}, 0x8, 0x80000) sendmmsg$inet6(r4, &(0x7f0000001a80)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x6, @loopback, 0xb832}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="a7b23ba12a5f0201cdbeb623132a76d1bca5b727ae848d151e453d96327178ffbfd90cf1c6ae7bdb0bf8aab165ea71cad1362dd40d2ec5e26b97b0516addc5fa4100c313846b15341e4083b2150760c3a49aa604d9d2c0eaa2c7f2fc9e1d401b1d6affe3ae2cda", 0x67}, {&(0x7f00000014c0)="6d37ad8f787df4b49a715b5fc98d054aa7ae2886f90690da8508", 0x1a}, {&(0x7f0000001500)="62787d4bc68af40f3b2924070a6ac31a6c7e8da4110d21860183a0df86fdc1f2c092e773d1a164b40b3fed734b9a31ce6c2728729b855053fdece193689f21d5e1124a4d7008581b810f1e4f8dcc17ef91d2a46379332d846007317a732fd235699ad0f789eac475f10489fe10bdfa31f38a633283fc7571272cbf5d216ca5739467b191e8b6a4faeb10cc41911c28fbd5bca7ba6494784de6a99957ab61adcdb4bd69ea7e67", 0xa6}, {&(0x7f00000015c0)="489b4520baf28aaaa86ef2f807a3af26934ee056c9d0ebeea52ebab0acd84d1e176b31c5add3f4ded85cdb6280e32ee3706373745df86b3d11cfce8409a8ef9b220c76", 0x43}, {&(0x7f0000001640)="f82a0506b4779ac43c15aad1cd9c09ec6641726a6cd9df5287fc1a7fdbde9c9615f8c8b63d7b6fe9551d124509e4e4eb7744f63be30e384d118f805ca4533af0770742cdf30db5b74728e9d3ac08e6c521b341cd970984e2db5ece4c4bda65604c44200e832fdf3e47768c1fcf0fc6e7eccfe799ff86896337ba26a05529cc38674870c93440e2713e6f8f8fd0a34a431448e28699ed31c69dfcebd93923f739d351b7a346e63033ab05c8cfa0315d", 0xaf}, {&(0x7f0000001700)="9c4d1baf17411275439b32a3eea34a60c0386f9819cc2f384425454504861a4053aec1bdb369b01e6007c98c365399b3fbc5e5ab9d323ff5d1520c5c24b0d5c19c8f7fef8df7b5eb88278a21f8ea0e8a824e6600f681a7af752ffe3c0fcc8a0423afb819610b8e0e4bd7a5dacbcecfd2d923bbd6b7a54cc9fddd925f49b1cb33384b695282cfadf9b8b949e2b7a4d61a0be937812c78682e", 0x98}, {&(0x7f00000017c0)="528015cc3821b004a09d2d343bdd84450867b05226fee87bc0907ee86c395355946a0bc2c5c16cd50d24ee7a719a94293ad3e0546b5c8cab0da70f65ba5a05", 0x3f}, {&(0x7f0000001800)="bef8f930e39bd6a5977d7e5d02da6ad418b03c7155211f3d84c48ade7f41d944cc1ae59c05134f3e4cb5ba23175d6d484c35603dffc64fdc9ba219a7be0e6175230de430b7c25a5d8ebd33c14335023f367aa4a48631be332591ddddbe293632aae800648dad9c50981d4fc212e428851f86926957f41368dade5f85e0d2eccfc59fcbf46dcdcdf037c4ef4abb4fb82f9a77337215a8bfbd1032215c2b2d6faab6bd740093d468ae05c363352fa23f333d8fa49014aee936b1b31d5d2b2da6db23e1e7e9da6d41291b138a3b70e09001783fd13fd5279f65da42de0daa204ef4cef1c5916ac25b12177b", 0xea}], 0x9, &(0x7f00000019c0)=[@dstopts={{0x58, 0x29, 0x37, {0x5c, 0x7, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x18, {0x1, 0x4, 0x4, 0x1, [0x7fffffff, 0x7762]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0xb8}}], 0x1, 0x4000040) fcntl$dupfd(r3, 0x0, r3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001ac0), 0x202800, 0x0) getsockopt$netlink(r5, 0x10e, 0x0, &(0x7f0000001b00)=""/98, &(0x7f0000001b80)=0x62) write$binfmt_elf64(r3, &(0x7f0000001bc0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x2, 0x3, 0x1f, 0x9, 0x3, 0x6, 0x80000001, 0x263, 0x40, 0x3e6, 0x9, 0x9, 0x38, 0x1, 0x1, 0xf800, 0x3}, [{0x60000000, 0xff, 0xffff, 0x59ac, 0x3, 0x3, 0x8, 0xffff}], "c3a0cae84c4179005ee179e17d747ca4f5b33cd6e5516a13a373c446", ['\x00', '\x00', '\x00', '\x00']}, 0x494) setxattr$security_ima(&(0x7f0000002080)='./file1\x00', &(0x7f00000020c0), &(0x7f0000002100)=@v1={0x2, "d9"}, 0x2, 0x2) r6 = signalfd(r2, &(0x7f0000002200)={[0xffffffffffffffff]}, 0x8) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x68, 0x0, 0x100, 0x5, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 20:41:17 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8500000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d8, r0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf2d, 0x48}}}}, [@NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6b4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x20, 0x1, 0x8, 0x0, 0x7]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xbfc6}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0x1000, 0x8]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6d098fac}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x100, 0x1, 0x7a, 0x1000, 0x6, 0x20]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1f, 0x5, 0x5, 0x401, 0x8]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x71b8}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x4cf, 0x5, 0x81, 0x3, 0x1, 0x6]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xcd1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xec}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x38}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xcf33}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xffffffff, 0x5, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x8001, 0x2, 0x3f, 0x7, 0x4, 0x9bc3]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7141f96b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4d5}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4004000}, 0x200048c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x41}, 0x2000c010) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000005c0)={0x2, 0x1, 0x95, &(0x7f0000000500)=""/149}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r0, 0x401, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5f}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x20000880) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x90, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x59, 0xc5, "5fd560a4d45052e8d354273c9f1c3f7042b9d113d5601750a4052ecbda73efcb0eefc7214de6828119a97ee5d40ad554c169855340a4baa328bded08c213d0426b7bc3a072847b601a01bc58aeffa6ad9461ebaa0f"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1c00}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2f0e}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x48000) fstat(r2, &(0x7f00000008c0)) mount(&(0x7f0000000940)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='sysv\x00', 0x0, &(0x7f0000000a00)=',+--\x00') r4 = openat2(r2, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0xecc80, 0x41}, 0x18) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000ac0)) r5 = syz_io_uring_setup(0x146, &(0x7f0000000b00)={0x0, 0xfc1f, 0x1, 0x2, 0x181, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000c00)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x4, 0x5, {0x0, r4}, 0x101, 0x1, 0x1, {0x0, 0x0, r2}}, 0xb0b2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r2, {r5}}, './file1\x00'}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x84, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000e00)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000e40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f00000014c0)={{r8}, r9, 0x0, @inherit={0x68, &(0x7f0000001040)={0x1, 0x4, 0x3, 0x4, {0x19, 0xffffffffffff89de, 0xffff, 0x2, 0xdc9}, [0x0, 0x0, 0x2, 0x3]}}, @devid}) 20:41:17 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x2f) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x0, 0x0, [{{r0}, 0x324}]}) r1 = memfd_create(&(0x7f0000000040)='%]&+)\x00', 0x5) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter6\x00') r3 = eventfd(0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000039c0)={0x11}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000003a00)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000003e00), 0x2001, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000003e40)=0x3ff) fallocate(r2, 0x30, 0xc4b9, 0x1) r5 = openat(r4, &(0x7f0000003e80)='./file0\x00', 0x402000, 0x90) write$eventfd(r5, &(0x7f0000003ec0)=0x3, 0x8) pipe(&(0x7f0000003f00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r4, 0x4c00, r6) pipe2$9p(&(0x7f0000003f40)={0xffffffffffffffff}, 0x800) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000003f80)) clock_gettime(0x0, &(0x7f0000005000)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f0000004f00)=[{{&(0x7f0000003fc0), 0x6e, &(0x7f0000004100)=[{&(0x7f0000004040)=""/162, 0xa2}], 0x1, &(0x7f0000004140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000004600)=[{&(0x7f0000004280)=""/189, 0xbd}, {&(0x7f0000004340)=""/157, 0x9d}, {&(0x7f0000004400)=""/94, 0x5e}, {&(0x7f0000004480)=""/150, 0x96}, {&(0x7f0000004540)=""/111, 0x6f}, {&(0x7f00000045c0)=""/1, 0x1}], 0x6}}, {{&(0x7f0000004680), 0x6e, &(0x7f0000004740)=[{&(0x7f0000004700)=""/38, 0x26}], 0x1, &(0x7f0000004780)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000004800), 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004880)=""/44, 0x2c}, {&(0x7f00000048c0)=""/32, 0x20}, {&(0x7f0000004900)=""/165, 0xa5}, {&(0x7f00000049c0)=""/241, 0xf1}, {&(0x7f0000004ac0)=""/16, 0x10}, {&(0x7f0000004b00)=""/177, 0xb1}, {&(0x7f0000004bc0)=""/103, 0x67}, {&(0x7f0000004c40)=""/171, 0xab}, {&(0x7f0000004d00)=""/36, 0x24}], 0x9, &(0x7f0000004e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}], 0x4, 0x10101, &(0x7f0000005040)={r8, r9+10000000}) fcntl$getflags(r10, 0x408) 20:41:17 executing program 1: ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc4}) pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xfffffff7, 0x5) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x81, 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000500)={0x12e, 0x20, &(0x7f0000000100)}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000540)=0xff) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000580)) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x1}, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000640)={0x39}, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000680)={{0x0, 0x5, 0x7f, 0x0, 0x5c970c49, 0x2, 0x7fff, 0xd33, 0x6, 0x400, 0x0, 0x4c, 0x8000, 0x7f, 0x80}}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000001680)={0x1, 0x8, 0x1c77}) finit_module(r1, &(0x7f00000016c0)='\x00', 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001740)=0x14) r3 = getpid() fcntl$lock(r1, 0x6, &(0x7f0000001780)={0x0, 0x4, 0x1, 0x10001, r3}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x46}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'syztnl1\x00', r2, 0x4, 0x1, 0x40, 0x673e, 0x7a, @private2, @local, 0x80, 0x3e, 0xa5, 0x8985}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0x9c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x40}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2a}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x80}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x77}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x8001000) 20:41:17 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x2, 0x8000, 0x7, 0xa0, 0x2800000000000000, 0x10000, 0x0, 0x5}, &(0x7f0000000040)={0x6, 0x4, 0xbbe6, 0x80000001, 0x3, 0xbba, 0x0, 0x7fff}, &(0x7f0000000080)={0x37f, 0x8, 0x8, 0x9ea0, 0x8, 0x7a, 0x4254, 0x10000}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) clock_gettime(0x5, &(0x7f0000000180)) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={[0x1]}, 0x8) clock_gettime(0x1, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) io_getevents(0x0, 0x3ff, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f0000000400)={r0, r1+10000000}) rt_sigtimedwait(&(0x7f0000000440)={[0x4]}, &(0x7f0000000480), &(0x7f0000000500)={0x77359400}, 0x8) rt_sigtimedwait(&(0x7f0000000540)={[0x4]}, 0x0, &(0x7f0000000580)={0x0, 0x989680}, 0x8) futex(&(0x7f00000005c0), 0x8a, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x2, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r2}}, 0x3) rt_sigtimedwait(&(0x7f00000006c0)={[0x100]}, &(0x7f0000000700), &(0x7f0000000780)={0x77359400}, 0x8) r3 = syz_io_uring_setup(0x258b, &(0x7f00000007c0)={0x0, 0x5e83, 0x10, 0x2, 0xc1}, &(0x7f0000ff5000/0x9000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000840), &(0x7f0000000880)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000008c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0xa294}, 0x0, {0x0, r5}}, 0x2) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000900)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x140810, r3, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000940)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x2) futex(&(0x7f0000000980)=0x2, 0xf, 0x2, &(0x7f00000009c0)={0x0, 0x3938700}, &(0x7f0000000a00)=0x2, 0x1) 20:41:17 executing program 4: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0x3) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x48, 0x1, 0x46, "c89359fe845dabbfcdd23c4d0ede7a3e", "77372c7828ead4d329f4eb2cbe9a25387329c64aee8a1979d6f398fb95c6ac4ab0f27f95f62d467fd335dce4845d08594b7a85"}, 0x48, 0x3) clock_gettime(0x0, &(0x7f00000017c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/41, 0x29}, {&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000580)=""/92, 0x5c}], 0xa, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/10, 0xa}, {&(0x7f0000000840)=""/5, 0x5}, {&(0x7f0000000880)=""/7, 0x7}, {&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000980)=""/225, 0xe1}, {&(0x7f0000000a80)=""/34, 0x22}, {&(0x7f0000000ac0)=""/10, 0xa}], 0x7}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000c00)=""/132, 0x84}, {&(0x7f0000000cc0)=""/244, 0xf4}, {&(0x7f0000000dc0)=""/65, 0x41}, {&(0x7f0000000e40)=""/244, 0xf4}, {&(0x7f0000000f40)=""/194, 0xc2}, {&(0x7f0000001040)=""/66, 0x42}], 0x6}}, {{&(0x7f0000001140), 0x6e, &(0x7f00000012c0)=[{&(0x7f00000011c0)=""/62, 0x3e}, {&(0x7f0000001200)=""/185, 0xb9}], 0x2, &(0x7f0000001300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001400), 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001480)=""/141, 0x8d}, {&(0x7f0000001540)=""/78, 0x4e}], 0x2, &(0x7f0000001600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x5, 0x0, &(0x7f0000001800)={r0, r1+10000000}) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000001840)={0x96d7, 0x3, 0x0, [{0x7fffffff, 0x2, 0x2, 0x3b, 0x6, 0x4, 0x3}, {0x5, 0xff, 0x0, 0x81, 0xff, 0x1, 0x4}, {0x0, 0x9, 0x0, 0x5, 0xe6, 0xf3, 0x40}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000001940)={0x7, 0x7, 0x5, 0x4, 0x2, [{0x7d, 0x8, 0x100000000, '\x00', 0x800}, {0x1f, 0x1, 0x6, '\x00', 0x1200}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000001a00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000001e00)={{r3}, {@val={r10}, @max}}) io_setup(0x7, &(0x7f0000001e40)=0x0) io_getevents(r11, 0xff, 0x2, &(0x7f0000001e80)=[{}, {}], &(0x7f0000001ec0)) r12 = perf_event_open$cgroup(&(0x7f0000001f00)={0x4, 0x80, 0x3, 0xea, 0x20, 0x93, 0x0, 0x80000000, 0x8000, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7fff, 0x7}, 0x6000, 0x3, 0x7, 0x2, 0x7f, 0xfffff1e6, 0x4, 0x0, 0x4, 0x0, 0x5}, r4, 0xf, r2, 0x2) fcntl$notify(r12, 0x402, 0x20) clock_gettime(0x4, &(0x7f0000001f80)) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, r12, {0xfffffffc}}, './file0\x00'}) ioctl$VT_RESIZEX(r13, 0x560a, &(0x7f0000002000)={0x40, 0x6, 0x7ff, 0x6, 0x0, 0x9}) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x6) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000002040)={0x7, 0x10001, 0x6, 0x2}) lsetxattr$security_ima(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), &(0x7f0000002100)=@sha1={0x1, "0621e4ce52cc4abb1357e52d3f565ddd1141f539"}, 0x15, 0x3) pwrite64(r2, &(0x7f0000002140)="56e803b660d58671fc091b861fb3fbd4636410e4fa284355f59089605760dcb1524b180a824254783ed38a79c5f160cc88ea0e768a53f696703a6e90a6f6acc144d5d031fd13eeb1b463b7f26d0fe94b6b7ce91f788bbb47ddc92bd8c0cbfb4727a000dab3b7b411df99dab08f5d5e1f8510fb83fa03c6566d1106dacc0fa8fa2883545f3c22448f33794cb17fd027f2cfd6583acbd3b59e1f92af159be576e7b4210e", 0xa3, 0x200) [ 70.446968] audit: type=1400 audit(1664052077.363:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:41:17 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000040)={{r1}, "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"}) r2 = syz_open_dev$loop(&(0x7f0000001040), 0x3, 0xc4002) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000001080)=0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000010c0)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001100), 0x82, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000001140)) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000001180)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) open_by_handle_at(r5, &(0x7f00000011c0)=@isofs={0x14, 0x1, {0x6, 0x5, 0x400, 0x100, 0x5, 0x9}}, 0x26340) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x50600, 0x10, 0x8}, 0x18) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000001280)="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") ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000001380)={r4}) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000013c0), &(0x7f0000001400)=0x4) r8 = accept$unix(r0, &(0x7f0000001440)=@abs, &(0x7f00000014c0)=0x6e) connect$unix(r8, &(0x7f0000001500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getpeername(0xffffffffffffffff, &(0x7f0000001580)=@ax25={{0x3, @bcast}, [@rose, @null, @null, @bcast, @null, @bcast, @netrom, @bcast]}, &(0x7f0000001600)=0x80) 20:41:17 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x24002) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xba6a283b2c845d7a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffd}], @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "abf25db340139a4a0ad9c50440"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d386af6c04"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3ec45fc039bcf43fa86733f9d2"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "603249a269"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "1b6a"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xc4c0}}, './file0\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x340, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x1a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x19c, 0xe, 0x0, 0x1, [{0xed, 0x0, "207d766aab36d9a039638b2f74e8be92fffaa15f083147c9e0708c6e1a4ef960efc3dcca7d97d1647f56eadf6398c430f84060e814f6c216b0a8cc939314de272da99ad9078b791973bb88ea83e2c14836d9572e157f7f79c918ce2276e2cb969a65cd494cde0324185487b51e95418bdbf136ef226969d727020f350eb7e3ef28141bf898ab48964b33e132bf2a389b52c1bf7f6a5ef6e53372469e2e6445ae55b16b0d5efb1ba345747b265f661e32246916874f4e448ceec365dc5ff3e2c0209793808b173623a6b22e883032946db9595765c649a469f56bdf876f28307fcd99f84bee94b47ed4"}, {0xa6, 0x0, "2af32077578a07ae0545a3342e34b5f05e21f8978ecac7c59b2fee3e073701632399cca8acf60b2005d9156ab932b99c859516360bcb94ffc95118d065b503fb2da64e9f2ecdd7496668d082b395d35941a472e7063895696fee1d0fce4ccca73c19cd5638048b2351ed0aa3f87f799be6ad981db1f9afe49217436b6c82271919f17d936b2f2bf8d160d7596721ff286f06901b8eb0385230beb2e1cdea40ae8706"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}]}, @NL80211_ATTR_NAN_FUNC={0x184, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x100, 0xb, "d3452121ba88bda30a0d15eb28019ea382d73e47e0d2f714c023d4ca48d1f1b80480f6e27f5976f3cd3eb9f7158a6c8655f04964dbd166b530bca79028f32d6e583573577c39e813a595518dbd5f62ea54c1c2d5add14e1e2906a612b2d1c176d98314a860d408b99b1bb6abff72e1b7a715b4b3a6b49a1f6c5fc0087237824aeba45ab4b243c72a225aadcdc6639e14dcd0646c04676769b2e200e25cbfe5a23d431cc3d559b472f763cd863c0506d308ce0d9a3ad170905d9743c1e43b64c48a5095d36d68382de5a83a7dba2bf7ad7288cfd987d0207909b5595ee8c7fc5c50b7c238cabac4586747f004a2a6fb69e1677e7561ff1ed6b4b0b4d5"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SERVICE_INFO={0x58, 0xb, "543e6fda5e370604c2bcd75ff365761483efb15ac4edb23ac9df068f2bf0373d651be25ab190c1d203d289d17b2405090108f17c27fa86e912a2ca7c1185e17e976957005eecb87b0530c93de93513f08043931c"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4040}, 0x4040) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0xc810) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) name_to_handle_at(r4, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@nfs={0x90, 0x24, {0x10001, 0x5, 0x7fffffff, 0x80, "153f81f38ee51b130b3f0afd3fe3f97bc1d47a6b9fbf437e177d24162d09627178d697da86eed94017d52f53e182bc57c4ec379a438588a47e42285f8a5cfedd6e101dbb2c28b0a4185d65ff53b91ace5a80684a7e488408932ac5c1a39dfef5a8bf1f0e4a8e79c48056de19fb2a3420b3ae001b0cef19dc484910581e466cdf"}}, &(0x7f0000000940), 0x1800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000802}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r5, 0xb32a6c0bd2f3f8f5, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ba7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) read$hiddev(0xffffffffffffffff, &(0x7f0000000ac0)=""/48, 0x30) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x70, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x60}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x24008001) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xcc, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x4, 0x5}, {0x0, 0x4}, {0xfd, 0x2}, {0x2f, 0x7}, {0x1, 0x4}, {0xff, 0x6}, {0xfb, 0x4}, {0x9, 0x6}, {0x1, 0x5}, {0x0, 0x6}], "f08cae406ffb32e7"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x7f, 0x5}, {0x0, 0x6}, {0xbc, 0x3}, {0x4, 0x7}, {0x20, 0x4}, {0xf9, 0x2}, {0xff, 0x5}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0x2}, {0x9, 0x6}, {0x7}, {0x2f, 0x5}, {0x68, 0x3}, {0x49, 0x4}, {0xff, 0x5}, {0x8, 0x5}, {0xd, 0x4}, {0x1, 0x2}, {0x7, 0x3}], "d2be9568030251cb"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xfa, 0x5}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x6}, {}, {0x8, 0x7}, {0x8}, {0x0, 0x1}, {}, {0x40}, {0x8, 0x7}, {0x20, 0x3}], "a9b5b8217b6f4a53"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1f, 0x5}, {0x9, 0x7}, {0x80, 0x7}, {0x9}, {0x6, 0x5}, {0x40, 0x4}], "8a5dd8ed2e6ff9d5"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x6, 0x2}, {0x20, 0x4}], "1a6cc3106c50ca45"}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0xc845) socket$nl_generic(0x10, 0x3, 0x10) r7 = pidfd_getfd(r0, r2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000e40)={{0x1, 0x1}, 0x100, './file0\x00'}) read$hiddev(r0, &(0x7f0000000f80)=""/182, 0xb6) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001080), 0xc, &(0x7f0000001c80)={&(0x7f00000010c0)={0xbb8, 0x1, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x100}, 0xff, 0x3, 0x77, 0x0, 0x3, 'syz1\x00', "75f86c49e4452a5269a5594d0f654d5c539901026a319997e35111a9311eaf53", "c1385fee115f1bebd53952283f665027b32ebb324056d19f9e4560c75878ed6c", [{0x55e9, 0x6, {0x3, 0x2}}, {0x8000, 0x3158, {0x2, 0x10001}}, {0x3, 0xd84, {0x0, 0x2}}, {0x7ff, 0x8001, {0x1, 0x2}}, {0x0, 0x3ff, {0x0, 0x6}}, {0x5, 0x1, {0x2, 0x1}}, {0xffff, 0x0, {0x1, 0x1}}, {0x4, 0x1f, {0x2, 0x5}}, {0x8, 0x0, {0x2, 0x9}}, {0x0, 0x3, {0x0, 0x1ff}}, {0x7, 0xe62, {0x1, 0x2147}}, {0x3ff, 0x5, {0x2, 0xc8b3}}, {0x1, 0x100, {0x0, 0x7ba7}}, {0x8001, 0x0, {0x3, 0xa}}, {0x1, 0x7f, {0x0, 0x200000}}, {0x1, 0xffff, {0x1, 0x67d7}}, {0x1, 0x0, {0x7, 0x8}}, {0x20, 0x2, {0x2, 0xa1}}, {0x15, 0xfffe, {0x0, 0x80}}, {0x2, 0xf8a2, {0x2, 0x3}}, {0x5, 0x3f, {0x1, 0x101}}, {0xfcd8, 0x5, {0x0, 0xff}}, {0x7fff, 0x6, {0x2, 0x81}}, {0x1, 0x800, {0x2, 0x2}}, {0x1, 0xffff, {0x0, 0x40}}, {0x7, 0x6, {0x1, 0x4}}, {0x8, 0x3, {0x3, 0xa3a}}, {0xfffd, 0x20, {0x0, 0xffff0001}}, {0x5b, 0x1, {0x2, 0x4}}, {0x4, 0x1, {0x1, 0x8ed}}, {0x0, 0x400, {0x1, 0x80000000}}, {0xffff, 0xa2, {0x2, 0x7}}, {0x5, 0x55, {0x1, 0x400}}, {0x0, 0xffff, {0x3, 0x7}}, {0x0, 0x2, {0x2, 0x80000000}}, {0x435, 0x9, {0x0, 0x997}}, {0x6, 0x7, {0x3}}, {0x7fff, 0x1, {0x0, 0x80}}, {0xffff, 0x8, {0x0, 0x17f7f2cf}}, {0x100, 0x1, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0xfff}, 0xcf, 0x8, 0x4, 0x1, 0x18, 'syz0\x00', "8084f0bac3444ad30f1ecdd17ffdc68326d6880eda2cd2db9b94023072f0d336", "af65dc8b9b6cc6dc6c7ccc5046e4d89a2501ceaef0657c35a932a600ac13d01c", [{0x67, 0x6f8, {0x2, 0xfffffff8}}, {0x789a, 0xb7f, {0x3, 0x5}}, {0x4d, 0x6, {0x3, 0x100}}, {0x1f, 0x401, {0x1, 0x40d}}, {0x4, 0x2, {0x3, 0x8000}}, {0x2000, 0xb1, {0x2, 0x9}}, {0x20, 0x5}, {0x6, 0xfff, {0x2, 0x2}}, {0x401, 0x0, {0x1, 0x1f}}, {0x7, 0x6, {0x2, 0x4b00}}, {0x6, 0xc000, {0x2, 0xffffffff}}, {0x1, 0x7f, {0x2, 0x7f}}, {0x200, 0x8, {0x2, 0x1}}, {0x100, 0x401, {0x3, 0xfffffeff}}, {0x0, 0x9, {0x3, 0x8}}, {0x0, 0xdf8, {0x0, 0x800}}, {0x2, 0x6, {0x3, 0xab}}, {0x3f, 0x8001, {0x42455e85c6c54222, 0x5}}, {0xf6b, 0x6a, {0x2, 0x2}}, {0x4, 0x41, {0x2}}, {0x101, 0x270, {0xa1911ce6bd114e2, 0x80000000}}, {0x2, 0xffff, {0x0, 0x8}}, {0x8000, 0x5, {0x3, 0x8}}, {0x7, 0xfffe, {0x3, 0x20}}, {0x1, 0x64e8, {0x3, 0x3}}, {0x6, 0x7, {0x0, 0xffff}}, {0x69, 0x200, {0x0, 0x9}}, {0xfffb, 0x640, {0x2, 0x2d70b4b4}}, {0x40, 0x7, {0x2, 0x9}}, {0x6, 0xd8, {0x2, 0x8000}}, {0x4, 0x52b3, {0x1, 0x20}}, {0x3, 0xfff, {0x2, 0xfffffc00}}, {0x5, 0x8000, {0x2, 0x3}}, {0x1ff, 0x2, {0x1, 0x4}}, {0x1f, 0xab, {0x2, 0xcc}}, {0x9, 0x1, {0x1, 0xa23a}}, {0x8001, 0xa53, {0x3, 0x6}}, {0x4, 0x0, {0x0, 0x5}}, {0x0, 0xff7, {0x3}}, {0x7fff, 0x81, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x1}, 0x3, 0x3, 0x7ff, 0x1, 0x13, 'syz1\x00', "655f6c7568bb0e65c9b8bbcbe51ef3151d1b4fcf43a9e2c0416ed182ebf8db8a", "727fdf7fe211f680717955eb364eac87277cc754f301f67009d9145aa1f166e8", [{0x3, 0xdeb, {0x3, 0x400}}, {0x0, 0x400, {0x3, 0x6}}, {0xaf, 0x2df6, {0x2, 0x800}}, {0x7ff, 0xb2a6, {0x3, 0x3}}, {0xff80, 0x5, {0x1, 0x3b}}, {0x2, 0x5, {0x0, 0x80000000}}, {0x13, 0x100, {0xcbf34e492704edbb, 0xc0}}, {0x9, 0x6, {0x3, 0x1}}, {0x6, 0x20, {0x3, 0x1ff}}, {0x845, 0x8001, {0x1, 0x2}}, {0x9, 0x1000, {0x3, 0x7}}, {0x7, 0xc62, {0x2, 0x7fffffff}}, {0x0, 0x3, {0x2, 0xd568}}, {0x8001, 0x200, {0x2, 0x80}}, {0x8, 0x5, {0x3, 0x8000}}, {0x20, 0xe8, {0x3, 0x9}}, {0xf4e6, 0x1, {0x2, 0x5}}, {0x4, 0x4, {0x0, 0x5}}, {0x1, 0x1b, {0x0, 0x401}}, {0x1, 0x1, {0x3, 0x1}}, {0x100, 0x3ff, {0x2, 0x9}}, {0x6, 0x20, {0x0, 0x1}}, {0xe6ee, 0x8001, {0x3, 0x5}}, {0xf899, 0x8, {0x2, 0x1}}, {0x2cf, 0x6, {0x2, 0xe62}}, {0x400, 0x6, {0x1, 0x3}}, {0xffff, 0x101, {0x2, 0x9}}, {0x9, 0x6, {0x0, 0x5}}, {0xfffe, 0x6, {0x1, 0x1ff}}, {0xd715, 0x30, {0x0, 0x1}}, {0x7aa, 0xf5d, {0x0, 0x80000}}, {0x408, 0xec, {0x0, 0x5}}, {0xfffa, 0x9, {0x4, 0x307c}}, {0x6, 0x100, {0x1, 0x1ff}}, {0x0, 0x7, {0x0, 0xdc}}, {0xa2, 0x6, {0x2, 0x81}}, {0x42d, 0x8e7, {0x1, 0x1a}}, {0x101, 0x14, {0x0, 0x6}}, {0x3, 0x4, {0x1, 0x1}}, {0x3, 0x4, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x2, 0x2, 0x6, 0x101, 0x1, 'syz1\x00', "0917c44abadd2cb0360c95a5bccbd5f59a490d5a3353d0deb22854d6761ab9f9", "76ce80e90e868eae96a6bab69ed363604c8da367409380604a5794f149e843bb", [{0x80, 0x2, {0x2, 0xffff8000}}, {0xe, 0x8000, {0x1, 0x8}}, {0x6f02, 0xff, {0x0, 0x9}}, {0x0, 0x7f, {0x2, 0x6}}, {0x9, 0xd337, {0x2, 0xfff}}, {0xd5, 0x1f, {0x3, 0x2}}, {0x0, 0x1f, {0x1, 0x9}}, {0x1, 0xcf37, {0x3, 0x2}}, {0x7153, 0x7, {0x0, 0x5}}, {0x5, 0xf36e, {0x1, 0x5}}, {0xfffc, 0x1c5, {0x3, 0x9}}, {0x4, 0x3, {0x3313e5b4e14729f, 0x2}}, {0xff, 0xf2bc, {0x1, 0x7ff}}, {0x1, 0x0, {0x1, 0xee}}, {0x7a9, 0x3, {0x0, 0x9}}, {0xfff, 0x8001, {0x2, 0x2}}, {0x7ff, 0xc08d, {0x1, 0x3}}, {0x3f, 0x9b, {0x0, 0xe75}}, {0x5, 0x8, {0x0, 0x7}}, {0x2, 0x2, {0x1, 0xbbf}}, {0x3ff, 0x9, {0x3, 0x822}}, {0x2, 0x53, {0x0, 0xffff8e6a}}, {0x81, 0x9, {0x0, 0x20}}, {0x600, 0x2, {0x1, 0x3ff}}, {0x5, 0x6, {0x3, 0x6}}, {0x1, 0x7, {0x3, 0x3ff}}, {0x6, 0x1, {0x2, 0x7}}, {0x3, 0x540, {0x2}}, {0x2, 0x1, {0x3, 0x8}}, {0x0, 0xfffb, {0x2, 0x20}}, {0x7, 0xffff, {0x0, 0x1}}, {0x9, 0x2, {0x3, 0x7fff}}, {0x2, 0x9, {0x3, 0x400}}, {0xd, 0x2a, {0x3, 0x4}}, {0x8, 0x0, {0x0, 0x4}}, {0xa4e7, 0x7, {0x3, 0x1}}, {0x8000, 0x20, {0x3, 0x1}}, {0xffff, 0x401, {0x2, 0x5}}, {0xc10, 0x0, {0x2, 0x7}}, {0xfff7, 0x7ff, {0x0, 0x64}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x8, 0x6, 0x5fe9, 0x9df9, 0x14, 'syz1\x00', "fb34647c4058ca2fbd7f8f74ede5556e7e869517fa91a1bbc73957ff06373fdf", "1dfafb6607a570a66852882b7405895992e9e79d1d5296e4163bcfb36ac23ab7", [{0x100, 0x5, {0x0, 0x7}}, {0x1ff, 0xfff, {0x3, 0x7}}, {0x5, 0x387f, {0x3, 0x8000}}, {0xb7e5, 0x8, {0x0, 0x9}}, {0xfffa, 0xfffd, {0x0, 0x3}}, {0x3, 0x3, {0x0, 0x9}}, {0x6, 0x100, {0x3, 0x60000}}, {0x5, 0x7, {0x0, 0x10001}}, {0x0, 0x5, {0x0, 0x84}}, {0x3, 0x5, {0x3, 0x2}}, {0x8, 0x0, {0x2, 0x800}}, {0x5, 0x1, {0x0, 0x7}}, {0x6, 0x3, {0x3, 0x1ff}}, {0x7fff, 0x800, {0x2, 0x3}}, {0x8, 0xb44, {0x1, 0x11c8}}, {0x7, 0x0, {0x2, 0x81}}, {0x1, 0x5, {0x2, 0x4}}, {0x0, 0x3, {0x2, 0x1}}, {0xfc98, 0x0, {0x1, 0x4}}, {0x6, 0x2, {0x0, 0x353e6984}}, {0xa0, 0x101, {0x1, 0x1}}, {0xfff, 0x0, {0x0, 0x6f}}, {0x1, 0x3e, {0x1, 0x9}}, {0x1000, 0xfbf, {0x2, 0x20}}, {0xa7, 0x3753, {0x0, 0x5}}, {0x4, 0x9, {0x3, 0xfffffbff}}, {0x40, 0xffff, {0x0, 0x265}}, {0x1000, 0x5, {0x0, 0xfc9}}, {0x1, 0x9, {0x0, 0x9}}, {0x4, 0x5d, {0x1, 0x4}}, {0xbe4, 0x7f, {0x0, 0x3f}}, {0x5, 0x1a, {0x1, 0x2}}, {0x400, 0x4, {0x3, 0x6}}, {0x6, 0x3863, {0x3, 0x683f}}, {0x8, 0x6, {0x0, 0x4}}, {0x7, 0x85, {0x0, 0xf3c4}}, {0x7, 0x1000}, {0x1, 0x100, {0x2, 0x100}}, {0x65, 0x3, {0x1, 0xfffffffb}}, {0x9, 0x9, {0x2, 0x7}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x48080}, 0x30000000) [ 71.702004] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.703927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.705794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.707054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.708759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.710012] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.713971] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.715907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.717730] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.719176] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.720609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.721704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.733525] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.750913] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.764087] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.770307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.771873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.773989] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.775378] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.777578] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.780138] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.782023] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.783648] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.785201] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.786391] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.792244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.807534] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.808334] Bluetooth: hci7: HCI_REQ-0x0c1a [ 71.822578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.824799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.826329] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.829342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.831385] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.833181] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.839620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.841125] Bluetooth: hci5: HCI_REQ-0x0c1a [ 71.849212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.851646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.853366] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.856661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.858577] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.859909] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.865096] Bluetooth: hci2: HCI_REQ-0x0c1a [ 71.882716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.889234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.901828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.905649] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.906862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.913341] Bluetooth: hci4: HCI_REQ-0x0c1a [ 73.775843] Bluetooth: hci1: command 0x0409 tx timeout [ 73.776025] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 73.776882] Bluetooth: hci0: command 0x0409 tx timeout [ 73.839612] Bluetooth: hci7: command 0x0409 tx timeout [ 73.840296] Bluetooth: hci6: command 0x0409 tx timeout [ 73.903707] Bluetooth: hci5: command 0x0409 tx timeout [ 73.904608] Bluetooth: hci2: command 0x0409 tx timeout [ 73.968504] Bluetooth: hci4: command 0x0409 tx timeout [ 75.823498] Bluetooth: hci0: command 0x041b tx timeout [ 75.823949] Bluetooth: hci1: command 0x041b tx timeout [ 75.888507] Bluetooth: hci6: command 0x041b tx timeout [ 75.888923] Bluetooth: hci7: command 0x041b tx timeout [ 75.952521] Bluetooth: hci2: command 0x041b tx timeout [ 75.952938] Bluetooth: hci5: command 0x041b tx timeout [ 76.016451] Bluetooth: hci4: command 0x041b tx timeout [ 76.934899] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.010742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.021834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.033110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.050716] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.051670] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.079261] Bluetooth: hci3: HCI_REQ-0x0c1a [ 77.872517] Bluetooth: hci1: command 0x040f tx timeout [ 77.872978] Bluetooth: hci0: command 0x040f tx timeout [ 77.936468] Bluetooth: hci7: command 0x040f tx timeout [ 77.936884] Bluetooth: hci6: command 0x040f tx timeout [ 77.999520] Bluetooth: hci5: command 0x040f tx timeout [ 77.999933] Bluetooth: hci2: command 0x040f tx timeout [ 78.064493] Bluetooth: hci4: command 0x040f tx timeout [ 79.088488] Bluetooth: hci3: command 0x0409 tx timeout [ 79.919589] Bluetooth: hci0: command 0x0419 tx timeout [ 79.920283] Bluetooth: hci1: command 0x0419 tx timeout [ 79.984499] Bluetooth: hci6: command 0x0419 tx timeout [ 79.984958] Bluetooth: hci7: command 0x0419 tx timeout [ 80.048537] Bluetooth: hci2: command 0x0419 tx timeout [ 80.049006] Bluetooth: hci5: command 0x0419 tx timeout [ 80.112504] Bluetooth: hci4: command 0x0419 tx timeout [ 81.135522] Bluetooth: hci3: command 0x041b tx timeout [ 83.183638] Bluetooth: hci3: command 0x040f tx timeout [ 85.231494] Bluetooth: hci3: command 0x0419 tx timeout [ 122.455283] audit: type=1400 audit(1664052129.371:7): avc: denied { open } for pid=3706 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 20:42:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x102) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) write$P9_RWSTAT(r1, &(0x7f0000000380)={0x7, 0x7f, 0x5}, 0x7) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x20000190, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x80000, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x403a000, &(0x7f0000000400)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x153) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) [ 122.614014] loop4: detected capacity change from 0 to 264192 [ 122.734562] audit: type=1400 audit(1664052129.650:8): avc: denied { kernel } for pid=3719 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.741380] ------------[ cut here ]------------ [ 122.741405] [ 122.741409] ====================================================== [ 122.741412] WARNING: possible circular locking dependency detected [ 122.741416] 6.0.0-rc6-next-20220923 #1 Not tainted [ 122.741423] ------------------------------------------------------ [ 122.741426] syz-executor.4/3720 is trying to acquire lock: [ 122.741432] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 122.741470] [ 122.741470] but task is already holding lock: [ 122.741472] ffff888018208820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.741500] [ 122.741500] which lock already depends on the new lock. [ 122.741500] [ 122.741503] [ 122.741503] the existing dependency chain (in reverse order) is: [ 122.741506] [ 122.741506] -> #3 (&ctx->lock){....}-{2:2}: [ 122.741519] _raw_spin_lock+0x2a/0x40 [ 122.741537] __perf_event_task_sched_out+0x53b/0x18d0 [ 122.741550] __schedule+0xedd/0x2470 [ 122.741563] schedule+0xda/0x1b0 [ 122.741575] futex_wait_queue+0xf5/0x1e0 [ 122.741587] futex_wait+0x28e/0x690 [ 122.741597] do_futex+0x2ff/0x380 [ 122.741606] __x64_sys_futex+0x1c6/0x4d0 [ 122.741616] do_syscall_64+0x3b/0x90 [ 122.741632] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.741644] [ 122.741644] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 122.741658] _raw_spin_lock_nested+0x30/0x40 [ 122.741675] raw_spin_rq_lock_nested+0x1e/0x30 [ 122.741688] task_fork_fair+0x63/0x4d0 [ 122.741704] sched_cgroup_fork+0x3d0/0x540 [ 122.741718] copy_process+0x4183/0x6e20 [ 122.741728] kernel_clone+0xe7/0x890 [ 122.741737] user_mode_thread+0xad/0xf0 [ 122.741747] rest_init+0x24/0x250 [ 122.741758] arch_call_rest_init+0xf/0x14 [ 122.741776] start_kernel+0x4c1/0x4e6 [ 122.741790] secondary_startup_64_no_verify+0xe0/0xeb [ 122.741805] [ 122.741805] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 122.741818] _raw_spin_lock_irqsave+0x39/0x60 [ 122.741836] try_to_wake_up+0xab/0x1930 [ 122.741849] up+0x75/0xb0 [ 122.741862] __up_console_sem+0x6e/0x80 [ 122.741877] console_unlock+0x46a/0x590 [ 122.741893] do_con_write+0xc05/0x1d50 [ 122.741905] con_write+0x21/0x40 [ 122.741915] n_tty_write+0x4d4/0xfe0 [ 122.741928] file_tty_write.constprop.0+0x49c/0x8f0 [ 122.741940] vfs_write+0x9c3/0xd90 [ 122.741958] ksys_write+0x127/0x250 [ 122.741975] do_syscall_64+0x3b/0x90 [ 122.741991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.742002] [ 122.742002] -> #0 ((console_sem).lock){....}-{2:2}: [ 122.742016] __lock_acquire+0x2a02/0x5e70 [ 122.742033] lock_acquire+0x1a2/0x530 [ 122.742048] _raw_spin_lock_irqsave+0x39/0x60 [ 122.742066] down_trylock+0xe/0x70 [ 122.742080] __down_trylock_console_sem+0x3b/0xd0 [ 122.742096] vprintk_emit+0x16b/0x560 [ 122.742112] vprintk+0x84/0xa0 [ 122.742127] _printk+0xba/0xf1 [ 122.742138] report_bug.cold+0x72/0xab [ 122.742153] handle_bug+0x3c/0x70 [ 122.742169] exc_invalid_op+0x14/0x50 [ 122.742185] asm_exc_invalid_op+0x16/0x20 [ 122.742196] group_sched_out.part.0+0x2c7/0x460 [ 122.742207] ctx_sched_out+0x8f1/0xc10 [ 122.742217] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.742229] __schedule+0xedd/0x2470 [ 122.742242] schedule+0xda/0x1b0 [ 122.742254] futex_wait_queue+0xf5/0x1e0 [ 122.742265] futex_wait+0x28e/0x690 [ 122.742275] do_futex+0x2ff/0x380 [ 122.742284] __x64_sys_futex+0x1c6/0x4d0 [ 122.742293] do_syscall_64+0x3b/0x90 [ 122.742309] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.742321] [ 122.742321] other info that might help us debug this: [ 122.742321] [ 122.742324] Chain exists of: [ 122.742324] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 122.742324] [ 122.742339] Possible unsafe locking scenario: [ 122.742339] [ 122.742341] CPU0 CPU1 [ 122.742343] ---- ---- [ 122.742345] lock(&ctx->lock); [ 122.742350] lock(&rq->__lock); [ 122.742357] lock(&ctx->lock); [ 122.742363] lock((console_sem).lock); [ 122.742368] [ 122.742368] *** DEADLOCK *** [ 122.742368] [ 122.742370] 2 locks held by syz-executor.4/3720: [ 122.742377] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 122.742405] #1: ffff888018208820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.742432] [ 122.742432] stack backtrace: [ 122.742435] CPU: 0 PID: 3720 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220923 #1 [ 122.742448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.742456] Call Trace: [ 122.742459] [ 122.742463] dump_stack_lvl+0x8b/0xb3 [ 122.742481] check_noncircular+0x263/0x2e0 [ 122.742497] ? format_decode+0x26c/0xb50 [ 122.742513] ? print_circular_bug+0x450/0x450 [ 122.742530] ? enable_ptr_key_workfn+0x20/0x20 [ 122.742545] ? __lockdep_reset_lock+0x180/0x180 [ 122.742561] ? format_decode+0x26c/0xb50 [ 122.742578] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 122.742595] __lock_acquire+0x2a02/0x5e70 [ 122.742616] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 122.742638] lock_acquire+0x1a2/0x530 [ 122.742654] ? down_trylock+0xe/0x70 [ 122.742671] ? lock_release+0x750/0x750 [ 122.742687] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 122.742708] ? vprintk+0x84/0xa0 [ 122.742726] _raw_spin_lock_irqsave+0x39/0x60 [ 122.742744] ? down_trylock+0xe/0x70 [ 122.742760] down_trylock+0xe/0x70 [ 122.742775] ? vprintk+0x84/0xa0 [ 122.742791] __down_trylock_console_sem+0x3b/0xd0 [ 122.742808] vprintk_emit+0x16b/0x560 [ 122.742825] ? lock_downgrade+0x6d0/0x6d0 [ 122.742843] vprintk+0x84/0xa0 [ 122.742860] _printk+0xba/0xf1 [ 122.742871] ? record_print_text.cold+0x16/0x16 [ 122.742884] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 122.742898] ? lock_downgrade+0x6d0/0x6d0 [ 122.742915] ? report_bug.cold+0x66/0xab [ 122.742932] ? group_sched_out.part.0+0x2c7/0x460 [ 122.742944] report_bug.cold+0x72/0xab [ 122.742962] handle_bug+0x3c/0x70 [ 122.742978] exc_invalid_op+0x14/0x50 [ 122.742996] asm_exc_invalid_op+0x16/0x20 [ 122.743008] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.743022] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.743033] RSP: 0018:ffff88801db978f8 EFLAGS: 00010006 [ 122.743042] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.743049] RDX: ffff888040448000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 122.743057] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 122.743064] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888018208800 [ 122.743071] R13: ffff88806ce3d140 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 122.743082] ? group_sched_out.part.0+0x2c7/0x460 [ 122.743095] ? group_sched_out.part.0+0x2c7/0x460 [ 122.743108] ctx_sched_out+0x8f1/0xc10 [ 122.743121] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.743136] ? lock_is_held_type+0xd7/0x130 [ 122.743150] ? __perf_cgroup_move+0x160/0x160 [ 122.743162] ? set_next_entity+0x304/0x550 [ 122.743181] ? lock_is_held_type+0xd7/0x130 [ 122.743194] __schedule+0xedd/0x2470 [ 122.743211] ? io_schedule_timeout+0x150/0x150 [ 122.743225] ? futex_wait_setup+0x166/0x230 [ 122.743240] schedule+0xda/0x1b0 [ 122.743254] futex_wait_queue+0xf5/0x1e0 [ 122.743266] futex_wait+0x28e/0x690 [ 122.743278] ? futex_wait_setup+0x230/0x230 [ 122.743291] ? wake_up_q+0x8b/0xf0 [ 122.743306] ? futex_wake+0x158/0x490 [ 122.743320] ? lock_downgrade+0x6d0/0x6d0 [ 122.743337] ? lock_is_held_type+0xd7/0x130 [ 122.743351] do_futex+0x2ff/0x380 [ 122.743362] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 122.743374] ? ktime_get+0x153/0x1f0 [ 122.743391] __x64_sys_futex+0x1c6/0x4d0 [ 122.743402] ? hrtimer_interrupt+0x5b0/0x770 [ 122.743415] ? __x64_sys_futex_time32+0x480/0x480 [ 122.743428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.743441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.743456] do_syscall_64+0x3b/0x90 [ 122.743473] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.743486] RIP: 0033:0x7f81fa557b19 [ 122.743494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.743505] RSP: 002b:00007f81f7acd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.743516] RAX: ffffffffffffffda RBX: 00007f81fa66af68 RCX: 00007f81fa557b19 [ 122.743524] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f81fa66af68 [ 122.743531] RBP: 00007f81fa66af60 R08: 0000000000000000 R09: 0000000000000000 [ 122.743538] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f81fa66af6c [ 122.743545] R13: 00007ffcf18bd47f R14: 00007f81f7acd300 R15: 0000000000022000 [ 122.743558] [ 122.807727] WARNING: CPU: 0 PID: 3720 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 122.808422] Modules linked in: [ 122.808674] CPU: 0 PID: 3720 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220923 #1 [ 122.809309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.810166] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.810575] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.811935] RSP: 0018:ffff88801db978f8 EFLAGS: 00010006 [ 122.812335] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.812875] RDX: ffff888040448000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 122.813418] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 122.813944] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888018208800 [ 122.814494] R13: ffff88806ce3d140 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 122.815029] FS: 00007f81f7acd700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 122.815646] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.816092] CR2: 00007fdfb28a3368 CR3: 000000003f870000 CR4: 0000000000350ef0 [ 122.816651] Call Trace: [ 122.816854] [ 122.817043] ctx_sched_out+0x8f1/0xc10 [ 122.817345] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.817736] ? lock_is_held_type+0xd7/0x130 [ 122.818073] ? __perf_cgroup_move+0x160/0x160 [ 122.818413] ? set_next_entity+0x304/0x550 [ 122.818741] ? lock_is_held_type+0xd7/0x130 [ 122.819076] __schedule+0xedd/0x2470 [ 122.819367] ? io_schedule_timeout+0x150/0x150 [ 122.819717] ? futex_wait_setup+0x166/0x230 [ 122.820049] schedule+0xda/0x1b0 [ 122.820312] futex_wait_queue+0xf5/0x1e0 [ 122.820617] futex_wait+0x28e/0x690 [ 122.820904] ? futex_wait_setup+0x230/0x230 [ 122.821235] ? wake_up_q+0x8b/0xf0 [ 122.821522] ? futex_wake+0x158/0x490 [ 122.821813] ? lock_downgrade+0x6d0/0x6d0 [ 122.822132] ? lock_is_held_type+0xd7/0x130 [ 122.822460] do_futex+0x2ff/0x380 [ 122.822723] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 122.823159] ? ktime_get+0x153/0x1f0 [ 122.823449] __x64_sys_futex+0x1c6/0x4d0 [ 122.823764] ? hrtimer_interrupt+0x5b0/0x770 [ 122.824111] ? __x64_sys_futex_time32+0x480/0x480 [ 122.824484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.824882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.825278] do_syscall_64+0x3b/0x90 [ 122.825571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.825964] RIP: 0033:0x7f81fa557b19 [ 122.826249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.827622] RSP: 002b:00007f81f7acd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.828199] RAX: ffffffffffffffda RBX: 00007f81fa66af68 RCX: 00007f81fa557b19 [ 122.828739] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f81fa66af68 [ 122.829289] RBP: 00007f81fa66af60 R08: 0000000000000000 R09: 0000000000000000 [ 122.829822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f81fa66af6c [ 122.830358] R13: 00007ffcf18bd47f R14: 00007f81f7acd300 R15: 0000000000022000 [ 122.830898] [ 122.831082] irq event stamp: 4602 [ 122.831341] hardirqs last enabled at (4601): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 122.832069] hardirqs last disabled at (4602): [] __schedule+0x1225/0x2470 [ 122.832695] softirqs last enabled at (4432): [] __irq_exit_rcu+0x11b/0x180 [ 122.833343] softirqs last disabled at (4315): [] __irq_exit_rcu+0x11b/0x180 [ 122.833999] ---[ end trace 0000000000000000 ]--- 20:42:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x102) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) write$P9_RWSTAT(r1, &(0x7f0000000380)={0x7, 0x7f, 0x5}, 0x7) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x20000190, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x80000, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x403a000, &(0x7f0000000400)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x153) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) [ 123.399416] hrtimer: interrupt took 21610 ns 20:42:10 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x2, 0x8000, 0x7, 0xa0, 0x2800000000000000, 0x10000, 0x0, 0x5}, &(0x7f0000000040)={0x6, 0x4, 0xbbe6, 0x80000001, 0x3, 0xbba, 0x0, 0x7fff}, &(0x7f0000000080)={0x37f, 0x8, 0x8, 0x9ea0, 0x8, 0x7a, 0x4254, 0x10000}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) clock_gettime(0x5, &(0x7f0000000180)) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={[0x1]}, 0x8) clock_gettime(0x1, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) io_getevents(0x0, 0x3ff, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f0000000400)={r0, r1+10000000}) rt_sigtimedwait(&(0x7f0000000440)={[0x4]}, &(0x7f0000000480), &(0x7f0000000500)={0x77359400}, 0x8) rt_sigtimedwait(&(0x7f0000000540)={[0x4]}, 0x0, &(0x7f0000000580)={0x0, 0x989680}, 0x8) futex(&(0x7f00000005c0), 0x8a, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x2, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r2}}, 0x3) rt_sigtimedwait(&(0x7f00000006c0)={[0x100]}, &(0x7f0000000700), &(0x7f0000000780)={0x77359400}, 0x8) r3 = syz_io_uring_setup(0x258b, &(0x7f00000007c0)={0x0, 0x5e83, 0x10, 0x2, 0xc1}, &(0x7f0000ff5000/0x9000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000840), &(0x7f0000000880)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000008c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0xa294}, 0x0, {0x0, r5}}, 0x2) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000900)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x140810, r3, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000940)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x2) futex(&(0x7f0000000980)=0x2, 0xf, 0x2, &(0x7f00000009c0)={0x0, 0x3938700}, &(0x7f0000000a00)=0x2, 0x1) [ 124.310140] syz-executor.4 (3762) used greatest stack depth: 24680 bytes left 20:42:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x102) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) write$P9_RWSTAT(r1, &(0x7f0000000380)={0x7, 0x7f, 0x5}, 0x7) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x20000190, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x80000, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x403a000, &(0x7f0000000400)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x153) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) [ 124.394107] loop4: detected capacity change from 0 to 264192 20:42:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x102) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) write$P9_RWSTAT(r1, &(0x7f0000000380)={0x7, 0x7f, 0x5}, 0x7) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x20000190, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x80000, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x403a000, &(0x7f0000000400)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x153) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) [ 124.703380] loop7: detected capacity change from 0 to 264192 20:42:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x102) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) write$P9_RWSTAT(r1, &(0x7f0000000380)={0x7, 0x7f, 0x5}, 0x7) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x20000190, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x80000, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x403a000, &(0x7f0000000400)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x153) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) [ 124.817562] loop6: detected capacity change from 0 to 264192 20:42:11 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x2, 0x8000, 0x7, 0xa0, 0x2800000000000000, 0x10000, 0x0, 0x5}, &(0x7f0000000040)={0x6, 0x4, 0xbbe6, 0x80000001, 0x3, 0xbba, 0x0, 0x7fff}, &(0x7f0000000080)={0x37f, 0x8, 0x8, 0x9ea0, 0x8, 0x7a, 0x4254, 0x10000}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) clock_gettime(0x5, &(0x7f0000000180)) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={[0x1]}, 0x8) clock_gettime(0x1, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) io_getevents(0x0, 0x3ff, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f0000000400)={r0, r1+10000000}) rt_sigtimedwait(&(0x7f0000000440)={[0x4]}, &(0x7f0000000480), &(0x7f0000000500)={0x77359400}, 0x8) rt_sigtimedwait(&(0x7f0000000540)={[0x4]}, 0x0, &(0x7f0000000580)={0x0, 0x989680}, 0x8) futex(&(0x7f00000005c0), 0x8a, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x2, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r2}}, 0x3) rt_sigtimedwait(&(0x7f00000006c0)={[0x100]}, &(0x7f0000000700), &(0x7f0000000780)={0x77359400}, 0x8) r3 = syz_io_uring_setup(0x258b, &(0x7f00000007c0)={0x0, 0x5e83, 0x10, 0x2, 0xc1}, &(0x7f0000ff5000/0x9000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000840), &(0x7f0000000880)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000008c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0xa294}, 0x0, {0x0, r5}}, 0x2) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000900)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x140810, r3, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000940)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x2) futex(&(0x7f0000000980)=0x2, 0xf, 0x2, &(0x7f00000009c0)={0x0, 0x3938700}, &(0x7f0000000a00)=0x2, 0x1) 20:42:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000680)="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", 0xfe0, 0x483e}, {&(0x7f0000000200)="84f446a627a0b79c96e18fb3b522ae2bd2776c4056b0", 0x16, 0x8}], 0x41400, &(0x7f0000000440)=ANY=[@ANYBLOB="636865636b3d7374726963742c646f74732c646f74732c646d61736b3d30303030303030183030303030303030003137333622312c6d6561737c722c726f6f74636f6e746578743d756e636e65645f752c686173682c7569643d202254a3c82f79b98745e7c1f52af3f7fbe48f2f56ab9e11a907b3658d975db7ba96a950919f8cec29f2071a6fd01240096280e75cbc85e5e214cda543627cf8703178a80f60a2f6aba34186369c62a6e02cedcd8c5494eb114c", @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=vfat\x00,pcr=00025,\x00'/44]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) [ 125.185890] loop4: detected capacity change from 0 to 264192 [ 126.531378] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3966 comm=syz-executor.1 [ 126.535275] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3966 comm=syz-executor.1 VM DIAGNOSIS: 20:42:09 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88801db97348 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000032 R11=0000000000000001 R12=0000000000000032 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f81f7acd700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdfb28a3368 CR3=000000003f870000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffff888041240001 RBX=ffff88804123ff58 RCX=0000000000000001 RDX=ffff88804123ff60 RSI=ffff88804123ff48 RDI=0000000000000001 RBP=ffff888041238000 RSP=ffff88804123f3a0 R8 =ffffffff862400ea R9 =ffffffff862400ee R10=ffffed1008247e92 R11=ffff88804123f468 R12=ffff88804123f469 R13=ffff88804123f488 R14=ffff88804123f428 R15=0000000000000007 RIP=ffffffff812037d0 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4129cbcb70 CR3=0000000010500000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000