Warning: Permanently added '[localhost]:16750' (ECDSA) to the list of known hosts. 2022/09/29 10:47:13 fuzzer started 2022/09/29 10:47:14 dialing manager at localhost:45751 syzkaller login: [ 45.407206] cgroup: Unknown subsys name 'net' [ 45.500510] cgroup: Unknown subsys name 'rlimit' 2022/09/29 10:47:27 syscalls: 2215 2022/09/29 10:47:27 code coverage: enabled 2022/09/29 10:47:27 comparison tracing: enabled 2022/09/29 10:47:27 extra coverage: enabled 2022/09/29 10:47:27 setuid sandbox: enabled 2022/09/29 10:47:27 namespace sandbox: enabled 2022/09/29 10:47:27 Android sandbox: enabled 2022/09/29 10:47:27 fault injection: enabled 2022/09/29 10:47:27 leak checking: enabled 2022/09/29 10:47:27 net packet injection: enabled 2022/09/29 10:47:27 net device setup: enabled 2022/09/29 10:47:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/29 10:47:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/29 10:47:27 USB emulation: enabled 2022/09/29 10:47:27 hci packet injection: enabled 2022/09/29 10:47:27 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220928) 2022/09/29 10:47:27 802.15.4 emulation: enabled 2022/09/29 10:47:28 fetching corpus: 50, signal 31482/33175 (executing program) 2022/09/29 10:47:28 fetching corpus: 100, signal 40121/43346 (executing program) 2022/09/29 10:47:28 fetching corpus: 150, signal 47354/51992 (executing program) 2022/09/29 10:47:28 fetching corpus: 200, signal 53337/59326 (executing program) 2022/09/29 10:47:28 fetching corpus: 250, signal 57335/64635 (executing program) 2022/09/29 10:47:28 fetching corpus: 300, signal 60686/69218 (executing program) 2022/09/29 10:47:28 fetching corpus: 350, signal 65354/75013 (executing program) 2022/09/29 10:47:28 fetching corpus: 400, signal 67703/78588 (executing program) 2022/09/29 10:47:29 fetching corpus: 450, signal 71893/83804 (executing program) 2022/09/29 10:47:29 fetching corpus: 500, signal 75203/88111 (executing program) 2022/09/29 10:47:29 fetching corpus: 550, signal 79144/92925 (executing program) 2022/09/29 10:47:29 fetching corpus: 600, signal 80875/95670 (executing program) 2022/09/29 10:47:29 fetching corpus: 650, signal 83815/99504 (executing program) 2022/09/29 10:47:29 fetching corpus: 700, signal 87565/103952 (executing program) 2022/09/29 10:47:29 fetching corpus: 750, signal 89778/106994 (executing program) 2022/09/29 10:47:29 fetching corpus: 800, signal 93868/111681 (executing program) 2022/09/29 10:47:29 fetching corpus: 850, signal 95898/114463 (executing program) 2022/09/29 10:47:30 fetching corpus: 900, signal 98602/117804 (executing program) 2022/09/29 10:47:30 fetching corpus: 950, signal 100128/120127 (executing program) 2022/09/29 10:47:30 fetching corpus: 1000, signal 101277/122101 (executing program) 2022/09/29 10:47:30 fetching corpus: 1050, signal 102431/124074 (executing program) 2022/09/29 10:47:30 fetching corpus: 1100, signal 103709/126138 (executing program) 2022/09/29 10:47:30 fetching corpus: 1150, signal 104598/127865 (executing program) 2022/09/29 10:47:30 fetching corpus: 1200, signal 106595/130461 (executing program) 2022/09/29 10:47:30 fetching corpus: 1250, signal 108113/132613 (executing program) 2022/09/29 10:47:30 fetching corpus: 1300, signal 110359/135410 (executing program) 2022/09/29 10:47:30 fetching corpus: 1350, signal 111947/137509 (executing program) 2022/09/29 10:47:30 fetching corpus: 1400, signal 114078/140008 (executing program) 2022/09/29 10:47:31 fetching corpus: 1450, signal 116088/142386 (executing program) 2022/09/29 10:47:31 fetching corpus: 1500, signal 117345/144149 (executing program) 2022/09/29 10:47:31 fetching corpus: 1550, signal 118097/145580 (executing program) 2022/09/29 10:47:31 fetching corpus: 1600, signal 120622/148255 (executing program) 2022/09/29 10:47:31 fetching corpus: 1650, signal 121969/150072 (executing program) 2022/09/29 10:47:31 fetching corpus: 1700, signal 122858/151570 (executing program) 2022/09/29 10:47:31 fetching corpus: 1750, signal 124929/153833 (executing program) 2022/09/29 10:47:31 fetching corpus: 1800, signal 127207/156096 (executing program) 2022/09/29 10:47:31 fetching corpus: 1850, signal 128349/157635 (executing program) 2022/09/29 10:47:32 fetching corpus: 1900, signal 129794/159343 (executing program) 2022/09/29 10:47:32 fetching corpus: 1950, signal 131783/161382 (executing program) 2022/09/29 10:47:32 fetching corpus: 2000, signal 133195/163059 (executing program) 2022/09/29 10:47:32 fetching corpus: 2050, signal 135759/165413 (executing program) 2022/09/29 10:47:32 fetching corpus: 2100, signal 137749/167348 (executing program) 2022/09/29 10:47:32 fetching corpus: 2150, signal 139606/169149 (executing program) 2022/09/29 10:47:32 fetching corpus: 2200, signal 140363/170280 (executing program) 2022/09/29 10:47:32 fetching corpus: 2250, signal 141073/171366 (executing program) 2022/09/29 10:47:32 fetching corpus: 2300, signal 142131/172625 (executing program) 2022/09/29 10:47:33 fetching corpus: 2350, signal 143851/174274 (executing program) 2022/09/29 10:47:33 fetching corpus: 2400, signal 145128/175643 (executing program) 2022/09/29 10:47:33 fetching corpus: 2450, signal 146955/177273 (executing program) 2022/09/29 10:47:33 fetching corpus: 2500, signal 148034/178456 (executing program) 2022/09/29 10:47:33 fetching corpus: 2550, signal 149020/179573 (executing program) 2022/09/29 10:47:33 fetching corpus: 2600, signal 150573/180953 (executing program) 2022/09/29 10:47:33 fetching corpus: 2650, signal 151481/182017 (executing program) 2022/09/29 10:47:33 fetching corpus: 2700, signal 152398/183000 (executing program) 2022/09/29 10:47:34 fetching corpus: 2750, signal 153537/184139 (executing program) 2022/09/29 10:47:34 fetching corpus: 2800, signal 154229/184990 (executing program) 2022/09/29 10:47:34 fetching corpus: 2850, signal 156488/186502 (executing program) 2022/09/29 10:47:34 fetching corpus: 2900, signal 157966/187678 (executing program) 2022/09/29 10:47:34 fetching corpus: 2950, signal 158754/188573 (executing program) 2022/09/29 10:47:34 fetching corpus: 3000, signal 159878/189602 (executing program) 2022/09/29 10:47:34 fetching corpus: 3050, signal 160578/190371 (executing program) 2022/09/29 10:47:34 fetching corpus: 3100, signal 161457/191225 (executing program) 2022/09/29 10:47:35 fetching corpus: 3150, signal 162021/191970 (executing program) 2022/09/29 10:47:35 fetching corpus: 3200, signal 162646/192672 (executing program) 2022/09/29 10:47:35 fetching corpus: 3250, signal 163470/193444 (executing program) 2022/09/29 10:47:35 fetching corpus: 3300, signal 165063/194568 (executing program) 2022/09/29 10:47:35 fetching corpus: 3350, signal 166732/195615 (executing program) 2022/09/29 10:47:35 fetching corpus: 3400, signal 167096/196163 (executing program) 2022/09/29 10:47:35 fetching corpus: 3450, signal 167848/196860 (executing program) 2022/09/29 10:47:35 fetching corpus: 3500, signal 169657/197878 (executing program) 2022/09/29 10:47:35 fetching corpus: 3550, signal 170846/198674 (executing program) 2022/09/29 10:47:36 fetching corpus: 3600, signal 171713/199387 (executing program) 2022/09/29 10:47:36 fetching corpus: 3650, signal 172203/199917 (executing program) 2022/09/29 10:47:36 fetching corpus: 3700, signal 173219/200608 (executing program) 2022/09/29 10:47:36 fetching corpus: 3750, signal 174165/201225 (executing program) 2022/09/29 10:47:36 fetching corpus: 3800, signal 174884/201810 (executing program) 2022/09/29 10:47:36 fetching corpus: 3850, signal 175608/202378 (executing program) 2022/09/29 10:47:36 fetching corpus: 3900, signal 176249/202917 (executing program) 2022/09/29 10:47:36 fetching corpus: 3950, signal 177100/203476 (executing program) 2022/09/29 10:47:36 fetching corpus: 4000, signal 177734/203957 (executing program) 2022/09/29 10:47:37 fetching corpus: 4050, signal 178049/204353 (executing program) 2022/09/29 10:47:37 fetching corpus: 4100, signal 178800/204869 (executing program) 2022/09/29 10:47:37 fetching corpus: 4150, signal 179501/205341 (executing program) 2022/09/29 10:47:37 fetching corpus: 4200, signal 180264/205756 (executing program) 2022/09/29 10:47:37 fetching corpus: 4250, signal 180930/206202 (executing program) 2022/09/29 10:47:37 fetching corpus: 4300, signal 181343/206594 (executing program) 2022/09/29 10:47:37 fetching corpus: 4350, signal 181791/206942 (executing program) 2022/09/29 10:47:37 fetching corpus: 4400, signal 182525/207370 (executing program) 2022/09/29 10:47:37 fetching corpus: 4450, signal 183103/207733 (executing program) 2022/09/29 10:47:38 fetching corpus: 4500, signal 183978/208160 (executing program) 2022/09/29 10:47:38 fetching corpus: 4550, signal 185120/208682 (executing program) 2022/09/29 10:47:38 fetching corpus: 4600, signal 186428/209114 (executing program) 2022/09/29 10:47:38 fetching corpus: 4650, signal 187145/209437 (executing program) 2022/09/29 10:47:38 fetching corpus: 4700, signal 187709/209748 (executing program) 2022/09/29 10:47:38 fetching corpus: 4750, signal 188125/210028 (executing program) 2022/09/29 10:47:38 fetching corpus: 4800, signal 188778/210322 (executing program) 2022/09/29 10:47:38 fetching corpus: 4850, signal 190052/210648 (executing program) 2022/09/29 10:47:38 fetching corpus: 4900, signal 190393/210925 (executing program) 2022/09/29 10:47:39 fetching corpus: 4950, signal 190901/211189 (executing program) 2022/09/29 10:47:39 fetching corpus: 5000, signal 191568/211404 (executing program) 2022/09/29 10:47:39 fetching corpus: 5050, signal 192043/211636 (executing program) 2022/09/29 10:47:39 fetching corpus: 5100, signal 192515/211865 (executing program) 2022/09/29 10:47:39 fetching corpus: 5150, signal 193429/212079 (executing program) 2022/09/29 10:47:39 fetching corpus: 5200, signal 193799/212282 (executing program) 2022/09/29 10:47:39 fetching corpus: 5250, signal 194355/212496 (executing program) 2022/09/29 10:47:39 fetching corpus: 5300, signal 195745/212527 (executing program) 2022/09/29 10:47:39 fetching corpus: 5350, signal 196113/212550 (executing program) 2022/09/29 10:47:39 fetching corpus: 5400, signal 196561/212553 (executing program) 2022/09/29 10:47:40 fetching corpus: 5450, signal 196951/212554 (executing program) 2022/09/29 10:47:40 fetching corpus: 5500, signal 197561/212554 (executing program) 2022/09/29 10:47:40 fetching corpus: 5550, signal 198102/212555 (executing program) 2022/09/29 10:47:40 fetching corpus: 5600, signal 198713/212555 (executing program) 2022/09/29 10:47:40 fetching corpus: 5650, signal 199007/212568 (executing program) 2022/09/29 10:47:40 fetching corpus: 5665, signal 199216/212568 (executing program) 2022/09/29 10:47:40 fetching corpus: 5665, signal 199216/212568 (executing program) 2022/09/29 10:47:43 starting 8 fuzzer processes 10:47:43 executing program 0: prctl$PR_PAC_RESET_KEYS(0x36, 0x4) prctl$PR_PAC_RESET_KEYS(0x36, 0xa) prctl$PR_PAC_RESET_KEYS(0x36, 0xb) prctl$PR_PAC_RESET_KEYS(0x36, 0x3) prctl$PR_PAC_RESET_KEYS(0x36, 0x11) prctl$PR_PAC_RESET_KEYS(0x36, 0xf) prctl$PR_PAC_RESET_KEYS(0x36, 0x8) prctl$PR_PAC_RESET_KEYS(0x36, 0xa) prctl$PR_PAC_RESET_KEYS(0x36, 0xa) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x10) prctl$PR_PAC_RESET_KEYS(0x36, 0x9) prctl$PR_PAC_RESET_KEYS(0x36, 0x15) prctl$PR_PAC_RESET_KEYS(0x36, 0x19) prctl$PR_PAC_RESET_KEYS(0x36, 0x11) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x2) prctl$PR_PAC_RESET_KEYS(0x36, 0xa) prctl$PR_PAC_RESET_KEYS(0x36, 0x10) prctl$PR_PAC_RESET_KEYS(0x36, 0x5) 10:47:43 executing program 1: prctl$PR_SVE_SET_VL(0x32, 0x254b3) prctl$PR_SVE_SET_VL(0x32, 0x1b177) prctl$PR_SVE_SET_VL(0x32, 0x22b3) prctl$PR_SVE_SET_VL(0x32, 0x16c57) prctl$PR_SVE_SET_VL(0x32, 0x306d9) prctl$PR_SVE_SET_VL(0x32, 0x32e38) prctl$PR_SVE_SET_VL(0x32, 0x13477) prctl$PR_SVE_SET_VL(0x32, 0x29708) prctl$PR_SVE_SET_VL(0x32, 0x2230e) prctl$PR_SVE_SET_VL(0x32, 0x1de14) prctl$PR_SVE_SET_VL(0x32, 0x331a0) prctl$PR_SVE_SET_VL(0x32, 0x3f407) prctl$PR_SVE_SET_VL(0x32, 0x2eca2) prctl$PR_SVE_SET_VL(0x32, 0x1d413) prctl$PR_SVE_SET_VL(0x32, 0x2f0ae) prctl$PR_SVE_SET_VL(0x32, 0x1795c) prctl$PR_SVE_SET_VL(0x32, 0x24c09) prctl$PR_SVE_SET_VL(0x32, 0x2620c) prctl$PR_SVE_SET_VL(0x32, 0x104be) prctl$PR_SVE_SET_VL(0x32, 0x38017) 10:47:43 executing program 2: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x200, 0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'team0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x1f, 0x8, '\x00', 0x0, &(0x7f0000000140)=[0x0]}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/kernel', 0x410000, 0x80) clock_gettime(0x0, &(0x7f0000001380)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/252, 0xfc}], 0x2}, 0x5}], 0x1, 0x40000002, &(0x7f00000013c0)={r1, r2+60000000}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r3 = getpgid(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000002bc0)='net/ip6_tables_targets\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000002c00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) clock_gettime(0x7, &(0x7f0000003000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000003040)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8000) futex(&(0x7f0000003080), 0x0, 0x0, &(0x7f00000030c0)={0x0, 0x3938700}, &(0x7f0000003100)=0x2, 0x1) clock_gettime(0x3, &(0x7f0000003140)) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000003180), 0x4040, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f00000031c0)=0x1) r7 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x34, 0x2, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) syz_io_uring_complete(0x0) 10:47:43 executing program 3: keyctl$read(0xb, 0x0, &(0x7f0000000000)=""/39, 0x27) r0 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="eb7d01335024e2ba2a48e8e9ee229e22af84131006965165a5fd86bab436f2e5ab7f1934127d8d0b4256540aa0f0e2b3d8d52d83a46f1d484b3c540c63aacf3cba4d71dba90ed00d7ad26ddad516eea2a5070e7a29c4ee29035249ecb8456ef9868b0e606a68a0be8275838a03522a17cca8bc4d8790e967f58873ef0de6af8d5cda57ab12a902795405995e0c146bd89fcc110807b253e717abf665f75e670cd24392cd5f101a0190ea7b49f348f24f7c0cbfa3c7e806fda11010cb1b7bcfed5af68bc9b00efccb9a93d56492c8ac2148e9ffb883e9a2ad04172ec52fde41f2", 0xe0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r0, 0xca, 0xd0}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'crct10dif-generic\x00'}}, &(0x7f0000000280)="82031ce2f409c4cadc90790ecb94b28855238199e3b4eeda2944ad1902ec3aca9a2dcfdbab6d389321a665889a844628b5309b30c371b62308a31a8c6b6d69f40693deaa817da7a8dd07be3441289011e938e27a86a5873e2d7fc9cc39dacee9f5ad3b984f8800931c3804f25072f39783338ba1808cf75e57a8279e2cb1247379eb17590f9b78cc82c49313da4f532fb18280f49176d8ac37df37856f3592fbe100e9b0cde91212919019a1f3dbad1693231afe0ef5acf62d8782388873d2b22404cbea16f6e7f8c4cd", &(0x7f0000000380)=""/208) r1 = request_key(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='\x00', 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000540)='$\x00', &(0x7f0000000580)) r2 = add_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000640)='id_resolver\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)="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", 0x1000, r1) keyctl$unlink(0x9, r2, r3) request_key(&(0x7f00000016c0)='cifs.spnego\x00', &(0x7f0000001700)={'syz', 0x3}, &(0x7f0000001740)=':{\x00', r3) r4 = add_key$keyring(&(0x7f0000001840), &(0x7f0000001880)={'syz', 0x1}, 0x0, 0x0, r1) r5 = request_key(&(0x7f0000001780)='blacklist\x00', &(0x7f00000017c0)={'syz', 0x0}, &(0x7f0000001800)='\x00', r4) r6 = add_key$keyring(&(0x7f0000001900), &(0x7f0000001940)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000018c0)='keyring\x00', &(0x7f0000001980)=@chain={'key_or_keyring:', r6}) r7 = request_key(&(0x7f00000019c0)='id_resolver\x00', &(0x7f0000001a00)={'syz', 0x2}, &(0x7f0000001a40)='key_or_keyring:', 0x0) add_key(&(0x7f0000001a80)='keyring\x00', &(0x7f0000001ac0)={'syz', 0x0}, 0x0, 0x0, r3) r8 = add_key$fscrypt_v1(&(0x7f0000001b00), &(0x7f0000001b40)={'fscrypt:', @desc4}, &(0x7f0000001b80)={0x0, "6b020558cecb3567afb009d05c0bccbb07bce5dd6a8e723120b9d86b61a89fde8baf49434d60c8e6dca99077db12826741e7ff27a47ccce8ed7b98d52e532969", 0x38}, 0x48, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000001c00)='encrypted\x00', &(0x7f0000001c40)=@secondary) r9 = add_key$fscrypt_v1(0xfffffffffffffffd, &(0x7f0000001c80)={'fscrypt:', @desc3}, &(0x7f0000001cc0)={0x0, "b37f4031ad1801dec64407633e1b3013ec801c0e3171458627ee506967aa083eaa890aa5ed690c587020072ee27878bf940dcf0adf58e289e8a9787fa620df1e", 0x24}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r0, r7, r9, 0x1) request_key(&(0x7f0000001d40)='syzkaller\x00', &(0x7f0000001d80)={'syz', 0x0}, &(0x7f0000001dc0)='\x00', r8) 10:47:43 executing program 4: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth1_to_hsr\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x86278e91000b178e}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) recvmmsg$unix(r1, &(0x7f0000001180)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000500)=""/241, 0xf1}, {&(0x7f0000000600)=""/99, 0x63}, {&(0x7f0000000680)=""/184, 0xb8}, {&(0x7f0000000740)=""/216, 0xd8}], 0x6}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000940)=""/51, 0x33}], 0x1}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000001000)=[{&(0x7f0000000a40)=""/166, 0xa6}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000b80)=""/74, 0x4a}, {&(0x7f0000000c00)=""/138, 0x8a}, {&(0x7f0000000cc0)=""/102, 0x66}, {&(0x7f0000000d40)=""/121, 0x79}, {&(0x7f0000000dc0)=""/199, 0xc7}, {&(0x7f0000000ec0)=""/212, 0xd4}, {&(0x7f0000000fc0)=""/2, 0x2}], 0x9, &(0x7f00000010c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x3, 0x10082, 0x0) connect$inet(r5, &(0x7f0000001240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0xc61}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001300), r4) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r9, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffffff9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4800) socket$inet6(0xa, 0xa, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x22002, 0x28) getpeername$inet6(r6, &(0x7f0000001440)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001480)=0x1c) sendto$inet(r3, &(0x7f00000014c0)="fcb6aebd7102578bd49827c952e1988a20d4d192af2ce7a09b099146aa7135fe6f404b9044152cc6563aa76f164a4f71105e4828ff7fbeac6decd14f88b6e7c9242d03979333f2176de4669219eb00b2937053ae0dfa15203dba36364e5613887ba70691d886b6e4bbd3f6d03f9578f8844ca24976f4b12f7806e0094d9ed0ee1a719a3d01a9a56f4ade32b002b52c6593d50a15fbd45f9b37b48527e57d0ea8801630b04c3e3141d7e1e03926da9cc40cdddd271807cfe211eb4b5d12d028f1d680d6a0bd27096fe09a579d87130a64da3480a889a50db1e2a5fcc2f2b9120e0fc25f1b8c7ca281b95f93df7b8328c6", 0xf0, 0x80, &(0x7f00000015c0)={0x2, 0x6, @multicast2}, 0x10) r10 = syz_open_dev$usbmon(&(0x7f0000001600), 0x7, 0x80c0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, &(0x7f0000001640)={0x2010}) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001680), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x38, r11, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000800}, 0x4000000) [ 74.504530] audit: type=1400 audit(1664448463.341:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:47:43 executing program 5: r0 = eventfd2(0x4, 0x800) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {r3}}, './file1\x00'}) r6 = dup(r0) r7 = openat$cgroup_ro(r3, &(0x7f0000000640)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f00000006c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="41afd4ec36e4acaa717701c10b9452999504313fe69306a55c98447d9bf4908477fe4de1e2719731c8ed0962809f0e19f343c9c73d86560e6a117a237c00f28224e8f175", 0x44, 0x3, 0x0, 0x1, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000280)="dfe7f4eb12232d813f5ddf9f75508b8e4a94edb5addbf962baef56c7037c0a21623574ab121eefd1df9ac707b1b210985050af82aa93391673671ff084fd6a77b8", 0x41, 0x100000001, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x7fff, r5, &(0x7f0000000380)="c67834bc993ec6f885b1c49272001bb0908e47702978eafa49cba2d16495380f6dc17975b73229bf29d48219caed2adba250bd777c4fd49a9996bacec553bbda90d0b90541c939d6f54103f7", 0x4c, 0x8, 0x0, 0x2, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000440)="311f59dc906dbf3413a9d64c47b3df1e0b1bff582ed1d59b35c873aa584adfc3607b2ac7380c9a015b388a9fdea0676f68b97f8e6dc99d43c6f612ad37ba8d01a37cd8795ba0e84480534171ed4cc6f05407949abfa726", 0x57, 0x3, 0x0, 0x2, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x3, r3, &(0x7f0000000500)="051e64ef2f849acffe52f63d42d8330284c068355134f271b008c0b7edeb3f3a1750e8f92ef2b0c9c853020c5a8a1ee08e8e690d54f8b0771972985d5ae109fe35d25b559c39fec6a01e4697b3ccd44c01c68b491844e5e945a5fad8f33c7d24e1f527491245ab46306a2b24de0c84797cf7aeab53250086f31ee4855694f3baac7cab2ef82d86317cf7c2194ed686f956b8cc85ab4307da7bb621d11c94214a8d82f6b92be0df17af52f1c4d507da1c5c7a4fb5e2", 0xb5, 0x4, 0x0, 0x1, r6}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x9, r3, &(0x7f0000000600), 0x0, 0x9, 0x0, 0x7, r7}]) open$dir(&(0x7f0000000700)='./file0\x00', 0x200080, 0xd5) r8 = dup3(r4, r5, 0x0) r9 = openat2(r8, &(0x7f0000000740)='./file1\x00', &(0x7f0000000780)={0xa000, 0x14a, 0x2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r9, {0x1}}, './file1\x00'}) mknod$loop(&(0x7f0000000800)='./file1\x00', 0x200, 0x1) fspick(r8, &(0x7f0000000840)='./file0\x00', 0x1) getresgid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a00)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000940)="8fc79c597703c23c3fb4b444a63157f97a783f8a51acb4783500cf762204b7579b432b6ec2ed7d6695ae2a1245c21eaef8794ef6fa80610bef2302f52b135d1e20faf2e98dfe03dbab1f290e1a6258b4868290aae14331e7e5f61283b99bf95843b6961f566fd4c85557dbe0dba23536ef508f69fa0a6b660e8f70ea74a2a1c3ed292a570686d513d75c9da972c2c315", 0x90, r6}, 0x68) fcntl$notify(r5, 0x402, 0x16) r11 = perf_event_open$cgroup(&(0x7f0000000ac0)={0x2, 0x80, 0x2e, 0x9, 0xff, 0x1, 0x0, 0x5, 0x52, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000a80), 0xb}, 0x2931, 0x5, 0xda6a, 0x7, 0x0, 0x7, 0x16ba, 0x0, 0x8, 0x0, 0x3}, r10, 0x2, r9, 0x8) ioctl$FITRIM(r11, 0xc0185879, &(0x7f0000000b40)={0x3, 0x800000000000}) syz_open_procfs(0x0, &(0x7f0000000bc0)='net/ip6_mr_cache\x00') 10:47:43 executing program 6: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)=0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x5, 0xa7a3, 0xc0, @local, @local, 0x8000, 0x8, 0x18b0, 0x2}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x64008000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000240)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44890}, 0xcb129702ddc9a4a5) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={0x0, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @broadcast}, 0x66, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x7f, 0x81, 0x9}) r3 = openat$cgroup_type(r1, &(0x7f00000004c0), 0x2, 0x0) close(r3) r4 = signalfd4(r3, &(0x7f0000000500)={[0x1f]}, 0x8, 0x800) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r5, 0x0, 0x4, 0x8, 0x7ff, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x40, 0x7, 0x7c1f27f4}}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000680)={@loopback, r2}, 0x14) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', r6, 0x29, 0x7, 0x3, 0x400, 0x45, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x20, 0x10, 0x8, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', r7, 0x2f, 0x45, 0x1, 0x200000, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x8000, 0x8, 0x1}}) r8 = fork() ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000880)=r8) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x44815}, 0x40004) 10:47:43 executing program 7: getdents(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000, 0x7fffffff}}, './file0\x00'}) execveat(r0, &(0x7f0000001040)='./file0\x00', &(0x7f0000001100)=[&(0x7f0000001080)='\x00', &(0x7f00000010c0)='\x00'], &(0x7f0000001180)=[&(0x7f0000001140)='*\x00'], 0x100) execveat(r0, &(0x7f00000011c0)='./file0\x00', &(0x7f00000013c0)=[&(0x7f0000001200)='(\\}}+,!/*#^/$$/\'*\x00', &(0x7f0000001240)='\xed&${:!-:!)\x00', &(0x7f0000001280)='\x00', &(0x7f00000012c0)='*\x00', &(0x7f0000001300)='\\{])*(\']-.\x00', &(0x7f0000001340)='-+{*@@,!\x00', &(0x7f0000001380)='\'::#*&(#-\x00'], &(0x7f00000014c0)=[&(0x7f0000001400)=':]+&\x00', &(0x7f0000001440)='\x00', &(0x7f0000001480)='*\x00'], 0x1000) getdents64(r0, &(0x7f0000001500)=""/222, 0xde) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000001600)={0x1, 0x3}) execveat(r0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001700)=[&(0x7f0000001680)='(.\x00', &(0x7f00000016c0)='\x00'], &(0x7f0000001900)=[&(0x7f0000001740)=':]+&\x00', &(0x7f0000001780)='-+{*@@,!\x00', &(0x7f00000017c0)='-+{*@@,!\x00', &(0x7f0000001800)='\xed&${:!-:!)\x00', &(0x7f0000001840)='(\\}}+,!/*#^/$$/\'*\x00', &(0x7f0000001880)='\x00', &(0x7f00000018c0)='#\x00'], 0x400) write$P9_RREADLINK(r0, &(0x7f0000001940)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000001980)={0xb, 0x77, 0x2, 0x4}, 0xb) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000019c0)=""/22) r2 = openat(r1, &(0x7f0000001a00)='./file0\x00', 0x20000, 0x83) r3 = fsmount(r0, 0x0, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001a80)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000001b80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001bc0)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@initdev}}, &(0x7f0000001cc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001dc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000020c0)={'syztnl2\x00', &(0x7f0000002040)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x1c00000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x20, 0x18, 0x6}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000002200)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002100)={0x9c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0xfd4ad895b845e72f) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000002240)={0x1f, 0x0, @none}, &(0x7f0000002280)=0xe, 0x80000) fsetxattr$trusted_overlay_origin(r8, &(0x7f00000022c0), &(0x7f0000002300), 0x2, 0x1) [ 75.800124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.801925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.805169] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.808517] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.810223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.811674] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.814090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.815356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.817315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.822739] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.823837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.826316] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.833520] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.839271] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.841873] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.862339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.868596] Bluetooth: hci1: HCI_REQ-0x0c1a [ 75.868737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.879362] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.883785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.890760] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.940510] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.942640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.953222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.955929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.966172] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.967415] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.981885] Bluetooth: hci6: HCI_REQ-0x0c1a [ 77.882266] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 77.883747] Bluetooth: hci1: command 0x0409 tx timeout [ 77.884836] Bluetooth: hci2: command 0x0409 tx timeout [ 77.946122] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 77.946329] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 77.947725] Bluetooth: hci0: command 0x0409 tx timeout [ 77.949570] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 78.010076] Bluetooth: hci6: command 0x0409 tx timeout [ 79.930042] Bluetooth: hci2: command 0x041b tx timeout [ 79.931412] Bluetooth: hci1: command 0x041b tx timeout [ 79.994896] Bluetooth: hci0: command 0x041b tx timeout [ 80.058038] Bluetooth: hci6: command 0x041b tx timeout [ 80.738827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.743802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.745742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.750472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.752950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.754501] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.759711] Bluetooth: hci3: HCI_REQ-0x0c1a [ 81.151447] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.192163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.204126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.208927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.210790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.226624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.232711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.242467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.245127] Bluetooth: hci4: HCI_REQ-0x0c1a [ 81.284160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.304379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.334219] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.336125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.348212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.355005] Bluetooth: hci5: HCI_REQ-0x0c1a [ 81.453853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.456835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.490149] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.502123] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.512407] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.530024] Bluetooth: hci7: HCI_REQ-0x0c1a [ 81.978037] Bluetooth: hci1: command 0x040f tx timeout [ 81.978057] Bluetooth: hci2: command 0x040f tx timeout [ 82.042015] Bluetooth: hci0: command 0x040f tx timeout [ 82.106015] Bluetooth: hci6: command 0x040f tx timeout [ 82.810036] Bluetooth: hci3: command 0x0409 tx timeout [ 83.258040] Bluetooth: hci4: command 0x0409 tx timeout [ 83.386029] Bluetooth: hci5: command 0x0409 tx timeout [ 83.579066] Bluetooth: hci7: command 0x0409 tx timeout [ 84.026004] Bluetooth: hci1: command 0x0419 tx timeout [ 84.027013] Bluetooth: hci2: command 0x0419 tx timeout [ 84.091089] Bluetooth: hci0: command 0x0419 tx timeout [ 84.155059] Bluetooth: hci6: command 0x0419 tx timeout [ 84.858015] Bluetooth: hci3: command 0x041b tx timeout [ 85.306025] Bluetooth: hci4: command 0x041b tx timeout [ 85.434011] Bluetooth: hci5: command 0x041b tx timeout [ 85.626065] Bluetooth: hci7: command 0x041b tx timeout [ 86.906094] Bluetooth: hci3: command 0x040f tx timeout [ 87.354003] Bluetooth: hci4: command 0x040f tx timeout [ 87.482009] Bluetooth: hci5: command 0x040f tx timeout [ 87.674063] Bluetooth: hci7: command 0x040f tx timeout [ 88.954022] Bluetooth: hci3: command 0x0419 tx timeout [ 89.402052] Bluetooth: hci4: command 0x0419 tx timeout [ 89.530156] Bluetooth: hci5: command 0x0419 tx timeout [ 89.722012] Bluetooth: hci7: command 0x0419 tx timeout 10:48:35 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r1, r0], 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4007, @fd_index=0x1, 0x3, 0xfff, 0x7, 0x1c}, 0x1) [ 126.529320] audit: type=1400 audit(1664448515.365:7): avc: denied { open } for pid=3663 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.532375] audit: type=1400 audit(1664448515.365:8): avc: denied { kernel } for pid=3663 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.559413] ------------[ cut here ]------------ [ 126.559434] [ 126.559437] ====================================================== [ 126.559441] WARNING: possible circular locking dependency detected [ 126.559445] 6.0.0-rc7-next-20220928 #1 Not tainted [ 126.559451] ------------------------------------------------------ [ 126.559455] syz-executor.1/3665 is trying to acquire lock: [ 126.559462] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 126.559506] [ 126.559506] but task is already holding lock: [ 126.559508] ffff8880101d3020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.559538] [ 126.559538] which lock already depends on the new lock. [ 126.559538] [ 126.559541] [ 126.559541] the existing dependency chain (in reverse order) is: [ 126.559545] [ 126.559545] -> #3 (&ctx->lock){....}-{2:2}: [ 126.559559] _raw_spin_lock+0x2a/0x40 [ 126.559572] __perf_event_task_sched_out+0x53b/0x18d0 [ 126.559586] __schedule+0xedd/0x2470 [ 126.559603] schedule+0xda/0x1b0 [ 126.559620] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.559632] syscall_exit_to_user_mode+0x19/0x40 [ 126.559648] do_syscall_64+0x48/0x90 [ 126.559659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.559674] [ 126.559674] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 126.559689] _raw_spin_lock_nested+0x30/0x40 [ 126.559702] raw_spin_rq_lock_nested+0x1e/0x30 [ 126.559716] task_fork_fair+0x63/0x4d0 [ 126.559734] sched_cgroup_fork+0x3d0/0x540 [ 126.559749] copy_process+0x4183/0x6e20 [ 126.559761] kernel_clone+0xe7/0x890 [ 126.559771] user_mode_thread+0xad/0xf0 [ 126.559781] rest_init+0x24/0x250 [ 126.559796] arch_call_rest_init+0xf/0x14 [ 126.559817] start_kernel+0x4c6/0x4eb [ 126.559835] secondary_startup_64_no_verify+0xe0/0xeb [ 126.559850] [ 126.559850] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 126.559864] _raw_spin_lock_irqsave+0x39/0x60 [ 126.559877] try_to_wake_up+0xab/0x1930 [ 126.559891] up+0x75/0xb0 [ 126.559909] __up_console_sem+0x6e/0x80 [ 126.559926] console_unlock+0x46a/0x590 [ 126.559944] vprintk_emit+0x1bd/0x560 [ 126.559965] vprintk+0x84/0xa0 [ 126.559983] _printk+0xba/0xf1 [ 126.559996] kauditd_hold_skb.cold+0x3f/0x4e [ 126.560017] kauditd_send_queue+0x233/0x290 [ 126.560033] kauditd_thread+0x5da/0x9a0 [ 126.560048] kthread+0x2ed/0x3a0 [ 126.560064] ret_from_fork+0x22/0x30 [ 126.560077] [ 126.560077] -> #0 ((console_sem).lock){....}-{2:2}: [ 126.560091] __lock_acquire+0x2a02/0x5e70 [ 126.560110] lock_acquire+0x1a2/0x530 [ 126.560128] _raw_spin_lock_irqsave+0x39/0x60 [ 126.560141] down_trylock+0xe/0x70 [ 126.560159] __down_trylock_console_sem+0x3b/0xd0 [ 126.560177] vprintk_emit+0x16b/0x560 [ 126.560195] vprintk+0x84/0xa0 [ 126.560213] _printk+0xba/0xf1 [ 126.560226] report_bug.cold+0x72/0xab [ 126.560236] handle_bug+0x3c/0x70 [ 126.560246] exc_invalid_op+0x14/0x50 [ 126.560257] asm_exc_invalid_op+0x16/0x20 [ 126.560272] group_sched_out.part.0+0x2c7/0x460 [ 126.560283] ctx_sched_out+0x8f1/0xc10 [ 126.560294] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.560308] __schedule+0xedd/0x2470 [ 126.560324] schedule+0xda/0x1b0 [ 126.560341] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.560352] syscall_exit_to_user_mode+0x19/0x40 [ 126.560368] do_syscall_64+0x48/0x90 [ 126.560378] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.560393] [ 126.560393] other info that might help us debug this: [ 126.560393] [ 126.560396] Chain exists of: [ 126.560396] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 126.560396] [ 126.560412] Possible unsafe locking scenario: [ 126.560412] [ 126.560414] CPU0 CPU1 [ 126.560417] ---- ---- [ 126.560419] lock(&ctx->lock); [ 126.560425] lock(&rq->__lock); [ 126.560431] lock(&ctx->lock); [ 126.560438] lock((console_sem).lock); [ 126.560444] [ 126.560444] *** DEADLOCK *** [ 126.560444] [ 126.560446] 2 locks held by syz-executor.1/3665: [ 126.560453] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 126.560487] #1: ffff8880101d3020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.560516] [ 126.560516] stack backtrace: [ 126.560519] CPU: 1 PID: 3665 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220928 #1 [ 126.560532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.560541] Call Trace: [ 126.560545] [ 126.560549] dump_stack_lvl+0x8b/0xb3 [ 126.560562] check_noncircular+0x263/0x2e0 [ 126.560580] ? format_decode+0x26c/0xb50 [ 126.560599] ? print_circular_bug+0x450/0x450 [ 126.560618] ? enable_ptr_key_workfn+0x20/0x20 [ 126.560638] ? format_decode+0x26c/0xb50 [ 126.560659] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 126.560679] __lock_acquire+0x2a02/0x5e70 [ 126.560703] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.560728] lock_acquire+0x1a2/0x530 [ 126.560746] ? down_trylock+0xe/0x70 [ 126.560767] ? lock_release+0x750/0x750 [ 126.560790] ? vprintk+0x84/0xa0 [ 126.560810] _raw_spin_lock_irqsave+0x39/0x60 [ 126.560824] ? down_trylock+0xe/0x70 [ 126.560844] down_trylock+0xe/0x70 [ 126.560863] ? vprintk+0x84/0xa0 [ 126.560882] __down_trylock_console_sem+0x3b/0xd0 [ 126.560901] vprintk_emit+0x16b/0x560 [ 126.560922] vprintk+0x84/0xa0 [ 126.560942] _printk+0xba/0xf1 [ 126.560956] ? record_print_text.cold+0x16/0x16 [ 126.560975] ? report_bug.cold+0x66/0xab [ 126.560987] ? group_sched_out.part.0+0x2c7/0x460 [ 126.561000] report_bug.cold+0x72/0xab [ 126.561013] handle_bug+0x3c/0x70 [ 126.561024] exc_invalid_op+0x14/0x50 [ 126.561036] asm_exc_invalid_op+0x16/0x20 [ 126.561058] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.561073] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.561085] RSP: 0018:ffff88803f9efc48 EFLAGS: 00010006 [ 126.561094] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.561102] RDX: ffff888008a90000 RSI: ffffffff815662f7 RDI: 0000000000000005 [ 126.561110] RBP: ffff88801d8d0000 R08: 0000000000000005 R09: 0000000000000001 [ 126.561118] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff8880101d3000 [ 126.561126] R13: ffff88806cf3d140 R14: ffffffff8547cf00 R15: 0000000000000002 [ 126.561137] ? group_sched_out.part.0+0x2c7/0x460 [ 126.561152] ? group_sched_out.part.0+0x2c7/0x460 [ 126.561166] ctx_sched_out+0x8f1/0xc10 [ 126.561180] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.561197] ? lock_is_held_type+0xd7/0x130 [ 126.561213] ? __perf_cgroup_move+0x160/0x160 [ 126.561227] ? set_next_entity+0x304/0x550 [ 126.561246] ? update_curr+0x267/0x740 [ 126.561267] ? lock_is_held_type+0xd7/0x130 [ 126.561284] __schedule+0xedd/0x2470 [ 126.561304] ? io_schedule_timeout+0x150/0x150 [ 126.561327] schedule+0xda/0x1b0 [ 126.561345] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.561358] syscall_exit_to_user_mode+0x19/0x40 [ 126.561375] do_syscall_64+0x48/0x90 [ 126.561387] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.561402] RIP: 0033:0x7f7545f64b19 [ 126.561411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.561422] RSP: 002b:00007f75434da218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.561434] RAX: 0000000000000001 RBX: 00007f7546077f68 RCX: 00007f7545f64b19 [ 126.561442] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7546077f6c [ 126.561449] RBP: 00007f7546077f60 R08: 000000000000000e R09: 0000000000000000 [ 126.561457] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7546077f6c [ 126.561465] R13: 00007fff47fe5c9f R14: 00007f75434da300 R15: 0000000000022000 [ 126.561478] [ 126.618891] WARNING: CPU: 1 PID: 3665 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 126.619563] Modules linked in: [ 126.619804] CPU: 1 PID: 3665 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220928 #1 [ 126.620394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.621209] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.621608] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.622914] RSP: 0018:ffff88803f9efc48 EFLAGS: 00010006 [ 126.623271] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.623743] RDX: ffff888008a90000 RSI: ffffffff815662f7 RDI: 0000000000000005 [ 126.624216] RBP: ffff88801d8d0000 R08: 0000000000000005 R09: 0000000000000001 [ 126.624684] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff8880101d3000 [ 126.625168] R13: ffff88806cf3d140 R14: ffffffff8547cf00 R15: 0000000000000002 [ 126.625639] FS: 00007f75434da700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 126.626168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.626554] CR2: 00007fdcbd6456f4 CR3: 000000003e9dc000 CR4: 0000000000350ee0 [ 126.627020] Call Trace: [ 126.627196] [ 126.627352] ctx_sched_out+0x8f1/0xc10 [ 126.627621] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.627969] ? lock_is_held_type+0xd7/0x130 [ 126.628263] ? __perf_cgroup_move+0x160/0x160 [ 126.628567] ? set_next_entity+0x304/0x550 [ 126.628859] ? update_curr+0x267/0x740 [ 126.629135] ? lock_is_held_type+0xd7/0x130 [ 126.629428] __schedule+0xedd/0x2470 [ 126.629689] ? io_schedule_timeout+0x150/0x150 [ 126.630007] schedule+0xda/0x1b0 [ 126.630248] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.630581] syscall_exit_to_user_mode+0x19/0x40 [ 126.630902] do_syscall_64+0x48/0x90 [ 126.631154] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.631507] RIP: 0033:0x7f7545f64b19 [ 126.631759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.632928] RSP: 002b:00007f75434da218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.633435] RAX: 0000000000000001 RBX: 00007f7546077f68 RCX: 00007f7545f64b19 [ 126.633907] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7546077f6c [ 126.634376] RBP: 00007f7546077f60 R08: 000000000000000e R09: 0000000000000000 [ 126.634849] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7546077f6c [ 126.635321] R13: 00007fff47fe5c9f R14: 00007f75434da300 R15: 0000000000022000 [ 126.635800] [ 126.635961] irq event stamp: 2692 [ 126.636192] hardirqs last enabled at (2691): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 126.636806] hardirqs last disabled at (2692): [] __schedule+0x1225/0x2470 [ 126.637371] softirqs last enabled at (1306): [] __irq_exit_rcu+0x11b/0x180 [ 126.637947] softirqs last disabled at (1301): [] __irq_exit_rcu+0x11b/0x180 [ 126.638510] ---[ end trace 0000000000000000 ]--- 10:48:35 executing program 3: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="008448000000000000000000000000cc", @ANYRES16=0x0, @ANYBLOB="00082abd7000fedbdf252100000009001f00706879310000000005002000430000000c0005000201aaaaaaaaaaaa09001f007068793300000000050020000000000005002000010000000c0005000203aaaaaaaaaaaa"], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8001) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000200)=""/63) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'sit0\x00', r2, 0x2f, 0x9, 0x3, 0x200, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, @local, 0x7800, 0x80, 0xa1, 0x1}}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={@mcast2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0xfffd, 0xc00, 0x9, 0x2, r6}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaae1a7b0000007c9c00000000000000000000bbfe8000000000000000000000000000aa0000000000002998bb3229cda69d16", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xdee20a1376e0cc6d, 0x0) 10:48:35 executing program 3: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="008448000000000000000000000000cc", @ANYRES16=0x0, @ANYBLOB="00082abd7000fedbdf252100000009001f00706879310000000005002000430000000c0005000201aaaaaaaaaaaa09001f007068793300000000050020000000000005002000010000000c0005000203aaaaaaaaaaaa"], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8001) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000200)=""/63) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'sit0\x00', r2, 0x2f, 0x9, 0x3, 0x200, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, @local, 0x7800, 0x80, 0xa1, 0x1}}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={@mcast2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0xfffd, 0xc00, 0x9, 0x2, r6}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaae1a7b0000007c9c00000000000000000000bbfe8000000000000000000000000000aa0000000000002998bb3229cda69d16", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xdee20a1376e0cc6d, 0x0) 10:48:35 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r1, r0], 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4007, @fd_index=0x1, 0x3, 0xfff, 0x7, 0x1c}, 0x1) 10:48:35 executing program 1: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="008448000000000000000000000000cc", @ANYRES16=0x0, @ANYBLOB="00082abd7000fedbdf252100000009001f00706879310000000005002000430000000c0005000201aaaaaaaaaaaa09001f007068793300000000050020000000000005002000010000000c0005000203aaaaaaaaaaaa"], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8001) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000200)=""/63) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'sit0\x00', r2, 0x2f, 0x9, 0x3, 0x200, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, @local, 0x7800, 0x80, 0xa1, 0x1}}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={@mcast2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0xfffd, 0xc00, 0x9, 0x2, r6}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaae1a7b0000007c9c00000000000000000000bbfe8000000000000000000000000000aa0000000000002998bb3229cda69d16", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xdee20a1376e0cc6d, 0x0) 10:48:36 executing program 3: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="008448000000000000000000000000cc", @ANYRES16=0x0, @ANYBLOB="00082abd7000fedbdf252100000009001f00706879310000000005002000430000000c0005000201aaaaaaaaaaaa09001f007068793300000000050020000000000005002000010000000c0005000203aaaaaaaaaaaa"], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8001) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000200)=""/63) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'sit0\x00', r2, 0x2f, 0x9, 0x3, 0x200, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, @local, 0x7800, 0x80, 0xa1, 0x1}}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={@mcast2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0xfffd, 0xc00, 0x9, 0x2, r6}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaae1a7b0000007c9c00000000000000000000bbfe8000000000000000000000000000aa0000000000002998bb3229cda69d16", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xdee20a1376e0cc6d, 0x0) 10:48:36 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x7}) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="07010103bb030000d10100000400000029000000020000000000000000000000dcbaaba458bce53d500da0a4c5023fa024c7a06eb26d2bae7234eb35ba94d4d70199ba9dd446700e65920eddaef259ad0a2811819810491df18c31febec8ba819b0f6e7b5e4080040475b897922689d398ba0e495a789490fe52acb02ccb03d42f42d0f77507027e5b2dbedf3d6cae4521be70372b7b64e2e8399a19719a644001bf19d3daa102be296bcab38a7cf3fba9ae748c9d600ff5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/952], 0x3b8) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0xcf, 0x8, 0x3f, 0x0, 0xfff, 0x68d10, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffb}, 0x4830, 0xe2e2, 0xffffffff, 0x2, 0x7, 0x1ff, 0xff, 0x0, 0xfff, 0x0, 0x6}, r4, 0xf, r2, 0x1) r6 = gettid() r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x7}) rt_tgsigqueueinfo(r6, r7, 0x2f, &(0x7f00000001c0)={0x3, 0x0, 0x4}) dup3(r3, r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) r8 = getpid() perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x47, 0x3, 0xc, 0x5, 0x0, 0xb4, 0x810, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x400, 0xff, 0x8001, 0x2, 0x7, 0x10001, 0x4, 0x0, 0x8000ab6, 0x0, 0x8}, r8, 0xe, r3, 0xb) 10:48:36 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x7}) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/952], 0x3b8) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0xcf, 0x8, 0x3f, 0x0, 0xfff, 0x68d10, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffb}, 0x4830, 0xe2e2, 0xffffffff, 0x2, 0x7, 0x1ff, 0xff, 0x0, 0xfff, 0x0, 0x6}, r4, 0xf, r2, 0x1) r6 = gettid() r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x7}) rt_tgsigqueueinfo(r6, r7, 0x2f, &(0x7f00000001c0)={0x3, 0x0, 0x4}) dup3(r3, r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) r8 = getpid() perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x47, 0x3, 0xc, 0x5, 0x0, 0xb4, 0x810, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x400, 0xff, 0x8001, 0x2, 0x7, 0x10001, 0x4, 0x0, 0x8000ab6, 0x0, 0x8}, r8, 0xe, r3, 0xb) VM DIAGNOSIS: 10:48:35 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88801ac3f4c8 RCX=0000000000000000 RDX=1ffff11003587ea4 RSI=ffff88801ac3fdd0 RDI=ffffffff81637caf RBP=ffff88801ac3f520 RSP=ffff88801ac3f4b0 R8 =ffffffff85ed11e8 R9 =ffffffff85ed11ec R10=ffffed1003587ea6 R11=ffff88801ac3f508 R12=ffff88801ac3f590 R13=0000000000000000 R14=ffff88801b548000 R15=ffff888007c75000 RIP=ffffffff81119fbe RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa4bdf581f0 CR3=000000003e898000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba131 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff88803f9ef690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000077 R11=0000000000000001 R12=0000000000000077 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba120 RIP=ffffffff823ba189 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f75434da700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdcbd6456f4 CR3=000000003e9dc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f754604b7c0 00007f754604b7c8 YMM02=0000000000000000 0000000000000000 00007f754604b7e0 00007f754604b7c0 YMM03=0000000000000000 0000000000000000 00007f754604b7c8 00007f754604b7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000