Warning: Permanently added '[localhost]:18660' (ECDSA) to the list of known hosts. 2022/09/13 08:36:34 fuzzer started 2022/09/13 08:36:35 dialing manager at localhost:38027 syzkaller login: [ 41.311302] cgroup: Unknown subsys name 'net' [ 41.438060] cgroup: Unknown subsys name 'rlimit' 2022/09/13 08:36:47 syscalls: 2215 2022/09/13 08:36:47 code coverage: enabled 2022/09/13 08:36:47 comparison tracing: enabled 2022/09/13 08:36:47 extra coverage: enabled 2022/09/13 08:36:47 setuid sandbox: enabled 2022/09/13 08:36:47 namespace sandbox: enabled 2022/09/13 08:36:47 Android sandbox: enabled 2022/09/13 08:36:47 fault injection: enabled 2022/09/13 08:36:47 leak checking: enabled 2022/09/13 08:36:47 net packet injection: enabled 2022/09/13 08:36:47 net device setup: enabled 2022/09/13 08:36:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/13 08:36:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/13 08:36:47 USB emulation: enabled 2022/09/13 08:36:47 hci packet injection: enabled 2022/09/13 08:36:47 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/13 08:36:47 802.15.4 emulation: enabled 2022/09/13 08:36:47 fetching corpus: 50, signal 28873/30659 (executing program) 2022/09/13 08:36:47 fetching corpus: 100, signal 39536/43006 (executing program) 2022/09/13 08:36:48 fetching corpus: 150, signal 52148/57090 (executing program) 2022/09/13 08:36:48 fetching corpus: 200, signal 58190/64657 (executing program) 2022/09/13 08:36:48 fetching corpus: 250, signal 68758/76479 (executing program) 2022/09/13 08:36:48 fetching corpus: 300, signal 74716/83785 (executing program) 2022/09/13 08:36:48 fetching corpus: 350, signal 79705/90052 (executing program) 2022/09/13 08:36:48 fetching corpus: 400, signal 85068/96614 (executing program) 2022/09/13 08:36:48 fetching corpus: 450, signal 89973/102661 (executing program) 2022/09/13 08:36:49 fetching corpus: 500, signal 93866/107684 (executing program) 2022/09/13 08:36:49 fetching corpus: 550, signal 97995/112885 (executing program) 2022/09/13 08:36:49 fetching corpus: 600, signal 101779/117712 (executing program) 2022/09/13 08:36:49 fetching corpus: 650, signal 105686/122590 (executing program) 2022/09/13 08:36:49 fetching corpus: 700, signal 108884/126819 (executing program) 2022/09/13 08:36:49 fetching corpus: 750, signal 113088/131885 (executing program) 2022/09/13 08:36:50 fetching corpus: 800, signal 116964/136585 (executing program) 2022/09/13 08:36:50 fetching corpus: 850, signal 120626/141095 (executing program) 2022/09/13 08:36:50 fetching corpus: 900, signal 122385/143828 (executing program) 2022/09/13 08:36:50 fetching corpus: 950, signal 124946/147299 (executing program) 2022/09/13 08:36:50 fetching corpus: 1000, signal 126360/149723 (executing program) 2022/09/13 08:36:50 fetching corpus: 1050, signal 127916/152236 (executing program) 2022/09/13 08:36:50 fetching corpus: 1100, signal 130448/155588 (executing program) 2022/09/13 08:36:50 fetching corpus: 1150, signal 132561/158518 (executing program) 2022/09/13 08:36:51 fetching corpus: 1200, signal 134102/160911 (executing program) 2022/09/13 08:36:51 fetching corpus: 1250, signal 136492/164018 (executing program) 2022/09/13 08:36:51 fetching corpus: 1300, signal 139331/167506 (executing program) 2022/09/13 08:36:51 fetching corpus: 1350, signal 140824/169805 (executing program) 2022/09/13 08:36:51 fetching corpus: 1400, signal 142624/172350 (executing program) 2022/09/13 08:36:51 fetching corpus: 1450, signal 144540/174967 (executing program) 2022/09/13 08:36:51 fetching corpus: 1500, signal 146579/177676 (executing program) 2022/09/13 08:36:51 fetching corpus: 1550, signal 148011/179918 (executing program) 2022/09/13 08:36:52 fetching corpus: 1600, signal 150717/183096 (executing program) 2022/09/13 08:36:52 fetching corpus: 1650, signal 152839/185848 (executing program) 2022/09/13 08:36:52 fetching corpus: 1700, signal 155150/188659 (executing program) 2022/09/13 08:36:52 fetching corpus: 1750, signal 156252/190462 (executing program) 2022/09/13 08:36:52 fetching corpus: 1800, signal 157570/192394 (executing program) 2022/09/13 08:36:52 fetching corpus: 1850, signal 159554/194889 (executing program) 2022/09/13 08:36:52 fetching corpus: 1900, signal 160663/196660 (executing program) 2022/09/13 08:36:53 fetching corpus: 1950, signal 162223/198707 (executing program) 2022/09/13 08:36:53 fetching corpus: 2000, signal 163999/200968 (executing program) 2022/09/13 08:36:53 fetching corpus: 2050, signal 165498/203017 (executing program) 2022/09/13 08:36:53 fetching corpus: 2100, signal 166525/204636 (executing program) 2022/09/13 08:36:53 fetching corpus: 2150, signal 167968/206568 (executing program) 2022/09/13 08:36:53 fetching corpus: 2200, signal 169571/208630 (executing program) 2022/09/13 08:36:53 fetching corpus: 2250, signal 170715/210358 (executing program) 2022/09/13 08:36:53 fetching corpus: 2300, signal 171905/212097 (executing program) 2022/09/13 08:36:54 fetching corpus: 2350, signal 173502/214093 (executing program) 2022/09/13 08:36:54 fetching corpus: 2400, signal 174883/215904 (executing program) 2022/09/13 08:36:54 fetching corpus: 2450, signal 176274/217728 (executing program) 2022/09/13 08:36:54 fetching corpus: 2500, signal 177469/219371 (executing program) 2022/09/13 08:36:54 fetching corpus: 2550, signal 178770/221093 (executing program) 2022/09/13 08:36:54 fetching corpus: 2600, signal 180384/222947 (executing program) 2022/09/13 08:36:55 fetching corpus: 2650, signal 181639/224587 (executing program) 2022/09/13 08:36:55 fetching corpus: 2700, signal 182764/226143 (executing program) 2022/09/13 08:36:55 fetching corpus: 2750, signal 183966/227755 (executing program) 2022/09/13 08:36:55 fetching corpus: 2800, signal 185357/229409 (executing program) 2022/09/13 08:36:55 fetching corpus: 2850, signal 186970/231219 (executing program) 2022/09/13 08:36:55 fetching corpus: 2900, signal 187818/232552 (executing program) 2022/09/13 08:36:55 fetching corpus: 2950, signal 188824/233957 (executing program) 2022/09/13 08:36:56 fetching corpus: 3000, signal 190012/235478 (executing program) 2022/09/13 08:36:56 fetching corpus: 3050, signal 191076/236871 (executing program) 2022/09/13 08:36:56 fetching corpus: 3100, signal 192177/238306 (executing program) 2022/09/13 08:36:56 fetching corpus: 3150, signal 193344/239833 (executing program) 2022/09/13 08:36:56 fetching corpus: 3200, signal 194288/241145 (executing program) 2022/09/13 08:36:56 fetching corpus: 3250, signal 195293/242480 (executing program) 2022/09/13 08:36:56 fetching corpus: 3300, signal 196322/243797 (executing program) 2022/09/13 08:36:56 fetching corpus: 3350, signal 197668/245304 (executing program) 2022/09/13 08:36:57 fetching corpus: 3400, signal 198665/246561 (executing program) 2022/09/13 08:36:57 fetching corpus: 3450, signal 199713/247876 (executing program) 2022/09/13 08:36:57 fetching corpus: 3500, signal 200899/249262 (executing program) 2022/09/13 08:36:57 fetching corpus: 3550, signal 201898/250518 (executing program) 2022/09/13 08:36:57 fetching corpus: 3600, signal 202560/251539 (executing program) 2022/09/13 08:36:57 fetching corpus: 3650, signal 203645/252752 (executing program) 2022/09/13 08:36:57 fetching corpus: 3700, signal 204593/253939 (executing program) 2022/09/13 08:36:58 fetching corpus: 3750, signal 205335/254958 (executing program) 2022/09/13 08:36:58 fetching corpus: 3800, signal 206270/256099 (executing program) 2022/09/13 08:36:58 fetching corpus: 3850, signal 207238/257238 (executing program) 2022/09/13 08:36:58 fetching corpus: 3900, signal 208155/258339 (executing program) 2022/09/13 08:36:58 fetching corpus: 3950, signal 208793/259341 (executing program) 2022/09/13 08:36:58 fetching corpus: 4000, signal 209558/260307 (executing program) 2022/09/13 08:36:58 fetching corpus: 4050, signal 210599/261503 (executing program) 2022/09/13 08:36:59 fetching corpus: 4100, signal 211462/262531 (executing program) 2022/09/13 08:36:59 fetching corpus: 4150, signal 212148/263480 (executing program) 2022/09/13 08:36:59 fetching corpus: 4200, signal 213026/264493 (executing program) 2022/09/13 08:36:59 fetching corpus: 4250, signal 213832/265499 (executing program) 2022/09/13 08:36:59 fetching corpus: 4300, signal 214604/266415 (executing program) 2022/09/13 08:36:59 fetching corpus: 4350, signal 215452/267434 (executing program) 2022/09/13 08:36:59 fetching corpus: 4400, signal 216243/268386 (executing program) 2022/09/13 08:36:59 fetching corpus: 4450, signal 216964/269286 (executing program) 2022/09/13 08:37:00 fetching corpus: 4500, signal 217961/270294 (executing program) 2022/09/13 08:37:00 fetching corpus: 4550, signal 218589/271150 (executing program) 2022/09/13 08:37:00 fetching corpus: 4600, signal 219140/271963 (executing program) 2022/09/13 08:37:00 fetching corpus: 4650, signal 219804/272801 (executing program) 2022/09/13 08:37:00 fetching corpus: 4700, signal 220935/273803 (executing program) 2022/09/13 08:37:00 fetching corpus: 4750, signal 221563/274618 (executing program) 2022/09/13 08:37:00 fetching corpus: 4800, signal 222209/275409 (executing program) 2022/09/13 08:37:01 fetching corpus: 4850, signal 223008/276218 (executing program) 2022/09/13 08:37:01 fetching corpus: 4900, signal 223503/276976 (executing program) 2022/09/13 08:37:01 fetching corpus: 4950, signal 224159/277702 (executing program) 2022/09/13 08:37:01 fetching corpus: 5000, signal 225274/278618 (executing program) 2022/09/13 08:37:01 fetching corpus: 5050, signal 225979/279369 (executing program) 2022/09/13 08:37:01 fetching corpus: 5100, signal 227139/280235 (executing program) 2022/09/13 08:37:01 fetching corpus: 5150, signal 227912/280954 (executing program) 2022/09/13 08:37:01 fetching corpus: 5200, signal 228840/281824 (executing program) 2022/09/13 08:37:02 fetching corpus: 5250, signal 229213/282478 (executing program) 2022/09/13 08:37:02 fetching corpus: 5300, signal 229709/283157 (executing program) 2022/09/13 08:37:02 fetching corpus: 5350, signal 230238/283796 (executing program) 2022/09/13 08:37:02 fetching corpus: 5400, signal 230920/284465 (executing program) 2022/09/13 08:37:02 fetching corpus: 5450, signal 231645/285195 (executing program) 2022/09/13 08:37:02 fetching corpus: 5500, signal 232149/285823 (executing program) 2022/09/13 08:37:02 fetching corpus: 5550, signal 232908/286588 (executing program) 2022/09/13 08:37:02 fetching corpus: 5600, signal 233221/287119 (executing program) 2022/09/13 08:37:02 fetching corpus: 5650, signal 233861/287808 (executing program) 2022/09/13 08:37:03 fetching corpus: 5700, signal 234286/288423 (executing program) 2022/09/13 08:37:03 fetching corpus: 5750, signal 234808/289030 (executing program) 2022/09/13 08:37:03 fetching corpus: 5800, signal 235299/289617 (executing program) 2022/09/13 08:37:03 fetching corpus: 5850, signal 236149/290344 (executing program) 2022/09/13 08:37:03 fetching corpus: 5900, signal 236592/290893 (executing program) 2022/09/13 08:37:03 fetching corpus: 5950, signal 236980/291438 (executing program) 2022/09/13 08:37:03 fetching corpus: 6000, signal 237368/291962 (executing program) 2022/09/13 08:37:03 fetching corpus: 6050, signal 237936/292559 (executing program) 2022/09/13 08:37:04 fetching corpus: 6100, signal 238755/293155 (executing program) 2022/09/13 08:37:04 fetching corpus: 6150, signal 239069/293659 (executing program) 2022/09/13 08:37:04 fetching corpus: 6200, signal 239567/294206 (executing program) 2022/09/13 08:37:04 fetching corpus: 6250, signal 239918/294721 (executing program) 2022/09/13 08:37:04 fetching corpus: 6300, signal 240582/295285 (executing program) 2022/09/13 08:37:04 fetching corpus: 6350, signal 240943/295757 (executing program) 2022/09/13 08:37:04 fetching corpus: 6400, signal 241472/296253 (executing program) 2022/09/13 08:37:05 fetching corpus: 6450, signal 242414/296824 (executing program) 2022/09/13 08:37:05 fetching corpus: 6500, signal 242887/297319 (executing program) 2022/09/13 08:37:05 fetching corpus: 6550, signal 243487/297818 (executing program) 2022/09/13 08:37:05 fetching corpus: 6600, signal 244037/298326 (executing program) 2022/09/13 08:37:05 fetching corpus: 6650, signal 244718/298839 (executing program) 2022/09/13 08:37:05 fetching corpus: 6700, signal 245396/299351 (executing program) 2022/09/13 08:37:05 fetching corpus: 6750, signal 245952/299781 (executing program) 2022/09/13 08:37:06 fetching corpus: 6800, signal 246507/300236 (executing program) 2022/09/13 08:37:06 fetching corpus: 6850, signal 246892/300653 (executing program) 2022/09/13 08:37:06 fetching corpus: 6900, signal 247158/301076 (executing program) 2022/09/13 08:37:06 fetching corpus: 6950, signal 247788/301522 (executing program) 2022/09/13 08:37:06 fetching corpus: 7000, signal 248258/301999 (executing program) 2022/09/13 08:37:06 fetching corpus: 7050, signal 248863/302484 (executing program) 2022/09/13 08:37:06 fetching corpus: 7100, signal 249297/302883 (executing program) 2022/09/13 08:37:06 fetching corpus: 7150, signal 250052/303307 (executing program) 2022/09/13 08:37:07 fetching corpus: 7200, signal 250584/303686 (executing program) 2022/09/13 08:37:07 fetching corpus: 7250, signal 251311/304086 (executing program) 2022/09/13 08:37:07 fetching corpus: 7300, signal 251923/304478 (executing program) 2022/09/13 08:37:07 fetching corpus: 7350, signal 252691/304908 (executing program) 2022/09/13 08:37:07 fetching corpus: 7400, signal 253052/305303 (executing program) 2022/09/13 08:37:07 fetching corpus: 7450, signal 253576/305689 (executing program) 2022/09/13 08:37:07 fetching corpus: 7500, signal 254171/306025 (executing program) 2022/09/13 08:37:08 fetching corpus: 7550, signal 254885/306031 (executing program) 2022/09/13 08:37:08 fetching corpus: 7600, signal 255375/306035 (executing program) 2022/09/13 08:37:08 fetching corpus: 7650, signal 255885/306040 (executing program) 2022/09/13 08:37:08 fetching corpus: 7700, signal 256419/306041 (executing program) 2022/09/13 08:37:08 fetching corpus: 7750, signal 257355/306044 (executing program) 2022/09/13 08:37:08 fetching corpus: 7800, signal 258319/306212 (executing program) 2022/09/13 08:37:08 fetching corpus: 7850, signal 258677/306221 (executing program) 2022/09/13 08:37:08 fetching corpus: 7900, signal 259143/306236 (executing program) 2022/09/13 08:37:09 fetching corpus: 7950, signal 259446/306259 (executing program) 2022/09/13 08:37:09 fetching corpus: 8000, signal 259914/306267 (executing program) 2022/09/13 08:37:09 fetching corpus: 8050, signal 260507/306286 (executing program) 2022/09/13 08:37:09 fetching corpus: 8100, signal 260902/306312 (executing program) 2022/09/13 08:37:09 fetching corpus: 8150, signal 261400/306317 (executing program) 2022/09/13 08:37:09 fetching corpus: 8200, signal 261913/306328 (executing program) 2022/09/13 08:37:09 fetching corpus: 8250, signal 262429/306337 (executing program) 2022/09/13 08:37:09 fetching corpus: 8300, signal 262662/306349 (executing program) 2022/09/13 08:37:10 fetching corpus: 8350, signal 263231/306350 (executing program) 2022/09/13 08:37:10 fetching corpus: 8400, signal 263587/306429 (executing program) 2022/09/13 08:37:10 fetching corpus: 8450, signal 264293/306434 (executing program) 2022/09/13 08:37:10 fetching corpus: 8500, signal 264716/306469 (executing program) 2022/09/13 08:37:10 fetching corpus: 8550, signal 265405/306476 (executing program) 2022/09/13 08:37:10 fetching corpus: 8600, signal 265831/306502 (executing program) 2022/09/13 08:37:10 fetching corpus: 8650, signal 266163/306507 (executing program) 2022/09/13 08:37:11 fetching corpus: 8700, signal 266584/306525 (executing program) 2022/09/13 08:37:11 fetching corpus: 8750, signal 267144/306529 (executing program) 2022/09/13 08:37:11 fetching corpus: 8800, signal 267901/306566 (executing program) 2022/09/13 08:37:11 fetching corpus: 8850, signal 268162/306572 (executing program) 2022/09/13 08:37:11 fetching corpus: 8900, signal 268862/306584 (executing program) 2022/09/13 08:37:11 fetching corpus: 8950, signal 269301/306599 (executing program) 2022/09/13 08:37:11 fetching corpus: 9000, signal 269735/306604 (executing program) 2022/09/13 08:37:11 fetching corpus: 9050, signal 270000/306617 (executing program) 2022/09/13 08:37:11 fetching corpus: 9100, signal 270316/306620 (executing program) 2022/09/13 08:37:12 fetching corpus: 9150, signal 270666/306638 (executing program) 2022/09/13 08:37:12 fetching corpus: 9200, signal 271169/306650 (executing program) 2022/09/13 08:37:12 fetching corpus: 9250, signal 271425/306661 (executing program) 2022/09/13 08:37:12 fetching corpus: 9300, signal 271761/306692 (executing program) 2022/09/13 08:37:12 fetching corpus: 9350, signal 272266/306697 (executing program) 2022/09/13 08:37:12 fetching corpus: 9400, signal 272799/306697 (executing program) 2022/09/13 08:37:12 fetching corpus: 9450, signal 273023/306701 (executing program) 2022/09/13 08:37:13 fetching corpus: 9500, signal 273493/306703 (executing program) 2022/09/13 08:37:13 fetching corpus: 9550, signal 273994/306709 (executing program) 2022/09/13 08:37:13 fetching corpus: 9600, signal 274495/306716 (executing program) 2022/09/13 08:37:13 fetching corpus: 9650, signal 275007/306771 (executing program) 2022/09/13 08:37:13 fetching corpus: 9700, signal 275507/306787 (executing program) 2022/09/13 08:37:13 fetching corpus: 9750, signal 275897/306819 (executing program) 2022/09/13 08:37:14 fetching corpus: 9800, signal 276280/306821 (executing program) 2022/09/13 08:37:14 fetching corpus: 9850, signal 276643/306831 (executing program) 2022/09/13 08:37:14 fetching corpus: 9900, signal 277069/306844 (executing program) 2022/09/13 08:37:14 fetching corpus: 9950, signal 277335/306916 (executing program) 2022/09/13 08:37:14 fetching corpus: 10000, signal 277640/306945 (executing program) 2022/09/13 08:37:14 fetching corpus: 10050, signal 278084/306945 (executing program) 2022/09/13 08:37:14 fetching corpus: 10100, signal 278392/306964 (executing program) 2022/09/13 08:37:14 fetching corpus: 10150, signal 278632/306973 (executing program) 2022/09/13 08:37:14 fetching corpus: 10200, signal 278893/306981 (executing program) 2022/09/13 08:37:15 fetching corpus: 10250, signal 279528/306983 (executing program) 2022/09/13 08:37:15 fetching corpus: 10300, signal 279855/306988 (executing program) 2022/09/13 08:37:15 fetching corpus: 10350, signal 280253/306991 (executing program) 2022/09/13 08:37:15 fetching corpus: 10400, signal 280970/306995 (executing program) 2022/09/13 08:37:15 fetching corpus: 10450, signal 281260/306998 (executing program) 2022/09/13 08:37:15 fetching corpus: 10500, signal 281673/307035 (executing program) 2022/09/13 08:37:15 fetching corpus: 10550, signal 282041/307043 (executing program) 2022/09/13 08:37:15 fetching corpus: 10600, signal 282419/307049 (executing program) 2022/09/13 08:37:16 fetching corpus: 10650, signal 282805/307050 (executing program) 2022/09/13 08:37:16 fetching corpus: 10700, signal 283464/307066 (executing program) 2022/09/13 08:37:16 fetching corpus: 10750, signal 283712/307080 (executing program) 2022/09/13 08:37:16 fetching corpus: 10800, signal 284144/307104 (executing program) 2022/09/13 08:37:16 fetching corpus: 10850, signal 284532/307120 (executing program) 2022/09/13 08:37:16 fetching corpus: 10900, signal 284740/307172 (executing program) 2022/09/13 08:37:16 fetching corpus: 10950, signal 285000/307176 (executing program) 2022/09/13 08:37:16 fetching corpus: 11000, signal 285233/307180 (executing program) 2022/09/13 08:37:17 fetching corpus: 11050, signal 285709/307181 (executing program) 2022/09/13 08:37:17 fetching corpus: 11100, signal 286215/307235 (executing program) 2022/09/13 08:37:17 fetching corpus: 11150, signal 286694/307235 (executing program) 2022/09/13 08:37:17 fetching corpus: 11200, signal 286968/307238 (executing program) 2022/09/13 08:37:17 fetching corpus: 11250, signal 287119/307244 (executing program) 2022/09/13 08:37:17 fetching corpus: 11300, signal 287436/307250 (executing program) 2022/09/13 08:37:17 fetching corpus: 11350, signal 287825/307310 (executing program) 2022/09/13 08:37:17 fetching corpus: 11400, signal 288058/307320 (executing program) 2022/09/13 08:37:18 fetching corpus: 11450, signal 288455/307322 (executing program) 2022/09/13 08:37:18 fetching corpus: 11500, signal 288904/307339 (executing program) 2022/09/13 08:37:18 fetching corpus: 11550, signal 289252/307346 (executing program) 2022/09/13 08:37:18 fetching corpus: 11600, signal 289574/307352 (executing program) 2022/09/13 08:37:18 fetching corpus: 11649, signal 289821/307353 (executing program) 2022/09/13 08:37:18 fetching corpus: 11699, signal 290204/307353 (executing program) 2022/09/13 08:37:18 fetching corpus: 11749, signal 290472/307353 (executing program) 2022/09/13 08:37:18 fetching corpus: 11799, signal 290893/307361 (executing program) 2022/09/13 08:37:19 fetching corpus: 11843, signal 291171/307364 (executing program) 2022/09/13 08:37:19 fetching corpus: 11843, signal 291171/307364 (executing program) 2022/09/13 08:37:21 starting 8 fuzzer processes 08:37:21 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x17}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004001}, 0x90f77a6d983c23a3) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x400}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000044) r3 = socket(0x15, 0x80000, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x2f, 0x20, 0x1, 0x1, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8080, 0x7, 0x4, 0x1}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x8c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x87}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf5}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x80}]}, 0x8c}}, 0x4004000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x84, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x84}}, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x31}, @void, @val={0xc, 0x99, {0x2b29, 0x40}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20040004) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000bc0)=0x1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000cc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4048010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x4048840) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r2, 0x620, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xa8, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x9, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x2]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x38}}, 0x8004) 08:37:21 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)=@alg, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/10, 0xa}, {&(0x7f00000000c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001100)=""/104, 0x68}, 0x2) umount2(&(0x7f00000011c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000001200)='./file0\x00', 0x400000, 0x0) r1 = openat(r0, &(0x7f0000001240)='./file0\x00', 0x102, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001280)=0x0) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r1, &(0x7f00000012c0)={0xffffffffffffffff, r1, 0x2}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r3, &(0x7f0000001300)=""/187, 0xbb, 0x22, &(0x7f00000013c0)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) r4 = openat(r1, &(0x7f0000001440)='./file0\x00', 0x2, 0xa917b8c997f3534b) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001480), 0x80000, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f00000014c0)) r6 = openat$incfs(r4, &(0x7f0000001500)='.log\x00', 0x0, 0x60) ioctl$sock_bt_hci(r6, 0x800448d3, &(0x7f0000001540)="ac0d1f23ef6794ff67267e468a715da8ab593feb34213ce36b3f199f1efd11350951c002192585da7206437cbabca6b8e246c157ab5e5275be") recvmmsg(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001580)=""/39, 0x27}, {&(0x7f00000015c0)=""/46, 0x2e}, {&(0x7f0000001600)=""/188, 0xbc}, {&(0x7f00000016c0)=""/197, 0xc5}], 0x4, &(0x7f0000001800)=""/37, 0x25}, 0x1}], 0x1, 0x12140, 0x0) r7 = syz_io_uring_complete(0x0) bind$bt_hci(r7, &(0x7f0000001880)={0x1f, 0x0, 0x3}, 0x6) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/keys\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r8) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001900)={0x9, 0x9, 0x0, 0xfffffffe}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000001940)) 08:37:21 executing program 2: r0 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) r1 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='{\x00', 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x1) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="f4ee86a2623e9f3bc1bade905c6a86e40a36f0c62edf388d9a20dae4e6cc54115946387d59acf96b25762b5e8ca320273002e0f8681368f361fa6627f1d395c3db49b1a0d4ee002dd77a7cf555f8b848f3", 0x51, r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r2, r3) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$search(0xa, r1, &(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, r4) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "5abc644f920d0ea624b888cc1022a8a04a8c35cb823b3536a421913ea768321d4a0dec411e71e153524732e3ce6fc49783d95436303242f19797cdc75ee4b498", 0x26}, 0x48, r3) r7 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r5, r3, r7, 0x0) r8 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$search(0xa, r0, &(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x3}, r8) r9 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, r9) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000800)={r4, 0x1000, 0xfc}, &(0x7f0000000840)={'enc=', 'raw', ' hash=', {'sha256\x00'}}, &(0x7f00000008c0)="af1af5dc0c07f073240a25c77a7782265fc455a1009382a8debe6f7c4ca626b78ba8d40c9dccb1a6f3df246ffac35ae5574830b844cf3aafedaa7167d253bd55116d20d51144cc2c7d7aa1a4d3a046fb7472c4da3ec4ce33402fa1c6cbb1616797c3db56567d17cfa9befdaf251cacd8cc3809d6d88c1eff9ad98f6bd335ca66d1d197c309f4521e498e947bb6cf1a107a33e40ffd55de4d4190ebb5ee6682f2821878d43ad28c1b4b59dcae8979f7a20db2ce942931a5b31b102f393467e908734f1e7e596eb36b7fa1480918cacb630d63b6c4c1e5601a6265350db46c9b5987497e03b7418df0c55b5d63c2de697673a89e23714540d7cd2c548feaa2577c61922a44e5388ffac296b3bc4e30e32834a90b848cf39ecc55d05db3eb0b43e896240fa795ee19240b1d5eaa3e0684b613f52fb816d4bd77d5d318b2091b9e3ecc239d42118b07b70899a3dd8c497f1be2b48d47051424c49590e39506cd076ded480787b587766e072f2fce9d452e57bc8f7c23495c48a351c4b2afad227fa90dbcac4b53cf7ce7f7d61a916da1399c2c25c08e49854ba9133a45f37e34ec1140609a545452bfbc5543374cb8ef13dfb714778ad5948ff06bdd67ea55ad32806f1dd4763573beda7f9d4c6570d9897b461ab8519ba47b9fac9d122a5d6a12fe46dcd37b5b45beb451929878fe4b046820e62d329b12ef02d92b4ff2672b465f43432a3655edb5bc1151f79928b8e040dbee2e285649606fe68a06720d7fc7ee1865554f144d7c4ea0110665a020dcd553447224cfdd6a6a4f980d48ff17da1ca1486d4741b35e31ba3a1f29f6fe102d1f26bd5b4e6220e67802f48181945b2e36d7909a4ef58749ceba585e0d88f3663143e9081b382f542d77ac7c75c4fdb900909c1af0fa033c827534ad720708d6f23e75f01a8e7e6991693eede42bf74b094dfad2d215b1c824b5de1994c52f6184043ad819228500ecf70902fe1a57aba3926ace08ec6339af688d8c070286feb879f4ad02547358b40e091f9b3b3f5a4cdeddc245eec3c52e4018c9fa777b8c312aebd1d13a9200453c4886de813e868198ba6704272e3a5cb5dad86c5fce541111d75368fba1d1cd418a2b0112c05490f96c879609b4df102e931e3dd9e2d552cf2917357568deb3d61ebad13b7a631ed2472a665dce2fc5adfbd026698e4dc4406cdf8c828a2b5d0ec90acc4e7a72bf496aa394de5de37d2cbe43b164bd8fd7415c1d8dedc1dc192c6d436950708a8b41eb7ff7345c3a718b22eb82f97a11af3049b3eead72d9109b283dc81146d4fa8f80877c214587033547cb366347d9ff979400e6f7d94659074ae5e79b321ca98c8cf0608f918d301cc6a7482c71143b1fb6b32a508fb5fe62173baf86ab94ba64c4477d7f3b6b2fce9f77c0d4d76c800d6c26479197d6ff743497fde789bbeccc7f402390f6e8437c890075f260f69af82390fc93189918c3a02f869edf3e72e6880dc726d6206e19a6fb048b8d076e484a082c12a9617c2358f1894fd729b2254a855cf429b9714c4e1c06d5a49a4a4b04e23d5560a85b149f62fc6dc8d190ef77c2cd423f9c7d54a8f2c3ad8e5660ed72c0ecf44d436d839fcbc27953d5f42d91706b0a3b62ed20910d644526c4cefe66ba5d619eacd37fd321025d161c5a1d778b664ddf2c132fc51e3cd93e65fab8eacfe99d07be89f7b6c86091917db19031e3f56d41a801b165586ddb0264609394a7288fe3be05dc983b6b46e672a5d73aa7ae2e8c122b320f8a42b75d9dd22f55ded6fbe9cdd56dbc84a3b720e1ba7bdf3f3bf85abb8cde8dc85d2d480dc026a59862a991e2df4c7e871bcd9d048905c62b7d60cdc702a64fa7320c9c98b766948b613b7f8a2e7839423644e6d9e54c0a90f6efd7d7a195ed536804db09549df61bc0eef46ef6b9d22d9e455b253305b3090a6b90bc5d35ed0cc2cbc2dae36843dfbd6e130cdd0880aa0483011e4fcc7508caa1d35e7101a2dca4a44ea5a41e44c6e5d3e8ef380cda6249dea944961528cc182c906359ce50fa8a91aada5cc6fc040df1793c3bdd3a916db64bfdae655b7fad468084ea473a682d1d2169be0daebfd1b74a5ad46ef5cea8de658da64b128bdc84ca554a27c81b35e55795a2ee8b285520079dad5370d89c888c582d53b6d1ff1b82ed021c38f3e7ea911f784f7bc537153fb3c2d6c374639049f2994d160527f437c1ffa5f3c7b48ce1d82340b8f17c0c15cb2a1ae1ff2edea057fc7bae110a9da6ae58cef0fa160eb166e6527352218dc6d74bd52dea3af1c0c8d5d4de1aacb6d637eb7fba481ffe3bf61e5795af9d2205a97ffe6573aaa10934c16b760a06938e822583038535918b70679ad4a11b73025081caf22b2b7cce00caefa4a0ba0f8d593b8729e137ee79f3909bf8662278d4eb78f9314d6853623bc9d388c9464c8df691e3cffd3efb0cabeb20254773fa89ee088a12fde180f215964f7e19c90d19387a657c5914cea2338b0d0570ec7a309dd51d49cb784b02b1b21a79f176344d1bcc7372acb2daee87101822a06e07da0ce4b9e49885786742b0aa32713378bd4065282e314f66f5a9852df53f950bb23c9e97e05f0d9aff86af5ee76720091f41fd3aa424b68c7b7387525a840df46a7c1b155293b237ef6be2c592ae4b7c4952b5d99d8a1782ff81ef7b6d41c43d99b5846a07d515bc02c4fbe583120f6aea074fcfa697804739c19b55f6d845851dbdfa5fc639c91b6b71bc722bca91f24ba4e66f1d5b2f0785229ec10a648eaf7e83130eb4c7269213acf844a502d1b33431216505f3182a2e45a40db345385a596bff128dd4813f195c786029f0e94759fbefaa66b7a230259733da1663ecb2fc524455c8c637bd133949b4d91d9c7dde8a6c2518d45c23265f78af1e87e3ef7188f80704df63fdd79cec6c97cfe6ef8cc5531f2211b5a6e1264f5e6904287dd392af5af6d70fb5f49bf598b9d2c36061fc6366b215456530a1743b863c8727a6cd956e1241ac43e5a9c63d245aa090e16d985308397d435668ba5d8bcac48a2f0c29794e011a617598ce05809535fbff995b7831bc62f6942604b4d7ff1f2535142131ced476219e363d4a660075ec33768bea59dc477b8251c32fc44d5857c997791359574df0cf5bf77cdcb71b64e66903cd56d3c5618932048ef44225d65db32f87d9af95225fefb01a17b9d9c6dc7fef0297c3650caf80f74c024463eb97dbc5e2d592347030f086d77ad1737a0b38d96d37ffb4b0b1a4d5411afc95706956839d738027be5fef33007964d471e6036cc80442db6fa9c2bd12b40aca70dd944f651c0492a8bb7876cd77321142b54df82bb30ba6b2e980a8fa08a54cf4fe361aad322b604716e3bbee2dfc71d5437340081ac51b9bcaf6c1e9dd93617b9cc6277dec8db2e5850713edcfbe4282cb953458aa9e68100bfbc6c44516a0e7389e303bd73f56617c4484eb1bf7083f67334ec6558561f295258997cf73f5e0684e8bde7e0b1437e6641756de0fc9a1aa7f70179e71da4c71bed664bda0f5b51a6bd30ba36c90c826841787a004ad0fdeac83d61f59f6cfe3fb45a7f25d3ef784d7deb53c60ded07d6cf322179337af8f7e4ae33d0599ba93cfb2913c0880f2fe1f468e345d92c85da9e87a44ecb0c9a18abb88918bab560403fce646b1bf2ddce515fa9c8582f4cc2123e7029d52236bcd3eb61dbe34b740ef528d3164e40e95faa3c0f1ebc8baeb32348218a4222b7e6a5c33818e4f86a68e92da7510ece35e3b7a44e77dc2f337b66258b8c482ee40efe5498fa234940cd4667cf2f73c15157aef2b2fb9535cab00937f96087602e49b05e3511ca48703f17f0b28a31faf0cfca1610701c8469b5b63adf17003d64e01a29418fb4e6ba0a1c1a220a29af9add3f9bf19b9d34fe540c457f9f39cf44e75e305c7056225ef2a38ee86c02ae324ffdd51aa957b95052145aba7684a716d0fc1379284db6022419cb77070eb01470992a43b8bf568158a4c8e48576d675c02ed9d61fabf1bfa6237ddbd6ac30d7dd112943727ae0b45b41e14a01f779baccbe8adbd02913275c36e252c6689eafe31af1448512f65a7c7c7cc5ea5dff0476e67dac0a59c795ec1744f7fad158c810108cfb4a84cae76d98f0c3f4982d3e6ca037e87c2ed6cb6f5c81763823460829055024d214af00c83a2deaf033af1630da5a336d56b3cdc54fb9c25e3fd7539ff48370fb264bb6abee0ac089a7862224d05bc27239c923c5c45414053eb9f9c767f8f22cbe1d372b38e90616325658ee22ba35d81c9df4bac04096d9adbd4937eb1bb441e66df6a741653e58fff911773c632d70c8710bb8eb8141f9c49b3c0f9ee3f42a6bcc2c539977ac739129681b821301615d76626ebee0a2f3d0c88d3300d9009f2c3e59f11e9d8e16a7aa1ba00a731ee2ef692068a5b1172de17fc728a80250d9cd30e9f68e686b9641619684914ed19e10bc2345a5803d5df97dd108efc9c38536dfa23473bb93c2f77b6173d8a9a5b5fff50b273c0d5bdfe775eb8fcc5a0040ab7b98ed9ddcbb4b5a6a02dc14672c182d98bdf5f10d3439412cfec07ce978fff90576f11d61341480e7be09632cac55e380a4afd9955bdf47dd69d9c91ec39e916d4499fb5fd05c2412b8e82bf0e315660eda8d83080889d793ae07e0d5b5cb0de75e0de2b9b12e49cbf70996202d8e9a569d0ea7f3ff6053e0c8eb8d5cd34a053226c1f3caa85237397b4638d073b91115d6386dcb81d6132c0697a773aeaea65bda6ea43e7fdcb325afdb635d4956c17b310d80070990b4d9ea1985252c669c4fcb34b360379bc50840b34c212a9e9fdf5503b2056f7a4655d22faed4f780f4a214c80e8a15a4347f4dffd2b5e97f76e685c5b24f823ff3df58829d2c1c1096a4405d08860f53599232aa1a983a2963d2d7cfcff0a313e9fa5d1ddd68ec4f0e78052a72b6e7822855a3e54e18e3d2b78ee18e36056c156d4907de866e672120dafe4d909d89f3fc764a1a11b19af2656ccca12b618803a23c3bce4850d307c466d704ab7df84c38fdc4786224431c8edbac9dc7b517f0f5ad5bfb9d171b43ca41028b09788da6e6761599375fcf0d133907fb1607cfd70c2100d34f2b0d21d648311f2173d1b42c7c1a2951dd4bcb3cab069abf4b181d89fc6d9af727af3fb4b8227272be600989d651267cb2a5f4e79808b6b6056a0c26f117efa7405b866acc22fe7b5e78f093ae615442b03655075700d3b8a18df67cb1a24ec8d35515add0e79453406639da0f7f6305ac1f0b79b71cf61e1fa3f0c310caeabc6b71f75a5dc966283b86e475707eee6caef70d0b31bdbabab014e10ff95e83bf019e1aa259c35549d9d86390debce0783c1467163bf23a5afc6d6179e80616741202467e0e4a6a8dd6bce26db50850256468f090726cc811efa7497937be3161db143c11f5ccca0f0bc998d8b3a6bf28397d0ed47ee0dc106547d574505fdeb80aee607a67c2f34ae663f3e9c5192cd432406320b0d5c4173a0db947da73fb0f17a859a29aa8f954706961e98105f3bb14a6398651c6ca76722eb3ea52b1de83500cab270e69fc716e579145a24750c01b096c9c310490ca0d348c2c9a4618c7f15edca0d1c5b502288e311c1c9d15ac123a1680deee77ab5cd11b13c41904983212ab5b34fbd06655bb690913d4171bd70a11c6bf517b6b97a5cd3a47902db3643ffbbf1ff9cc34c06449504de9314998711501281f75a4dc09cc32e9614a0c944cbb1b66990ac", &(0x7f00000018c0)=""/252) r10 = add_key$fscrypt_v1(&(0x7f0000001ac0), &(0x7f0000001b00)={'fscrypt:', @auto=[0x36, 0x64, 0x31, 0x65, 0x36, 0x38, 0x62, 0x63, 0x63, 0x62, 0x37, 0x34, 0x62, 0x35, 0x34, 0x36]}, &(0x7f0000001b40)={0x0, "d74edf9addcd9d488497bababd2ddf9b93752bff3a26dc2b6d0faf28cb2149eae2ef5f8cc72c60b05d3cbb25c76f61bafb672286ca72a645b22d7de974e9c30a", 0x2c}, 0x48, r6) add_key(&(0x7f00000019c0)='blacklist\x00', &(0x7f0000001a00)={'syz', 0x0}, &(0x7f0000001a40)="e1a5b20ea96ecbad2d5b911b37768a5acdf8ef961cf9f1d1cfc5a45addbcaf38402df6b1126d1e0823d1d8f6a9dd9d2cc81799a69444bce7a7190430d53cd4718ee64d2ea16202583617db73a14ca07b571321f7646b71c52d61f42243", 0x5d, r10) request_key(&(0x7f0000001bc0)='ceph\x00', &(0x7f0000001c00)={'syz', 0x2}, &(0x7f0000001c40)='\xf9-\x00', 0xfffffffffffffffa) 08:37:21 executing program 3: ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @loopback, 0x0}, &(0x7f0000000040)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xffffffff, 0x4}) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x2010, r1, 0x10000) recvmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000180), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/100, 0x64}, {&(0x7f00000005c0)=""/176, 0xb0}], 0x6, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}, 0x40000000) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x1, 0x7f, 0x1, 0x0, 0xffffffff, 0x4008, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x380, 0x7f, 0x2, 0x3, 0x0, 0x1, 0x9, 0x0, 0xe11, 0x0, 0x4}, r2, 0x7, r1, 0x1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x40800) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/crypto\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f00000009c0)=0x80000001, 0x4) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000a00)={'bond_slave_0\x00', 0x0}) r10 = syz_open_dev$vcsu(&(0x7f0000000a40), 0x293, 0x200000) openat$cgroup_subtree(r10, &(0x7f0000000a80), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xe4, 0x3, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x4e, 0xfffffbff, 0x6]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffb}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000002}, 0x891) readv(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125, 0x7d}], 0x1) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000d40)={r0, 0x1, 0x6}, 0x10) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x8000, 0x0) setsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000fc0)={@multicast2, @private=0xa010101, r9}, 0xc) open$dir(&(0x7f0000001000)='./file0\x00', 0x400, 0x0) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file0/file0\x00', 0x99, 0x4, &(0x7f00000012c0)=[{&(0x7f00000010c0)="4579e60abe384ffee17177462d21bd222b8d30e98537a719d89e55ead3448aa09fe2038c1546be28203a3b3f4c024f3093ea3ae6cc5f601af47a9461399f33136569b17d0937e22fe4739d12254649d50af2362b2573355cd3b0df6c7ac9443de86a4ee5e92d29b6396e6f09d536ea408639d400bac58cd400a13b84b76b74609ee37df9157909f58fb9da3e072dee382c6016857b", 0x95, 0x9d}, {&(0x7f0000001180), 0x0, 0xff}, {&(0x7f00000011c0)="e9601bf2aa25c84c50c59bcbfc196b8a32dccc30efc097200fa8e0f2eecde6c71cdf1aaf10ec6641fe6732d490dc269f5864c97f2c182f8d87bd2d7c78f2d86152d7e9550de31a36b4ea490b1da3a64c520d4ee45cb366faafa8946ffb93810f2ad8e98147194fbaeda0161dc0881be1ac8e0f1f0c32a66e1ca241625c68f468cda9c7ed8a486d8ccfe8541842064ebe09255f2eb1e24db744ed95dfa1b07390a7b1f9fb88c6a1c5210a7730db6a3a44129042ca62725a9a7e3cc76954dbbbf1", 0xc0, 0x7}, {&(0x7f0000001280)="8d61d938d6a56df5e6e471786039027d1d4a77995db5c57dd3c3f7d1b01204fd85eda3", 0x23, 0x3}], 0x10000, &(0x7f0000001340)={[{@nonumtail}, {@shortname_winnt}], [{@uid_lt={'uid<', r4}}, {@uid_eq={'uid', 0x3d, r3}}, {@obj_role={'obj_role', 0x3d, '/dev/full\x00'}}, {@subj_type={'subj_type', 0x3d, '.#)'}}]}) [ 87.443623] audit: type=1400 audit(1663058241.325:6): avc: denied { execmem } for pid=285 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:37:21 executing program 7: r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x33, &(0x7f0000000000)={0x1e, 0x9, 0x9}) r1 = getpid() migrate_pages(r1, 0x3, &(0x7f0000000080)=0x84, &(0x7f00000000c0)=0x2) pidfd_send_signal(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0x28, 0x6, 0x401}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="aa22f6e4e4076688951c9286a432805a8eb6e97baef58cf3a34cf61e55938ca94af60cd8c963a3b215dbf591b05e3797b5b08897afc14631c7cc76e1398a0e16f01e75f720c3c74ee265636711d51c7a2875988fd3d3ccc1779e28d1d2f87dcb97dcd9c4b4a56e730050a4ec1fba653300e29d4fe1dff735d61c518b981d8c7128ea2f7d89a13abbf1fe96ed6ff67e77028a3a23b666fb421ce1f8ada5b6fee3dafe40e568f0893fc4e8ad05757eb07101c07ae87ab56974a790e3807c62d3e84f504a87bb19146ac2e71ab5d9bc72eabc0999b83a3b9e5ea7b3995626f3539f4fd9e7", 0xe3) r2 = gettid() perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x5b, 0x2, 0x4, 0x9, 0x0, 0x400, 0x4802, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0xffffffff80000000}, 0x280, 0x6, 0x20, 0x1, 0x5, 0x6a6, 0x200, 0x0, 0x7, 0x0, 0x9}, r2, 0xa, 0xffffffffffffffff, 0x1) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000003c0)={{0x1, r3, 0x0, 0xffffffffffffffff, 0xee01, 0x8, 0x75}, 0x74, 0xff, 0x1000, 0x5, r0, r0}) r4 = syz_open_procfs(r0, &(0x7f0000000440)='environ\x00') r5 = shmget(0x0, 0x4000, 0x230, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = openat(r4, &(0x7f0000000480)='./file0\x00', 0x404440, 0x200) shmctl$SHM_UNLOCK(0x0, 0xc) readv(r6, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/220, 0xdc}, {&(0x7f00000006c0)=""/89, 0x59}, {&(0x7f0000000740)=""/51, 0x33}], 0x4) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc0000000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}}, 0x4008084) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x800, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r6) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r8, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4008800) 08:37:21 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205562c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000980)="dd20bf3c3d6e9ebe0f2bc37f984a50cad1b199268ba81ca29411e9d7631f7473e27098ec64e6832ee5f1195f2206e24a5aa61a0250adc5d574811f5931ec39cf824d1c3160015f5619a4def589e7658d7ff4acf491c9496ffc861ac38bac6c656a4c698197ed522bf92c9d22", 0x6c) ioctl$TCXONC(r1, 0x540a, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x400800, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000a40)=0x800000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000a80)=0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000ac0)={0x800, 0x5f, 0xffffffff, 0x6, 0x400}, 0x14) 08:37:21 executing program 4: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000000)={0xffffffffffffff13, 0xff}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) r1 = getpgrp(0xffffffffffffffff) r2 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x20, 0x2d, 0x8, 0x7f, 0x0, 0x7f, 0x20020, 0x18, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffff7b0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2010, 0x9, 0x2, 0x0, 0x46, 0x9, 0x7fff, 0x0, 0x9, 0x0, 0x7}, r1, 0xf, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x18040, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) r4 = openat$incfs(r0, &(0x7f0000000240)='.log\x00', 0x200, 0x1fd) r5 = fcntl$dupfd(r3, 0x406, r4) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7, 0x1, 0x9, 0x1, 0x0, 0xfffffffffffffff7, 0x9000, 0x1d, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000280), 0xa}, 0x384b90e4b41ff528, 0x100000000, 0xecc, 0x8, 0x4, 0xfffffffd, 0xff, 0x0, 0x40000}, 0x0, 0x5, 0xffffffffffffffff, 0xb) flistxattr(r2, &(0x7f0000000340)=""/98, 0x62) r6 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x0, 0x121002) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000400)=0x20, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x41100, 0x0) syz_io_uring_setup(0x6195, &(0x7f0000000480)={0x0, 0x8bc3, 0x4, 0x2, 0x111}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000580)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd, 0x9, 0x0, 0x4, 0x0, 0x1}, 0x3) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f00000005c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xc3, 0xf4, 0x2, 0x7, 0x76f78f6b, 0x3, 0x3e, 0xbdd, 0xca, 0x40, 0x2b4, 0x0, 0x8, 0x38, 0x2, 0x0, 0x3, 0x8000}, [{0x5, 0x7fff, 0x0, 0x7, 0x5, 0xc7, 0x8, 0x2}, {0x60000005, 0x7, 0x73, 0x4, 0x4, 0x8, 0x5, 0x3}], "8fc673ded5f9ae422964957ffaec69df84279522083ef302630fa5912b1cdcacb9572ebd20aa88920f4ce565b228e712fdc33e58fc5bdb7cbe52dc847a6667bb36a5e3ba60cef9d293a0f0eb3fca4a0e15e7b292aa7f2ea6d714d8b8ddaa459826ff5fbeba0e4a42b6518d1def4f66a3754380862ec876bdaa289a0b21196f00dc0abe181ce01144c55cf881e9a4ff93a99d7442d02e673f4f9d1f691e3eb1f850079c920c4371d02c417679c1f6d7068abe4a85d87f2b44df3d5488b447f21a79cab32f92ee705a9d8492a3fa30035c30e7027bf6ef50d933c116c70de526a064e3307c0786089c18b7f867fee24b7eb30e7fe506ab603a8e", ['\x00']}, 0x2a9) 08:37:21 executing program 5: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0x0, 0xe}, 0x18) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0x800, 0x18, [0xb94, 0x0, 0xb3, 0x2], &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000340)={r1, 0x7ff}) truncate(&(0x7f0000001340)='./file0\x00', 0x5ac4) r5 = getegid() fchownat(r0, &(0x7f0000001380)='./file0\x00', 0xffffffffffffffff, r5, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000013c0)={0x0, ""/256, 0x0, 0x0}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000015c0)={0x29b, 0xe893, 0xf90000000}) connect$inet6(0xffffffffffffffff, &(0x7f0000001600)={0xa, 0x4e23, 0x5, @local}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000001640), 0xfffffffffffffffd, 0x200000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000001680)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000001700)={'vlan0\x00', &(0x7f00000016c0)=@ethtool_rxfh_indir={0x39, 0x8, [0xfffffff7, 0x81, 0x40, 0x7, 0x4233, 0x1, 0x100, 0x3ff]}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc018937a, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$TCSETSW(r11, 0x5403, &(0x7f0000001780)={0x5e1, 0x6, 0x10000, 0x1f, 0x18, "6af4dc32cf54edc0b269018309a777e1e1102f"}) getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f00000017c0), &(0x7f0000001800)=0x8) readv(r10, &(0x7f0000003a00)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/164, 0xa4}, {&(0x7f0000002900)=""/89, 0x59}, {&(0x7f0000002980)=""/104, 0x68}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x5) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000003a80)={r8, r7, "37be6a47ed25faf1856de840e9501b3a1936598a7b9e7ee01e57946215f834a7bc029ea7920d01d31e3e9a287c8431d6b208deed378d6e713c3a0f4a28d9bdaf4a75b31cfdcc250b1507b75cfeb8da8f983de7a5132edffc198c5ce934c762769c22dd6e59d36d6461fc8b7663a985bd9fe935644426c32d99013d93ea60a5e3db612dcef784332ff5f84b4418cc610d4735bbdeca6facabbb073f4863d4a8d8f26942f89b99495e736fb6448afac0c0efdbdcfebbb1c87fb263397c321e6c0c317e08d34fa6351ebddc424dd982659da461044c1dfd8b41f6b3dc0209a4f2be4742a84fdc116ce00d33113ccea054aaa39a24e3d2638747b9a25c6842e9a380", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007cbc0)={0x9b, [{r7, r12}, {r1, r3}, {}, {}, {r1}, {r6}, {0x0, r3}, {0x0, r8}, {r7}, {r6}, {r6, r8}, {r7}, {r6, r8}, {r2, r8}, {0x0, r3}, {0x0, r8}, {r2, r8}, {r1}, {}, {}, {r1}, {r7}, {r2}, {r7, r8}, {r1, r3}, {0x0, r8}, {r6, r8}, {}, {}, {r1}, {r6}, {0x0, r3}, {}, {r2}, {r7, r3}, {r6, r8}, {r2, r3}, {}, {r6, r8}, {r2, r8}, {r6}, {0x0, r8}, {r7}, {0x0, r3}, {r6, r3}, {r1, r8}, {0x0, r8}, {r7, r3}, {}, {r7, r8}, {r7, r3}, {r6}, {r7}, {r7}, {r6}, {r2, r3}, {r7, r8}, {r7}, {r6, r8}, {r1}, {r2}, {0x0, r3}, {r6, r3}, {0x0, r8}, {0x0, r8}, {}, {r6, r8}, {0x0, r3}, {r7}, {r1}, {r7}, {r1, r8}, {}, {r6}, {r6}, {r6}, {r7, r8}, {0x0, r3}, {0x0, r3}, {r7, r3}, {r2}, {0x0, r8}, {r6}, {r2, r8}, {0x0, r3}, {0x0, r8}, {r6, r8}, {0x0, r8}, {r7}, {r7, r8}, {0x0, r3}, {r7, r3}, {r1}, {0x0, r8}, {}, {0x0, r8}, {}, {r2, r3}, {r1, r8}, {0x0, r8}, {r7}, {0x0, r8}, {r6, r8}, {r7, r3}, {r2}, {r7}, {r6, r3}, {r2}, {r1, r8}, {r6}, {r1, r3}, {r6}, {0x0, r3}, {}, {0x0, r3}, {}, {r7}, {r6}, {0x0, r8}, {r2}, {r1}, {r7, r3}, {}, {r7, r8}, {}, {}, {r6}, {r1, r8}, {r2}, {r1}, {r6}, {r2}, {0x0, r3}, {0x0, r8}, {r6, r8}, {r6, r8}, {r7}, {0x0, r8}, {0x0, r3}, {r2}, {r2}, {r2}, {r2, r3}, {r2}, {0x0, r8}, {}, {0x0, r8}, {r6, r8}, {r2}, {r7}, {}, {r2, r8}, {0x0, r3}, {r7, r8}, {r7, r3}, {r2}, {r6, r3}, {r2, r3}, {r2, r3}, {0x0, r3}, {r2, r3}, {r2, r8}, {r1, r8}, {r7, r3}, {r7}, {r1}, {r7, r3}, {}, {r7}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r7}, {r6, r8}, {r2}, {r2, r3}, {r2, r8}, {r1, r3}, {r6, r8}, {r1, r3}, {r1, r8}, {r1, r3}, {0x0, r8}, {r1}, {0x0, r8}, {r7}, {r2}, {r1, r3}, {r6}, {r6}, {}, {r6}, {r6, r3}, {}, {r6, r3}, {0x0, r8}, {0x0, r8}, {r7}, {r2}, {r1}, {r2}, {r6}, {}, {}, {0x0, r8}, {r6, r8}, {r1, r3}, {r6}, {r7, r8}, {0x0, r3}, {}, {}, {0x0, r8}, {r1, r3}, {0x0, r3}, {r6, r8}, {0x0, r3}, {r2}, {r1, r8}, {r6}, {r6}, {r2, r3}, {r7, r3}, {r7, r3}, {r6, r8}, {}, {r6, r3}, {0x0, r3}, {r6, r3}, {0x0, r8}, {r1, r8}, {0x0, r3}, {r6, r3}, {0x0, r3}, {}, {r2, r8}, {0x0, r8}, {0x0, r3}, {r6, r3}, {0x0, r8}, {r2, r8}, {0x0, r3}, {}, {0x0, r8}, {}, {r6}, {r1, r8}, {r6}, {r2, r8}, {r1, r3}, {}, {0x0, r3}, {0x0, r8}, {r2}], 0x4, "34f5fc7b4db537"}) [ 88.659823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.661027] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.662771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.663661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.664935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.666051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.667436] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.668114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.669366] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.672805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.673762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.675413] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.676712] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.677732] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.679118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.680651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.682837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.687849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.695107] Bluetooth: hci2: HCI_REQ-0x0c1a [ 88.699328] Bluetooth: hci0: HCI_REQ-0x0c1a [ 88.708915] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.712010] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.713257] Bluetooth: hci1: HCI_REQ-0x0c1a [ 88.713571] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.716726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.725077] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.726900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.728121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.730265] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.732610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.733866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.735665] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.737088] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.738555] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.738696] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.740011] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.740711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.741879] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.742653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.745324] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.745450] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.745906] Bluetooth: hci5: HCI_REQ-0x0c1a [ 88.750688] Bluetooth: hci4: HCI_REQ-0x0c1a [ 88.769662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.775923] Bluetooth: hci6: HCI_REQ-0x0c1a [ 88.783934] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.784952] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.787605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.792859] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.798019] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.803342] Bluetooth: hci7: HCI_REQ-0x0c1a [ 88.808484] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.816870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.818667] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.819732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.824093] Bluetooth: hci3: HCI_REQ-0x0c1a [ 90.739584] Bluetooth: hci2: command 0x0409 tx timeout [ 90.802257] Bluetooth: hci6: command 0x0409 tx timeout [ 90.802690] Bluetooth: hci1: command 0x0409 tx timeout [ 90.803212] Bluetooth: hci5: command 0x0409 tx timeout [ 90.804601] Bluetooth: hci0: command 0x0409 tx timeout [ 90.805106] Bluetooth: hci4: command 0x0409 tx timeout [ 90.867296] Bluetooth: hci3: command 0x0409 tx timeout [ 90.867743] Bluetooth: hci7: command 0x0409 tx timeout [ 92.786215] Bluetooth: hci2: command 0x041b tx timeout [ 92.850698] Bluetooth: hci4: command 0x041b tx timeout [ 92.851235] Bluetooth: hci6: command 0x041b tx timeout [ 92.852509] Bluetooth: hci0: command 0x041b tx timeout [ 92.852928] Bluetooth: hci5: command 0x041b tx timeout [ 92.854385] Bluetooth: hci1: command 0x041b tx timeout [ 92.914182] Bluetooth: hci7: command 0x041b tx timeout [ 92.914619] Bluetooth: hci3: command 0x041b tx timeout [ 94.834172] Bluetooth: hci2: command 0x040f tx timeout [ 94.898198] Bluetooth: hci1: command 0x040f tx timeout [ 94.898648] Bluetooth: hci5: command 0x040f tx timeout [ 94.899055] Bluetooth: hci0: command 0x040f tx timeout [ 94.900565] Bluetooth: hci6: command 0x040f tx timeout [ 94.900975] Bluetooth: hci4: command 0x040f tx timeout [ 94.962229] Bluetooth: hci3: command 0x040f tx timeout [ 94.962735] Bluetooth: hci7: command 0x040f tx timeout [ 96.882186] Bluetooth: hci2: command 0x0419 tx timeout [ 96.946262] Bluetooth: hci4: command 0x0419 tx timeout [ 96.946886] Bluetooth: hci6: command 0x0419 tx timeout [ 96.947617] Bluetooth: hci0: command 0x0419 tx timeout [ 96.948466] Bluetooth: hci5: command 0x0419 tx timeout [ 96.950526] Bluetooth: hci1: command 0x0419 tx timeout [ 97.010182] Bluetooth: hci7: command 0x0419 tx timeout [ 97.010583] Bluetooth: hci3: command 0x0419 tx timeout 08:38:14 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205562c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000980)="dd20bf3c3d6e9ebe0f2bc37f984a50cad1b199268ba81ca29411e9d7631f7473e27098ec64e6832ee5f1195f2206e24a5aa61a0250adc5d574811f5931ec39cf824d1c3160015f5619a4def589e7658d7ff4acf491c9496ffc861ac38bac6c656a4c698197ed522bf92c9d22", 0x6c) ioctl$TCXONC(r1, 0x540a, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x400800, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000a40)=0x800000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000a80)=0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000ac0)={0x800, 0x5f, 0xffffffff, 0x6, 0x400}, 0x14) 08:38:14 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205562c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000980)="dd20bf3c3d6e9ebe0f2bc37f984a50cad1b199268ba81ca29411e9d7631f7473e27098ec64e6832ee5f1195f2206e24a5aa61a0250adc5d574811f5931ec39cf824d1c3160015f5619a4def589e7658d7ff4acf491c9496ffc861ac38bac6c656a4c698197ed522bf92c9d22", 0x6c) ioctl$TCXONC(r1, 0x540a, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x400800, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000a40)=0x800000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000a80)=0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000ac0)={0x800, 0x5f, 0xffffffff, 0x6, 0x400}, 0x14) 08:38:14 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205562c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000980)="dd20bf3c3d6e9ebe0f2bc37f984a50cad1b199268ba81ca29411e9d7631f7473e27098ec64e6832ee5f1195f2206e24a5aa61a0250adc5d574811f5931ec39cf824d1c3160015f5619a4def589e7658d7ff4acf491c9496ffc861ac38bac6c656a4c698197ed522bf92c9d22", 0x6c) ioctl$TCXONC(r1, 0x540a, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x400800, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000a40)=0x800000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000a80)=0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000ac0)={0x800, 0x5f, 0xffffffff, 0x6, 0x400}, 0x14) 08:38:14 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205562c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000980)="dd20bf3c3d6e9ebe0f2bc37f984a50cad1b199268ba81ca29411e9d7631f7473e27098ec64e6832ee5f1195f2206e24a5aa61a0250adc5d574811f5931ec39cf824d1c3160015f5619a4def589e7658d7ff4acf491c9496ffc861ac38bac6c656a4c698197ed522bf92c9d22", 0x6c) ioctl$TCXONC(r1, 0x540a, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x400800, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000a40)=0x800000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000a80)=0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000ac0)={0x800, 0x5f, 0xffffffff, 0x6, 0x400}, 0x14) 08:38:14 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205562c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000980)="dd20bf3c3d6e9ebe0f2bc37f984a50cad1b199268ba81ca29411e9d7631f7473e27098ec64e6832ee5f1195f2206e24a5aa61a0250adc5d574811f5931ec39cf824d1c3160015f5619a4def589e7658d7ff4acf491c9496ffc861ac38bac6c656a4c698197ed522bf92c9d22", 0x6c) ioctl$TCXONC(r1, 0x540a, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x400800, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000a40)=0x800000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000a80)=0x4) 08:38:14 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205562c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000980)="dd20bf3c3d6e9ebe0f2bc37f984a50cad1b199268ba81ca29411e9d7631f7473e27098ec64e6832ee5f1195f2206e24a5aa61a0250adc5d574811f5931ec39cf824d1c3160015f5619a4def589e7658d7ff4acf491c9496ffc861ac38bac6c656a4c698197ed522bf92c9d22", 0x6c) ioctl$TCXONC(r1, 0x540a, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x400800, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000a40)=0x800000) 08:38:15 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205562c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000980)="dd20bf3c3d6e9ebe0f2bc37f984a50cad1b199268ba81ca29411e9d7631f7473e27098ec64e6832ee5f1195f2206e24a5aa61a0250adc5d574811f5931ec39cf824d1c3160015f5619a4def589e7658d7ff4acf491c9496ffc861ac38bac6c656a4c698197ed522bf92c9d22", 0x6c) ioctl$TCXONC(r1, 0x540a, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x400800, 0x0) 08:38:15 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205562c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000980)="dd20bf3c3d6e9ebe0f2bc37f984a50cad1b199268ba81ca29411e9d7631f7473e27098ec64e6832ee5f1195f2206e24a5aa61a0250adc5d574811f5931ec39cf824d1c3160015f5619a4def589e7658d7ff4acf491c9496ffc861ac38bac6c656a4c698197ed522bf92c9d22", 0x6c) ioctl$TCXONC(r1, 0x540a, 0x0) [ 142.663053] audit: type=1400 audit(1663058296.544:7): avc: denied { open } for pid=3936 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 142.664575] audit: type=1400 audit(1663058296.544:8): avc: denied { kernel } for pid=3936 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:38:28 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3bf455d31f7c899dada3267d221c"], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x7) dup(r6) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r7 = openat2(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x430001}, 0x18) getsockopt$bt_hci(r7, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r8 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r8) 08:38:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000480)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2, &(0x7f0000002340)) fcntl$dupfd(r2, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000027f) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000300)=""/81, 0x51}], 0x5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="01480b071ddc59ca3c000000", @ANYRES32=r0, @ANYBLOB='\x00!\x00\x00\x00\x00\x00\x00./file0\x00']) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, &(0x7f0000000200)='\x00', 0x2) gettid() 08:38:28 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) syz_io_uring_setup(0x4001, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') socket$netlink(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) 08:38:28 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205562c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000980)="dd20bf3c3d6e9ebe0f2bc37f984a50cad1b199268ba81ca29411e9d7631f7473e27098ec64e6832ee5f1195f2206e24a5aa61a0250adc5d574811f5931ec39cf824d1c3160015f5619a4def589e7658d7ff4acf491c9496ffc861ac38bac6c656a4c698197ed522bf92c9d22", 0x6c) 08:38:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0xfffd}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000d00)={0x2, 0x0, 0x0, 0x0, 0x0, 0x40}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x1008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xc, 0x0, 0x9, 0x9, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3ff, 0x3}, 0x1020, 0x6, 0x7, 0x6, 0x7d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_setup(0x805, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'ip6tnl0\x00', {0x1}, 0x7}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0xb) dup2(r4, r3) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 08:38:28 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="db4b1337e363ce219377c77f54660c409b5e28a67da0e60b4d3c4f5db02a5f4a4cc84ed457ac99d6589de94041cb2d797a72244620d92a3b810c3d998cc206d808aa167501255193b7c31c2bf9e6d6f2620a0c0f5597c2f99338d72a8e374d840bdb3436dd5b3e95e08a", @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000500), 0x5fdaf016, 0x100000) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x5) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user}, {@access_uid={'access', 0x3d, 0xee00}}, {}, {@version_u}, {@access_user}, {@cachetag={'cachetag', 0x3d, '\\:]'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '(-+@-:&'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '{**'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-)/{..-/$@X]-'}}]}}) open_tree(r0, &(0x7f0000000300)='./file0\x00', 0x800) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000140)=""/197) 08:38:28 executing program 5: r0 = perf_event_open(&(0x7f00000038c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7, r0, 0x0) r1 = gettid() syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) migrate_pages(r1, 0x1, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7, 0x6, 0x8, 0x7, 0x0, 0x6, 0x10880, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa9a, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0x300, 0xffffffffffffffe1, 0x5, 0x2429865da230b1d5, 0x6, 0x7fffffff, 0x7f, 0x0, 0xff, 0x0, 0x40}, r1, 0x0, r4, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x4c2a, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f000000a4c0)) 08:38:28 executing program 4: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x214) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000fa01000000c01bce2d", @ANYRES32=0xffffffffffffffff, @ANYBLOB="80000000000000002e2f66696c653000"]) fstatfs(r2, &(0x7f0000000140)=""/12) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0) fcntl$addseals(r5, 0x409, 0x4) [ 155.140975] ------------[ cut here ]------------ [ 155.141009] [ 155.141015] ====================================================== [ 155.141021] WARNING: possible circular locking dependency detected [ 155.141028] 6.0.0-rc5-next-20220912 #1 Not tainted [ 155.141041] ------------------------------------------------------ [ 155.141047] syz-executor.3/3982 is trying to acquire lock: [ 155.141059] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 155.141128] [ 155.141128] but task is already holding lock: [ 155.141133] ffff88800e129820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 155.141185] [ 155.141185] which lock already depends on the new lock. [ 155.141185] [ 155.141191] [ 155.141191] the existing dependency chain (in reverse order) is: [ 155.141197] [ 155.141197] -> #3 (&ctx->lock){....}-{2:2}: [ 155.141224] _raw_spin_lock+0x2a/0x40 [ 155.141255] __perf_event_task_sched_out+0x53b/0x18d0 [ 155.141280] __schedule+0xedd/0x2470 [ 155.141299] schedule+0xda/0x1b0 [ 155.141316] futex_wait_queue+0xf5/0x1e0 [ 155.141339] futex_wait+0x28e/0x690 [ 155.141358] do_futex+0x2ff/0x380 [ 155.141376] __x64_sys_futex+0x1c6/0x4d0 [ 155.141395] do_syscall_64+0x3b/0x90 [ 155.141421] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.141455] [ 155.141455] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 155.141482] _raw_spin_lock_nested+0x30/0x40 [ 155.141511] raw_spin_rq_lock_nested+0x1e/0x30 [ 155.141535] task_fork_fair+0x63/0x4d0 [ 155.141568] sched_cgroup_fork+0x3d0/0x540 [ 155.141597] copy_process+0x3f9e/0x6df0 [ 155.141616] kernel_clone+0xe7/0x890 [ 155.141635] user_mode_thread+0xad/0xf0 [ 155.141655] rest_init+0x24/0x250 [ 155.141687] arch_call_rest_init+0xf/0x14 [ 155.141723] start_kernel+0x4c1/0x4e6 [ 155.141756] secondary_startup_64_no_verify+0xe0/0xeb [ 155.141783] [ 155.141783] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 155.141810] _raw_spin_lock_irqsave+0x39/0x60 [ 155.141840] try_to_wake_up+0xab/0x1920 [ 155.141866] up+0x75/0xb0 [ 155.141889] __up_console_sem+0x6e/0x80 [ 155.141921] console_unlock+0x46a/0x590 [ 155.141953] vprintk_emit+0x1bd/0x560 [ 155.141986] vprintk+0x84/0xa0 [ 155.142019] _printk+0xba/0xf1 [ 155.142053] kauditd_hold_skb.cold+0x3f/0x4e [ 155.142080] kauditd_send_queue+0x233/0x290 [ 155.142108] kauditd_thread+0x5da/0x9a0 [ 155.142136] kthread+0x2ed/0x3a0 [ 155.142164] ret_from_fork+0x22/0x30 [ 155.142189] [ 155.142189] -> #0 ((console_sem).lock){....}-{2:2}: [ 155.142216] __lock_acquire+0x2a02/0x5e70 [ 155.142250] lock_acquire+0x1a2/0x530 [ 155.142282] _raw_spin_lock_irqsave+0x39/0x60 [ 155.142311] down_trylock+0xe/0x70 [ 155.142336] __down_trylock_console_sem+0x3b/0xd0 [ 155.142369] vprintk_emit+0x16b/0x560 [ 155.142402] vprintk+0x84/0xa0 [ 155.142434] _printk+0xba/0xf1 [ 155.142467] report_bug.cold+0x72/0xab [ 155.142491] handle_bug+0x3c/0x70 [ 155.142516] exc_invalid_op+0x14/0x50 [ 155.142542] asm_exc_invalid_op+0x16/0x20 [ 155.142574] group_sched_out.part.0+0x2c7/0x460 [ 155.142595] ctx_sched_out+0x8f1/0xc10 [ 155.142614] __perf_event_task_sched_out+0x6d0/0x18d0 [ 155.142638] __schedule+0xedd/0x2470 [ 155.142657] schedule+0xda/0x1b0 [ 155.142674] futex_wait_queue+0xf5/0x1e0 [ 155.142695] futex_wait+0x28e/0x690 [ 155.142714] do_futex+0x2ff/0x380 [ 155.142732] __x64_sys_futex+0x1c6/0x4d0 [ 155.142751] do_syscall_64+0x3b/0x90 [ 155.142777] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.142810] [ 155.142810] other info that might help us debug this: [ 155.142810] [ 155.142815] Chain exists of: [ 155.142815] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 155.142815] [ 155.142844] Possible unsafe locking scenario: [ 155.142844] [ 155.142849] CPU0 CPU1 [ 155.142853] ---- ---- [ 155.142857] lock(&ctx->lock); [ 155.142868] lock(&rq->__lock); [ 155.142881] lock(&ctx->lock); [ 155.142893] lock((console_sem).lock); [ 155.142904] [ 155.142904] *** DEADLOCK *** [ 155.142904] [ 155.142908] 2 locks held by syz-executor.3/3982: [ 155.142922] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 155.142972] #1: ffff88800e129820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 155.143027] [ 155.143027] stack backtrace: [ 155.143031] CPU: 0 PID: 3982 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220912 #1 [ 155.143056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 155.143071] Call Trace: [ 155.143077] [ 155.143084] dump_stack_lvl+0x8b/0xb3 [ 155.143112] check_noncircular+0x263/0x2e0 [ 155.143146] ? format_decode+0x26c/0xb50 [ 155.143173] ? print_circular_bug+0x450/0x450 [ 155.143208] ? enable_ptr_key_workfn+0x20/0x20 [ 155.143270] ? format_decode+0x26c/0xb50 [ 155.143310] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 155.143348] __lock_acquire+0x2a02/0x5e70 [ 155.143392] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 155.143437] lock_acquire+0x1a2/0x530 [ 155.143471] ? down_trylock+0xe/0x70 [ 155.143501] ? rcu_read_unlock+0x40/0x40 [ 155.143543] ? vprintk+0x84/0xa0 [ 155.143579] _raw_spin_lock_irqsave+0x39/0x60 [ 155.143610] ? down_trylock+0xe/0x70 [ 155.143637] down_trylock+0xe/0x70 [ 155.143664] ? vprintk+0x84/0xa0 [ 155.143699] __down_trylock_console_sem+0x3b/0xd0 [ 155.143734] vprintk_emit+0x16b/0x560 [ 155.143773] vprintk+0x84/0xa0 [ 155.143809] _printk+0xba/0xf1 [ 155.143844] ? record_print_text.cold+0x16/0x16 [ 155.143888] ? report_bug.cold+0x66/0xab [ 155.143915] ? group_sched_out.part.0+0x2c7/0x460 [ 155.143938] report_bug.cold+0x72/0xab [ 155.143967] handle_bug+0x3c/0x70 [ 155.143994] exc_invalid_op+0x14/0x50 [ 155.144023] asm_exc_invalid_op+0x16/0x20 [ 155.144057] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 155.144083] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 155.144105] RSP: 0018:ffff88804479f8f8 EFLAGS: 00010006 [ 155.144123] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 155.144138] RDX: ffff8880182e3580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 155.144154] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 155.144168] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800e129800 [ 155.144183] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 155.144205] ? group_sched_out.part.0+0x2c7/0x460 [ 155.144231] ? group_sched_out.part.0+0x2c7/0x460 [ 155.144257] ctx_sched_out+0x8f1/0xc10 [ 155.144282] __perf_event_task_sched_out+0x6d0/0x18d0 [ 155.144312] ? lock_is_held_type+0xd7/0x130 [ 155.144349] ? __perf_cgroup_move+0x160/0x160 [ 155.144372] ? set_next_entity+0x304/0x550 [ 155.144413] ? lock_is_held_type+0xd7/0x130 [ 155.144449] __schedule+0xedd/0x2470 [ 155.144475] ? io_schedule_timeout+0x150/0x150 [ 155.144499] ? futex_wait_setup+0x166/0x230 [ 155.144528] schedule+0xda/0x1b0 [ 155.144549] futex_wait_queue+0xf5/0x1e0 [ 155.144573] futex_wait+0x28e/0x690 [ 155.144598] ? futex_wait_setup+0x230/0x230 [ 155.144624] ? wake_up_q+0x8b/0xf0 [ 155.144651] ? do_raw_spin_unlock+0x4f/0x220 [ 155.144690] ? futex_wake+0x158/0x490 [ 155.144722] ? fd_install+0x1f9/0x640 [ 155.144754] do_futex+0x2ff/0x380 [ 155.144776] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 155.144807] __x64_sys_futex+0x1c6/0x4d0 [ 155.144832] ? __x64_sys_futex_time32+0x480/0x480 [ 155.144857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 155.144894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 155.144933] do_syscall_64+0x3b/0x90 [ 155.144961] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.144996] RIP: 0033:0x7f8d5de3fb19 [ 155.145013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 155.145035] RSP: 002b:00007f8d5b3b5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.145056] RAX: ffffffffffffffda RBX: 00007f8d5df52f68 RCX: 00007f8d5de3fb19 [ 155.145072] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8d5df52f68 [ 155.145086] RBP: 00007f8d5df52f60 R08: 0000000000000000 R09: 0000000000000000 [ 155.145101] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d5df52f6c [ 155.145115] R13: 00007ffd39f9e09f R14: 00007f8d5b3b5300 R15: 0000000000022000 [ 155.145141] [ 155.263652] WARNING: CPU: 0 PID: 3982 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 155.264990] Modules linked in: [ 155.265470] CPU: 0 PID: 3982 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220912 #1 [ 155.266639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 155.268322] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 155.269121] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 155.271780] RSP: 0018:ffff88804479f8f8 EFLAGS: 00010006 [ 155.272565] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 155.273587] RDX: ffff8880182e3580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 155.274610] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 155.275672] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800e129800 [ 155.276700] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 155.277720] FS: 00007f8d5b3b5700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 155.278869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.279739] CR2: 0000000020000084 CR3: 000000001007e000 CR4: 0000000000350ef0 [ 155.280762] Call Trace: [ 155.281142] [ 155.281480] ctx_sched_out+0x8f1/0xc10 [ 155.282054] __perf_event_task_sched_out+0x6d0/0x18d0 [ 155.282804] ? lock_is_held_type+0xd7/0x130 [ 155.283485] ? __perf_cgroup_move+0x160/0x160 [ 155.284143] ? set_next_entity+0x304/0x550 [ 155.284769] ? lock_is_held_type+0xd7/0x130 [ 155.285411] __schedule+0xedd/0x2470 [ 155.285965] ? io_schedule_timeout+0x150/0x150 [ 155.286638] ? futex_wait_setup+0x166/0x230 [ 155.287306] schedule+0xda/0x1b0 [ 155.287820] futex_wait_queue+0xf5/0x1e0 [ 155.288415] futex_wait+0x28e/0x690 [ 155.288953] ? futex_wait_setup+0x230/0x230 [ 155.289584] ? wake_up_q+0x8b/0xf0 [ 155.290118] ? do_raw_spin_unlock+0x4f/0x220 [ 155.290776] ? futex_wake+0x158/0x490 [ 155.291388] ? fd_install+0x1f9/0x640 [ 155.291972] do_futex+0x2ff/0x380 [ 155.292485] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 155.293324] __x64_sys_futex+0x1c6/0x4d0 [ 155.293919] ? __x64_sys_futex_time32+0x480/0x480 [ 155.294623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 155.295402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 155.296176] do_syscall_64+0x3b/0x90 [ 155.296727] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.297487] RIP: 0033:0x7f8d5de3fb19 [ 155.298024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 155.300654] RSP: 002b:00007f8d5b3b5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.301746] RAX: ffffffffffffffda RBX: 00007f8d5df52f68 RCX: 00007f8d5de3fb19 [ 155.302768] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8d5df52f68 [ 155.303829] RBP: 00007f8d5df52f60 R08: 0000000000000000 R09: 0000000000000000 [ 155.304857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d5df52f6c [ 155.305873] R13: 00007ffd39f9e09f R14: 00007f8d5b3b5300 R15: 0000000000022000 [ 155.306900] [ 155.307274] irq event stamp: 400 [ 155.307776] hardirqs last enabled at (399): [] syscall_enter_from_user_mode+0x1d/0x50 [ 155.309141] hardirqs last disabled at (400): [] __schedule+0x1225/0x2470 [ 155.310322] softirqs last enabled at (274): [] __irq_exit_rcu+0x11b/0x180 [ 155.311582] softirqs last disabled at (267): [] __irq_exit_rcu+0x11b/0x180 [ 155.312823] ---[ end trace 0000000000000000 ]--- 08:38:29 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205562c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc84c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) [ 155.337471] 9pnet_fd: Insufficient options for proto=fd [ 155.339633] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 155.348933] 9pnet_fd: Insufficient options for proto=fd [ 155.350051] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 155.374791] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 08:38:29 executing program 5: r0 = perf_event_open(&(0x7f00000038c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7, r0, 0x0) r1 = gettid() syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) migrate_pages(r1, 0x1, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7, 0x6, 0x8, 0x7, 0x0, 0x6, 0x10880, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa9a, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0x300, 0xffffffffffffffe1, 0x5, 0x2429865da230b1d5, 0x6, 0x7fffffff, 0x7f, 0x0, 0xff, 0x0, 0x40}, r1, 0x0, r4, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x4c2a, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f000000a4c0)) 08:38:29 executing program 2: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 08:38:29 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) 08:38:29 executing program 4: link(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[], 0x13) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) openat(r2, &(0x7f00000001c0)='./file0/file0\x00', 0x414000, 0x1a4) mount$9p_fd(0x20100900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 155.463254] hrtimer: interrupt took 21209 ns 08:38:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = clone3(&(0x7f00000024c0)={0x100000000, &(0x7f0000001fc0)=0xffffffffffffffff, &(0x7f00000022c0)=0x0, 0x0, {0x15}, &(0x7f0000002340)=""/131, 0x83, &(0x7f0000002400)=""/51, &(0x7f0000002480)=[0x0], 0x1}, 0x58) gettid() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="f2", 0x1}], 0x1, 0x8001, 0x0) clone3(&(0x7f0000000480)={0x8220100, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000380), {0x38}, &(0x7f00000003c0)=""/127, 0x7f, &(0x7f00000006c0)=""/4096, &(0x7f0000000440)=[0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, r3], 0x8}, 0x58) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x1, 0x3, 0x7b, 0x20, 0x0, 0x4, 0x400, 0x13, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000140)}, 0x8118, 0x4, 0x2, 0x5, 0x10000, 0x80000000, 0x9, 0x0, 0x6, 0x0, 0x283}, r1, 0xf, 0xffffffffffffffff, 0xa) write(r4, &(0x7f0000000200)='E', 0x4000) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x207ffb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="99380fcdff3aacc0d63978e8ded23942a6a37d4999000000"]) [ 155.496539] syz-executor.0 (3985) used greatest stack depth: 24088 bytes left [ 155.497365] audit: type=1400 audit(1663058309.378:9): avc: denied { write } for pid=4009 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:38:29 executing program 5: r0 = perf_event_open(&(0x7f00000038c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7, r0, 0x0) r1 = gettid() syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) migrate_pages(r1, 0x1, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7, 0x6, 0x8, 0x7, 0x0, 0x6, 0x10880, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa9a, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0x300, 0xffffffffffffffe1, 0x5, 0x2429865da230b1d5, 0x6, 0x7fffffff, 0x7f, 0x0, 0xff, 0x0, 0x40}, r1, 0x0, r4, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x4c2a, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f000000a4c0)) 08:38:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000480)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2, &(0x7f0000002340)) fcntl$dupfd(r2, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000027f) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000300)=""/81, 0x51}], 0x5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="01480b071ddc59ca3c000000", @ANYRES32=r0, @ANYBLOB='\x00!\x00\x00\x00\x00\x00\x00./file0\x00']) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, &(0x7f0000000200)='\x00', 0x2) gettid() [ 155.695027] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 155.695966] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 155.696485] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 155.696961] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 155.697514] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 155.731548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 155.731963] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.732594] Buffer I/O error on dev sr0, logical block 0, async page read [ 155.733245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 155.733649] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.734269] Buffer I/O error on dev sr0, logical block 1, async page read [ 155.734938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 155.735367] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.735963] Buffer I/O error on dev sr0, logical block 2, async page read [ 155.736624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 155.737022] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.737636] Buffer I/O error on dev sr0, logical block 3, async page read [ 155.738289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 155.738683] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.739314] Buffer I/O error on dev sr0, logical block 4, async page read [ 155.739971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 155.740381] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.740983] Buffer I/O error on dev sr0, logical block 5, async page read [ 155.741643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 155.742039] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.742639] Buffer I/O error on dev sr0, logical block 6, async page read [ 155.743318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 155.743715] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.744318] Buffer I/O error on dev sr0, logical block 7, async page read 08:38:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = clone3(&(0x7f00000024c0)={0x100000000, &(0x7f0000001fc0)=0xffffffffffffffff, &(0x7f00000022c0)=0x0, 0x0, {0x15}, &(0x7f0000002340)=""/131, 0x83, &(0x7f0000002400)=""/51, &(0x7f0000002480)=[0x0], 0x1}, 0x58) gettid() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="f2", 0x1}], 0x1, 0x8001, 0x0) clone3(&(0x7f0000000480)={0x8220100, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000380), {0x38}, &(0x7f00000003c0)=""/127, 0x7f, &(0x7f00000006c0)=""/4096, &(0x7f0000000440)=[0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, r3], 0x8}, 0x58) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x1, 0x3, 0x7b, 0x20, 0x0, 0x4, 0x400, 0x13, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000140)}, 0x8118, 0x4, 0x2, 0x5, 0x10000, 0x80000000, 0x9, 0x0, 0x6, 0x0, 0x283}, r1, 0xf, 0xffffffffffffffff, 0xa) write(r4, &(0x7f0000000200)='E', 0x4000) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x207ffb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="99380fcdff3aacc0d63978e8ded23942a6a37d4999000000"]) 08:38:38 executing program 2: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 08:38:38 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) 08:38:38 executing program 5: r0 = perf_event_open(&(0x7f00000038c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7, r0, 0x0) r1 = gettid() syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) migrate_pages(r1, 0x1, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7, 0x6, 0x8, 0x7, 0x0, 0x6, 0x10880, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa9a, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0x300, 0xffffffffffffffe1, 0x5, 0x2429865da230b1d5, 0x6, 0x7fffffff, 0x7f, 0x0, 0xff, 0x0, 0x40}, r1, 0x0, r4, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x4c2a, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f000000a4c0)) 08:38:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000480)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2, &(0x7f0000002340)) fcntl$dupfd(r2, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000027f) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000300)=""/81, 0x51}], 0x5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="01480b071ddc59ca3c000000", @ANYRES32=r0, @ANYBLOB='\x00!\x00\x00\x00\x00\x00\x00./file0\x00']) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, &(0x7f0000000200)='\x00', 0x2) gettid() 08:38:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000480)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2, &(0x7f0000002340)) fcntl$dupfd(r2, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000027f) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000300)=""/81, 0x51}], 0x5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="01480b071ddc59ca3c000000", @ANYRES32=r0, @ANYBLOB='\x00!\x00\x00\x00\x00\x00\x00./file0\x00']) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, &(0x7f0000000200)='\x00', 0x2) gettid() 08:38:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0xfffd}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000d00)={0x2, 0x0, 0x0, 0x0, 0x0, 0x40}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x1008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xbc, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}}, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xc, 0x0, 0x9, 0x9, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3ff, 0x3}, 0x1020, 0x6, 0x7, 0x6, 0x7d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_setup(0x805, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'ip6tnl0\x00', {0x1}, 0x7}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0xb) dup2(r4, r3) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)=')', 0x1}]) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 08:38:38 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3bf455d31f7c899dada3267d221c"], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x7) dup(r6) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r7 = openat2(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x430001}, 0x18) getsockopt$bt_hci(r7, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r8 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r8) 08:38:38 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='-\x00', 0x0, r2) 08:38:38 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 08:38:38 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3bf455d31f7c899dada3267d221c"], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x7) dup(r6) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r7 = openat2(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x430001}, 0x18) getsockopt$bt_hci(r7, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r8 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r8) 08:38:38 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3bf455d31f7c899dada3267d221c"], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x7) dup(r6) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r7 = openat2(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x430001}, 0x18) getsockopt$bt_hci(r7, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r8 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r8) 08:38:38 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) 08:38:38 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x7c3801, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x10000, 0x4, 0x4, 0x8}) syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "81fec8a51510692603354e9b24161814"}, 0x11, 0x3) 08:38:38 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3bf455d31f7c899dada3267d221c"], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x7) dup(r6) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r7 = openat2(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x430001}, 0x18) getsockopt$bt_hci(r7, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r8 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r8) VM DIAGNOSIS: 08:38:29 Registers: info registers vcpu 0 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88804479f348 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005d R11=0000000000000001 R12=000000000000005d R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8d5b3b5700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000084 CR3=000000001007e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f8d5df267c0 00007f8d5df267c8 YMM02=0000000000000000 0000000000000000 00007f8d5df267e0 00007f8d5df267c0 YMM03=0000000000000000 0000000000000000 00007f8d5df267c8 00007f8d5df267c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3eda0 RCX=0000000000000000 RDX=ffff88801de9b580 RSI=ffffffff813bccdb RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88804476f960 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d9c7db5 R13=ffff88806ce3eda8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff813bccdd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555555fa400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d5df4f0a0 CR3=000000001007e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f8d5df267c0 00007f8d5df267c8 YMM02=0000000000000000 0000000000000000 00007f8d5df267e0 00007f8d5df267c0 YMM03=0000000000000000 0000000000000000 00007f8d5df267c8 00007f8d5df267c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000