Warning: Permanently added '[localhost]:59084' (ECDSA) to the list of known hosts. 2022/09/30 05:00:36 fuzzer started 2022/09/30 05:00:36 dialing manager at localhost:40535 syzkaller login: [ 44.028954] cgroup: Unknown subsys name 'net' [ 44.149966] cgroup: Unknown subsys name 'rlimit' 2022/09/30 05:00:48 syscalls: 2215 2022/09/30 05:00:48 code coverage: enabled 2022/09/30 05:00:48 comparison tracing: enabled 2022/09/30 05:00:48 extra coverage: enabled 2022/09/30 05:00:48 setuid sandbox: enabled 2022/09/30 05:00:48 namespace sandbox: enabled 2022/09/30 05:00:48 Android sandbox: enabled 2022/09/30 05:00:48 fault injection: enabled 2022/09/30 05:00:48 leak checking: enabled 2022/09/30 05:00:48 net packet injection: enabled 2022/09/30 05:00:48 net device setup: enabled 2022/09/30 05:00:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 05:00:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 05:00:48 USB emulation: enabled 2022/09/30 05:00:48 hci packet injection: enabled 2022/09/30 05:00:48 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 05:00:48 802.15.4 emulation: enabled 2022/09/30 05:00:49 fetching corpus: 50, signal 29555/31263 (executing program) 2022/09/30 05:00:49 fetching corpus: 100, signal 39511/42759 (executing program) 2022/09/30 05:00:49 fetching corpus: 150, signal 48709/53305 (executing program) 2022/09/30 05:00:49 fetching corpus: 200, signal 55155/61011 (executing program) 2022/09/30 05:00:49 fetching corpus: 250, signal 59459/66583 (executing program) 2022/09/30 05:00:49 fetching corpus: 300, signal 64454/72701 (executing program) 2022/09/30 05:00:49 fetching corpus: 350, signal 69243/78494 (executing program) 2022/09/30 05:00:49 fetching corpus: 400, signal 73366/83636 (executing program) 2022/09/30 05:00:50 fetching corpus: 450, signal 76219/87517 (executing program) 2022/09/30 05:00:50 fetching corpus: 500, signal 83062/94955 (executing program) 2022/09/30 05:00:50 fetching corpus: 550, signal 88036/100556 (executing program) 2022/09/30 05:00:50 fetching corpus: 600, signal 90987/104286 (executing program) 2022/09/30 05:00:50 fetching corpus: 650, signal 93649/107734 (executing program) 2022/09/30 05:00:50 fetching corpus: 700, signal 96826/111519 (executing program) 2022/09/30 05:00:50 fetching corpus: 750, signal 100058/115279 (executing program) 2022/09/30 05:00:51 fetching corpus: 800, signal 101853/117817 (executing program) 2022/09/30 05:00:51 fetching corpus: 850, signal 104483/121003 (executing program) 2022/09/30 05:00:51 fetching corpus: 900, signal 106344/123477 (executing program) 2022/09/30 05:00:51 fetching corpus: 950, signal 107778/125569 (executing program) 2022/09/30 05:00:51 fetching corpus: 1000, signal 109834/128121 (executing program) 2022/09/30 05:00:51 fetching corpus: 1050, signal 110942/129940 (executing program) 2022/09/30 05:00:51 fetching corpus: 1100, signal 113564/132888 (executing program) 2022/09/30 05:00:51 fetching corpus: 1150, signal 115521/135271 (executing program) 2022/09/30 05:00:52 fetching corpus: 1200, signal 117180/137444 (executing program) 2022/09/30 05:00:52 fetching corpus: 1250, signal 118737/139469 (executing program) 2022/09/30 05:00:52 fetching corpus: 1300, signal 119858/141102 (executing program) 2022/09/30 05:00:52 fetching corpus: 1350, signal 121727/143338 (executing program) 2022/09/30 05:00:52 fetching corpus: 1400, signal 122749/144919 (executing program) 2022/09/30 05:00:52 fetching corpus: 1450, signal 124763/147169 (executing program) 2022/09/30 05:00:52 fetching corpus: 1500, signal 125898/148780 (executing program) 2022/09/30 05:00:52 fetching corpus: 1550, signal 127522/150643 (executing program) 2022/09/30 05:00:52 fetching corpus: 1600, signal 129896/152991 (executing program) 2022/09/30 05:00:53 fetching corpus: 1650, signal 131708/154952 (executing program) 2022/09/30 05:00:53 fetching corpus: 1700, signal 133063/156559 (executing program) 2022/09/30 05:00:53 fetching corpus: 1750, signal 135496/158809 (executing program) 2022/09/30 05:00:53 fetching corpus: 1800, signal 136622/160200 (executing program) 2022/09/30 05:00:53 fetching corpus: 1850, signal 137617/161492 (executing program) 2022/09/30 05:00:53 fetching corpus: 1900, signal 138858/162916 (executing program) 2022/09/30 05:00:53 fetching corpus: 1950, signal 140211/164386 (executing program) 2022/09/30 05:00:53 fetching corpus: 2000, signal 141224/165583 (executing program) 2022/09/30 05:00:54 fetching corpus: 2050, signal 142120/166700 (executing program) 2022/09/30 05:00:54 fetching corpus: 2100, signal 143585/168158 (executing program) 2022/09/30 05:00:54 fetching corpus: 2150, signal 144912/169473 (executing program) 2022/09/30 05:00:54 fetching corpus: 2200, signal 145817/170560 (executing program) 2022/09/30 05:00:54 fetching corpus: 2250, signal 147221/171883 (executing program) 2022/09/30 05:00:54 fetching corpus: 2300, signal 148235/173025 (executing program) 2022/09/30 05:00:54 fetching corpus: 2350, signal 149023/173991 (executing program) 2022/09/30 05:00:54 fetching corpus: 2400, signal 150637/175346 (executing program) 2022/09/30 05:00:54 fetching corpus: 2450, signal 151665/176375 (executing program) 2022/09/30 05:00:55 fetching corpus: 2500, signal 152367/177239 (executing program) 2022/09/30 05:00:55 fetching corpus: 2550, signal 153873/178464 (executing program) 2022/09/30 05:00:55 fetching corpus: 2600, signal 154591/179283 (executing program) 2022/09/30 05:00:55 fetching corpus: 2650, signal 155494/180162 (executing program) 2022/09/30 05:00:55 fetching corpus: 2700, signal 156439/181055 (executing program) 2022/09/30 05:00:55 fetching corpus: 2750, signal 157155/181827 (executing program) 2022/09/30 05:00:55 fetching corpus: 2800, signal 157963/182624 (executing program) 2022/09/30 05:00:55 fetching corpus: 2850, signal 159324/183604 (executing program) 2022/09/30 05:00:56 fetching corpus: 2900, signal 160755/184611 (executing program) 2022/09/30 05:00:56 fetching corpus: 2950, signal 161490/185367 (executing program) 2022/09/30 05:00:56 fetching corpus: 3000, signal 162356/186047 (executing program) 2022/09/30 05:00:56 fetching corpus: 3050, signal 162912/186649 (executing program) 2022/09/30 05:00:56 fetching corpus: 3100, signal 164295/187578 (executing program) 2022/09/30 05:00:56 fetching corpus: 3150, signal 164744/188108 (executing program) 2022/09/30 05:00:56 fetching corpus: 3200, signal 165912/188885 (executing program) 2022/09/30 05:00:56 fetching corpus: 3250, signal 166491/189421 (executing program) 2022/09/30 05:00:57 fetching corpus: 3300, signal 167453/190136 (executing program) 2022/09/30 05:00:57 fetching corpus: 3350, signal 167753/190583 (executing program) 2022/09/30 05:00:57 fetching corpus: 3400, signal 168779/191263 (executing program) 2022/09/30 05:00:57 fetching corpus: 3450, signal 169562/191843 (executing program) 2022/09/30 05:00:57 fetching corpus: 3500, signal 170427/192456 (executing program) 2022/09/30 05:00:57 fetching corpus: 3550, signal 171150/192987 (executing program) 2022/09/30 05:00:57 fetching corpus: 3600, signal 172058/193584 (executing program) 2022/09/30 05:00:57 fetching corpus: 3650, signal 173300/194219 (executing program) 2022/09/30 05:00:57 fetching corpus: 3700, signal 174071/194705 (executing program) 2022/09/30 05:00:58 fetching corpus: 3750, signal 174500/195095 (executing program) 2022/09/30 05:00:58 fetching corpus: 3800, signal 175208/195536 (executing program) 2022/09/30 05:00:58 fetching corpus: 3850, signal 175798/195941 (executing program) 2022/09/30 05:00:58 fetching corpus: 3900, signal 176194/196286 (executing program) 2022/09/30 05:00:58 fetching corpus: 3950, signal 177038/196764 (executing program) 2022/09/30 05:00:58 fetching corpus: 4000, signal 177857/197162 (executing program) 2022/09/30 05:00:58 fetching corpus: 4050, signal 179233/197681 (executing program) 2022/09/30 05:00:58 fetching corpus: 4100, signal 179835/198082 (executing program) 2022/09/30 05:00:58 fetching corpus: 4150, signal 180715/198481 (executing program) 2022/09/30 05:00:59 fetching corpus: 4200, signal 181376/198780 (executing program) 2022/09/30 05:00:59 fetching corpus: 4250, signal 181992/199041 (executing program) 2022/09/30 05:00:59 fetching corpus: 4300, signal 182731/199350 (executing program) 2022/09/30 05:00:59 fetching corpus: 4350, signal 183247/199600 (executing program) 2022/09/30 05:00:59 fetching corpus: 4400, signal 183900/199869 (executing program) 2022/09/30 05:00:59 fetching corpus: 4450, signal 184265/200115 (executing program) 2022/09/30 05:00:59 fetching corpus: 4500, signal 185565/200411 (executing program) 2022/09/30 05:00:59 fetching corpus: 4550, signal 186698/201047 (executing program) 2022/09/30 05:00:59 fetching corpus: 4600, signal 187260/201295 (executing program) 2022/09/30 05:01:00 fetching corpus: 4650, signal 187468/201457 (executing program) 2022/09/30 05:01:00 fetching corpus: 4700, signal 188544/201652 (executing program) 2022/09/30 05:01:00 fetching corpus: 4750, signal 189207/201819 (executing program) 2022/09/30 05:01:00 fetching corpus: 4800, signal 189767/201979 (executing program) 2022/09/30 05:01:00 fetching corpus: 4850, signal 190376/202123 (executing program) 2022/09/30 05:01:00 fetching corpus: 4871, signal 190739/202243 (executing program) 2022/09/30 05:01:00 fetching corpus: 4871, signal 190739/202347 (executing program) 2022/09/30 05:01:00 fetching corpus: 4871, signal 190739/202369 (executing program) 2022/09/30 05:01:00 fetching corpus: 4871, signal 190739/202369 (executing program) 2022/09/30 05:01:03 starting 8 fuzzer processes 05:01:03 executing program 0: setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'L-', 0xffffffff}, 0x16, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000000c0)={{0x4, 0x3}, 0x100, './file0\x00'}) lsetxattr$security_capability(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x8, 0x401}, {0x1, 0xdfb2}]}, 0x14, 0x3) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300), &(0x7f0000000340)='./file0/file0/file0\x00', 0x14, 0x3) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0/file0/file0\x00', &(0x7f0000000400), 0x20000, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0xee00, 0xee00, 0x800) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x1f) setxattr$security_selinux(&(0x7f0000000480)='./file0/file0/file0/../file0\x00', &(0x7f00000004c0), &(0x7f0000000500)='system_u:object_r:ssh_exec_t:s0\x00', 0x20, 0x0) r0 = syz_mount_image$nfs4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2, 0x1, &(0x7f00000006c0)=[{&(0x7f00000005c0)="471875f5be64893d4f1b6d351d1d4f36ce4132a890274c44e90f61925f077da58002dba614c913520ac0fb0f8dfa1b2fcd616576508b402c824502c7a9d76586d9f2d3d75be045273bae17b0864ba1b4550cd2c7dbf3ef02762d73cbc607391b4086cb2606aaee263d2fc982f46a607b00e2a6bec940dc1beb39a10695cf5121abcebc3aa4f66e5ca485a79b4a0f39093595d5f6b1d34dea97053596853966da427c9f0dc770162868c85613140be00fca78cec5d4a0a1919aa3457e4efa4d9322bf8279c361c9bb53137be140281d73ea95e7acab6cb6b0c9d76b68dcda9d128b6d6b0350075218b5e4903f0f", 0xed, 0x5}], 0x280005, &(0x7f0000000700)={[{}, {'L-'}, {')^\xba'}, {'trusted.overlay.nlink\x00'}, {}, {'system_u:object_r:ssh_exec_t:s0\x00'}], [{@obj_type={'obj_type', 0x3d, 'security.selinux\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:ssh_exec_t:s0\x00'}}, {@appraise}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'system_u:object_r:ssh_exec_t:s0\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@fsmagic}, {@uid_lt={'uid<', 0xee00}}]}) statx(r0, &(0x7f0000000840)='./file0/file0/file0\x00', 0x100, 0x80, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000980)='./file0/file0/file0\x00', &(0x7f00000009c0)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000a40)='smackfsroot', &(0x7f0000000a80)='./file0/file0/file0/file0\x00', r0) execve(&(0x7f0000000ac0)='./file0/file0\x00', &(0x7f0000000c00)=[&(0x7f0000000b00)='\x00', &(0x7f0000000b40)='system_u:object_r:ssh_exec_t:s0\x00', &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0)='-\x00'], &(0x7f0000000d80)=[&(0x7f0000000c40)='uid>', &(0x7f0000000c80)='%}#]!^!^\'\x00', &(0x7f0000000cc0)='(@-\\]\xeb\x00', &(0x7f0000000d00)=')^\xba', &(0x7f0000000d40)='uid>']) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(r2, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)=""/205, 0xcd) r3 = getegid() fchownat(r2, &(0x7f0000000f00)='./file0/file0/file0/file0\x00', r1, r3, 0x400) stat(&(0x7f0000000f40)='./file0/file0/file0/file0\x00', &(0x7f0000000f80)) lsetxattr$security_capability(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040), &(0x7f0000001080)=@v1={0x1000000, [{0x5, 0x3}]}, 0xc, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000001100)={0x7, 0x1}) 05:01:03 executing program 1: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x1000)=nil) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3, 0x30, 0xffffffffffffffff, 0x10000000) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x99f, 0x20, 0x2, 0x266}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x1}, 0x3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x30010, r1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r0, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x141, 0x0, {0x3, r5}}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000200)=""/236, 0xec}, {&(0x7f0000000300)=""/160, 0xa0}, {&(0x7f00000003c0)=""/99, 0x63}, {&(0x7f0000000440)=""/43, 0x2b}], 0x5) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x40) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x1, 0x2, 0x0, 0x0, 0x800, 0x1440, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2a7, 0x1, @perf_bp={&(0x7f0000000500), 0xc}, 0x404, 0xf15, 0xfe000000, 0x3, 0x9, 0x4000000, 0xffff, 0x0, 0x1f, 0x0, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x7aac, &(0x7f00000005c0)={0x0, 0x2ba3, 0x4, 0x3, 0x315}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) move_pages(0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[&(0x7f0000400000/0xc00000)=nil, &(0x7f000067a000/0x1000)=nil, &(0x7f0000c7e000/0x3000)=nil], &(0x7f0000000700)=[0x3f, 0x4, 0x10001, 0x8, 0x3, 0x0, 0x200, 0x0, 0x40, 0x4], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) mbind(&(0x7f00006c7000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000780)=0x6, 0x9, 0x0) mlock2(&(0x7f00007fc000/0x1000)=nil, 0x1000, 0x1) shmget(0x0, 0x3000, 0x40, &(0x7f0000b40000/0x3000)=nil) 05:01:03 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x1}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000400)=0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x9, 0x7, 0x4, 0x5}, {0x0, 0x4, 0x1}, {0xfffb, 0x6, 0x6, 0x9}]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000580)={{r2}, 0x0, 0x4, @inherit={0x98, &(0x7f00000004c0)={0x1, 0xa, 0x3ff, 0x6, {0x20, 0xffffffff, 0x5, 0x7, 0x401}, [0x6, 0xfffffffffffff801, 0x1ff, 0x1f, 0x1, 0x3, 0x2, 0x20, 0x1, 0x9]}}, @subvolid=0x1}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/asound/seq/clients\x00', 0x0, 0x0) flock(r3, 0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000015c0)={r1, 0x556f, 0x0, [0xfff, 0x7ff, 0x20, 0x4, 0xdd98], [0x5, 0x9, 0x100, 0x6, 0x6, 0xfffffffffffffffe, 0x3, 0x10000, 0x8a, 0x200, 0x10000, 0x9, 0x40, 0x20, 0x9, 0x4, 0x70f8, 0x0, 0xffffffff, 0x200, 0x8, 0x3ff, 0x70, 0x3, 0x80, 0x3, 0x401, 0x14610a97, 0x4b6, 0x101, 0x21d9400000000, 0xffffffffffff7fff, 0xee18, 0xfff, 0x5, 0x8, 0x1, 0xffffffff, 0x7, 0x40, 0xfffffffffffff0a5, 0x5, 0x5, 0x9, 0x896e, 0x0, 0xb20, 0x8, 0xffffffff00000001, 0x9, 0x3, 0xfffffffffffffff9, 0x5, 0x6, 0xfffffffffffffc01, 0x6, 0x80000000, 0x9, 0x8641, 0x1, 0x3f, 0x3, 0x0, 0xffffffffffffff01, 0x80, 0x7fffffff, 0x7, 0x6, 0x9, 0x6, 0xf26f, 0x4640, 0x4, 0x80000001, 0x7fffffff, 0x33, 0x5, 0x5b, 0x8, 0xffffffffffffff81, 0x80000000, 0x5, 0xc9, 0xffffffffffffffc1, 0x5, 0x7ff, 0x3, 0x6020, 0x5, 0xecd2, 0x5, 0x89, 0x8fd, 0xf23, 0x6, 0x81, 0x2, 0x4, 0x5af5, 0x57, 0x100000000, 0x3, 0x1ffd, 0x1, 0xb818, 0x10001, 0x5, 0x8, 0x7fffffff, 0xc3, 0x0, 0x3, 0x9, 0x400, 0x10001, 0x6, 0x7fffffff, 0x8, 0x7d5, 0x6, 0x800]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001a00)={r4, 0x3, 0x8001}) fsetxattr$security_capability(r0, &(0x7f0000001e00), &(0x7f0000001e40)=@v2={0x2000000, [{0x905, 0x31ba1edc}, {0xffffffff, 0x9}]}, 0x14, 0x3) r5 = epoll_create(0x6) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000001e80)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001f00)={0x7, &(0x7f0000001ec0)=[{0x9, 0x1f, 0x2, 0x3}, {0xdf61, 0x3, 0x7, 0x2}, {0x2, 0x2, 0x0, 0x80}, {0x200, 0xaf, 0x40, 0x2}, {0xa558, 0x7f, 0x0, 0x9}, {0xddec, 0xc, 0x1, 0xffff}, {0x1, 0x0, 0x7, 0x5f}]}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001f80)={&(0x7f0000001f40)=""/22, 0x16}) copy_file_range(r6, &(0x7f0000001fc0)=0x8, r7, &(0x7f0000002000)=0x8001, 0x1f, 0x0) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000002040)={'custom0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000002180)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000021c0)={0x80000008}) r9 = creat(&(0x7f0000002200)='./file0\x00', 0xb0) ioctl$RTC_UIE_ON(r9, 0x7003) 05:01:03 executing program 3: fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x110) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x901601, 0x139) statx(r0, &(0x7f0000000080)='./file0\x00', 0x1000, 0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount_setattr(r0, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={0x100000, 0x100008, 0x100000, {r0}}, 0x20) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0x2, 0x8}, 0x100, './file1\x00'}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x10000, &(0x7f00000003c0)={0x80, 0x0, 0x120000, {r2}}, 0x20) sendmmsg$unix(r0, &(0x7f0000000400), 0x0, 0x1010) execveat(r0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000480)='.log\x00', &(0x7f00000004c0)='.)\\\x00', &(0x7f0000000500)=':\\.{//\x14[@\x00', &(0x7f0000000540)='\'{\x00'], &(0x7f0000000600)=[&(0x7f00000005c0)='.log\x00'], 0x1000) syz_mount_image$vfat(&(0x7f0000000640), &(0x7f0000000680)='./file1\x00', 0x1, 0x7, &(0x7f0000001a80)=[{&(0x7f00000006c0)="3f10d7065b19ffa41c7b5b3170fab35b611698e5483aa1afe4c9a3c27924c998348c4dbbc3efbe68056bfde305ca59334599da0c4e345c7a2c9695adcf6cc1692f1a51e1ecdaa7754674d5aeabab95649fc10351cc57b0ad71e3effb9372394fb40603be7ecf0fef9a84f6", 0x6b, 0xffff}, {&(0x7f0000000740)="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", 0x1000, 0x3}, {&(0x7f0000001740)="b142a88dbae8478d574a6ec0070f2d0b039dd3c9ce11821a7251656dbbe571ba1bf67b11ba06ebc4bbba5080951ba56465843c400cfc067b5166e3c0060ff4f5a4d1852ea238f7a46cbc42c5f4db1a968175ce0c2c0c67c702f7adb05c040bc2fa7024cda85641a01937f8183660c7cbfb9c9500903e3574b1f2080f9164bbd7d02ea34ba84e326d39d843615f6f9aed920df0764fd847e641b824ebc2f272e104af0778c6ac57ccb5629a2903628b74", 0xb0}, {&(0x7f0000001800)="d4bc3bc1b90de63a9f244289de25b709783fba232bfb2b6cdbde4c1b2d1fbf505a3caa01baaf3899dedda4509f2ca419d102c82f18a99c", 0x37, 0x1}, {&(0x7f0000001840)="2c2a8a7efd4bbca9dcd0c5f68e35d17e18c9ebadcd4590add0d6ec92b96a30b1838b1baac50740bf2ca8bd3d4b80b5453ded8402744cd8f15de6ad905c4445f008b317139fdbf8ac4ba8a604ee9b4c9f63cfceabd476c7f0e3c65e6e6ed54e0f32ca7cd58fe68e2144ceec1fb5a61c8e1fde8fee990e36b1570a11539125a06c5c0ad6cc2a33df0e18b29563c5ab9eb70ae22189b6083b6af271ff84e736b53562f567d45396d3bf69b0b9e5550c8cc3c350c144d27c2677302ea03ab81038e54d1ac98afd6ae55cfe3d9b1fb7531063eeda7ada4649a896ce087499dfca56fba14b9cb394914c5f2a3356ea789ba6deda7f5035b762", 0xf6, 0x1000}, {&(0x7f0000001940)="2fc913e13b62bde9bf62bebf1fb5382866d671a38d45e432172bbf863a114a52486a9dd3c071c43ed152ef8ef10a6cc71688b97b79", 0x35, 0x1}, {&(0x7f0000001980)="5a536b785a1d91e147ab5533b2d8b57e1b5561791ad22b371602bb2eee04a2dfa1b5b7c42b62b316b51e103e77a1256eeb28571ddc667d383ddd9f139925e2a2b6edc72936017143fda97e7ff1cc4d86220d98106527165b576246d943739deed670c2b2190971c5e290c5fc310fc3f62d271f2d59a11e372dc82eb16a41de7ec612627454c5bbfd71a1d787e872a1526de30e52d8fe8513e1c15e32b1589ad39caff5888514e1e2896caa058066fdacbf412dfdc3357a8efd12042c39f23723cc3a51e38d1f92a33bf8aad45ebb82613c07f16a02e52c", 0xd7, 0xfff}], 0x8081, &(0x7f0000001b40)={[{@shortname_mixed}, {@nonumtail}, {@nonumtail}], [{@uid_gt={'uid>', r1}}]}) syz_io_uring_setup(0x2c9a, &(0x7f0000001bc0)={0x0, 0x8b51, 0x8, 0x1, 0x365, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000001cc0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r2, 0x0, 0x0, 0x4, 0x5, 0x1, {0x0, 0x0, r2}}, 0x0) r4 = signalfd(r0, &(0x7f0000001d00)={[0x7]}, 0x8) r5 = getgid() fchownat(r4, &(0x7f0000001d40)='./file0\x00', r1, r5, 0x1000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) mount_setattr(r4, &(0x7f0000001d80)='./file1\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0xe0, 0x100000, {r4}}, 0x20) syncfs(r2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001e00)='net/ptype\x00') io_uring_enter(r6, 0x454b, 0xfe51, 0x3, &(0x7f0000001e40)={[0x2]}, 0x8) 05:01:03 executing program 4: setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3a, @multicast2, 0x4e22, 0x1, 'lc\x00', 0x1, 0x0, 0x1d}, {@remote, 0x4e21, 0x4, 0x81, 0x4e16, 0x200}}, 0x44) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x88, @rand_addr=0x64010102, 0x4e24, 0x0, 'wrr\x00', 0x2, 0x3, 0x10}, 0x2c) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @multicast1}, &(0x7f0000000140)=0xc) connect(r1, &(0x7f0000000180)=@can={0x1d, r2}, 0x80) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000200)={0x33, @local, 0x4e23, 0x4, 'dh\x00', 0x23, 0x3, 0x6a}, 0x2c) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x94}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', r2, 0x29, 0x0, 0x1, 0x6, 0x1c, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x40, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x2f, 0x9, 0x1, 0x1, 0xb1, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x700, 0x8000, 0x80000001, 0x534ac9a7}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000580)={0x0, 0x6, [0x1, 0xfffffffffffffff8, 0x8, 0xf97, 0x6, 0x7]}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r6 = dup2(r5, r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x4, 0x9, 0x5, 0x2, 0x68, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x741, 0x10, 0x1, 0xe8e8}}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x120, 0x2, 0x8, 0x200, 0x0, 0x0, {0xd, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x228}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfb8}]}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80008000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb0a}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x120}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000900)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) flock(r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) 05:01:03 executing program 5: sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x1, 0x0, 0x0, 0x5, 0x9e, 0x0, 0x10000, 0x0, 0x8a4f}, ["", "", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x400}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x20004004) r0 = clone3(&(0x7f0000000440)={0x211800080, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {}, &(0x7f0000000340)=""/70, 0x46, &(0x7f00000003c0), &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r2 = clone3(&(0x7f0000000740)={0x10000000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x1a}, &(0x7f0000000580)=""/228, 0xe4, &(0x7f0000000680)=""/72, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa810}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xfc, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0xfc}}, 0x4040890) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4c880) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) accept$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0}, &(0x7f0000000c40)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e40)={'erspan0\x00', &(0x7f0000000dc0)={'syztnl2\x00', 0x0, 0x1, 0x1, 0x3, 0xa0000000, {{0x16, 0x4, 0x0, 0x5, 0x58, 0x68, 0x0, 0x19, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x35}, {[@lsrr={0x83, 0xf, 0xf1, [@loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback]}, @noop, @ssrr={0x89, 0x7, 0xa9, [@multicast2]}, @lsrr={0x83, 0x17, 0x2a, [@remote, @multicast1, @rand_addr=0x64010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0x3c, [@loopback, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xe0, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}}, 0x8040001) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x48, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x30, r8, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xde, 0x4, 0x100, 0x6}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4090) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000001480)={{r1}, {@void, @max}}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001500)) 05:01:03 executing program 6: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x1a, 0x5, 0x12, 0xb, 0x9, 0x7bf20000, 0x0, 0xb8, 0xf701f175d3c71987}) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x680400, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000080)={0x0, "91ff18bd65077d229f4aab6d477f8b8e"}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001080)={r0, 0x5, 0x1, 0xffffffffffffffff}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000010c0)="279a91895369d0bdd3d97b127d8003e6aa5546fa849e4624f7927f0c1dd11fbe3fa0acdc6a94eb16a9e3afdf1966d535f55a6c97fdb98a7e861e9ded704e374dab713671cbb43857ef08da3d19dc53bc56b9fc13ac83ee29ad50d382d40e71f51f", 0x61) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000001140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r6, {0xff}}, './file0\x00'}) fallocate(r4, 0x38, 0x80, 0x3) fcntl$setflags(r4, 0x2, 0x1) process_madvise(r0, &(0x7f0000001540)=[{&(0x7f0000001200)="bb58064ad571b7f9527608223cea74979a35fd29ddfe12baae5437ab298284ce61da1ae1d42a4b31c6f0924abc48c4c2b6ba38609d9159ff11f211634c632d82dcb3c381568aff93932f2e8571041d3048f651def6bbe58feff5c110b0e773efa086902b057b9b954ba1a41fa5006e3bfbf1ccd40a3b294c747d0b79f5a366101ee6ec8b261a0d6902", 0x89}, {&(0x7f00000012c0)="1bd2cac71b1fadfedc139efd53b21799ed842ca8a81904d0ac3ca5183243a5bfc4a615a85461726aee0475cb8b6f208e74876372dbde74d864374b19a8d27b88c7c7ac99d5e6b0e9db3915f99d4763db3fb42dc21462f0a21c0412eaf75b2499408188945386b43168935851e64177ae0f5b4fe444298b91ea", 0x79}, {&(0x7f0000001340)="eb8c03b715ca8e20736cd8de7f5e1ede23c1e53ff1361b7f833453b64666178d3591d34c6503f40a87cefc7acbbbcff1a6a60ceec456b7fa0326f46f7e8d382c3a3ac89ad44615c4d16eb3db3ebc917db53379d9f2b883a9be1e2a04c62ed08a27916be2e9cdfbd1967ec5402dcf957264e0a508ab731845769283e9f30dc0e2246f796ca08f35ef6387b6aa5e009520e782e47b247019c44bba65d2f66e93aa1a25d1d6d88e3108133d051a7990ec84329919dab41e13aca50eebf0f00ca2623bdaa66d39e6bdd43e9016ccc86d118832852537", 0xd4}, {&(0x7f0000001440)="bf4559d5da962b0c97cdabb858fa47a862e14bdc5b1bde46b846760d151cfb3f4beea9920f19f4fa009f4c085ed7deef57f2b67555113ab5831bfeffc5bf904be0921cb6211c0a3f59f61e14c35e45e0b9733000c6d53136774ff74a222247e8ea7f87775af6e59bae375f41e32930f77d07882ee9d6fafdd43c8ddaa6125ad0d01cd8b9894cf6b5e4f3be56b6c4664f1edebb480803d9e87fdf5e3d94646e9c5cabb05f9a6a78015c62f72a61506f35cf00aef2217a4d0cd2d436d2c6d0ce1212a32708", 0xc4}], 0x4, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000001580)=@gcm_256={{0x304}, "a0db3581be4c7dd2", "0a9515253726d7b8bfdb225a0e9e71e3f52b1a5917e046539b10a0f7dbba2a1b", "d7146ac8", "a948e0dff358b2ee"}, 0x38) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffff00}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000016c0), 0x4) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000001700)=0x20000) 05:01:03 executing program 7: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xf8, 0x2, 0x3f, 0x80000001, 0x2, 0x6, 0x0, 0x35, 0x38, 0x27c, 0x10000, 0xa5, 0x20, 0x1, 0x5, 0x9759}, [{0x70000000, 0x4, 0x1, 0x51f3, 0x4, 0xb958, 0xe393, 0xffff0001}], "ccf182c3f8bc5f9eea57863adf700a0a4480c750722777e2d6472d743261d99d1867f4874df654b6e44e9a1c1e22b2cd9037201840ccf93e4a7ace97a5d2a8672098352ae80bb8c56071e6ac05276d41809a12e73e4bef81a8136b182ed04cdebf512029952cddeb32bdd0e82dec3dc5ba888c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8cb) r0 = dup(0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000900)) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000a00)="3149c372cc08a454d816d670fe618848c21da550d26189bafce17759d88d07f055bda53c0e9324f6eff44ac1fc09f25be34f691d185aed23a3277df23b69a70c9971620737801090ff5cc678a939f272d05ecf128b7f97d1da69752ef67bdc000a43dafdc12d746c484a95ac1d49116131065e20af8909a048eec331b1fa6daf1a7b632a5e1c259b9683c46f25090576332ad61dfdb2045f0733f9f465f93ea9e55efd20c71935") sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x10, 0x3f5, 0x2, 0x70bd2d, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000bc0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c00), 0x840, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$bt_l2cap(r3, &(0x7f0000000c80)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6c9}, 0xe) r4 = accept(r3, &(0x7f0000000cc0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000d40)=0x80) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001040)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000dc0)={0x22c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x50a5}, {0x6, 0x11, 0x4000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xd}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x88}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x21}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x9105}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xfe84}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xad1}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x8000}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40}, 0x4084) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000001080)={'nat\x00', 0x3d, "a9d07ddcb3d9ac05a11f02927df39a5f47f289bf157de34d92d9bd9e6626560f988f4db5ff09af2046355fdac113cf7c024165b284a6a06cd2b965ae6c"}, &(0x7f0000001100)=0x61) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140), 0x280, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001180)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000001300)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001340)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0/file0\x00'}) mount$9p_unix(&(0x7f0000001380)='./file0/file0\x00', &(0x7f00000013c0)='./file0/file1\x00', &(0x7f0000001400), 0x40408, &(0x7f0000001440)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x1ff}}, {@msize}, {@posixacl}, {@loose}], [{@obj_user={'obj_user', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@obj_role={'obj_role', 0x3d, ':\''}}]}}) [ 71.007140] audit: type=1400 audit(1664514063.723:6): avc: denied { execmem } for pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 72.384598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.404891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.406002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.407198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.408337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.410264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.411184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.411779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.412390] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.413077] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.414042] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.415259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.416184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.416896] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.417964] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.419128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.419323] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.421545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.425230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.425240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.425585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.426239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.427437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.428207] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.428963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.431750] Bluetooth: hci3: HCI_REQ-0x0c1a [ 72.432679] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.433940] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.435597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.442201] Bluetooth: hci1: HCI_REQ-0x0c1a [ 72.444495] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.446581] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.448186] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.450714] Bluetooth: hci7: HCI_REQ-0x0c1a [ 72.451659] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.452722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.453885] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.455371] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.458632] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 72.459748] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.460654] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.462224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.465209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.466260] Bluetooth: hci6: HCI_REQ-0x0c1a [ 72.485548] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.491177] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.491785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.497811] Bluetooth: hci2: HCI_REQ-0x0c1a [ 72.498011] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.504867] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.506422] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.508318] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.513634] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.517313] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.524999] Bluetooth: hci5: HCI_REQ-0x0c1a [ 72.568901] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.481509] Bluetooth: hci0: command 0x0409 tx timeout [ 74.482780] Bluetooth: hci6: command 0x0409 tx timeout [ 74.483761] Bluetooth: hci3: command 0x0409 tx timeout [ 74.485328] Bluetooth: hci7: command 0x0409 tx timeout [ 74.545224] Bluetooth: hci5: command 0x0409 tx timeout [ 74.546384] Bluetooth: hci1: command 0x0409 tx timeout [ 74.548178] Bluetooth: hci2: command 0x0409 tx timeout [ 74.609666] Bluetooth: hci4: command 0x0409 tx timeout [ 76.547807] Bluetooth: hci7: command 0x041b tx timeout [ 76.548320] Bluetooth: hci3: command 0x041b tx timeout [ 76.548714] Bluetooth: hci6: command 0x041b tx timeout [ 76.549143] Bluetooth: hci0: command 0x041b tx timeout [ 76.593138] Bluetooth: hci1: command 0x041b tx timeout [ 76.593580] Bluetooth: hci2: command 0x041b tx timeout [ 76.593977] Bluetooth: hci5: command 0x041b tx timeout [ 76.657108] Bluetooth: hci4: command 0x041b tx timeout [ 78.577198] Bluetooth: hci0: command 0x040f tx timeout [ 78.577672] Bluetooth: hci6: command 0x040f tx timeout [ 78.578102] Bluetooth: hci3: command 0x040f tx timeout [ 78.578493] Bluetooth: hci7: command 0x040f tx timeout [ 78.641143] Bluetooth: hci5: command 0x040f tx timeout [ 78.641613] Bluetooth: hci2: command 0x040f tx timeout [ 78.642002] Bluetooth: hci1: command 0x040f tx timeout [ 78.705149] Bluetooth: hci4: command 0x040f tx timeout [ 80.625500] Bluetooth: hci7: command 0x0419 tx timeout [ 80.625970] Bluetooth: hci3: command 0x0419 tx timeout [ 80.626577] Bluetooth: hci6: command 0x0419 tx timeout [ 80.626967] Bluetooth: hci0: command 0x0419 tx timeout [ 80.689223] Bluetooth: hci1: command 0x0419 tx timeout [ 80.689708] Bluetooth: hci2: command 0x0419 tx timeout [ 80.690139] Bluetooth: hci5: command 0x0419 tx timeout [ 80.753111] Bluetooth: hci4: command 0x0419 tx timeout 05:02:00 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x1}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000400)=0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x9, 0x7, 0x4, 0x5}, {0x0, 0x4, 0x1}, {0xfffb, 0x6, 0x6, 0x9}]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000580)={{r2}, 0x0, 0x4, @inherit={0x98, &(0x7f00000004c0)={0x1, 0xa, 0x3ff, 0x6, {0x20, 0xffffffff, 0x5, 0x7, 0x401}, [0x6, 0xfffffffffffff801, 0x1ff, 0x1f, 0x1, 0x3, 0x2, 0x20, 0x1, 0x9]}}, @subvolid=0x1}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/asound/seq/clients\x00', 0x0, 0x0) flock(r3, 0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000015c0)={r1, 0x556f, 0x0, [0xfff, 0x7ff, 0x20, 0x4, 0xdd98], [0x5, 0x9, 0x100, 0x6, 0x6, 0xfffffffffffffffe, 0x3, 0x10000, 0x8a, 0x200, 0x10000, 0x9, 0x40, 0x20, 0x9, 0x4, 0x70f8, 0x0, 0xffffffff, 0x200, 0x8, 0x3ff, 0x70, 0x3, 0x80, 0x3, 0x401, 0x14610a97, 0x4b6, 0x101, 0x21d9400000000, 0xffffffffffff7fff, 0xee18, 0xfff, 0x5, 0x8, 0x1, 0xffffffff, 0x7, 0x40, 0xfffffffffffff0a5, 0x5, 0x5, 0x9, 0x896e, 0x0, 0xb20, 0x8, 0xffffffff00000001, 0x9, 0x3, 0xfffffffffffffff9, 0x5, 0x6, 0xfffffffffffffc01, 0x6, 0x80000000, 0x9, 0x8641, 0x1, 0x3f, 0x3, 0x0, 0xffffffffffffff01, 0x80, 0x7fffffff, 0x7, 0x6, 0x9, 0x6, 0xf26f, 0x4640, 0x4, 0x80000001, 0x7fffffff, 0x33, 0x5, 0x5b, 0x8, 0xffffffffffffff81, 0x80000000, 0x5, 0xc9, 0xffffffffffffffc1, 0x5, 0x7ff, 0x3, 0x6020, 0x5, 0xecd2, 0x5, 0x89, 0x8fd, 0xf23, 0x6, 0x81, 0x2, 0x4, 0x5af5, 0x57, 0x100000000, 0x3, 0x1ffd, 0x1, 0xb818, 0x10001, 0x5, 0x8, 0x7fffffff, 0xc3, 0x0, 0x3, 0x9, 0x400, 0x10001, 0x6, 0x7fffffff, 0x8, 0x7d5, 0x6, 0x800]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001a00)={r4, 0x3, 0x8001}) fsetxattr$security_capability(r0, &(0x7f0000001e00), &(0x7f0000001e40)=@v2={0x2000000, [{0x905, 0x31ba1edc}, {0xffffffff, 0x9}]}, 0x14, 0x3) r5 = epoll_create(0x6) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000001e80)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001f00)={0x7, &(0x7f0000001ec0)=[{0x9, 0x1f, 0x2, 0x3}, {0xdf61, 0x3, 0x7, 0x2}, {0x2, 0x2, 0x0, 0x80}, {0x200, 0xaf, 0x40, 0x2}, {0xa558, 0x7f, 0x0, 0x9}, {0xddec, 0xc, 0x1, 0xffff}, {0x1, 0x0, 0x7, 0x5f}]}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001f80)={&(0x7f0000001f40)=""/22, 0x16}) copy_file_range(r6, &(0x7f0000001fc0)=0x8, r7, &(0x7f0000002000)=0x8001, 0x1f, 0x0) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000002040)={'custom0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000002180)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000021c0)={0x80000008}) r9 = creat(&(0x7f0000002200)='./file0\x00', 0xb0) ioctl$RTC_UIE_ON(r9, 0x7003) 05:02:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) close_range(r3, r5, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f0000000100)={[0x645]}, 0x8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001f00)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/196, 0xc4}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/42, 0x2a}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/12, 0xc}, {&(0x7f0000000840)=""/179, 0xb3}, {&(0x7f0000000900)=""/208, 0xd0}, {&(0x7f0000000a00)=""/179, 0xb3}], 0x4, &(0x7f0000000b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/189, 0xbd}, {&(0x7f0000001dc0)=""/220, 0xdc}], 0x3}}], 0x4, 0x2042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000002000)={{0x1, 0x1, 0x18, r7, {0x1}}, './file1\x00'}) [ 127.646933] audit: type=1400 audit(1664514120.363:7): avc: denied { open } for pid=3792 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.648480] audit: type=1400 audit(1664514120.363:8): avc: denied { kernel } for pid=3792 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.658539] ------------[ cut here ]------------ [ 127.658563] [ 127.658566] ====================================================== [ 127.658571] WARNING: possible circular locking dependency detected [ 127.658575] 6.0.0-rc7-next-20220929 #1 Not tainted [ 127.658582] ------------------------------------------------------ [ 127.658585] syz-executor.2/3793 is trying to acquire lock: [ 127.658592] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 127.658635] [ 127.658635] but task is already holding lock: [ 127.658638] ffff88800f4f4420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 127.658666] [ 127.658666] which lock already depends on the new lock. [ 127.658666] [ 127.658669] [ 127.658669] the existing dependency chain (in reverse order) is: [ 127.658672] [ 127.658672] -> #3 (&ctx->lock){....}-{2:2}: [ 127.658686] _raw_spin_lock+0x2a/0x40 [ 127.658697] __perf_event_task_sched_out+0x53b/0x18d0 [ 127.658709] __schedule+0xedd/0x2470 [ 127.658726] schedule+0xda/0x1b0 [ 127.658739] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.658752] syscall_exit_to_user_mode+0x19/0x40 [ 127.658765] do_syscall_64+0x48/0x90 [ 127.658783] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.658796] [ 127.658796] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 127.658810] _raw_spin_lock_nested+0x30/0x40 [ 127.658820] raw_spin_rq_lock_nested+0x1e/0x30 [ 127.658834] task_fork_fair+0x63/0x4d0 [ 127.658850] sched_cgroup_fork+0x3d0/0x540 [ 127.658864] copy_process+0x4183/0x6e20 [ 127.658875] kernel_clone+0xe7/0x890 [ 127.658884] user_mode_thread+0xad/0xf0 [ 127.658895] rest_init+0x24/0x250 [ 127.658907] arch_call_rest_init+0xf/0x14 [ 127.658924] start_kernel+0x4c6/0x4eb [ 127.658938] secondary_startup_64_no_verify+0xe0/0xeb [ 127.658953] [ 127.658953] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 127.658966] _raw_spin_lock_irqsave+0x39/0x60 [ 127.658977] try_to_wake_up+0xab/0x1930 [ 127.658990] up+0x75/0xb0 [ 127.659004] __up_console_sem+0x6e/0x80 [ 127.659020] console_unlock+0x46a/0x590 [ 127.659036] vprintk_emit+0x1bd/0x560 [ 127.659052] vprintk+0x84/0xa0 [ 127.659068] _printk+0xba/0xf1 [ 127.659079] regdb_fw_cb.cold+0x6c/0xa7 [ 127.659097] request_firmware_work_func+0x12e/0x240 [ 127.659117] process_one_work+0xa17/0x16a0 [ 127.659134] worker_thread+0x637/0x1260 [ 127.659151] kthread+0x2ed/0x3a0 [ 127.659165] ret_from_fork+0x22/0x30 [ 127.659177] [ 127.659177] -> #0 ((console_sem).lock){....}-{2:2}: [ 127.659191] __lock_acquire+0x2a02/0x5e70 [ 127.659208] lock_acquire+0x1a2/0x530 [ 127.659223] _raw_spin_lock_irqsave+0x39/0x60 [ 127.659234] down_trylock+0xe/0x70 [ 127.659249] __down_trylock_console_sem+0x3b/0xd0 [ 127.659264] vprintk_emit+0x16b/0x560 [ 127.659281] vprintk+0x84/0xa0 [ 127.659296] _printk+0xba/0xf1 [ 127.659306] report_bug.cold+0x72/0xab [ 127.659322] handle_bug+0x3c/0x70 [ 127.659338] exc_invalid_op+0x14/0x50 [ 127.659355] asm_exc_invalid_op+0x16/0x20 [ 127.659367] group_sched_out.part.0+0x2c7/0x460 [ 127.659385] ctx_sched_out+0x8f1/0xc10 [ 127.659401] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.659412] __schedule+0xedd/0x2470 [ 127.659425] schedule+0xda/0x1b0 [ 127.659439] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.659449] syscall_exit_to_user_mode+0x19/0x40 [ 127.659462] do_syscall_64+0x48/0x90 [ 127.659478] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.659491] [ 127.659491] other info that might help us debug this: [ 127.659491] [ 127.659493] Chain exists of: [ 127.659493] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 127.659493] [ 127.659508] Possible unsafe locking scenario: [ 127.659508] [ 127.659510] CPU0 CPU1 [ 127.659513] ---- ---- [ 127.659515] lock(&ctx->lock); [ 127.659521] lock(&rq->__lock); [ 127.659527] lock(&ctx->lock); [ 127.659534] lock((console_sem).lock); [ 127.659539] [ 127.659539] *** DEADLOCK *** [ 127.659539] [ 127.659541] 2 locks held by syz-executor.2/3793: [ 127.659548] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 127.659577] #1: ffff88800f4f4420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 127.659603] [ 127.659603] stack backtrace: [ 127.659606] CPU: 0 PID: 3793 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220929 #1 [ 127.659619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 127.659627] Call Trace: [ 127.659630] [ 127.659635] dump_stack_lvl+0x8b/0xb3 [ 127.659654] check_noncircular+0x263/0x2e0 [ 127.659670] ? format_decode+0x26c/0xb50 [ 127.659687] ? print_circular_bug+0x450/0x450 [ 127.659704] ? enable_ptr_key_workfn+0x20/0x20 [ 127.659719] ? __lockdep_reset_lock+0x180/0x180 [ 127.659736] ? format_decode+0x26c/0xb50 [ 127.659754] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 127.659771] __lock_acquire+0x2a02/0x5e70 [ 127.659793] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 127.659815] lock_acquire+0x1a2/0x530 [ 127.659831] ? down_trylock+0xe/0x70 [ 127.659848] ? lock_release+0x750/0x750 [ 127.659865] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 127.659886] ? vprintk+0x84/0xa0 [ 127.659904] _raw_spin_lock_irqsave+0x39/0x60 [ 127.659915] ? down_trylock+0xe/0x70 [ 127.659931] down_trylock+0xe/0x70 [ 127.659947] ? vprintk+0x84/0xa0 [ 127.659963] __down_trylock_console_sem+0x3b/0xd0 [ 127.659981] vprintk_emit+0x16b/0x560 [ 127.659997] ? lock_downgrade+0x6d0/0x6d0 [ 127.660016] vprintk+0x84/0xa0 [ 127.660033] _printk+0xba/0xf1 [ 127.660044] ? record_print_text.cold+0x16/0x16 [ 127.660058] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 127.660072] ? lock_downgrade+0x6d0/0x6d0 [ 127.660090] ? report_bug.cold+0x66/0xab [ 127.660108] ? group_sched_out.part.0+0x2c7/0x460 [ 127.660126] report_bug.cold+0x72/0xab [ 127.660144] handle_bug+0x3c/0x70 [ 127.660162] exc_invalid_op+0x14/0x50 [ 127.660180] asm_exc_invalid_op+0x16/0x20 [ 127.660192] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 127.660213] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 127.660225] RSP: 0018:ffff8880186cfc48 EFLAGS: 00010006 [ 127.660234] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 127.660241] RDX: ffff88801b759ac0 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 127.660249] RBP: ffff888008660b90 R08: 0000000000000005 R09: 0000000000000001 [ 127.660257] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f4f4400 [ 127.660264] R13: ffff88806ce3d2c0 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 127.660275] ? group_sched_out.part.0+0x2c7/0x460 [ 127.660295] ? group_sched_out.part.0+0x2c7/0x460 [ 127.660315] ctx_sched_out+0x8f1/0xc10 [ 127.660334] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.660348] ? lock_is_held_type+0xd7/0x130 [ 127.660362] ? __perf_cgroup_move+0x160/0x160 [ 127.660373] ? set_next_entity+0x304/0x550 [ 127.660390] ? update_curr+0x267/0x740 [ 127.660409] ? lock_is_held_type+0xd7/0x130 [ 127.660423] __schedule+0xedd/0x2470 [ 127.660440] ? io_schedule_timeout+0x150/0x150 [ 127.660456] ? __x64_sys_futex_time32+0x480/0x480 [ 127.660471] schedule+0xda/0x1b0 [ 127.660486] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.660498] syscall_exit_to_user_mode+0x19/0x40 [ 127.660512] do_syscall_64+0x48/0x90 [ 127.660529] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.660542] RIP: 0033:0x7f6b8b6e1b19 [ 127.660551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.660561] RSP: 002b:00007f6b88c57218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.660572] RAX: 0000000000000001 RBX: 00007f6b8b7f4f68 RCX: 00007f6b8b6e1b19 [ 127.660580] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6b8b7f4f6c [ 127.660587] RBP: 00007f6b8b7f4f60 R08: 000000000000000e R09: 0000000000000000 [ 127.660594] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f6b8b7f4f6c [ 127.660602] R13: 00007fff9d18f6af R14: 00007f6b88c57300 R15: 0000000000022000 [ 127.660614] [ 127.775515] WARNING: CPU: 0 PID: 3793 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 127.776983] Modules linked in: [ 127.777479] CPU: 0 PID: 3793 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220929 #1 [ 127.778692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 127.780402] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 127.781286] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 127.784052] RSP: 0018:ffff8880186cfc48 EFLAGS: 00010006 [ 127.784896] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 127.785984] RDX: ffff88801b759ac0 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 127.787056] RBP: ffff888008660b90 R08: 0000000000000005 R09: 0000000000000001 [ 127.788140] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f4f4400 [ 127.789264] R13: ffff88806ce3d2c0 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 127.790347] FS: 00007f6b88c57700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 127.791559] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.792446] CR2: 00007ffd330146e9 CR3: 000000001ef1a000 CR4: 0000000000350ef0 [ 127.793557] Call Trace: [ 127.793961] [ 127.794316] ctx_sched_out+0x8f1/0xc10 [ 127.794920] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.795706] ? lock_is_held_type+0xd7/0x130 [ 127.796373] ? __perf_cgroup_move+0x160/0x160 [ 127.797079] ? set_next_entity+0x304/0x550 [ 127.797739] ? update_curr+0x267/0x740 [ 127.798348] ? lock_is_held_type+0xd7/0x130 [ 127.799019] __schedule+0xedd/0x2470 [ 127.799598] ? io_schedule_timeout+0x150/0x150 [ 127.800244] ? __x64_sys_futex_time32+0x480/0x480 [ 127.800989] schedule+0xda/0x1b0 [ 127.801485] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.802166] syscall_exit_to_user_mode+0x19/0x40 [ 127.802833] do_syscall_64+0x48/0x90 [ 127.803369] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.804083] RIP: 0033:0x7f6b8b6e1b19 [ 127.804605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.807325] RSP: 002b:00007f6b88c57218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.808453] RAX: 0000000000000001 RBX: 00007f6b8b7f4f68 RCX: 00007f6b8b6e1b19 [ 127.809563] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6b8b7f4f6c [ 127.810630] RBP: 00007f6b8b7f4f60 R08: 000000000000000e R09: 0000000000000000 [ 127.811702] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f6b8b7f4f6c [ 127.812783] R13: 00007fff9d18f6af R14: 00007f6b88c57300 R15: 0000000000022000 [ 127.813852] [ 127.814209] irq event stamp: 674 [ 127.814702] hardirqs last enabled at (673): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 127.816073] hardirqs last disabled at (674): [] __schedule+0x1225/0x2470 [ 127.817316] softirqs last enabled at (544): [] __irq_exit_rcu+0x11b/0x180 [ 127.818581] softirqs last disabled at (533): [] __irq_exit_rcu+0x11b/0x180 [ 127.819836] ---[ end trace 0000000000000000 ]--- [ 128.051075] hrtimer: interrupt took 19466 ns 05:02:00 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x200) gettid() migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000180)=0x10001) sched_getattr(0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x101, 0x0) write$nbd(r2, &(0x7f0000000b80)={0x67446698, 0x1, 0x1, 0x1, 0x2, "82668e14304ecb7d192317c009ca39269e1eed0ac24fef9639d729d7223b436134a5c054b67cba59730ad06f3ff2c87a05efca451fbf8ae412ff0eb40567050b182edeb719255300c2a77a771c77b71d67db40d74075195262499dc4a46fb3868737ef4c11f8c4f1e13e6ca7edbff6e18763c8dc4f4f9b35e4810c7f9bf3ea022393aab181ccd192e523b1aae4689d34391aecabd5c016ae8855315b95bf10f6a5972d134bd318d9883aa0f48df0b59ac9d5015c10b05f5b5e8399327a1bf28a4ded0c69a8"}, 0xd5) capset(&(0x7f00000092c0)={0x20071026, r1}, &(0x7f0000009300)) process_vm_writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/142, 0x8e}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000400)=""/198, 0xc6}, {&(0x7f0000000500)=""/140, 0x8c}], 0x5, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/168, 0xa8}, {&(0x7f0000000780)=""/104, 0x68}, {&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000800)=""/143, 0x8f}, {&(0x7f00000008c0)=""/178, 0xb2}, {&(0x7f0000000980)=""/37, 0x25}, {&(0x7f00000009c0)=""/252, 0xfc}], 0x8, 0x0) r3 = gettid() capset(&(0x7f00000092c0)={0x20071026, r3}, &(0x7f0000009300)) sched_getattr(r3, &(0x7f0000000c80)={0x38}, 0x38, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0) 05:02:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x8, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x40, 0x6, 0x5, 0x0, 0x5, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000000100), 0xd}, 0x2000, 0x45c1, 0x7, 0x0, 0x9, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x100000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) read(r4, &(0x7f0000000040)=""/161, 0xa1) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x4, 0x7, 0x0, 0x3, 0x2]}, &(0x7f0000000240)=0x54) [ 128.305708] audit: type=1400 audit(1664514121.012:9): avc: denied { write } for pid=3822 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.478332] audit: type=1400 audit(1664514121.195:10): avc: denied { block_suspend } for pid=3792 comm="syz-executor.2" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 128.524282] capability: warning: `syz-executor.6' uses deprecated v2 capabilities in a way that may be insecure 05:02:01 executing program 5: io_setup(0x6, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x200017e, 0x6}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) io_setup(0x40, &(0x7f0000000240)=0x0) r3 = eventfd2(0x8001, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x200, r4, &(0x7f0000000100)="d308ccd41179a089d0ff2cb8faf5d01254f04b4c41023082ae4b1465856e8c1046bbb0822ac01aaa5f1e7a5bf02d37de4e49066d885212863d7362a43ab85a8fcdea09da2434ee4ae3cd4699ffbd32b05a6abf9b", 0x54, 0x100000000, 0x0, 0x5, r1}]) 05:02:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) close_range(r3, r5, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f0000000100)={[0x645]}, 0x8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001f00)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/196, 0xc4}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/42, 0x2a}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/12, 0xc}, {&(0x7f0000000840)=""/179, 0xb3}, {&(0x7f0000000900)=""/208, 0xd0}, {&(0x7f0000000a00)=""/179, 0xb3}], 0x4, &(0x7f0000000b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/189, 0xbd}, {&(0x7f0000001dc0)=""/220, 0xdc}], 0x3}}], 0x4, 0x2042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000002000)={{0x1, 0x1, 0x18, r7, {0x1}}, './file1\x00'}) 05:02:01 executing program 5: io_setup(0x6, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x200017e, 0x6}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) io_setup(0x40, &(0x7f0000000240)=0x0) r3 = eventfd2(0x8001, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x200, r4, &(0x7f0000000100)="d308ccd41179a089d0ff2cb8faf5d01254f04b4c41023082ae4b1465856e8c1046bbb0822ac01aaa5f1e7a5bf02d37de4e49066d885212863d7362a43ab85a8fcdea09da2434ee4ae3cd4699ffbd32b05a6abf9b", 0x54, 0x100000000, 0x0, 0x5, r1}]) 05:02:01 executing program 4: io_setup(0x6, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x200017e, 0x6}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) io_setup(0x40, &(0x7f0000000240)=0x0) r3 = eventfd2(0x8001, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x200, r4, &(0x7f0000000100)="d308ccd41179a089d0ff2cb8faf5d01254f04b4c41023082ae4b1465856e8c1046bbb0822ac01aaa5f1e7a5bf02d37de4e49066d885212863d7362a43ab85a8fcdea09da2434ee4ae3cd4699ffbd32b05a6abf9b", 0x54, 0x100000000, 0x0, 0x5, r1}]) [ 135.473230] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 135.474263] Bluetooth: hci0: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 05:02:00 Registers: info registers vcpu 0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff8880186cf690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001 R12=0000000000000038 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6b88c57700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd330146e9 CR3=000000001ef1a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f6b8b7c87c0 00007f6b8b7c87c8 YMM02=0000000000000000 0000000000000000 00007f6b8b7c87e0 00007f6b8b7c87c0 YMM03=0000000000000000 0000000000000000 00007f6b8b7c87c8 00007f6b8b7c87c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88801894fb98 RDI=ffff88801894f8b8 RBP=ffff88801894f8a8 RSP=ffff88801894f7d0 R8 =ffffffff85edf890 R9 =ffffffff85edf894 R10=ffffed1003129f17 R11=ffff88801894f890 R12=ffff88801894f891 R13=ffff88801894f8b0 R14=ffff88801894f850 R15=0000000000000005 RIP=ffffffff8111acd3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f815e0e56f4 CR3=0000000005226000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f815e0f4470 00007f815e0f3f20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000