Warning: Permanently added '[localhost]:39290' (ECDSA) to the list of known hosts. 2022/09/28 05:38:11 fuzzer started 2022/09/28 05:38:12 dialing manager at localhost:35827 syzkaller login: [ 39.116155] cgroup: Unknown subsys name 'net' [ 39.207249] cgroup: Unknown subsys name 'rlimit' 2022/09/28 05:38:26 syscalls: 2215 2022/09/28 05:38:26 code coverage: enabled 2022/09/28 05:38:26 comparison tracing: enabled 2022/09/28 05:38:26 extra coverage: enabled 2022/09/28 05:38:26 setuid sandbox: enabled 2022/09/28 05:38:26 namespace sandbox: enabled 2022/09/28 05:38:26 Android sandbox: enabled 2022/09/28 05:38:26 fault injection: enabled 2022/09/28 05:38:26 leak checking: enabled 2022/09/28 05:38:26 net packet injection: enabled 2022/09/28 05:38:26 net device setup: enabled 2022/09/28 05:38:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/28 05:38:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/28 05:38:26 USB emulation: enabled 2022/09/28 05:38:26 hci packet injection: enabled 2022/09/28 05:38:26 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220927) 2022/09/28 05:38:26 802.15.4 emulation: enabled 2022/09/28 05:38:26 fetching corpus: 50, signal 21166/22971 (executing program) 2022/09/28 05:38:27 fetching corpus: 100, signal 36151/39454 (executing program) 2022/09/28 05:38:27 fetching corpus: 150, signal 46488/51203 (executing program) 2022/09/28 05:38:27 fetching corpus: 200, signal 51886/58000 (executing program) 2022/09/28 05:38:27 fetching corpus: 250, signal 58692/66023 (executing program) 2022/09/28 05:38:27 fetching corpus: 300, signal 63590/72104 (executing program) 2022/09/28 05:38:27 fetching corpus: 350, signal 68661/78291 (executing program) 2022/09/28 05:38:27 fetching corpus: 400, signal 72958/83643 (executing program) 2022/09/28 05:38:27 fetching corpus: 450, signal 75825/87615 (executing program) 2022/09/28 05:38:28 fetching corpus: 500, signal 78733/91582 (executing program) 2022/09/28 05:38:28 fetching corpus: 550, signal 83746/97383 (executing program) 2022/09/28 05:38:28 fetching corpus: 600, signal 86772/101320 (executing program) 2022/09/28 05:38:28 fetching corpus: 650, signal 88790/104329 (executing program) 2022/09/28 05:38:28 fetching corpus: 700, signal 92112/108391 (executing program) 2022/09/28 05:38:28 fetching corpus: 750, signal 94875/111952 (executing program) 2022/09/28 05:38:28 fetching corpus: 800, signal 97144/114998 (executing program) 2022/09/28 05:38:28 fetching corpus: 850, signal 99054/117682 (executing program) 2022/09/28 05:38:29 fetching corpus: 900, signal 101921/121158 (executing program) 2022/09/28 05:38:29 fetching corpus: 950, signal 105294/125003 (executing program) 2022/09/28 05:38:29 fetching corpus: 1000, signal 107811/128104 (executing program) 2022/09/28 05:38:29 fetching corpus: 1050, signal 110296/131111 (executing program) 2022/09/28 05:38:29 fetching corpus: 1100, signal 112515/133819 (executing program) 2022/09/28 05:38:29 fetching corpus: 1150, signal 113895/135873 (executing program) 2022/09/28 05:38:29 fetching corpus: 1200, signal 115830/138324 (executing program) 2022/09/28 05:38:29 fetching corpus: 1250, signal 116681/139897 (executing program) 2022/09/28 05:38:30 fetching corpus: 1300, signal 118663/142364 (executing program) 2022/09/28 05:38:30 fetching corpus: 1350, signal 120693/144761 (executing program) 2022/09/28 05:38:30 fetching corpus: 1400, signal 123041/147415 (executing program) 2022/09/28 05:38:30 fetching corpus: 1450, signal 124295/149224 (executing program) 2022/09/28 05:38:30 fetching corpus: 1500, signal 125886/151327 (executing program) 2022/09/28 05:38:30 fetching corpus: 1550, signal 128920/154305 (executing program) 2022/09/28 05:38:30 fetching corpus: 1600, signal 132003/157235 (executing program) 2022/09/28 05:38:30 fetching corpus: 1650, signal 133756/159217 (executing program) 2022/09/28 05:38:31 fetching corpus: 1700, signal 134823/160702 (executing program) 2022/09/28 05:38:31 fetching corpus: 1750, signal 138035/163633 (executing program) 2022/09/28 05:38:31 fetching corpus: 1800, signal 139414/165253 (executing program) 2022/09/28 05:38:31 fetching corpus: 1850, signal 140639/166758 (executing program) 2022/09/28 05:38:31 fetching corpus: 1900, signal 141813/168201 (executing program) 2022/09/28 05:38:31 fetching corpus: 1950, signal 144436/170515 (executing program) 2022/09/28 05:38:31 fetching corpus: 2000, signal 145170/171688 (executing program) 2022/09/28 05:38:31 fetching corpus: 2050, signal 146704/173283 (executing program) 2022/09/28 05:38:31 fetching corpus: 2100, signal 147401/174377 (executing program) 2022/09/28 05:38:31 fetching corpus: 2150, signal 148309/175586 (executing program) 2022/09/28 05:38:32 fetching corpus: 2200, signal 148989/176597 (executing program) 2022/09/28 05:38:32 fetching corpus: 2250, signal 149931/177815 (executing program) 2022/09/28 05:38:32 fetching corpus: 2300, signal 150783/178916 (executing program) 2022/09/28 05:38:32 fetching corpus: 2350, signal 151999/180209 (executing program) 2022/09/28 05:38:32 fetching corpus: 2400, signal 154432/182141 (executing program) 2022/09/28 05:38:32 fetching corpus: 2450, signal 155418/183247 (executing program) 2022/09/28 05:38:32 fetching corpus: 2500, signal 157322/184854 (executing program) 2022/09/28 05:38:32 fetching corpus: 2550, signal 158009/185781 (executing program) 2022/09/28 05:38:32 fetching corpus: 2600, signal 159466/187101 (executing program) 2022/09/28 05:38:33 fetching corpus: 2650, signal 159993/187936 (executing program) 2022/09/28 05:38:33 fetching corpus: 2700, signal 161125/188988 (executing program) 2022/09/28 05:38:33 fetching corpus: 2750, signal 162146/190004 (executing program) 2022/09/28 05:38:33 fetching corpus: 2800, signal 162777/190771 (executing program) 2022/09/28 05:38:33 fetching corpus: 2850, signal 163660/191677 (executing program) 2022/09/28 05:38:33 fetching corpus: 2900, signal 164559/192608 (executing program) 2022/09/28 05:38:33 fetching corpus: 2950, signal 165521/193539 (executing program) 2022/09/28 05:38:33 fetching corpus: 3000, signal 167261/194800 (executing program) 2022/09/28 05:38:33 fetching corpus: 3050, signal 168284/195674 (executing program) 2022/09/28 05:38:34 fetching corpus: 3100, signal 169545/196657 (executing program) 2022/09/28 05:38:34 fetching corpus: 3150, signal 170399/197479 (executing program) 2022/09/28 05:38:34 fetching corpus: 3200, signal 171200/198261 (executing program) 2022/09/28 05:38:34 fetching corpus: 3250, signal 172507/199239 (executing program) 2022/09/28 05:38:34 fetching corpus: 3300, signal 173609/200095 (executing program) 2022/09/28 05:38:34 fetching corpus: 3350, signal 174411/200823 (executing program) 2022/09/28 05:38:34 fetching corpus: 3400, signal 175593/201642 (executing program) 2022/09/28 05:38:34 fetching corpus: 3450, signal 176323/202262 (executing program) 2022/09/28 05:38:35 fetching corpus: 3500, signal 176763/202795 (executing program) 2022/09/28 05:38:35 fetching corpus: 3550, signal 177517/203419 (executing program) 2022/09/28 05:38:35 fetching corpus: 3600, signal 178468/204097 (executing program) 2022/09/28 05:38:35 fetching corpus: 3650, signal 179941/204925 (executing program) 2022/09/28 05:38:35 fetching corpus: 3700, signal 181501/205821 (executing program) 2022/09/28 05:38:35 fetching corpus: 3750, signal 182101/206345 (executing program) 2022/09/28 05:38:35 fetching corpus: 3800, signal 182679/206867 (executing program) 2022/09/28 05:38:35 fetching corpus: 3850, signal 183505/207429 (executing program) 2022/09/28 05:38:36 fetching corpus: 3900, signal 184109/207899 (executing program) 2022/09/28 05:38:36 fetching corpus: 3950, signal 184905/208458 (executing program) 2022/09/28 05:38:36 fetching corpus: 4000, signal 185800/209022 (executing program) 2022/09/28 05:38:36 fetching corpus: 4050, signal 186877/209603 (executing program) 2022/09/28 05:38:36 fetching corpus: 4100, signal 187978/210227 (executing program) 2022/09/28 05:38:36 fetching corpus: 4150, signal 188376/210579 (executing program) 2022/09/28 05:38:36 fetching corpus: 4200, signal 188815/210956 (executing program) 2022/09/28 05:38:36 fetching corpus: 4250, signal 189425/211340 (executing program) 2022/09/28 05:38:37 fetching corpus: 4300, signal 190118/211728 (executing program) 2022/09/28 05:38:37 fetching corpus: 4350, signal 191016/212161 (executing program) 2022/09/28 05:38:37 fetching corpus: 4400, signal 191353/212470 (executing program) 2022/09/28 05:38:37 fetching corpus: 4450, signal 191802/212822 (executing program) 2022/09/28 05:38:37 fetching corpus: 4500, signal 192365/213123 (executing program) 2022/09/28 05:38:37 fetching corpus: 4550, signal 193410/213545 (executing program) 2022/09/28 05:38:37 fetching corpus: 4600, signal 193869/213833 (executing program) 2022/09/28 05:38:37 fetching corpus: 4650, signal 194460/214132 (executing program) 2022/09/28 05:38:37 fetching corpus: 4700, signal 194830/214405 (executing program) 2022/09/28 05:38:38 fetching corpus: 4750, signal 195714/214729 (executing program) 2022/09/28 05:38:38 fetching corpus: 4800, signal 197218/215079 (executing program) 2022/09/28 05:38:38 fetching corpus: 4850, signal 197622/215316 (executing program) 2022/09/28 05:38:38 fetching corpus: 4900, signal 197973/215537 (executing program) 2022/09/28 05:38:38 fetching corpus: 4950, signal 198576/215737 (executing program) 2022/09/28 05:38:38 fetching corpus: 5000, signal 199774/216039 (executing program) 2022/09/28 05:38:38 fetching corpus: 5050, signal 200519/216266 (executing program) 2022/09/28 05:38:39 fetching corpus: 5100, signal 201092/216448 (executing program) 2022/09/28 05:38:39 fetching corpus: 5150, signal 201314/216607 (executing program) 2022/09/28 05:38:39 fetching corpus: 5200, signal 201885/216771 (executing program) 2022/09/28 05:38:39 fetching corpus: 5250, signal 202878/216946 (executing program) 2022/09/28 05:38:39 fetching corpus: 5300, signal 203164/217100 (executing program) 2022/09/28 05:38:39 fetching corpus: 5350, signal 203868/217213 (executing program) 2022/09/28 05:38:39 fetching corpus: 5400, signal 204915/217214 (executing program) 2022/09/28 05:38:39 fetching corpus: 5450, signal 205604/217216 (executing program) 2022/09/28 05:38:40 fetching corpus: 5500, signal 206209/217218 (executing program) 2022/09/28 05:38:40 fetching corpus: 5550, signal 206722/217219 (executing program) 2022/09/28 05:38:40 fetching corpus: 5600, signal 207066/217226 (executing program) 2022/09/28 05:38:40 fetching corpus: 5650, signal 207452/217235 (executing program) 2022/09/28 05:38:40 fetching corpus: 5700, signal 208128/217245 (executing program) 2022/09/28 05:38:40 fetching corpus: 5750, signal 208906/217245 (executing program) 2022/09/28 05:38:40 fetching corpus: 5762, signal 209057/217245 (executing program) 2022/09/28 05:38:40 fetching corpus: 5762, signal 209057/217245 (executing program) 2022/09/28 05:38:42 starting 8 fuzzer processes 05:38:42 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x10241, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x6000008) chroot(&(0x7f0000000080)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:user_cron_spool_t:s0\x00', 0x27, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$rfkill(0xffffffffffffffff, &(0x7f0000000400)={0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x8) r2 = mmap$IORING_OFF_SQES(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x1000000, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2) r3 = openat2(r0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x84080, 0xdd, 0x4}, 0x18) epoll_create1(0x80000) ioctl$FITHAW(r1, 0xc0045878) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$tun(r4, &(0x7f0000000540)={@val, @void, @mpls={[{0x1, 0x0, 0x1}, {0x2}, {0x2}, {0xfff, 0x0, 0x1}], @llc={@llc={0xec, 0xdc, "b7", "0a873dad0c8114a93c41a6cdcf3b7c7ab3b91072870ee93ba7f5385c11576b9efdea57f51bb90694381971"}}}}, 0x42) futimesat(r0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={{0x0, 0xea60}, {0x0, 0x2710}}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) read$rfkill(r3, &(0x7f0000000680), 0x8) 05:38:42 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x55b, 0x7fffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = dup2(r0, r1) r3 = signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8, 0x800) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x200, &(0x7f0000000140)) read$char_usb(r0, &(0x7f0000000240)=""/48, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)={0xc000000c}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1e1400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x5, 0x6, 0x570e, 0x101, 0x7, 0xff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e21, 0x8001, @mcast2, 0x4}, 0x1ff, [0x3, 0xe4, 0x8001, 0x0, 0x7, 0x9, 0x3f, 0x6]}, 0x5c) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@loopback, 0x4e21, 0x7, 0x4e23, 0x7, 0x2, 0x20, 0x80, 0x8a, 0x0, r5}, {0xffffffffffffffe1, 0xeb9, 0xb107, 0xfc00000000000000, 0x1, 0x0, 0x8, 0x1}, {0x1000, 0x9, 0x3, 0x3}, 0x8001, 0x6e6bbd, 0x2, 0x1, 0x1, 0x1}, {{@in6=@private1, 0x4d4, 0x32}, 0xa, @in=@empty, 0x3507, 0x0, 0x2, 0x1, 0xfff, 0x4b87, 0x7fff}}, 0xe8) fcntl$setflags(r3, 0x2, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000640)='cgroup.kill\x00', 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000680)='^M},+\x00', 0x0, r7) 05:38:42 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0xcb16) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x87, @empty, 0x4e22, 0x1, 'sh\x00', 0x24, 0x4, 0x4f}, 0x2c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x800, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x4, 0x80000000, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @generic={0x88, 0xd, "6c0c6ee8420b8c98bd5a0c"}]}}}}}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={r2, @rand_addr=0x64010102, @multicast2}, 0xc) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_TID={0xc}]}, 0x28}}, 0x800) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000480), &(0x7f00000004c0)=0x8) recvmmsg$unix(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000840)=""/90, 0x5a}], 0x5, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/190, 0xbe}, {&(0x7f0000000ac0)=""/230, 0xe6}, {&(0x7f0000000bc0)=""/86, 0x56}, {&(0x7f0000000c40)=""/146, 0x92}, {&(0x7f0000000d00)=""/94, 0x5e}], 0x5, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}], 0x2, 0x40002000, &(0x7f0000000f80)={0x77359400}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8000) creat(&(0x7f0000001100)='./file0\x00', 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000001140), r4) r7 = accept(r1, &(0x7f0000001180)=@nfc_llcp, &(0x7f0000001200)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f00000012c0)={'ip6tnl0\x00', &(0x7f0000001240)={'ip6gre0\x00', r2, 0x2f, 0x40, 0x40, 0x180, 0x2, @loopback, @local, 0x8, 0x8000, 0x17fd, 0x6a}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001340)={{0x1, 0x1, 0x18, r5, {0x624cdd30, 0x2}}, './file0/file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), r8) stat(&(0x7f0000001380)='./file0/file0\x00', &(0x7f00000013c0)) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) [ 69.785361] audit: type=1400 audit(1664343522.834:6): avc: denied { execmem } for pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:38:42 executing program 7: clone3(&(0x7f00000011c0)={0x8400000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x11}, &(0x7f00000000c0)=""/172, 0xac, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[0x0], 0x1}, 0x58) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000001240)={r1, 0x0, 0xb8cd}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000012c0)={{0x1, 0x3ff}, 0x100, './file0\x00'}) fsopen(&(0x7f0000001400)='cifs\x00', 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000001440), 0x4, 0x109000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000001480)={0x2, 0x6, 0xfffffffffffffff9}) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000014c0)={r2, 0x1}) mount$9p_fd(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x100000, &(0x7f0000001580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, 'cifs\x00'}}, {@aname={'aname', 0x3d, 'cifs\x00'}}], [{@subj_role={'subj_role', 0x3d, '/dev/vcsa#\x00'}}, {@audit}, {@hash}, {@euid_lt={'euid<', 0xee00}}, {@subj_user={'subj_user', 0x3d, 'cifs\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x0, 0x64, 0x7, 0x34, 0x37, 0x36, 0x62], 0x2d, [0x65, 0x62, 0x61, 0x30], 0x2d, [0x33, 0x61, 0x61, 0x32], 0x2d, [0x38, 0x3a, 0x38, 0x40aa069aa51b718e], 0x2d, [0x32, 0x66, 0x36, 0x32, 0x35, 0x34, 0x61, 0x63]}}}, {@hash}, {@audit}]}}) pipe2$9p(&(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000001700)={{}, 0x1, &(0x7f00000016c0)=[0x8], 0x3ff, 0x6, [0x0, 0x8, 0x30, 0x44]}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001780)={{0x0, 0xf73d, 0xffffffffffffbc43, 0x3, 0x7f, 0x8, 0x4, 0x0, 0x3, 0x2, 0x3, 0xfffffffffffffffd, 0xbd00000000, 0x6, 0xa797}}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000002780)={r7, 0xc889}) r8 = accept$inet(r3, 0x0, &(0x7f0000003780)) ioctl$BTRFS_IOC_DEV_REPLACE(r8, 0xca289435, &(0x7f00000037c0)={0x1, 0x1, @status={[0x0, 0x8001, 0x101, 0x4, 0x6, 0x20]}, [0x1, 0x2, 0x3, 0xa1, 0xe8, 0x0, 0x3, 0x93, 0x1, 0x6, 0x5, 0x2, 0x3ff, 0x77ef, 0x101, 0x7, 0x8, 0x1, 0xfffffffffffffffd, 0x8, 0x8001, 0x43, 0x5, 0x1, 0x1, 0x6, 0x2, 0xfffffffffffffffb, 0x9, 0x7ff, 0x6c3, 0x7fffffff, 0x50b3205a, 0x3, 0x3, 0x40, 0x4, 0x1, 0x3, 0x8, 0x4, 0xc866, 0x41f46282, 0x0, 0x6b2, 0x0, 0x5, 0x8803, 0x6ca2, 0xffff, 0x4, 0x3, 0x1, 0x0, 0x6, 0x53c, 0x10001, 0x4, 0x7, 0x8, 0x7ff, 0x0, 0x1000, 0x4]}) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000004200), 0x2, 0x0) r9 = syz_open_dev$vcsn(&(0x7f0000004240), 0x1, 0xc0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000004280)='ro\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000042c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 05:38:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2}, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002bc0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/215, 0xd7}, {&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000440)=""/50, 0x32}], 0x7}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/29, 0x1d}, {&(0x7f0000000600)=""/212, 0xd4}], 0x3, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000800)=""/117, 0x75}, {&(0x7f0000000880)=""/229, 0xe5}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)=""/140, 0x8c}, {&(0x7f0000000b40)=""/253, 0xfd}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/223, 0xdf}, {&(0x7f0000000d80)=""/124, 0x7c}, {&(0x7f0000000e00)=""/153, 0x99}, {&(0x7f0000000ec0)=""/221, 0xdd}], 0xa, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000010c0), 0x6e, &(0x7f0000002580)=[{&(0x7f0000001140)=""/158, 0x9e}, {&(0x7f0000001200)=""/161, 0xa1}, {&(0x7f00000012c0)=""/204, 0xcc}, {&(0x7f00000013c0)=""/115, 0x73}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/51, 0x33}, {&(0x7f0000002480)=""/219, 0xdb}], 0x7, &(0x7f0000002600)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f00000026c0), 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002740)=""/20, 0x14}, {&(0x7f0000002780)=""/163, 0xa3}, {&(0x7f0000002840)=""/214, 0xd6}, {&(0x7f0000002940)=""/226, 0xe2}, {&(0x7f0000002a40)=""/221, 0xdd}], 0x5}}], 0x5, 0x2041, &(0x7f0000002d00)={0x0, 0x3938700}) r9 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r9, 0x7, r0, &(0x7f0000002d40)={0xffffffffffffffff, r0, 0x4}) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002d80), 0x2c80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000002e40)={'ip6gre0\x00', &(0x7f0000002dc0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x3, 0x3, 0x45, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x20, 0x4e2e, 0x7}}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000002e80)={r11, 0x1, 0x6, @remote}, 0x10) ioctl(r4, 0x2, &(0x7f0000002ec0)="a6fb6e280e6a2ea018b1f11bd0546e6aa567db18172197ddb362c5cfc57de0d14f6f") ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000002f00)={@local, 0x50, r11}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002f40)={'ip6gretap0\x00'}) pwritev(r6, &(0x7f0000003340)=[{&(0x7f0000002f80)="15739027ea598d2f718a59a759bc39147dc0010a52e8e297e272ae5e", 0x1c}, {&(0x7f0000002fc0)="adb679cf8affea49115f5a65b620dfbfadfe05fc966cdcf44802dce3973c864145f71034c5324814852bc7ead68c4918c243c846ae693fb9192decb3", 0x3c}, {&(0x7f0000003000)="95c035fd65ad133f5803bacf2db0d8723bda8e4f816a9af011b4373f049ca5423ad6f6276544ead5b78a6a69ca87be995d5ab9cbac18a2f7103b6a87c8b4", 0x3e}, {&(0x7f0000003040)="02b56b610234ca225eb5e3ef91e927e56472ec6bb660830241bd5d20cb0b15f0545a20c76938c04029f0df1aefed13f30f0cba4ba57455e4e9d385ddbefe1ef8883059796879f1f25379c667076ec4451dba72921cccfa16be5214a2750443dab82d8bcb605e7500105ab6e5b962a557ca72f3d40b96128e3f49284e6122275aca861eebd5d7074756a3b999f55c9d5b6c89fa9631fc2817ce9b9a8a6d4dcd66c1c1832211a17d7f1dfdd857c479cce21ea7e34817ba32b9391cc3140919135945da31b0bdb42ad90db2c872040098171cb0711c9efc53e294f3562909d749958c3bdc51eb4cbcbe1c73b98d", 0xec}, {&(0x7f0000003140)="5a321d17bb9fd6ef1b1a5b8a881b8fd3acfbaae24ccfce03262bff1deb46bc6bc8064cd321722b", 0x27}, {&(0x7f0000003180)="1c2e907ef0cf70475daa24945e1df302c51ec03ed6d52d1e05", 0x19}, {&(0x7f00000031c0)="5834347fb5d94329ce7cba2d16349d2856298fb563a3bf12995e8a526dbe1077acfefd0beae363c1ec704e8304039539173a22252880b5bb27f65fab0c9bf670c83a8d1731f194991b28741c4752c5237b4eb508eafbb9268f51784d97e91705aaf18c39ee563736f2c8991bb585a4bad25ef1458a2faa109e797e028fc92f9735b5f92e113a2e5c8282e9f892370b327147612bc3756a6ec55328d606dc3b02a697c2bb806127dcdf3c", 0xaa}, {&(0x7f0000003280)="80fc1b89466442ef590d49e997f793913873bdc74004c1f95651ca74416c524251dceee7ea7447e146601464a896efc4f190b60e881c5418b2300485522bfe04b28035b2831e79e949de69f02baaff97df14be846fd12b41cabb658011ab23466ae9767f10bf9fe9806001c22bd673f9c24c3f206764fa3d2b5853f786603fbecfc14441ce5db2efd9744ce8d1d4c1706fb9f6bc1a7b", 0x96}], 0x8, 0x7fffffff, 0x9) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000033c0)={0x0, @empty, @empty}, &(0x7f0000003400)=0xc) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000003440)={r12, 0x1, 0x6, @broadcast}, 0x10) syz_io_uring_setup(0x2f21, &(0x7f0000003480)={0x0, 0xbf9, 0x2, 0x1, 0x2f5, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003500), &(0x7f0000003540)=0x0) rt_tgsigqueueinfo(0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000003580)={0x35, 0x0, 0x5}) dup(r3) waitid(0x1, r2, &(0x7f0000003600), 0x20000000, &(0x7f0000003680)) syz_io_uring_submit(0x0, r13, &(0x7f0000003840)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x9, 0x7, 0x0, 0x1000, 0x0, 0x1}, 0xfb0000) 05:38:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x3f, 0x20, 0x9, 0xd, @private0, @private1, 0x1, 0x40, 0x7f, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x3, 0x80, 0x2, @private0, @rand_addr=' \x01\x00', 0x700, 0x8000, 0x6, 0x52e}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x110) connect$packet(r3, &(0x7f00000001c0)={0x11, 0x4, r2, 0x1, 0x80, 0x6, @remote}, 0x14) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x4000010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xfffffff9) r5 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x2000, 0x5}, 0x18) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x240, 0x13, 0x400, 0x70bd2d, 0x25dfdbfd, {0x11, 0x3, 0xc1, 0x5b, {0x4e24, 0x4e21, [0x8000, 0xffff0000, 0x1, 0x1], [0x872, 0x6, 0x9, 0x1], r2, [0x1000, 0x1]}, 0x7, 0x1000}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "de280cbc631432c7a130e1e7297e3d7b9c160c0b1a143367ec7b309e7710ccd253b2e57c3be3bb3895bbde124195fcc4751e5a942b670608615e36cb1888cd03"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "114ca5f2cad80b23a47766fc79c4182d87d741de83dbb715d6376667d67ca7eb8391745e04f1e08c6835cc74ea36a93eeec88e89cabf080a50876b2167d91c54b97cacf046ba088b425c4e29aa7e8d225f66f5d57872b844bf929a4c0d87b4c4ee7796bc73c548547ac10cab0d30e94475e26b596a14205d657581a8e1bcc28fa11635dc5ac68d1c6fc0e558ac1575659a8dbad19aea81bd17c974ecd7209ac4b9ba9551c57b8a9f7f"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "179aa50b817dfa90ee137f0f277a2d78b397837db72f0a0ceeeeeb8d01fd6b697a0b83e9a46ef1925536e24a020735806415"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "729ec8a5a81038748db59e4356f89148887a032f03af5d8fc21a62ae152dcd57179380336e9644a46e4a11f660ecab28e8e5d129f0062fa0e52d9ec888ca7aae715da3a8f677450f5eb10839afaff3e3fe289c8994ed51d8e475cd35f0dd8b83dccc45e7acffb6097da5f2ead28e7d902937a6505e3d87072392b51570b65a44959822fc087e3388d5defc94d3a599faf4276cfbfbe67724ad063c02b32e293853e986194f2064f28bd96c6a593f5e17a0fc00ab51c54f68"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "d9bdcb960e"}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000004}, 0x240000c4) setxattr$trusted_overlay_opaque(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640), 0x2, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/attr/current\x00', 0x2, 0x0) fgetxattr(r6, &(0x7f00000006c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000700)=""/246, 0xf6) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000840)={0x0, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @rc={0x1f, @any, 0x4}, @l2tp={0x2, 0x0, @multicast2, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x746, &(0x7f0000000800)='wg2\x00', 0x7b1, 0x4, 0x80}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x184, 0x13, 0x10, 0x70bd25, 0x25dfdbfb, {0x29, 0x8, 0x1f, 0x93, {0x4e21, 0x4e21, [0x80000000, 0x95, 0x4, 0x401], [0x6, 0x6b29, 0x20b05af9, 0x3], r1, [0x8001, 0x2]}, 0x8000, 0x5074}, [@INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "0945bd300a83ed4d83fee92b9d4ce0d2a8dabba5cd7284544b245748484d6f69408d0393acb59b6541f6f4bbaaa7c13e4adc7ee3bbb29485b175"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "baaa0be473a6ac9374635a1f8fb0c8db6b6049ae84ef6a7c865989bf65322ddfb32943e95966c6e841df69da9ebcaa0a7a03e3f2a16a40b7dcd3429aec5838130da7d014193446b88da92cc0abd160d4828706ca8ea9f9c43be22dc45c5d13fbdfcdbe75f502189484d014"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "4effb288ce370a742be0ab85a359f61300cec201a73732ba5d9df257ea2ea57121ff4caa67ddd776047d049ad6c20a53b69f5a39da329b1b5536a8204d42212d38eb19f170d86c886545406fc7158cf04099ae074407293267f25e69a3ff5fda06456882d0d256d7b748d87fa3259e9d3fe9ad305e24d0f201108caa390972c62a6b57"}]}, 0x184}, 0x1, 0x0, 0x0, 0x9005}, 0x40) openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x40800, 0x0) r7 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', r2, 0x4, 0x5a, 0x5f, 0x200, 0x4, @private1, @loopback, 0x40, 0x20, 0x6, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', r8, 0x2f, 0x3b, 0x3f, 0x0, 0x38, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7, 0x1f, 0x3}}) 05:38:42 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/183, 0xb7}, {&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000100)=""/218, 0xda}], 0x3, 0x6, 0xfffffffb, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000280)={{r1}, "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"}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x21}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000013c0), 0x81, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010801}, 0x20000000) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000001500)=""/99) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000001580), &(0x7f00000015c0)={0x0, 0xfb, 0xe3, 0x0, 0x6, "98a03fd6171ba8dd95586ae2c3f00879", "71596e106966eb7310865bbb58f944138c9d1eb6bbaa5e47511b7cdfb704b83589e17788638c7bdf06352843fa2d6caf209c0799c4cf8df58e2115cacf1a9c52ac288076a7931b4d4ef774c460a9660540b52a23be96c8b85457e051768ad8d9905092c0d01da8a9ce93567092479a15193fd624ceb449e2a5b93e3cfbb41a85ff5e0f5550bf93bff7c14f94aad47b98c10ebdaf6b98234e639231b293e9e5e82da6a366983e5189dfd99877e641b39b9cab8d262ceff36b2c902d689a178da55efd6ff465b67dfd98bc619575fe"}, 0xe3, 0x2) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000016c0)=""/104) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)={0x124, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdd}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x32}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001940)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r0, &(0x7f0000001980)=0x8, 0x0) write$tcp_mem(r2, &(0x7f00000019c0)={0x6, 0x20, 0x80000001, 0x20, 0x8001}, 0x48) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/module/virtio_net', 0x82000, 0x2) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000001dc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001ac0)={0x298, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x24}}}}, [@NL80211_ATTR_VENDOR_DATA={0x100, 0xc5, "af2e7cb4663685f7c1ef37f698e3378c8c8e8ad2043749fcbfa4478fe1202a7dbd070db8fb9552c167d99c9f57c6a2195efdbc8991e9edb52b5296068a043532c3fe65c6f075e876563e8d52ba1cec2d275ced016329a5e8ed583933cf55a25422b4e353c0656adb8b9a168fc5af52d610f265db4851cbc18f972c4431d53928303be54956cad602ecc454c325b765ddc234ae53667cc71b46765ef8624c0ac6a2f1327926a993d5a475717e8f49190e39308fe70ac7ea5a1f4567a2dbd2e990e708a19f4d6221f480e845948a9ef584d96882be3b85a5fd2cdda0110b5862fdfe88b2b2addb78146d8836400fcfe9837f2ed319f58f11c3a5994207"}, @NL80211_ATTR_VENDOR_DATA={0xe3, 0xc5, "13a0518aa42a6468459b1f66dbcacef691edbc574bf1f93f6c38048bb5e54f865f28e8658728fa39da93aa9b7ec1b2cdafde121cfab6a0fa1272a0a9e992a3530f175bbf97af1ac6a002c13cd0bef53928a197cdb2d8503d8120cab3e983f6aacc7b76e4508721c089eec62ac446cfa9fde6bc9ce316d1878a44f28d846fb8010c69874ae180ac09fb048a6f2e0bfdc9c3c11b3f7bb792cf8b0bfad5e22a0f620163fae0b04ddae541a7817fb7a79986f291819982c71952da1b4993a40ba15e9cd9e4f67a38f2bbc3afb314843e452562a8dcb5c565f56383749846d087f7"}, @NL80211_ATTR_VENDOR_DATA={0x7b, 0xc5, "d94a24c238627eaa8f69744c2302e46606f5afda038924a511a797c29b5dfedc122b326b18424717a1afe219ab1e85fe095b9c1548569ce870b5c253be2edee4b309233d5fe0a599d4e109f4f426a92ddc47acdc329c5c1d95ab3ebea925f81639aacf200c18bda4b551c19e92067588598bbe39113d30"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x298}, 0x1, 0x0, 0x0, 0x4008080}, 0x8800) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001e40), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x50, r5, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x50}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0), r4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x24, r6, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) 05:38:43 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x39, 0x76b, 0x14, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x700, 0x800}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7800, 0x8, 0xcd, 0x2, {{0x24, 0x4, 0x3, 0x6, 0x90, 0x65, 0x0, 0x9, 0x5a, 0x0, @rand_addr=0x64010100, @remote, {[@noop, @noop, @end, @noop, @lsrr={0x83, 0xf, 0x65, [@multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x23, 0x29, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast, @rand_addr=0x64010102, @private=0xa010100, @rand_addr=0x64010102, @private=0xa010101, @broadcast]}, @lsrr={0x83, 0x1f, 0x8d, [@private=0xa010102, @remote, @private=0xa010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}]}, @cipso={0x86, 0x20, 0x1, [{0x2, 0xb, "4f6b83194cb9b4a5d5"}, {0x0, 0xf, "162e4bbbc09fe958913db044eb"}]}]}}}}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x16c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x460cc8bf5e8ead2c}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x40004) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000008c0)={'filter\x00', 0x0, 0x4, 0xbe, [0xffffffff, 0x8, 0x3d8, 0x80000000, 0x3, 0x4], 0x6, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000800)=""/190}, &(0x7f0000000940)=0x78) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7f}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6def}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x81}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000ac0)={@loopback, @loopback}, 0x8) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000b40)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, {0x2, 0x4e24, @loopback}, 0x256, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b00)='tunl0\x00', 0x4, 0x3, 0xb330}) r4 = open(&(0x7f0000000bc0)='./file0\x00', 0x240000, 0x20) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x78, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4) socketpair(0x27, 0x2, 0xffff, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000dc0)={'ipvs\x00'}, &(0x7f0000000e00)=0x1e) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000f00), &(0x7f0000000f40)=0xe, 0x800) dup(r8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000f80)={0x0, 0x0, "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", "508d7cfb1262a11df8e070fa28e86d5b533cc97e97bfe79bc5e65fcb713d4bd2576fbb48f4b7592e0b031d6a7674769c81d3a548d684e5111234b0cc4fa8419c628b946df6f48eb16e5efdc63654459e9eaa4bf373e90834414e58029e9906015a4a129230bf7dbf19d6051b999cf88139ad9011d1b8f86cf252ebb8802bedf1175af107a57fda37029f0f839193d05f80b8275e71e34fe5667873aaa33da181bc1fc8748d19aaed5cfd7fbe462398ca81083c1e861367944a4fbb05967ad31f6c8f7943c725bdb9a9916a14eb85407e29bd627aaa7db82b77e9db53492e4730ba15751e151bed463653d4a1eb2d91d4036658b1f12292fb49594e70b7009b70ac8f21e5ac4b26f5b2587b324b1a940a636b30a126dd1fff52c77e00317d80e91a0e1fd8d05a439526b0c8f173f2d3e33cc34eb9b6600996471efd5cb5a6d138cf1fbcca4c012dd81fe0d0ab9bf3cf9a37c90b3471cc813b7487db022ec6ad4131cc559d901269bfe92ec78004892673b34684d6fa34cda6173f435feb29a4da419243b1d1938e9ff2fdc0e2a577b2fb180015c864271b2ef6999e8a8d70590e473b9295cef18242854acea112c1c35831a8248db37b874a2caac51457413f8fd489bdbce4d87920eb88514b60d1210eb712887e8f708bc44e83002723b3344a3197158e7f0348c355e3fa399e1a915fe174c72d763167b789783c6e39e73c7767c4b281a4b45ad20cfc24b8e2792a396e87afadc62c4404c133ccde5388d3c9670f7d7e28ad056f1d7178e479d29f1a5d9ee4003d6373da662d8bd36c8efc7887286d538a0950f7da20bca2059a509b2f8a3146123c76fbca411eb565cd402027b3c41e9613ea791be48204ea9b21017dfa4aed5d78ad2ea549f938bd4f5c7de36e8f788d5363d9aa35aab9d361c625ade6da1936b7a4a0d4a2ca0f8ae7131487ad6e0cbdf2d98a8df35fd4ded20ef7b9922f057ed625c390de4d6d3a19c31da3443a544c313aa02031c65eb14fc2783c649a8e74dd446b72d640d2764dc23969a8192efe6aa78e635e0691bbf412b50259f68771cfe8af3bc98e9d773f9b4e7eaae95547211ec4b409378291d2b2be80a4e239940c49a422c701ba33b69996c8e7ca76d383e5ed952c48b7639407fc86c98928fbe0d87c58f8c5c112c0035a2fd3bcfa1c2aaaaa2e3ace7601fd62ffdfe0d95f751d059a50289174a3a10bfd2b506fdd913832285346746ad0f9d8a48c5855ebfcb5123d419ae5b3816b843c0f9dd31a47a10dd3df6e3a6d2a91339841312845d897eaabf7a8915f60a49a954569b1261a6390c380a44e65035a814add92e1dfd93e2e4d1268f68d9b8c1340c40e30c017e8950ff1575f51f7608c7764271b35891ad852e06391b1885629030b80156c22037c376933b9e6492849db397f717d551a989d2702e89402140259f195eec478f4116efa0a6aa15f3a98cdf6a3379dd0cf6b4a6e791d8ec4d06186483d60c7120e2c342d7413628b54c550a951665ae65f48347196536b6b98de39949c58092b44a42e60523263dba41fe5cff701332b83e133226aa9085e3e74cac392617d13d0f0119674e174edceda7a84dafd360ad63cf35c1f24c7f2a3c23fb309d67d9801242faeb97e5e862186e1daf39d107eba7c74016a41a7fb260abac0af84b34f298ec4ccb44a96fab13fc91f76b0c363915e5b059f5ab333447aa9fea2b177f3c3b74a32946ce128bc8d913b0efc8e38c5163b59eb901da153de6fe6f3a0a989edf382878a1d64134e7bd7eae5994c23c6a350da334343cd5d3dd089a88c2e702ea4259187d6c766110cbcec209a6d9b9eb7a14c4777a4ba23583c1231f784ce0b708c7c34d8cfde86499eeae3ccd5a457799f0b6d4689b04e8d2ff9c27f64c48eedac9278280e607d4de1928a23cad814f3e0f7eff0a9a377f29e8fb94d48544948963d5aed3bda10fcf56ea6cbf6895d7413d9982f142a8664a3614f51d1b9efc4d11fa4d7875cfa9f48093d32d25e717e7d28737a911f897cb5b597edb93b2964aaafd0e143a45e26e99b9a0efad054c3deec5d28ee3806ae6a1a8f5441fb95bab2a179092aad0ce90701538dad2d0500f9e41748ee4dadf89c2e0e29442f4699f6a99459bbaed4eb1fa10f3979407398eb2a18ea7e09aee4c1409b0cb4afb48924f52999469e4fa71a636a88656d9f7cb78e881471537a52d0cb1ce1b25530ada9f9ab996f05479abd642d66819fa65d50f00de66025088a541e004feed8218ee3d2c45490b2f92ac7ae6a40d57f5d2c14ae7b0c2a2362d63f76814f9bbeea82eeea629050e43c45e841c7561d18c094b60f5be8b10c3c964533cf6edd04b591a187ecfaba69f0d70df4c8a9373002243568721042203a3334e462475e16029fdecf5ad756353e6e4badb6ca183d1c5d871558d83f811928e97cfd1822cac1665952ced116bc1380324518c55e18388916d1c541fcce6f4c9d10d7d126af5135aeb26376ce10d38fd38fcc1fa8feabba9a61eb3b55e2b98facce26c288a2ce37649f75afe53048780337f05f70460e0f8fc34fdccc8b18f8a6bd14e27b2825e9ae4cfb6a3d2ee00c8edfc7ab19786c6b06958ac83ac2e3b681b104d6ef6e9329e4da0e72faafa1df753ab84c73b57c726916150821edefcab36f3a99b0042383bd9b8542733c2f1ec26011efea39768ccf3561074a733c785719394b2528884d11ebe82ac73855da8128ffa512347e559c0fce76aa09f61fd0d0742c6dc61daeb6ad908170c06e1cc6be082c20720ae297cdc0047ace27ddfd05faff1f6285b29ae20393b34f7e0e979047f4a27f3fd440f281e2fc9d21b6e28196e97f4edc0aa8baa94d9df66db855db43a92f972dcf5d222cf495578d89446a7d865ad263566a6a422edfb308a32a47dc2093dd66ac24c1c864e8ecdeb392938c325a0600c0b008cd7989d8741ff9fa4ac21080291ecec694eab7ea277d3a9c090bda601163159aee45770fae035890ea7d1662077e54fdc58d7ba893621f11476dfc273fa16892af5ca670950a2e1ef7a0074f80db1146b0f795ed8e00eadf41c4451be720857bcfd10c920ef9dc857fbbeacc86d93e1fd24950cfc3aaf88177ee7d34c3612761635e29a433bece3b1049abcbf2315d31b9bba4d397ad93470ea3eb0af5f8cdf95d10e8b6130f1ec45b1817e0f73cc2f6cbb4a0efe5c34166fe25f95810e15c2dec3c4cec742fabab2bce19817212721bcaec6dd82aa29db822a1c032370c9fb8f9832ad4c6d836fa3596c4772feb6cc24381aff8dcf11f285ffeeb5444c0fff293de20fb6d11f8aa58ea4b938f16927549c947f9241130d1cb707262b6d8d0313c63fb8a79fa0d07bcb20a861babc400d54327319e5bd27e527320e59a6b1ec9acaabdc420979a1070b7b30a36ce64b76f7ce7bf693cc7430072c92c392f270db0ed2676f91cdfb18a5b3cb287edb50f440993f0498faae15c6e297df66ab34c91ccf8f1ae38e5b1ceeba3faa72c783d69854c196fe62d08d5c14dcf4eb0cce2742cf7d4f2590da437f8dd6296c42e2f01a884242f6b2957108140a02d0828aa2192edf6ca67eb410c115978adadf12aa49746420b45ff1fd89994362f29c0029c3bacdbf4f060a5e54314cb15ced95fbc735151b1c4de31f955f9492acace6f56f7d12e077381661c027e2b2984b281d58f7b42b150938f93d739279d38d13bc3e7c0b5b17aec747bfb089f3114fafd25d2bb8813be658a8d17846edd8516072eb5f72fd4c9a2af9fe6518791bf2de62e95969b77b32a2643cbbeb3cae7d63131f8545cde6336120511f3f24a07f6bbf767d84df434b9e9bd65bb4d159c88a455bb1942f4a120955f72d131fc4a6879da0c758c54ce492c1eca13e29b0fbf279a0ff6e1239d0424a9dc10ceab60f67dda0a1a86d4dc394f697c14c4821c3ffd000d3a931e0bf1a812fb4ec7796b28faf37161b1a0c3e9633089451cd9d40f5589cd3b7900d9801069836486678d5b7abd410e438987386f49d04d09c4e2c83770a42a6561d0893a491135f086ecc09924f7e7b7f149da808b165a8f0c85b29ebe217bf0715cfbbe5dac59ab3a0f539c2730bfea574f330f153c2e3fabd0ccf48050a681604ab89a20518eb45a49485a88deadd321f3f202ae8a3b954791b2c0c54e9004ac705e83118e5e4eca5d5c20fb79f2796d0f3402837773a9ca1b38331ef2f25247013c769bc7ecd6f9da9c5ee77cecb79dc71f73087f576b9c1b14152497d09623eedebae4d1d549b1ffc62ea382ce5f1debe00597720949fed26da76a008014a3b48dc4aaa62e9bb2372c830793fe8322c9ed4d173c7944322db8b9c6ec6310e98674b74ed484ed49521278dad6e6ab602ee256d1b753b236346fcfa7b516009d962c6f682733e4cef212c9e0f4c959d18b2799bb8ab263f9ae97e12b12edb11edd8be691e58e073cfeb0563604648635717cd357f2e389d4fa12f0d7d30cb3dbb8f418522907430e852f8968d2a158453f7bb2f0199bb87e28b89e51590cb547a35a0e042cb5641af912874f409041543ffff15a4ab5fb869b981f07bb2fa4f45a84affe8b17a4bdc5185e05d97b0610ac8bc98d2036c95b10e1cb13dfabc0814076be595906e92ac90142aabb3348494e152185a284a0318731f826f8deadc254fde6178a645351f48e650f434d74495c9d4a2965f344373adc813f21d5f325435e4cc0e96d758e9aa692c63c78b8de33b2928261b71ffc0879ac87d1b70a4965538b32e285ff122db149d9c13beadcd6e695ec7cebb5010df012d71a87e765c2343a9509512bcf21a98b538dc38e740740bb70d60267dc4b533a23717d6560b681e657bb784b163074d032e517953b14283ee9a033cb26d7bc9f2d92370328cf79c4c4250a22a53fc1dd963910feff2123e6255fbbc2eacc98d0a9cb30029e4ffe5d9eb3f6f00bd937c050c7a687f3276999ec2ccbc3758ab999aeac5bdc50c947ab1b1bd49013a46a6aa9c1b2cdb47343254994ef4e7add8ac7913abfe0b8a7d126b0e3f14ffd8da82d7119724bbdf756815e8a342f6f8927ac580195957685d33812153ced1ed498c4fe2cd873ba45b666cc17550a90a2afca2a96d29ca6bded976357ab681fc3361d2e5631d5f5296beafd3b2c83d180d41c4a5ad6de9f6a9b903b1b179eed2e91f8a6d69eaab0520f4b770e4d835988db7077b69eac14e8be8f90f4c34cb9eec42e100a1dde93420c539dab6eaf7f85ff1b8548e5b42c688390651c8501be38a19c94f7ec088e5069344f768903d13d21edef83ea2fdb8a08b4cbb366f8c09b22ced40d5266731b22554f813ccbea1dca0f945c7a8140e83fbcc3f370d949a413226c5004a11bcc7b37c5b6d453b8cb43bcc4b676f9700e82"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f000006cb80)={0x3a0, [{}, {}, {r9}], 0x5, "651f2e0d09a90b"}) [ 71.001687] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.003152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.005825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.006913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.009276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.010498] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.015076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.015548] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.023582] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.024839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.027276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.037606] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.052969] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.055552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.058140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.061461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.063672] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.064874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.066664] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.078086] Bluetooth: hci2: HCI_REQ-0x0c1a [ 71.103904] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.111608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.120548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.122335] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.126201] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.129259] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.130822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.133011] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.139956] Bluetooth: hci5: HCI_REQ-0x0c1a [ 71.150616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.152824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.163582] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.165708] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.168047] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.173018] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.237826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.251812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.288193] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.310244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.321695] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.329952] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.347870] Bluetooth: hci7: HCI_REQ-0x0c1a [ 73.078455] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 73.143205] Bluetooth: hci5: command 0x0409 tx timeout [ 73.143534] Bluetooth: hci1: command 0x0409 tx timeout [ 73.144306] Bluetooth: hci2: command 0x0409 tx timeout [ 73.145245] Bluetooth: hci0: command 0x0409 tx timeout [ 73.147175] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 73.206494] Bluetooth: hci6: command 0x0409 tx timeout [ 73.398461] Bluetooth: hci7: command 0x0409 tx timeout [ 75.190511] Bluetooth: hci0: command 0x041b tx timeout [ 75.191203] Bluetooth: hci2: command 0x041b tx timeout [ 75.191608] Bluetooth: hci1: command 0x041b tx timeout [ 75.191901] Bluetooth: hci5: command 0x041b tx timeout [ 75.254418] Bluetooth: hci6: command 0x041b tx timeout [ 75.446458] Bluetooth: hci7: command 0x041b tx timeout [ 76.808563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.817265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.818924] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.821218] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.822210] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.822951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.825970] Bluetooth: hci3: HCI_REQ-0x0c1a [ 77.053918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.055316] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.056127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.058077] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.059024] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.060034] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.064059] Bluetooth: hci4: HCI_REQ-0x0c1a [ 77.238467] Bluetooth: hci5: command 0x040f tx timeout [ 77.239047] Bluetooth: hci1: command 0x040f tx timeout [ 77.239262] Bluetooth: hci2: command 0x040f tx timeout [ 77.239648] Bluetooth: hci0: command 0x040f tx timeout [ 77.302424] Bluetooth: hci6: command 0x040f tx timeout [ 77.495397] Bluetooth: hci7: command 0x040f tx timeout [ 78.839445] Bluetooth: hci3: command 0x0409 tx timeout [ 79.095440] Bluetooth: hci4: command 0x0409 tx timeout [ 79.293439] Bluetooth: hci2: command 0x0419 tx timeout [ 79.293949] Bluetooth: hci1: command 0x0419 tx timeout [ 79.294372] Bluetooth: hci5: command 0x0419 tx timeout [ 79.294781] Bluetooth: hci0: command 0x0419 tx timeout [ 79.351370] Bluetooth: hci6: command 0x0419 tx timeout [ 79.542435] Bluetooth: hci7: command 0x0419 tx timeout [ 80.886448] Bluetooth: hci3: command 0x041b tx timeout [ 81.142394] Bluetooth: hci4: command 0x041b tx timeout [ 82.934436] Bluetooth: hci3: command 0x040f tx timeout [ 83.190518] Bluetooth: hci4: command 0x040f tx timeout [ 84.982433] Bluetooth: hci3: command 0x0419 tx timeout [ 85.239414] Bluetooth: hci4: command 0x0419 tx timeout 05:39:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x5, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@version_L}, {@access_user}], [{@smackfsdef={'smackfsdef', 0x3d, '\xd9oH\x8e\xd9\x13\x1e\xc4#\xa1!\xe7\xb8\xee\xa1\xc4^\xb93\x8bo\x9f\xec\xf4\t\x0f\xee\xbb\xc4+\xe8f:\xa2#\x14\xa1\xac\xa9\xab\xd12m\xbe\x18;\xde\x94\\\xc8\xefkk\xd8\xcfz\xea\xfb\xcdM\x83V\xd6lDH\xd5\x8f\xeb3\xff\xcaQ\x123\x1d\x05u\\\xf10K\x13\x80j\v\x11\xa9SEzA@\xffT\xa4|\xa7\x90\xa8\x15\xaf.=\xdeU\x90>\xebh\xa4\xd0_o\xa2\x8e\x7f\xee\xb9`\xaeN\x8fs\xa5\xc9\xbc\xa6W?\xf1e\xb8\xb3\xcf\x96\xfd\x01\xfd\xc0\x02\xfd\xd5\xcd4\x12\xcc\x9f+\xc9\xb6p\xdal\x03G\xddA\x80\x1d\x83\x89Wx\xa7\a$\xa3\xa7\xde\x91\x8e\xd2\xa6>0\xd9\x1e\xcc\r\xa0\x1d\xdd\xcfp\xb1\xe1\'\xde\x13\xd3\xba\x9eor\xafr\xd0\x7fW\x84~l4\xa0,'}}]}}) [ 124.178768] 9pnet_fd: Insufficient options for proto=fd 05:39:37 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1223a6738f6cfdb3960631e0b4dc1c02030109021200010000000009040000003dfbb100"], 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x64) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/234) pipe2(0x0, 0x4000) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 124.351719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.355708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 05:39:37 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x55b, 0x7fffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = dup2(r0, r1) r3 = signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8, 0x800) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x200, &(0x7f0000000140)) read$char_usb(r0, &(0x7f0000000240)=""/48, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)={0xc000000c}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1e1400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x5, 0x6, 0x570e, 0x101, 0x7, 0xff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e21, 0x8001, @mcast2, 0x4}, 0x1ff, [0x3, 0xe4, 0x8001, 0x0, 0x7, 0x9, 0x3f, 0x6]}, 0x5c) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@loopback, 0x4e21, 0x7, 0x4e23, 0x7, 0x2, 0x20, 0x80, 0x8a, 0x0, r5}, {0xffffffffffffffe1, 0xeb9, 0xb107, 0xfc00000000000000, 0x1, 0x0, 0x8, 0x1}, {0x1000, 0x9, 0x3, 0x3}, 0x8001, 0x6e6bbd, 0x2, 0x1, 0x1, 0x1}, {{@in6=@private1, 0x4d4, 0x32}, 0xa, @in=@empty, 0x3507, 0x0, 0x2, 0x1, 0xfff, 0x4b87, 0x7fff}}, 0xe8) fcntl$setflags(r3, 0x2, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000640)='cgroup.kill\x00', 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000680)='^M},+\x00', 0x0, r7) 05:39:37 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x55b, 0x7fffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = dup2(r0, r1) r3 = signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8, 0x800) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x200, &(0x7f0000000140)) read$char_usb(r0, &(0x7f0000000240)=""/48, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)={0xc000000c}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1e1400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x5, 0x6, 0x570e, 0x101, 0x7, 0xff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e21, 0x8001, @mcast2, 0x4}, 0x1ff, [0x3, 0xe4, 0x8001, 0x0, 0x7, 0x9, 0x3f, 0x6]}, 0x5c) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@loopback, 0x4e21, 0x7, 0x4e23, 0x7, 0x2, 0x20, 0x80, 0x8a, 0x0, r5}, {0xffffffffffffffe1, 0xeb9, 0xb107, 0xfc00000000000000, 0x1, 0x0, 0x8, 0x1}, {0x1000, 0x9, 0x3, 0x3}, 0x8001, 0x6e6bbd, 0x2, 0x1, 0x1, 0x1}, {{@in6=@private1, 0x4d4, 0x32}, 0xa, @in=@empty, 0x3507, 0x0, 0x2, 0x1, 0xfff, 0x4b87, 0x7fff}}, 0xe8) fcntl$setflags(r3, 0x2, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000640)='cgroup.kill\x00', 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000680)='^M},+\x00', 0x0, r7) [ 124.868845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.869655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 05:39:37 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1223a6738f6cfdb3960631e0b4dc1c02030109021200010000000009040000003dfbb100"], 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x64) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/234) pipe2(0x0, 0x4000) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:39:37 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x55b, 0x7fffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = dup2(r0, r1) r3 = signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8, 0x800) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x200, &(0x7f0000000140)) read$char_usb(r0, &(0x7f0000000240)=""/48, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)={0xc000000c}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1e1400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x5, 0x6, 0x570e, 0x101, 0x7, 0xff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e21, 0x8001, @mcast2, 0x4}, 0x1ff, [0x3, 0xe4, 0x8001, 0x0, 0x7, 0x9, 0x3f, 0x6]}, 0x5c) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@loopback, 0x4e21, 0x7, 0x4e23, 0x7, 0x2, 0x20, 0x80, 0x8a, 0x0, r5}, {0xffffffffffffffe1, 0xeb9, 0xb107, 0xfc00000000000000, 0x1, 0x0, 0x8, 0x1}, {0x1000, 0x9, 0x3, 0x3}, 0x8001, 0x6e6bbd, 0x2, 0x1, 0x1, 0x1}, {{@in6=@private1, 0x4d4, 0x32}, 0xa, @in=@empty, 0x3507, 0x0, 0x2, 0x1, 0xfff, 0x4b87, 0x7fff}}, 0xe8) fcntl$setflags(r3, 0x2, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000640)='cgroup.kill\x00', 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000680)='^M},+\x00', 0x0, r7) [ 125.003103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.026755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 05:39:38 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x55b, 0x7fffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = dup2(r0, r1) r3 = signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8, 0x800) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x200, &(0x7f0000000140)) read$char_usb(r0, &(0x7f0000000240)=""/48, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)={0xc000000c}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1e1400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x5, 0x6, 0x570e, 0x101, 0x7, 0xff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e21, 0x8001, @mcast2, 0x4}, 0x1ff, [0x3, 0xe4, 0x8001, 0x0, 0x7, 0x9, 0x3f, 0x6]}, 0x5c) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@loopback, 0x4e21, 0x7, 0x4e23, 0x7, 0x2, 0x20, 0x80, 0x8a, 0x0, r5}, {0xffffffffffffffe1, 0xeb9, 0xb107, 0xfc00000000000000, 0x1, 0x0, 0x8, 0x1}, {0x1000, 0x9, 0x3, 0x3}, 0x8001, 0x6e6bbd, 0x2, 0x1, 0x1, 0x1}, {{@in6=@private1, 0x4d4, 0x32}, 0xa, @in=@empty, 0x3507, 0x0, 0x2, 0x1, 0xfff, 0x4b87, 0x7fff}}, 0xe8) fcntl$setflags(r3, 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000640)='cgroup.kill\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 05:39:38 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x55b, 0x7fffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = dup2(r0, r1) r3 = signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8, 0x800) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x200, &(0x7f0000000140)) read$char_usb(r0, &(0x7f0000000240)=""/48, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)={0xc000000c}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1e1400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x5, 0x6, 0x570e, 0x101, 0x7, 0xff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e21, 0x8001, @mcast2, 0x4}, 0x1ff, [0x3, 0xe4, 0x8001, 0x0, 0x7, 0x9, 0x3f, 0x6]}, 0x5c) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@loopback, 0x4e21, 0x7, 0x4e23, 0x7, 0x2, 0x20, 0x80, 0x8a, 0x0, r5}, {0xffffffffffffffe1, 0xeb9, 0xb107, 0xfc00000000000000, 0x1, 0x0, 0x8, 0x1}, {0x1000, 0x9, 0x3, 0x3}, 0x8001, 0x6e6bbd, 0x2, 0x1, 0x1, 0x1}, {{@in6=@private1, 0x4d4, 0x32}, 0xa, @in=@empty, 0x3507, 0x0, 0x2, 0x1, 0xfff, 0x4b87, 0x7fff}}, 0xe8) fcntl$setflags(r3, 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000640)='cgroup.kill\x00', 0x0, 0x0) 05:39:55 executing program 7: perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0xfe, 0x3, 0x40, 0x0, 0xc876, 0x200, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0xa9}, 0x0, 0x401, 0x7, 0x0, 0x372, 0x7, 0x5, 0x0, 0x1f}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xd) 05:39:55 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x10241, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x6000008) chroot(&(0x7f0000000080)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:user_cron_spool_t:s0\x00', 0x27, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$rfkill(0xffffffffffffffff, &(0x7f0000000400)={0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x8) r2 = mmap$IORING_OFF_SQES(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x1000000, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2) r3 = openat2(r0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x84080, 0xdd, 0x4}, 0x18) epoll_create1(0x80000) ioctl$FITHAW(r1, 0xc0045878) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$tun(r4, &(0x7f0000000540)={@val, @void, @mpls={[{0x1, 0x0, 0x1}, {0x2}, {0x2}, {0xfff, 0x0, 0x1}], @llc={@llc={0xec, 0xdc, "b7", "0a873dad0c8114a93c41a6cdcf3b7c7ab3b91072870ee93ba7f5385c11576b9efdea57f51bb90694381971"}}}}, 0x42) futimesat(r0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={{0x0, 0xea60}, {0x0, 0x2710}}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) read$rfkill(r3, &(0x7f0000000680), 0x8) 05:39:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@FILEID_INO32_GEN={0x8}, 0x0) recvmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000140)=""/233, 0xe9}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f00000000c0)=""/36, 0x24}], 0x7, &(0x7f00000006c0)=""/204, 0xcc}, 0x401}, {{&(0x7f00000007c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/137, 0x89}, {&(0x7f0000000900)=""/249, 0xf9}, {&(0x7f0000000a00)=""/167, 0xa7}, {&(0x7f0000000ac0)=""/103, 0x67}], 0x4, &(0x7f0000000b80)=""/4096, 0x1000}, 0xfff}, {{&(0x7f0000001b80)=@caif=@util, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c00)=""/108, 0x6c}, {&(0x7f0000001c80)=""/87, 0x57}], 0x2, &(0x7f0000001d40)=""/48, 0x30}, 0x7}, {{&(0x7f0000001d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/117, 0x75}, {&(0x7f0000001e80)=""/201, 0xc9}, {&(0x7f0000001f80)=""/77, 0x4d}, {&(0x7f0000002000)=""/242, 0xf2}], 0x4}, 0x3f}], 0x4, 0x101, &(0x7f0000002240)={0x77359400}) close_range(r1, r0, 0x2) 05:39:55 executing program 2: r0 = syz_io_uring_setup(0x431d, &(0x7f0000000200)={0x0, 0x2ba3, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x59e3, 0x0, 0x0, 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x42100, 0x0) r2 = memfd_create(&(0x7f0000000040)='$&![}\x00', 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2]}, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="0b6a185df7feae8225b8bfad9a699f0b446ff1384ed143a345953b1fef0a68b66e44796f3e090165638583e93374a3d77b599e2a0f03056d9cde6ad79a99804545a29f566b1ce8d06df77073a524e982a274a3", 0x53}, {&(0x7f0000000300)="8c90cd92f477de094c0a28b11c101ba0899dcbf05ec36d88d6301388635537f7194962303fe0d10e4b356699a6e0e49e5c7f2b1262841be3a39b90bad3a144b14116d56fae5bf6d5a3919391462def87da4bc6d509141ddcd45d290c", 0x5c}, {&(0x7f00000003c0)="916d2f4cd0fb1da7044e6bd059a02e76e0129d6a6fa56d871a6c7411977071d6a25b595c20254b981e1a3bf18bc2583e58873b9fd6c3e6088d8aea644f6ed52def7f4fc276e24625b8ab415e09979b6977f1eeede9c45a8854dab33c6ced724384628986b3ed893403e1a521bc0f54efb25c7334b5a2", 0x76}], 0x3, 0x0, 0x6, 0x1) 05:39:55 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x55b, 0x7fffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = dup2(r0, r1) r3 = signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8, 0x800) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x200, &(0x7f0000000140)) read$char_usb(r0, &(0x7f0000000240)=""/48, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)={0xc000000c}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1e1400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x5, 0x6, 0x570e, 0x101, 0x7, 0xff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e21, 0x8001, @mcast2, 0x4}, 0x1ff, [0x3, 0xe4, 0x8001, 0x0, 0x7, 0x9, 0x3f, 0x6]}, 0x5c) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@loopback, 0x4e21, 0x7, 0x4e23, 0x7, 0x2, 0x20, 0x80, 0x8a, 0x0, r5}, {0xffffffffffffffe1, 0xeb9, 0xb107, 0xfc00000000000000, 0x1, 0x0, 0x8, 0x1}, {0x1000, 0x9, 0x3, 0x3}, 0x8001, 0x6e6bbd, 0x2, 0x1, 0x1, 0x1}, {{@in6=@private1, 0x4d4, 0x32}, 0xa, @in=@empty, 0x3507, 0x0, 0x2, 0x1, 0xfff, 0x4b87, 0x7fff}}, 0xe8) fcntl$setflags(r3, 0x2, 0x0) 05:39:55 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) tee(0xffffffffffffffff, r0, 0x3ff, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x300000, &(0x7f0000014a00)) 05:39:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x3f, 0x20, 0x9, 0xd, @private0, @private1, 0x1, 0x40, 0x7f, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x3, 0x80, 0x2, @private0, @rand_addr=' \x01\x00', 0x700, 0x8000, 0x6, 0x52e}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x110) connect$packet(r3, &(0x7f00000001c0)={0x11, 0x4, r2, 0x1, 0x80, 0x6, @remote}, 0x14) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x4000010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xfffffff9) r5 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x2000, 0x5}, 0x18) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x240, 0x13, 0x400, 0x70bd2d, 0x25dfdbfd, {0x11, 0x3, 0xc1, 0x5b, {0x4e24, 0x4e21, [0x8000, 0xffff0000, 0x1, 0x1], [0x872, 0x6, 0x9, 0x1], r2, [0x1000, 0x1]}, 0x7, 0x1000}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "de280cbc631432c7a130e1e7297e3d7b9c160c0b1a143367ec7b309e7710ccd253b2e57c3be3bb3895bbde124195fcc4751e5a942b670608615e36cb1888cd03"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "114ca5f2cad80b23a47766fc79c4182d87d741de83dbb715d6376667d67ca7eb8391745e04f1e08c6835cc74ea36a93eeec88e89cabf080a50876b2167d91c54b97cacf046ba088b425c4e29aa7e8d225f66f5d57872b844bf929a4c0d87b4c4ee7796bc73c548547ac10cab0d30e94475e26b596a14205d657581a8e1bcc28fa11635dc5ac68d1c6fc0e558ac1575659a8dbad19aea81bd17c974ecd7209ac4b9ba9551c57b8a9f7f"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "179aa50b817dfa90ee137f0f277a2d78b397837db72f0a0ceeeeeb8d01fd6b697a0b83e9a46ef1925536e24a020735806415"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "729ec8a5a81038748db59e4356f89148887a032f03af5d8fc21a62ae152dcd57179380336e9644a46e4a11f660ecab28e8e5d129f0062fa0e52d9ec888ca7aae715da3a8f677450f5eb10839afaff3e3fe289c8994ed51d8e475cd35f0dd8b83dccc45e7acffb6097da5f2ead28e7d902937a6505e3d87072392b51570b65a44959822fc087e3388d5defc94d3a599faf4276cfbfbe67724ad063c02b32e293853e986194f2064f28bd96c6a593f5e17a0fc00ab51c54f68"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "d9bdcb960e"}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000004}, 0x240000c4) setxattr$trusted_overlay_opaque(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640), 0x2, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/attr/current\x00', 0x2, 0x0) fgetxattr(r6, &(0x7f00000006c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000700)=""/246, 0xf6) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000840)={0x0, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @rc={0x1f, @any, 0x4}, @l2tp={0x2, 0x0, @multicast2, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x746, &(0x7f0000000800)='wg2\x00', 0x7b1, 0x4, 0x80}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x184, 0x13, 0x10, 0x70bd25, 0x25dfdbfb, {0x29, 0x8, 0x1f, 0x93, {0x4e21, 0x4e21, [0x80000000, 0x95, 0x4, 0x401], [0x6, 0x6b29, 0x20b05af9, 0x3], r1, [0x8001, 0x2]}, 0x8000, 0x5074}, [@INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "0945bd300a83ed4d83fee92b9d4ce0d2a8dabba5cd7284544b245748484d6f69408d0393acb59b6541f6f4bbaaa7c13e4adc7ee3bbb29485b175"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "baaa0be473a6ac9374635a1f8fb0c8db6b6049ae84ef6a7c865989bf65322ddfb32943e95966c6e841df69da9ebcaa0a7a03e3f2a16a40b7dcd3429aec5838130da7d014193446b88da92cc0abd160d4828706ca8ea9f9c43be22dc45c5d13fbdfcdbe75f502189484d014"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "4effb288ce370a742be0ab85a359f61300cec201a73732ba5d9df257ea2ea57121ff4caa67ddd776047d049ad6c20a53b69f5a39da329b1b5536a8204d42212d38eb19f170d86c886545406fc7158cf04099ae074407293267f25e69a3ff5fda06456882d0d256d7b748d87fa3259e9d3fe9ad305e24d0f201108caa390972c62a6b57"}]}, 0x184}, 0x1, 0x0, 0x0, 0x9005}, 0x40) openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x40800, 0x0) r7 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', r2, 0x4, 0x5a, 0x5f, 0x200, 0x4, @private1, @loopback, 0x40, 0x20, 0x6, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', r8, 0x2f, 0x3b, 0x3f, 0x0, 0x38, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7, 0x1f, 0x3}}) 05:39:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0xcb16) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x87, @empty, 0x4e22, 0x1, 'sh\x00', 0x24, 0x4, 0x4f}, 0x2c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x800, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x4, 0x80000000, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @generic={0x88, 0xd, "6c0c6ee8420b8c98bd5a0c"}]}}}}}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={r2, @rand_addr=0x64010102, @multicast2}, 0xc) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_TID={0xc}]}, 0x28}}, 0x800) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000480), &(0x7f00000004c0)=0x8) recvmmsg$unix(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000840)=""/90, 0x5a}], 0x5, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/190, 0xbe}, {&(0x7f0000000ac0)=""/230, 0xe6}, {&(0x7f0000000bc0)=""/86, 0x56}, {&(0x7f0000000c40)=""/146, 0x92}, {&(0x7f0000000d00)=""/94, 0x5e}], 0x5, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}], 0x2, 0x40002000, &(0x7f0000000f80)={0x77359400}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8000) creat(&(0x7f0000001100)='./file0\x00', 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000001140), r4) r7 = accept(r1, &(0x7f0000001180)=@nfc_llcp, &(0x7f0000001200)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f00000012c0)={'ip6tnl0\x00', &(0x7f0000001240)={'ip6gre0\x00', r2, 0x2f, 0x40, 0x40, 0x180, 0x2, @loopback, @local, 0x8, 0x8000, 0x17fd, 0x6a}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001340)={{0x1, 0x1, 0x18, r5, {0x624cdd30, 0x2}}, './file0/file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), r8) stat(&(0x7f0000001380)='./file0/file0\x00', &(0x7f00000013c0)) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) [ 142.915439] audit: type=1400 audit(1664343595.964:7): avc: denied { open } for pid=4006 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 142.988541] loop6: detected capacity change from 0 to 4096 [ 143.031723] loop6: detected capacity change from 0 to 4096 05:40:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x3f, 0x20, 0x9, 0xd, @private0, @private1, 0x1, 0x40, 0x7f, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x3, 0x80, 0x2, @private0, @rand_addr=' \x01\x00', 0x700, 0x8000, 0x6, 0x52e}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x110) connect$packet(r3, &(0x7f00000001c0)={0x11, 0x4, r2, 0x1, 0x80, 0x6, @remote}, 0x14) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x4000010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xfffffff9) r5 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x2000, 0x5}, 0x18) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x240, 0x13, 0x400, 0x70bd2d, 0x25dfdbfd, {0x11, 0x3, 0xc1, 0x5b, {0x4e24, 0x4e21, [0x8000, 0xffff0000, 0x1, 0x1], [0x872, 0x6, 0x9, 0x1], r2, [0x1000, 0x1]}, 0x7, 0x1000}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "de280cbc631432c7a130e1e7297e3d7b9c160c0b1a143367ec7b309e7710ccd253b2e57c3be3bb3895bbde124195fcc4751e5a942b670608615e36cb1888cd03"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "114ca5f2cad80b23a47766fc79c4182d87d741de83dbb715d6376667d67ca7eb8391745e04f1e08c6835cc74ea36a93eeec88e89cabf080a50876b2167d91c54b97cacf046ba088b425c4e29aa7e8d225f66f5d57872b844bf929a4c0d87b4c4ee7796bc73c548547ac10cab0d30e94475e26b596a14205d657581a8e1bcc28fa11635dc5ac68d1c6fc0e558ac1575659a8dbad19aea81bd17c974ecd7209ac4b9ba9551c57b8a9f7f"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "179aa50b817dfa90ee137f0f277a2d78b397837db72f0a0ceeeeeb8d01fd6b697a0b83e9a46ef1925536e24a020735806415"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "729ec8a5a81038748db59e4356f89148887a032f03af5d8fc21a62ae152dcd57179380336e9644a46e4a11f660ecab28e8e5d129f0062fa0e52d9ec888ca7aae715da3a8f677450f5eb10839afaff3e3fe289c8994ed51d8e475cd35f0dd8b83dccc45e7acffb6097da5f2ead28e7d902937a6505e3d87072392b51570b65a44959822fc087e3388d5defc94d3a599faf4276cfbfbe67724ad063c02b32e293853e986194f2064f28bd96c6a593f5e17a0fc00ab51c54f68"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "d9bdcb960e"}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000004}, 0x240000c4) setxattr$trusted_overlay_opaque(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640), 0x2, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/attr/current\x00', 0x2, 0x0) fgetxattr(r6, &(0x7f00000006c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000700)=""/246, 0xf6) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000840)={0x0, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @rc={0x1f, @any, 0x4}, @l2tp={0x2, 0x0, @multicast2, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x746, &(0x7f0000000800)='wg2\x00', 0x7b1, 0x4, 0x80}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x184, 0x13, 0x10, 0x70bd25, 0x25dfdbfb, {0x29, 0x8, 0x1f, 0x93, {0x4e21, 0x4e21, [0x80000000, 0x95, 0x4, 0x401], [0x6, 0x6b29, 0x20b05af9, 0x3], r1, [0x8001, 0x2]}, 0x8000, 0x5074}, [@INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "0945bd300a83ed4d83fee92b9d4ce0d2a8dabba5cd7284544b245748484d6f69408d0393acb59b6541f6f4bbaaa7c13e4adc7ee3bbb29485b175"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "baaa0be473a6ac9374635a1f8fb0c8db6b6049ae84ef6a7c865989bf65322ddfb32943e95966c6e841df69da9ebcaa0a7a03e3f2a16a40b7dcd3429aec5838130da7d014193446b88da92cc0abd160d4828706ca8ea9f9c43be22dc45c5d13fbdfcdbe75f502189484d014"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "4effb288ce370a742be0ab85a359f61300cec201a73732ba5d9df257ea2ea57121ff4caa67ddd776047d049ad6c20a53b69f5a39da329b1b5536a8204d42212d38eb19f170d86c886545406fc7158cf04099ae074407293267f25e69a3ff5fda06456882d0d256d7b748d87fa3259e9d3fe9ad305e24d0f201108caa390972c62a6b57"}]}, 0x184}, 0x1, 0x0, 0x0, 0x9005}, 0x40) openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x40800, 0x0) r7 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', r2, 0x4, 0x5a, 0x5f, 0x200, 0x4, @private1, @loopback, 0x40, 0x20, 0x6, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', r8, 0x2f, 0x3b, 0x3f, 0x0, 0x38, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7, 0x1f, 0x3}}) 05:40:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) r1 = getpgrp(0x0) setpriority(0x1, r1, 0x0) perf_event_open(&(0x7f0000001240)={0x3, 0x80, 0xbf, 0x0, 0x3, 0x5, 0x0, 0x6, 0x8000a, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8c68, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x3f, 0x2, 0x0, 0x800000, 0x3, 0x0, 0x5, 0x0, 0x1}, r1, 0xa, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc0021, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x18e8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x1) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x8000, 0x3, 0x6, 0x80000000, 0xffffffffffffff63}) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1800) r5 = openat(r4, &(0x7f0000000180)='./file1\x00', 0x480142, 0x0) pwrite64(r5, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) 05:40:10 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)={{0x10b, 0x5, 0x6, 0x1a, 0x2cb, 0x0, 0x356}, "faa6e3745b56a5f5a1e6b4ccae64b0109473124e9bc21ebf2290f37568099a85a43b1f2f6960ad38b9816be31a4cf68d8933610389e14de7d3a75c3873de34ece68529e0a35fa92d19ddfbae516681f00256d065776edceaf96109af7b07eb914b0b1cd6e80cbae3e6b48b90f71a10a3522aa0949328a4fdfb31b2871d7e8fc0820cd158a00b39eff27097fcda523b8bc0072be59e247e1db6c55a8cdd3cea3364107956f7d03d3e3cf9f4fdf4917684a9bfc048bbe599dd5228e9af87810fea97a087877a47a5332ca61dbf104fd312d0d27915198469d1027aeb6bd73ae431c5ad0aa549b7c59ed75f844c2ff4d52f74bb378f3968ffcdfe4d8e", ['\x00', '\x00', '\x00']}, 0x41b) close(r0) r2 = accept$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000580)=0x6e) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000000)) 05:40:10 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 05:40:10 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x55b, 0x7fffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = dup2(r0, r1) r3 = signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8, 0x800) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x200, &(0x7f0000000140)) read$char_usb(r0, &(0x7f0000000240)=""/48, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)={0xc000000c}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1e1400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x5, 0x6, 0x570e, 0x101, 0x7, 0xff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e21, 0x8001, @mcast2, 0x4}, 0x1ff, [0x3, 0xe4, 0x8001, 0x0, 0x7, 0x9, 0x3f, 0x6]}, 0x5c) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)) fcntl$setflags(r3, 0x2, 0x0) 05:40:10 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x10241, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x6000008) chroot(&(0x7f0000000080)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:user_cron_spool_t:s0\x00', 0x27, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$rfkill(0xffffffffffffffff, &(0x7f0000000400)={0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x8) r2 = mmap$IORING_OFF_SQES(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x1000000, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2) r3 = openat2(r0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x84080, 0xdd, 0x4}, 0x18) epoll_create1(0x80000) ioctl$FITHAW(r1, 0xc0045878) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$tun(r4, &(0x7f0000000540)={@val, @void, @mpls={[{0x1, 0x0, 0x1}, {0x2}, {0x2}, {0xfff, 0x0, 0x1}], @llc={@llc={0xec, 0xdc, "b7", "0a873dad0c8114a93c41a6cdcf3b7c7ab3b91072870ee93ba7f5385c11576b9efdea57f51bb90694381971"}}}}, 0x42) futimesat(r0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={{0x0, 0xea60}, {0x0, 0x2710}}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) read$rfkill(r3, &(0x7f0000000680), 0x8) 05:40:10 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x10241, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x6000008) chroot(&(0x7f0000000080)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:user_cron_spool_t:s0\x00', 0x27, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$rfkill(0xffffffffffffffff, &(0x7f0000000400)={0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x8) r2 = mmap$IORING_OFF_SQES(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x1000000, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2) r3 = openat2(r0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x84080, 0xdd, 0x4}, 0x18) epoll_create1(0x80000) ioctl$FITHAW(r1, 0xc0045878) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$tun(r4, &(0x7f0000000540)={@val, @void, @mpls={[{0x1, 0x0, 0x1}, {0x2}, {0x2}, {0xfff, 0x0, 0x1}], @llc={@llc={0xec, 0xdc, "b7", "0a873dad0c8114a93c41a6cdcf3b7c7ab3b91072870ee93ba7f5385c11576b9efdea57f51bb90694381971"}}}}, 0x42) futimesat(r0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={{0x0, 0xea60}, {0x0, 0x2710}}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) read$rfkill(r3, &(0x7f0000000680), 0x8) 05:40:10 executing program 6: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8900, 0x0) syncfs(r0) getgroups(0x2, &(0x7f00000001c0)=[0x0, 0x0]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f00000002c0)="d2a465", 0x3}, {&(0x7f0000000300)="115c3484a06e7bc8b4a4b47d07836094b6ba63f20a2f60cc24188b2a297a23faee0c7f5ad841143f6f41ec566c2aadcb", 0x30}, {&(0x7f0000000400)="f4", 0x1, 0x6500}], 0x81024, &(0x7f00000004c0)={[{@init_itable}, {@init_itable_val}, {@discard}], [{@euid_lt={'euid<', 0xee01}}]}) r1 = epoll_create1(0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x1) mount$9p_rdma(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x0, &(0x7f0000001600)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0xffffffff}}, {@common=@access_uid}, {@common=@dfltuid}], [{@seclabel}]}}) [ 157.233574] audit: type=1400 audit(1664343610.282:8): avc: denied { kernel } for pid=4046 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 157.241567] ------------[ cut here ]------------ [ 157.242482] WARNING: CPU: 0 PID: 4044 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 [ 157.243775] Modules linked in: [ 157.244250] CPU: 0 PID: 4044 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220927 #1 [ 157.245394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 157.247167] RIP: 0010:event_filter_match+0x422/0x660 [ 157.248258] Code: 00 00 00 e9 7c fc ff ff e8 bb 2e f1 ff 65 8b 2d 30 94 ad 7e 31 ff 89 ee e8 5b 2b f1 ff 85 ed 0f 84 ef 00 00 00 e8 9e 2e f1 ff <0f> 0b eb 9f e8 45 a5 23 00 e9 17 fc ff ff e8 8b 2e f1 ff 48 8d 7b [ 157.251030] RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046 [ 157.251787] RAX: 0000000000010001 RBX: ffff8880406a8000 RCX: 0000000000000000 [ 157.252801] RDX: ffff888017733580 RSI: ffffffff8154e1a2 RDI: 0000000000000005 [ 157.253801] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 157.254829] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff8880406a8220 [ 157.255856] R13: 0000000000000000 R14: ffff8880406a80a8 R15: ffff8880406a8220 [ 157.256882] FS: 00005555568da400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 157.258008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.258856] CR2: 00007fcbd1eb5f64 CR3: 000000002075e000 CR4: 0000000000350ef0 [ 157.259885] Call Trace: [ 157.260268] [ 157.260609] merge_sched_in+0x107/0x1110 [ 157.261227] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 157.262087] ? merge_sched_in+0x1110/0x1110 [ 157.262731] ? lock_is_held_type+0xd7/0x130 [ 157.263391] ctx_sched_in+0x2e6/0x770 [ 157.263965] ? lock_acquire+0x1b2/0x530 [ 157.264557] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 157.265432] ? lock_is_held_type+0xd7/0x130 [ 157.266090] perf_event_sched_in+0x75/0x80 [ 157.266721] ctx_resched+0x1ce/0x390 [ 157.267280] __perf_install_in_context+0x285/0x9c0 [ 157.268001] ? ctx_resched+0x390/0x390 [ 157.268585] remote_function+0x125/0x1b0 [ 157.269205] __flush_smp_call_function_queue+0x1df/0x5a0 [ 157.269987] ? perf_duration_warn+0x40/0x40 [ 157.270633] __sysvec_call_function_single+0x92/0x3a0 [ 157.271384] sysvec_call_function_single+0x89/0xc0 [ 157.272111] [ 157.272454] [ 157.272800] asm_sysvec_call_function_single+0x16/0x20 [ 157.273571] RIP: 0010:__slab_free+0x192/0x380 [ 157.274247] Code: 00 0f 89 28 ff ff ff 48 83 c4 60 48 89 ee 4c 89 ef ba 01 00 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e3 c9 ff ff 80 4c 24 33 80 d7 fe ff ff 66 85 db 0f 84 9c 00 00 00 66 90 48 83 c4 60 4c 89 [ 157.276835] RSP: 0018:ffff88803fcc7820 EFLAGS: 00000282 [ 157.277596] RAX: 0000000000000000 RBX: 0000000000120011 RCX: dead000000120012 [ 157.278616] RDX: ffff88800939c000 RSI: ffffea000024e700 RDI: ffff888007c4f780 [ 157.279639] RBP: ffffea000024e700 R08: 0000000000000001 R09: ffffffff81788e8f [ 157.280656] R10: ffffea000024e700 R11: 0000000000000001 R12: 0000000000000000 [ 157.281671] R13: ffff888007c4f780 R14: ffff88800939c000 R15: ffff88800939c000 [ 157.282704] ? qlist_free_all+0x4f/0x1a0 [ 157.283323] ? put_cpu_partial+0x111/0x1c0 [ 157.283951] ? put_cpu_partial+0x111/0x1c0 [ 157.284577] ? lockdep_hardirqs_on+0x79/0x100 [ 157.285246] ? put_cpu_partial+0x111/0x1c0 [ 157.285887] qlist_free_all+0x6d/0x1a0 [ 157.286467] kasan_quarantine_reduce+0x184/0x210 [ 157.287192] __kasan_slab_alloc+0x48/0x70 [ 157.287815] kmem_cache_alloc+0x1a9/0x3e0 [ 157.288429] vm_area_dup+0x7f/0x230 [ 157.288993] ? mt_find+0x2e6/0xdd0 [ 157.289537] ? lock_downgrade+0x6d0/0x6d0 [ 157.290180] ? mt_find+0x33f/0xdd0 [ 157.290729] ? mas_next_node+0x9d0/0x9d0 [ 157.291327] ? vm_area_alloc+0x100/0x100 [ 157.291956] ? lock_is_held_type+0xd7/0x130 [ 157.292608] ? find_vma+0x10c/0x1b0 [ 157.293151] ? can_vma_merge_before.constprop.0+0x230/0x230 [ 157.293983] ? selinux_sctp_sk_clone+0x370/0x370 [ 157.294714] __split_vma+0xa2/0x5d0 [ 157.295263] ? vma_merge+0x2b1/0x810 [ 157.295836] split_vma+0x9f/0xe0 [ 157.296360] mprotect_fixup+0x691/0x8c0 [ 157.296973] ? change_protection+0x34a0/0x34a0 [ 157.297674] do_mprotect_pkey+0x6fb/0xa70 [ 157.298304] ? mprotect_fixup+0x8c0/0x8c0 [ 157.298948] ? up_write+0x1ac/0x520 [ 157.299506] ? vm_mmap_pgoff+0xe8/0x270 [ 157.300130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 157.300896] __x64_sys_mprotect+0x74/0xb0 [ 157.301506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 157.302268] do_syscall_64+0x3b/0x90 [ 157.302838] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.303592] RIP: 0033:0x7fcbd1da2c27 [ 157.304141] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 157.306753] RSP: 002b:00007ffd7c22d338 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 157.307841] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007fcbd1da2c27 [ 157.308860] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fcbcf2f9000 [ 157.309879] RBP: 00007ffd7c22d410 R08: 00000000ffffffff R09: 00007fcbcf318700 [ 157.310926] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffd7c22d520 [ 157.311946] R13: 00007fcbcf318700 R14: 0000000000000000 R15: 0000000000022000 [ 157.313007] [ 157.313357] irq event stamp: 2834 [ 157.313866] hardirqs last enabled at (2833): [] put_cpu_partial+0x111/0x1c0 [ 157.315108] hardirqs last disabled at (2834): [] sysvec_call_function_single+0xb/0xc0 [ 157.316452] softirqs last enabled at (1874): [] __irq_exit_rcu+0x11b/0x180 [ 157.317685] softirqs last disabled at (1807): [] __irq_exit_rcu+0x11b/0x180 [ 157.318913] ---[ end trace 0000000000000000 ]--- [ 157.319649] ------------[ cut here ]------------ [ 157.320336] WARNING: CPU: 0 PID: 4044 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 [ 157.321576] Modules linked in: [ 157.322051] CPU: 0 PID: 4044 Comm: syz-executor.7 Tainted: G W 6.0.0-rc7-next-20220927 #1 [ 157.323418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 157.325022] RIP: 0010:merge_sched_in+0xadb/0x1110 [ 157.325726] Code: ff ff e8 e8 08 ef ff 65 8b 05 5d 6e ab 7e 31 ff 89 c6 89 04 24 e8 85 05 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 c5 08 ef ff <0f> 0b e9 c4 fb ff ff e8 b9 08 ef ff 4c 89 e8 48 05 18 01 00 00 e9 [ 157.328320] RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046 [ 157.329096] RAX: 0000000000010001 RBX: ffff88806ce3d140 RCX: 0000000000000000 [ 157.330121] RDX: ffff888017733580 RSI: ffffffff8157077b RDI: 0000000000000005 [ 157.331173] RBP: ffff8880406a8000 R08: 0000000000000005 R09: 0000000000000001 [ 157.332211] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88806ce3d140 [ 157.333242] R13: ffff88806ce00000 R14: ffff8880406a80a8 R15: ffff8880406a8220 [ 157.334272] FS: 00005555568da400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 157.335438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.336284] CR2: 00007fcbd1eb5f64 CR3: 000000002075e000 CR4: 0000000000350ef0 [ 157.337315] Call Trace: [ 157.337689] [ 157.338036] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 157.338928] ? merge_sched_in+0x1110/0x1110 [ 157.339563] ? lock_is_held_type+0xd7/0x130 [ 157.340225] ctx_sched_in+0x2e6/0x770 [ 157.340800] ? lock_acquire+0x1b2/0x530 [ 157.341396] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 157.342285] ? lock_is_held_type+0xd7/0x130 [ 157.342961] perf_event_sched_in+0x75/0x80 [ 157.343585] ctx_resched+0x1ce/0x390 [ 157.344148] __perf_install_in_context+0x285/0x9c0 [ 157.344870] ? ctx_resched+0x390/0x390 [ 157.345449] remote_function+0x125/0x1b0 [ 157.346059] __flush_smp_call_function_queue+0x1df/0x5a0 [ 157.346852] ? perf_duration_warn+0x40/0x40 [ 157.347504] __sysvec_call_function_single+0x92/0x3a0 [ 157.348266] sysvec_call_function_single+0x89/0xc0 [ 157.348986] [ 157.349326] [ 157.349666] asm_sysvec_call_function_single+0x16/0x20 [ 157.350443] RIP: 0010:__slab_free+0x192/0x380 [ 157.351127] Code: 00 0f 89 28 ff ff ff 48 83 c4 60 48 89 ee 4c 89 ef ba 01 00 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e3 c9 ff ff 80 4c 24 33 80 d7 fe ff ff 66 85 db 0f 84 9c 00 00 00 66 90 48 83 c4 60 4c 89 [ 157.353711] RSP: 0018:ffff88803fcc7820 EFLAGS: 00000282 [ 157.354486] RAX: 0000000000000000 RBX: 0000000000120011 RCX: dead000000120012 [ 157.355523] RDX: ffff88800939c000 RSI: ffffea000024e700 RDI: ffff888007c4f780 [ 157.356561] RBP: ffffea000024e700 R08: 0000000000000001 R09: ffffffff81788e8f [ 157.357581] R10: ffffea000024e700 R11: 0000000000000001 R12: 0000000000000000 [ 157.358607] R13: ffff888007c4f780 R14: ffff88800939c000 R15: ffff88800939c000 [ 157.359668] ? qlist_free_all+0x4f/0x1a0 [ 157.360289] ? put_cpu_partial+0x111/0x1c0 [ 157.360926] ? put_cpu_partial+0x111/0x1c0 [ 157.361553] ? lockdep_hardirqs_on+0x79/0x100 [ 157.362221] ? put_cpu_partial+0x111/0x1c0 [ 157.362862] qlist_free_all+0x6d/0x1a0 [ 157.363455] kasan_quarantine_reduce+0x184/0x210 [ 157.364157] __kasan_slab_alloc+0x48/0x70 [ 157.364778] kmem_cache_alloc+0x1a9/0x3e0 [ 157.365412] vm_area_dup+0x7f/0x230 [ 157.365964] ? mt_find+0x2e6/0xdd0 [ 157.366503] ? lock_downgrade+0x6d0/0x6d0 [ 157.367160] ? mt_find+0x33f/0xdd0 [ 157.367701] ? mas_next_node+0x9d0/0x9d0 [ 157.368302] ? vm_area_alloc+0x100/0x100 [ 157.368918] ? lock_is_held_type+0xd7/0x130 [ 157.369562] ? find_vma+0x10c/0x1b0 [ 157.370112] ? can_vma_merge_before.constprop.0+0x230/0x230 [ 157.370966] ? selinux_sctp_sk_clone+0x370/0x370 [ 157.371685] __split_vma+0xa2/0x5d0 [ 157.372231] ? vma_merge+0x2b1/0x810 [ 157.372794] split_vma+0x9f/0xe0 [ 157.373318] mprotect_fixup+0x691/0x8c0 [ 157.373929] ? change_protection+0x34a0/0x34a0 [ 157.374644] do_mprotect_pkey+0x6fb/0xa70 [ 157.375273] ? mprotect_fixup+0x8c0/0x8c0 [ 157.375888] ? up_write+0x1ac/0x520 [ 157.376442] ? vm_mmap_pgoff+0xe8/0x270 [ 157.377064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 157.377841] __x64_sys_mprotect+0x74/0xb0 [ 157.378460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 157.379237] do_syscall_64+0x3b/0x90 [ 157.379797] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.380556] RIP: 0033:0x7fcbd1da2c27 [ 157.381103] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 157.383709] RSP: 002b:00007ffd7c22d338 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 157.384803] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007fcbd1da2c27 [ 157.385808] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fcbcf2f9000 [ 157.386842] RBP: 00007ffd7c22d410 R08: 00000000ffffffff R09: 00007fcbcf318700 [ 157.387855] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffd7c22d520 [ 157.388871] R13: 00007fcbcf318700 R14: 0000000000000000 R15: 0000000000022000 [ 157.389917] [ 157.390262] irq event stamp: 2834 [ 157.390776] hardirqs last enabled at (2833): [] put_cpu_partial+0x111/0x1c0 [ 157.392008] hardirqs last disabled at (2834): [] sysvec_call_function_single+0xb/0xc0 [ 157.393331] softirqs last enabled at (1874): [] __irq_exit_rcu+0x11b/0x180 [ 157.394546] softirqs last disabled at (1807): [] __irq_exit_rcu+0x11b/0x180 [ 157.395739] ---[ end trace 0000000000000000 ]--- [ 157.408817] audit: type=1326 audit(1664343610.458:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4043 comm="syz-executor.2" exe="/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18e8e32b19 code=0x0 [ 157.414328] loop6: detected capacity change from 0 to 101 05:40:10 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x10241, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x6000008) chroot(&(0x7f0000000080)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:user_cron_spool_t:s0\x00', 0x27, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$rfkill(0xffffffffffffffff, &(0x7f0000000400)={0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x8) r2 = mmap$IORING_OFF_SQES(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x1000000, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2) r3 = openat2(r0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x84080, 0xdd, 0x4}, 0x18) epoll_create1(0x80000) ioctl$FITHAW(r1, 0xc0045878) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$tun(r4, &(0x7f0000000540)={@val, @void, @mpls={[{0x1, 0x0, 0x1}, {0x2}, {0x2}, {0xfff, 0x0, 0x1}], @llc={@llc={0xec, 0xdc, "b7", "0a873dad0c8114a93c41a6cdcf3b7c7ab3b91072870ee93ba7f5385c11576b9efdea57f51bb90694381971"}}}}, 0x42) futimesat(r0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={{0x0, 0xea60}, {0x0, 0x2710}}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) read$rfkill(r3, &(0x7f0000000680), 0x8) 05:40:10 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x55b, 0x7fffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = dup2(r0, r1) r3 = signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8, 0x800) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x200, &(0x7f0000000140)) read$char_usb(r0, &(0x7f0000000240)=""/48, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)={0xc000000c}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1e1400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x5, 0x6, 0x570e, 0x101, 0x7, 0xff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e21, 0x8001, @mcast2, 0x4}, 0x1ff, [0x3, 0xe4, 0x8001, 0x0, 0x7, 0x9, 0x3f, 0x6]}, 0x5c) fcntl$setflags(r3, 0x2, 0x0) [ 157.521603] 9pnet: Could not find request transport: rdma [ 157.527774] loop6: detected capacity change from 0 to 101 [ 157.529263] 9pnet: Could not find request transport: rdma 05:40:10 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x200000000000000, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x80000001, 0x4) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x2}}, 0x267055344c79a707) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 05:40:10 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x55b, 0x7fffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) dup2(r0, r1) r2 = signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8, 0x800) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x200, &(0x7f0000000140)) read$char_usb(r0, &(0x7f0000000240)=""/48, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)={0xc000000c}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1e1400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000300)={0x5, 0x6, 0x570e, 0x101, 0x7, 0xff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) fcntl$setflags(r2, 0x2, 0x0) [ 157.655210] ------------[ cut here ]------------ [ 157.655231] [ 157.655234] ====================================================== [ 157.655238] WARNING: possible circular locking dependency detected [ 157.655243] 6.0.0-rc7-next-20220927 #1 Tainted: G W [ 157.655250] ------------------------------------------------------ [ 157.655253] syz-executor.4/4073 is trying to acquire lock: [ 157.655262] ffffffff853faab8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0xe/0x70 [ 157.655304] [ 157.655304] but task is already holding lock: [ 157.655307] ffff888008cbe020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 157.655335] [ 157.655335] which lock already depends on the new lock. [ 157.655335] [ 157.655338] [ 157.655338] the existing dependency chain (in reverse order) is: [ 157.655342] [ 157.655342] -> #3 (&ctx->lock){....}-{2:2}: [ 157.655356] _raw_spin_lock+0x2a/0x40 [ 157.655369] __perf_event_task_sched_out+0x53b/0x18d0 [ 157.655381] __schedule+0xedd/0x2470 [ 157.655397] schedule+0xda/0x1b0 [ 157.655412] exit_to_user_mode_prepare+0x114/0x1a0 [ 157.655425] syscall_exit_to_user_mode+0x19/0x40 [ 157.655439] do_syscall_64+0x48/0x90 [ 157.655449] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.655464] [ 157.655464] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 157.655477] _raw_spin_lock_nested+0x30/0x40 [ 157.655489] raw_spin_rq_lock_nested+0x1e/0x30 [ 157.655503] task_fork_fair+0x63/0x4d0 [ 157.655520] sched_cgroup_fork+0x3d0/0x540 [ 157.655534] copy_process+0x4183/0x6e20 [ 157.655544] kernel_clone+0xe7/0x890 [ 157.655554] user_mode_thread+0xad/0xf0 [ 157.655564] rest_init+0x24/0x250 [ 157.655577] arch_call_rest_init+0xf/0x14 [ 157.655592] start_kernel+0x4c6/0x4eb [ 157.655603] secondary_startup_64_no_verify+0xe0/0xeb [ 157.655617] [ 157.655617] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 157.655631] _raw_spin_lock_irqsave+0x39/0x60 [ 157.655643] try_to_wake_up+0xab/0x1930 [ 157.655656] up+0x75/0xb0 [ 157.655671] __up_console_sem+0x6e/0x80 [ 157.655688] console_unlock+0x46a/0x590 [ 157.655703] vt_ioctl+0x2822/0x2ca0 [ 157.655717] tty_ioctl+0x785/0x16b0 [ 157.655730] __x64_sys_ioctl+0x19a/0x210 [ 157.655746] do_syscall_64+0x3b/0x90 [ 157.655756] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.655770] [ 157.655770] -> #0 ((console_sem).lock){-...}-{2:2}: [ 157.655783] __lock_acquire+0x2a02/0x5e70 [ 157.655800] lock_acquire+0x1a2/0x530 [ 157.655816] _raw_spin_lock_irqsave+0x39/0x60 [ 157.655828] down_trylock+0xe/0x70 [ 157.655844] __down_trylock_console_sem+0x3b/0xd0 [ 157.655860] vprintk_emit+0x16b/0x560 [ 157.655876] vprintk+0x84/0xa0 [ 157.655892] _printk+0xba/0xf1 [ 157.655905] report_bug.cold+0x72/0xab [ 157.655915] handle_bug+0x3c/0x70 [ 157.655925] exc_invalid_op+0x14/0x50 [ 157.655935] asm_exc_invalid_op+0x16/0x20 [ 157.655949] group_sched_out.part.0+0x2c7/0x460 [ 157.655960] ctx_sched_out+0x8f1/0xc10 [ 157.655970] __perf_event_task_sched_out+0x6d0/0x18d0 [ 157.655983] __schedule+0xedd/0x2470 [ 157.655998] schedule+0xda/0x1b0 [ 157.656012] exit_to_user_mode_prepare+0x114/0x1a0 [ 157.656023] syscall_exit_to_user_mode+0x19/0x40 [ 157.656037] do_syscall_64+0x48/0x90 [ 157.656047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.656061] [ 157.656061] other info that might help us debug this: [ 157.656061] [ 157.656064] Chain exists of: [ 157.656064] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 157.656064] [ 157.656079] Possible unsafe locking scenario: [ 157.656079] [ 157.656081] CPU0 CPU1 [ 157.656084] ---- ---- [ 157.656086] lock(&ctx->lock); [ 157.656092] lock(&rq->__lock); [ 157.656099] lock(&ctx->lock); [ 157.656105] lock((console_sem).lock); [ 157.656110] [ 157.656110] *** DEADLOCK *** [ 157.656110] [ 157.656112] 2 locks held by syz-executor.4/4073: [ 157.656119] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 157.656150] #1: ffff888008cbe020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 157.656178] [ 157.656178] stack backtrace: [ 157.656181] CPU: 1 PID: 4073 Comm: syz-executor.4 Tainted: G W 6.0.0-rc7-next-20220927 #1 [ 157.656194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 157.656202] Call Trace: [ 157.656205] [ 157.656209] dump_stack_lvl+0x8b/0xb3 [ 157.656221] check_noncircular+0x263/0x2e0 [ 157.656238] ? format_decode+0x26c/0xb50 [ 157.656257] ? print_circular_bug+0x450/0x450 [ 157.656274] ? enable_ptr_key_workfn+0x20/0x20 [ 157.656291] ? __lockdep_reset_lock+0x180/0x180 [ 157.656308] ? format_decode+0x26c/0xb50 [ 157.656326] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 157.656344] __lock_acquire+0x2a02/0x5e70 [ 157.656366] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 157.656388] lock_acquire+0x1a2/0x530 [ 157.656405] ? down_trylock+0xe/0x70 [ 157.656423] ? lock_release+0x750/0x750 [ 157.656440] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 157.656461] ? vprintk+0x84/0xa0 [ 157.656479] _raw_spin_lock_irqsave+0x39/0x60 [ 157.656492] ? down_trylock+0xe/0x70 [ 157.656509] down_trylock+0xe/0x70 [ 157.656529] ? vprintk+0x84/0xa0 [ 157.656545] __down_trylock_console_sem+0x3b/0xd0 [ 157.656563] vprintk_emit+0x16b/0x560 [ 157.656579] ? lock_downgrade+0x6d0/0x6d0 [ 157.656597] vprintk+0x84/0xa0 [ 157.656615] _printk+0xba/0xf1 [ 157.656628] ? record_print_text.cold+0x16/0x16 [ 157.656643] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 157.656657] ? lock_downgrade+0x6d0/0x6d0 [ 157.656675] ? report_bug.cold+0x66/0xab [ 157.656686] ? group_sched_out.part.0+0x2c7/0x460 [ 157.656698] report_bug.cold+0x72/0xab [ 157.656711] handle_bug+0x3c/0x70 [ 157.656721] exc_invalid_op+0x14/0x50 [ 157.656733] asm_exc_invalid_op+0x16/0x20 [ 157.656748] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 157.656761] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 157.656773] RSP: 0018:ffff888040137c48 EFLAGS: 00010006 [ 157.656782] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 157.656789] RDX: ffff8880204ed040 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 157.656797] RBP: ffff8880406a85c8 R08: 0000000000000005 R09: 0000000000000001 [ 157.656805] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008cbe000 [ 157.656812] R13: ffff88806cf3d140 R14: ffffffff8547c8e0 R15: 0000000000000002 [ 157.656823] ? group_sched_out.part.0+0x2c7/0x460 [ 157.656837] ? group_sched_out.part.0+0x2c7/0x460 [ 157.656851] ctx_sched_out+0x8f1/0xc10 [ 157.656864] __perf_event_task_sched_out+0x6d0/0x18d0 [ 157.656880] ? lock_is_held_type+0xd7/0x130 [ 157.656895] ? __perf_cgroup_move+0x160/0x160 [ 157.656907] ? set_next_entity+0x304/0x550 [ 157.656925] ? update_curr+0x267/0x740 [ 157.656943] ? lock_is_held_type+0xd7/0x130 [ 157.656959] __schedule+0xedd/0x2470 [ 157.656977] ? io_schedule_timeout+0x150/0x150 [ 157.656995] ? __x64_sys_futex_time32+0x480/0x480 [ 157.657010] schedule+0xda/0x1b0 [ 157.657027] exit_to_user_mode_prepare+0x114/0x1a0 [ 157.657039] syscall_exit_to_user_mode+0x19/0x40 [ 157.657054] do_syscall_64+0x48/0x90 [ 157.657066] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.657080] RIP: 0033:0x7f9538018b19 [ 157.657088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 157.657099] RSP: 002b:00007f953558e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.657110] RAX: 0000000000000001 RBX: 00007f953812bf68 RCX: 00007f9538018b19 [ 157.657117] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f953812bf6c [ 157.657125] RBP: 00007f953812bf60 R08: 000000000000000e R09: 0000000000000000 [ 157.657132] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f953812bf6c [ 157.657139] R13: 00007fff7187075f R14: 00007f953558e300 R15: 0000000000022000 [ 157.657152] [ 157.712899] WARNING: CPU: 1 PID: 4073 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 157.713568] Modules linked in: [ 157.713813] CPU: 1 PID: 4073 Comm: syz-executor.4 Tainted: G W 6.0.0-rc7-next-20220927 #1 [ 157.714506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 157.715332] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 157.715732] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 157.717048] RSP: 0018:ffff888040137c48 EFLAGS: 00010006 [ 157.717440] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 157.717961] RDX: ffff8880204ed040 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 157.718484] RBP: ffff8880406a85c8 R08: 0000000000000005 R09: 0000000000000001 [ 157.719015] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008cbe000 [ 157.719534] R13: ffff88806cf3d140 R14: ffffffff8547c8e0 R15: 0000000000000002 [ 157.720056] FS: 00007f953558e700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 157.720646] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.721077] CR2: 0000000020000000 CR3: 00000000183cc000 CR4: 0000000000350ee0 [ 157.721600] Call Trace: [ 157.721798] [ 157.721976] ctx_sched_out+0x8f1/0xc10 [ 157.722270] __perf_event_task_sched_out+0x6d0/0x18d0 [ 157.722664] ? lock_is_held_type+0xd7/0x130 [ 157.722981] ? __perf_cgroup_move+0x160/0x160 [ 157.723320] ? set_next_entity+0x304/0x550 [ 157.723637] ? update_curr+0x267/0x740 [ 157.723934] ? lock_is_held_type+0xd7/0x130 [ 157.724264] __schedule+0xedd/0x2470 [ 157.724555] ? io_schedule_timeout+0x150/0x150 [ 157.724908] ? __x64_sys_futex_time32+0x480/0x480 [ 157.725258] schedule+0xda/0x1b0 [ 157.725516] exit_to_user_mode_prepare+0x114/0x1a0 [ 157.725873] syscall_exit_to_user_mode+0x19/0x40 [ 157.726225] do_syscall_64+0x48/0x90 [ 157.726501] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.726885] RIP: 0033:0x7f9538018b19 [ 157.727157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 157.728458] RSP: 002b:00007f953558e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.729016] RAX: 0000000000000001 RBX: 00007f953812bf68 RCX: 00007f9538018b19 [ 157.729535] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f953812bf6c [ 157.730056] RBP: 00007f953812bf60 R08: 000000000000000e R09: 0000000000000000 [ 157.730579] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f953812bf6c [ 157.731109] R13: 00007fff7187075f R14: 00007f953558e300 R15: 0000000000022000 [ 157.731643] [ 157.731820] irq event stamp: 154 [ 157.732066] hardirqs last enabled at (153): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 157.732742] hardirqs last disabled at (154): [] __schedule+0x1225/0x2470 [ 157.733344] softirqs last enabled at (0): [] copy_process+0x1e15/0x6e20 [ 157.733943] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 157.734410] ---[ end trace 0000000000000000 ]--- [ 157.741882] loop4: detected capacity change from 0 to 264192 [ 157.754211] loop6: detected capacity change from 0 to 101 05:40:10 executing program 6: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8900, 0x0) syncfs(r0) getgroups(0x2, &(0x7f00000001c0)=[0x0, 0x0]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f00000002c0)="d2a465", 0x3}, {&(0x7f0000000300)="115c3484a06e7bc8b4a4b47d07836094b6ba63f20a2f60cc24188b2a297a23faee0c7f5ad841143f6f41ec566c2aadcb", 0x30}, {&(0x7f0000000400)="f4", 0x1, 0x6500}], 0x81024, &(0x7f00000004c0)={[{@init_itable}, {@init_itable_val}, {@discard}], [{@euid_lt={'euid<', 0xee01}}]}) r1 = epoll_create1(0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x1) mount$9p_rdma(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x0, &(0x7f0000001600)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0xffffffff}}, {@common=@access_uid}, {@common=@dfltuid}], [{@seclabel}]}}) 05:40:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x3f, 0x20, 0x9, 0xd, @private0, @private1, 0x1, 0x40, 0x7f, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x3, 0x80, 0x2, @private0, @rand_addr=' \x01\x00', 0x700, 0x8000, 0x6, 0x52e}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x110) connect$packet(r3, &(0x7f00000001c0)={0x11, 0x4, r2, 0x1, 0x80, 0x6, @remote}, 0x14) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x4000010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xfffffff9) r5 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x2000, 0x5}, 0x18) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x240, 0x13, 0x400, 0x70bd2d, 0x25dfdbfd, {0x11, 0x3, 0xc1, 0x5b, {0x4e24, 0x4e21, [0x8000, 0xffff0000, 0x1, 0x1], [0x872, 0x6, 0x9, 0x1], r2, [0x1000, 0x1]}, 0x7, 0x1000}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "de280cbc631432c7a130e1e7297e3d7b9c160c0b1a143367ec7b309e7710ccd253b2e57c3be3bb3895bbde124195fcc4751e5a942b670608615e36cb1888cd03"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "114ca5f2cad80b23a47766fc79c4182d87d741de83dbb715d6376667d67ca7eb8391745e04f1e08c6835cc74ea36a93eeec88e89cabf080a50876b2167d91c54b97cacf046ba088b425c4e29aa7e8d225f66f5d57872b844bf929a4c0d87b4c4ee7796bc73c548547ac10cab0d30e94475e26b596a14205d657581a8e1bcc28fa11635dc5ac68d1c6fc0e558ac1575659a8dbad19aea81bd17c974ecd7209ac4b9ba9551c57b8a9f7f"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "179aa50b817dfa90ee137f0f277a2d78b397837db72f0a0ceeeeeb8d01fd6b697a0b83e9a46ef1925536e24a020735806415"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "729ec8a5a81038748db59e4356f89148887a032f03af5d8fc21a62ae152dcd57179380336e9644a46e4a11f660ecab28e8e5d129f0062fa0e52d9ec888ca7aae715da3a8f677450f5eb10839afaff3e3fe289c8994ed51d8e475cd35f0dd8b83dccc45e7acffb6097da5f2ead28e7d902937a6505e3d87072392b51570b65a44959822fc087e3388d5defc94d3a599faf4276cfbfbe67724ad063c02b32e293853e986194f2064f28bd96c6a593f5e17a0fc00ab51c54f68"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "d9bdcb960e"}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000004}, 0x240000c4) setxattr$trusted_overlay_opaque(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640), 0x2, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/attr/current\x00', 0x2, 0x0) fgetxattr(r6, &(0x7f00000006c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000700)=""/246, 0xf6) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000840)={0x0, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @rc={0x1f, @any, 0x4}, @l2tp={0x2, 0x0, @multicast2, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x746, &(0x7f0000000800)='wg2\x00', 0x7b1, 0x4, 0x80}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x184, 0x13, 0x10, 0x70bd25, 0x25dfdbfb, {0x29, 0x8, 0x1f, 0x93, {0x4e21, 0x4e21, [0x80000000, 0x95, 0x4, 0x401], [0x6, 0x6b29, 0x20b05af9, 0x3], r1, [0x8001, 0x2]}, 0x8000, 0x5074}, [@INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "0945bd300a83ed4d83fee92b9d4ce0d2a8dabba5cd7284544b245748484d6f69408d0393acb59b6541f6f4bbaaa7c13e4adc7ee3bbb29485b175"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "baaa0be473a6ac9374635a1f8fb0c8db6b6049ae84ef6a7c865989bf65322ddfb32943e95966c6e841df69da9ebcaa0a7a03e3f2a16a40b7dcd3429aec5838130da7d014193446b88da92cc0abd160d4828706ca8ea9f9c43be22dc45c5d13fbdfcdbe75f502189484d014"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "4effb288ce370a742be0ab85a359f61300cec201a73732ba5d9df257ea2ea57121ff4caa67ddd776047d049ad6c20a53b69f5a39da329b1b5536a8204d42212d38eb19f170d86c886545406fc7158cf04099ae074407293267f25e69a3ff5fda06456882d0d256d7b748d87fa3259e9d3fe9ad305e24d0f201108caa390972c62a6b57"}]}, 0x184}, 0x1, 0x0, 0x0, 0x9005}, 0x40) openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x40800, 0x0) r7 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', r2, 0x4, 0x5a, 0x5f, 0x200, 0x4, @private1, @loopback, 0x40, 0x20, 0x6, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', r8, 0x2f, 0x3b, 0x3f, 0x0, 0x38, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7, 0x1f, 0x3}}) [ 157.870860] 9pnet: Could not find request transport: rdma [ 157.899355] hrtimer: interrupt took 19086 ns [ 158.071298] audit: type=1326 audit(1664343611.120:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4043 comm="syz-executor.2" exe="/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18e8e32b19 code=0x0 [ 158.317945] blktrace: Concurrent blktraces are not allowed on sg0 [ 158.321513] blktrace: Concurrent blktraces are not allowed on sg0 [ 158.323114] blktrace: Concurrent blktraces are not allowed on sg0 VM DIAGNOSIS: 05:40:10 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba0b1 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff88806ce095e0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba0a0 RIP=ffffffff823ba109 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555568da400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcbd1eb5f64 CR3=000000002075e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0100ff0000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000002fb81 RBX=1ffff110080d4f84 RCX=ffffc90000787000 RDX=0000000000040000 RSI=ffffffff813bb5b3 RDI=0000000000000005 RBP=ffff8880406a7cc8 RSP=ffff8880406a7c00 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff813bb5b5 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f786bb72700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000080 CR3=000000003bdb6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000