Warning: Permanently added '[localhost]:28147' (ECDSA) to the list of known hosts. 2022/09/30 03:51:24 fuzzer started 2022/09/30 03:51:25 dialing manager at localhost:40535 syzkaller login: [ 43.655380] cgroup: Unknown subsys name 'net' [ 43.766409] cgroup: Unknown subsys name 'rlimit' 2022/09/30 03:51:39 syscalls: 2215 2022/09/30 03:51:39 code coverage: enabled 2022/09/30 03:51:39 comparison tracing: enabled 2022/09/30 03:51:39 extra coverage: enabled 2022/09/30 03:51:39 setuid sandbox: enabled 2022/09/30 03:51:39 namespace sandbox: enabled 2022/09/30 03:51:39 Android sandbox: enabled 2022/09/30 03:51:39 fault injection: enabled 2022/09/30 03:51:39 leak checking: enabled 2022/09/30 03:51:39 net packet injection: enabled 2022/09/30 03:51:39 net device setup: enabled 2022/09/30 03:51:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 03:51:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 03:51:39 USB emulation: enabled 2022/09/30 03:51:39 hci packet injection: enabled 2022/09/30 03:51:39 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 03:51:39 802.15.4 emulation: enabled 2022/09/30 03:51:39 fetching corpus: 50, signal 23743/25509 (executing program) 2022/09/30 03:51:39 fetching corpus: 100, signal 39865/43061 (executing program) 2022/09/30 03:51:39 fetching corpus: 150, signal 47816/52340 (executing program) 2022/09/30 03:51:40 fetching corpus: 200, signal 52813/58634 (executing program) 2022/09/30 03:51:40 fetching corpus: 250, signal 61998/68796 (executing program) 2022/09/30 03:51:40 fetching corpus: 300, signal 70709/78378 (executing program) 2022/09/30 03:51:40 fetching corpus: 350, signal 73890/82603 (executing program) 2022/09/30 03:51:40 fetching corpus: 400, signal 78131/87770 (executing program) 2022/09/30 03:51:40 fetching corpus: 450, signal 81523/92052 (executing program) 2022/09/30 03:51:40 fetching corpus: 500, signal 85619/96829 (executing program) 2022/09/30 03:51:40 fetching corpus: 550, signal 87721/99819 (executing program) 2022/09/30 03:51:41 fetching corpus: 600, signal 91535/104292 (executing program) 2022/09/30 03:51:41 fetching corpus: 650, signal 94101/107556 (executing program) 2022/09/30 03:51:41 fetching corpus: 700, signal 96074/110301 (executing program) 2022/09/30 03:51:41 fetching corpus: 750, signal 98248/113166 (executing program) 2022/09/30 03:51:41 fetching corpus: 800, signal 100057/115715 (executing program) 2022/09/30 03:51:41 fetching corpus: 850, signal 103170/119219 (executing program) 2022/09/30 03:51:41 fetching corpus: 900, signal 105011/121653 (executing program) 2022/09/30 03:51:41 fetching corpus: 950, signal 106850/124068 (executing program) 2022/09/30 03:51:41 fetching corpus: 1000, signal 108883/126561 (executing program) 2022/09/30 03:51:42 fetching corpus: 1050, signal 110015/128326 (executing program) 2022/09/30 03:51:42 fetching corpus: 1100, signal 112028/130878 (executing program) 2022/09/30 03:51:42 fetching corpus: 1150, signal 113770/133064 (executing program) 2022/09/30 03:51:42 fetching corpus: 1200, signal 115655/135367 (executing program) 2022/09/30 03:51:42 fetching corpus: 1250, signal 116861/137110 (executing program) 2022/09/30 03:51:42 fetching corpus: 1300, signal 119696/140004 (executing program) 2022/09/30 03:51:42 fetching corpus: 1350, signal 122380/142785 (executing program) 2022/09/30 03:51:42 fetching corpus: 1400, signal 123793/144588 (executing program) 2022/09/30 03:51:42 fetching corpus: 1450, signal 125594/146587 (executing program) 2022/09/30 03:51:43 fetching corpus: 1500, signal 127997/148972 (executing program) 2022/09/30 03:51:43 fetching corpus: 1550, signal 129451/150667 (executing program) 2022/09/30 03:51:43 fetching corpus: 1600, signal 130568/152105 (executing program) 2022/09/30 03:51:43 fetching corpus: 1650, signal 132273/153947 (executing program) 2022/09/30 03:51:43 fetching corpus: 1700, signal 134001/155760 (executing program) 2022/09/30 03:51:43 fetching corpus: 1750, signal 135192/157210 (executing program) 2022/09/30 03:51:43 fetching corpus: 1800, signal 136151/158404 (executing program) 2022/09/30 03:51:43 fetching corpus: 1850, signal 137592/159974 (executing program) 2022/09/30 03:51:43 fetching corpus: 1900, signal 139157/161517 (executing program) 2022/09/30 03:51:44 fetching corpus: 1950, signal 140359/162866 (executing program) 2022/09/30 03:51:44 fetching corpus: 2000, signal 141636/164178 (executing program) 2022/09/30 03:51:44 fetching corpus: 2050, signal 142795/165461 (executing program) 2022/09/30 03:51:44 fetching corpus: 2100, signal 144131/166793 (executing program) 2022/09/30 03:51:44 fetching corpus: 2150, signal 145670/168209 (executing program) 2022/09/30 03:51:44 fetching corpus: 2200, signal 146560/169227 (executing program) 2022/09/30 03:51:44 fetching corpus: 2250, signal 147311/170107 (executing program) 2022/09/30 03:51:44 fetching corpus: 2300, signal 148754/171374 (executing program) 2022/09/30 03:51:45 fetching corpus: 2350, signal 149958/172478 (executing program) 2022/09/30 03:51:45 fetching corpus: 2400, signal 150524/173237 (executing program) 2022/09/30 03:51:45 fetching corpus: 2450, signal 151654/174251 (executing program) 2022/09/30 03:51:45 fetching corpus: 2500, signal 152180/174969 (executing program) 2022/09/30 03:51:45 fetching corpus: 2550, signal 153088/175853 (executing program) 2022/09/30 03:51:45 fetching corpus: 2600, signal 154541/176945 (executing program) 2022/09/30 03:51:45 fetching corpus: 2650, signal 156087/178043 (executing program) 2022/09/30 03:51:45 fetching corpus: 2700, signal 156811/178781 (executing program) 2022/09/30 03:51:46 fetching corpus: 2750, signal 157674/179551 (executing program) 2022/09/30 03:51:46 fetching corpus: 2800, signal 158280/180252 (executing program) 2022/09/30 03:51:46 fetching corpus: 2850, signal 159697/181197 (executing program) 2022/09/30 03:51:46 fetching corpus: 2900, signal 160180/181788 (executing program) 2022/09/30 03:51:46 fetching corpus: 2950, signal 161351/182665 (executing program) 2022/09/30 03:51:46 fetching corpus: 3000, signal 162227/183389 (executing program) 2022/09/30 03:51:46 fetching corpus: 3050, signal 163032/184048 (executing program) 2022/09/30 03:51:46 fetching corpus: 3100, signal 163838/184665 (executing program) 2022/09/30 03:51:46 fetching corpus: 3150, signal 164570/185256 (executing program) 2022/09/30 03:51:47 fetching corpus: 3200, signal 165298/185822 (executing program) 2022/09/30 03:51:47 fetching corpus: 3250, signal 166199/186448 (executing program) 2022/09/30 03:51:47 fetching corpus: 3300, signal 167311/187123 (executing program) 2022/09/30 03:51:47 fetching corpus: 3350, signal 168566/187819 (executing program) 2022/09/30 03:51:47 fetching corpus: 3400, signal 169360/188369 (executing program) 2022/09/30 03:51:47 fetching corpus: 3450, signal 170114/188860 (executing program) 2022/09/30 03:51:47 fetching corpus: 3500, signal 170679/189312 (executing program) 2022/09/30 03:51:47 fetching corpus: 3550, signal 171297/189748 (executing program) 2022/09/30 03:51:47 fetching corpus: 3600, signal 171954/190175 (executing program) 2022/09/30 03:51:48 fetching corpus: 3650, signal 172837/190668 (executing program) 2022/09/30 03:51:48 fetching corpus: 3700, signal 173251/190999 (executing program) 2022/09/30 03:51:48 fetching corpus: 3750, signal 174140/191465 (executing program) 2022/09/30 03:51:48 fetching corpus: 3800, signal 175730/192130 (executing program) 2022/09/30 03:51:48 fetching corpus: 3850, signal 176463/192503 (executing program) 2022/09/30 03:51:48 fetching corpus: 3900, signal 177200/192862 (executing program) 2022/09/30 03:51:48 fetching corpus: 3950, signal 177889/193189 (executing program) 2022/09/30 03:51:48 fetching corpus: 4000, signal 178558/193521 (executing program) 2022/09/30 03:51:48 fetching corpus: 4050, signal 179313/193853 (executing program) 2022/09/30 03:51:49 fetching corpus: 4100, signal 180053/194153 (executing program) 2022/09/30 03:51:49 fetching corpus: 4150, signal 180544/194412 (executing program) 2022/09/30 03:51:49 fetching corpus: 4200, signal 180875/194626 (executing program) 2022/09/30 03:51:49 fetching corpus: 4250, signal 182302/194999 (executing program) 2022/09/30 03:51:49 fetching corpus: 4300, signal 183443/195574 (executing program) 2022/09/30 03:51:49 fetching corpus: 4350, signal 183976/195793 (executing program) 2022/09/30 03:51:49 fetching corpus: 4400, signal 184214/195948 (executing program) 2022/09/30 03:51:49 fetching corpus: 4450, signal 185341/196137 (executing program) 2022/09/30 03:51:50 fetching corpus: 4500, signal 186080/196322 (executing program) 2022/09/30 03:51:50 fetching corpus: 4550, signal 186632/196467 (executing program) 2022/09/30 03:51:50 fetching corpus: 4600, signal 187369/196612 (executing program) 2022/09/30 03:51:50 fetching corpus: 4650, signal 188047/196744 (executing program) 2022/09/30 03:51:50 fetching corpus: 4700, signal 188723/196859 (executing program) 2022/09/30 03:51:50 fetching corpus: 4750, signal 189460/196965 (executing program) 2022/09/30 03:51:50 fetching corpus: 4800, signal 189935/197049 (executing program) 2022/09/30 03:51:50 fetching corpus: 4850, signal 190572/197085 (executing program) 2022/09/30 03:51:50 fetching corpus: 4871, signal 190739/197089 (executing program) 2022/09/30 03:51:50 fetching corpus: 4871, signal 190739/197089 (executing program) 2022/09/30 03:51:53 starting 8 fuzzer processes 03:51:53 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000) write$binfmt_elf32(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x1, 0x5, 0x8000, 0x2, 0x6, 0x6, 0x179, 0x38, 0x162, 0x0, 0x0, 0x20, 0x2, 0xfffe, 0x7ff, 0x40}, [{0x6474e551, 0x1f, 0x14, 0xfff, 0x7fffffff, 0xd574, 0x7, 0x400}, {0x1, 0x7, 0x9, 0x4b0, 0x1ff, 0x3, 0x8, 0x9}], "8c4605f994a8dbf55835d96cfd50b3181debf9b1f8f6d94c2c6600d2484d7d6824e912edb12d28b16097423edad4a6cd6847d0f42152970997083034af4be8d0b1dcc0b335c7564d4160654222ceba962b55c91f7204ac0180f30b98c540d5991f630ea5c44319fd226de53b5c4accc62261c45655882a1ecab40970"}, 0xf4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x402200, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00', 0x0, [0x0, 0x2, 0x1, 0xbfa3, 0x279a]}, &(0x7f0000000240)=0x54) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000280)={0x9, 0x6, 0xb2199741ff2040dc, 0x9, 0x1, [{0xd79e, 0x0, 0x1000, '\x00', 0x1002}]}) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) write$cgroup_pid(r1, &(0x7f00000003c0)=0xffffffffffffffff, 0x12) r4 = eventfd(0x0) pread64(r4, &(0x7f0000000400)=""/248, 0xf8, 0xb5b) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000500)=r2, 0x1) preadv2(r4, &(0x7f0000000800)=[{&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000640)=""/195, 0xc3}, {&(0x7f0000000740)=""/147, 0x93}], 0x4, 0x10000, 0xea, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000840)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r3, {0x1000}}, './file0\x00'}) sendmmsg$unix(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000900)}], 0x1}}], 0x1, 0x4091) fallocate(r5, 0xa, 0x1, 0x10000) readv(r5, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/155, 0x9b}, {&(0x7f0000000a80)=""/81, 0x51}, {&(0x7f0000000b00)=""/210, 0xd2}], 0x3) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000c40)=0xfff) 03:51:53 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1cc, r0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58925a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77434ab9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x512b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x485716f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf986}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf91c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6896}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4da460ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93a8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60645b89}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9349}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50aea950}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b0e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3178}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x432390ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x219d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa51}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdc21a51}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x140027d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59a0d387}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33093383}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x147d098c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ed6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8920}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29f9}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27fe44e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x982a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43750d91}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xac548ba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a63dd6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6120f5df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4008080}, 0x24000010) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xb8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x48810) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r1, 0x400, 0x39, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x45) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)={0x278, 0x0, 0x12, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xa8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x401}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x180, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xda}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}]}, @NL802154_DEVKEY_ATTR_ID={0xb0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5956}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x7983c086391e6f46}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000080}, 0x81) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040810}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000bc0)={'wpan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c054}, 0x2000c000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r1, 0x9b78490716b50929, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40d1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x100}]}, 0x1c}}, 0x20004800) 03:51:53 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "67b6892a3f9685f1", "78e7fc6f121ad6deb296a996b8b492bd", "60528be7", "9a44ea4f9de586bc"}, 0x28) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0xc800) tee(r0, r0, 0x6, 0x5) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x7, 0x201, 0x0, 0x0, {0xe, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffffffb0}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x20004010) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x142c0, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfefa}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbb79}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000004c0), 0x6, 0x40282) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000500)=0xffffffffffffffff) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000540)="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", 0xfa) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffa}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0x8d, 0x5b, "1f494982768b8e2e26e45cab1595715778390f0af21216a54886ac6a6fade7b5414a8d570479df2e8e3b02fc42cb43c9a620afc57f73896550f44365878c011c392672af81cb2ba8901f8f2af9160dcc9251fc378e7d530fdc77246a03134fbd6c1cdeb5ca03d71553632052fb2f7ca3a22e45e4ad8404ba1a9b0cea89b0e16eac62415625d8a22998"}]}, 0xb4}}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x30, r1, 0x0) write$binfmt_aout(r2, &(0x7f00000007c0)={{0x10b, 0x2, 0x3, 0x32e, 0x1cc, 0x6, 0x2d4, 0x3d}, "23cb87fcc0fb77122032c75bec4b14259ab4ff0607681570c9c8ba196031e06e35cbb8004e505c9ee42291aa2f1d0ead42371a0b5587de254af8812b447f0f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x85f) connect$802154_dgram(r0, &(0x7f0000001040)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000001080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) read(r0, &(0x7f00000012c0)=""/245, 0xf5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000013c0)) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000001400)) 03:51:53 executing program 3: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x38, 0x0, "19e8013d8301ba0a9edc70483751b43bda26e3586345d0e5fe211f50de5b9817c03bea7d08ffaa3ecb0218f385245ef5981e59ea5c0b42f126a999f7330fd26e93f03a2d14aab6704ffae444363e7ed7"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x80, 0x186}], 0x1) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x8, "ff3cb5bda82760d28dfed59133b64254c4fb30faa8412241e2f3b493af7a9c4b0244a420f0bf3f61c2a5cd0dc6cf8cc5ce8926cad15191a9aaebe64c7137322d24d31d60cba13a3df076e94000fd711029d6ed1fef9045ae6c655027bb3c31b3a7d3b858cfd6e338aedf602e67803e0aa58ce62aed762c2aaeb15b0df435"}, 0x80) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80000) recvmmsg(r0, &(0x7f0000000940)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/13, 0xd}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x2}, 0x7ff}, {{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/191, 0xbf}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/165, 0xa5}], 0x4, &(0x7f0000000880)=""/183, 0xb7}, 0x48961fa2}], 0x3, 0x40003000, &(0x7f0000000a00)={0x0, 0x989680}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000a40)=0x5, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x10080, 0x1) close(r2) r3 = openat(r2, &(0x7f0000000ac0)='.\x00', 0x96503, 0x40) r4 = openat(r3, &(0x7f0000000b00)='./file0\x00', 0x400100, 0x128) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000b40)) setxattr$trusted_overlay_nlink(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), &(0x7f0000000c00)={'L+', 0x80000001}, 0x16, 0x0) fchown(r4, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000c40)={0x2b, @rand_addr=0x64010102, 0x4e24, 0x3, 'fo\x00', 0x848493e3681bf1f9, 0x7, 0xa}, 0x2c) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000cc0)={0x2, 0x38, '\x00', 0x1, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000d00)={'ipvlan0\x00', {0x2, 0x0, @dev}}) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000000d40)=""/132, &(0x7f0000000e00)=0x84) r6 = getegid() mount$9p_tcp(&(0x7f0000000e40), &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x21000, &(0x7f0000000f00)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@access_client}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@uname={'uname', 0x3d, '\x00'}}, {@cache_mmap}, {@cachetag={'cachetag', 0x3d, 'ipvlan0\x00'}}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@privport}, {@cache_none}, {@mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x33, 0x31, 0x33, 0x34, 0x65, 0x33, 0x32], 0x2d, [0x25, 0x38, 0x36, 0x37], 0x2d, [0x36, 0x63, 0x62, 0x31], 0x2d, [0x36, 0x32, 0x30, 0x61], 0x2d, [0x31, 0x38, 0x64, 0x64, 0x0, 0x64, 0x30]}}}, {@permit_directio}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@uid_gt={'uid>', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fowner_lt={'fowner<', 0xee00}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}}) [ 72.378496] audit: type=1400 audit(1664509913.965:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:51:53 executing program 4: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x74c31b2f2fe6118f) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@dev, @multicast1, @private}, &(0x7f00000000c0)=0xc) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010101}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r1, 0x0, r0, 0x5, 0x80000}) r2 = syz_open_dev$mouse(&(0x7f0000000200), 0x107f, 0x10000) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000240)) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000002c0)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000300)=0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000340)={{0xa, 0x4e21, 0x401, @mcast2, 0x7}, {0xa, 0x4e24, 0x6bb9da02, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, 0x3, [0x5, 0x5a, 0x4, 0x6, 0x1f, 0x1f, 0x10000, 0x7fff]}, 0x5c) r5 = openat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xc42, 0x4}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000440)) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000004c0)) fsmount(r2, 0x0, 0x70) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000540)=""/249) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0xe, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000780)) 03:51:54 executing program 6: r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/189, &(0x7f00000000c0)=0xbd) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000100)=0xc20d, 0x4) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/146, 0x92}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/110, 0x6e}, {0x0}, {&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000540)=""/185, 0xb9}], 0x8, &(0x7f0000000680)=""/200, 0xc8}, 0x5}, {{&(0x7f0000000780)=@un=@abs, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/215, 0xd7}, {&(0x7f0000000900)=""/183, 0xb7}, {&(0x7f00000009c0)=""/30, 0x1e}, {&(0x7f0000000a00)=""/149, 0x95}], 0x4, &(0x7f0000000b00)=""/4096, 0x1000}, 0x80}, {{&(0x7f0000001b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001b80)=""/118, 0x76}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/161, 0xa1}, {&(0x7f0000002cc0)=""/47, 0x2f}], 0x4}, 0x28}, {{&(0x7f0000002d40)=@ax25={{0x3, @netrom}, [@default, @remote, @netrom, @netrom, @remote, @remote, @null]}, 0x80, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)=""/9, 0x9}, 0xb41}, {{&(0x7f0000002e40)=@hci, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002ec0)=""/78, 0x4e}, {&(0x7f0000002f40)}], 0x2}, 0xa52}, {{&(0x7f0000002fc0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003040), 0x0, &(0x7f0000003080)=""/230, 0xe6}}], 0x6, 0x22, &(0x7f0000003300)={0x77359400}) poll(&(0x7f0000003340)=[{r1, 0x9018}, {r0, 0x100c}, {r0, 0x104}], 0x3, 0x8) r2 = dup3(r1, r1, 0x80000) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x4f, &(0x7f0000003440), &(0x7f0000003480)=0x4) connect$inet6(r1, &(0x7f00000034c0)={0xa, 0x4e22, 0x400, @rand_addr=' \x01\x00', 0x8}, 0x1c) r3 = syz_mount_image$ext4(&(0x7f0000003500)='ext2\x00', &(0x7f0000003540)='./file0\x00', 0x7, 0x7, &(0x7f00000039c0)=[{&(0x7f0000003580)="ba0736ec214fbd7ca642f64c812c58e10f5d9e72c0b36c", 0x17, 0x8}, {&(0x7f00000035c0)="c3977ac1d90fbfdfc90ec7a0a1f56b28f899b1", 0x13, 0x40}, {&(0x7f0000003600)="b4b0267a6e4e3217c017ee692ce7740ee154818a6401336afaf4c760a6d43312145c6890f4c844b0e9fcf2d4673dfc884f3e0b2d0992edb3cdedfb65e62df98598aeeb915c472628d170f7d78d62b31954290bf3af25d31c7c29cd1267b51ed934a23999f0443f9f1116dcbcda4e1691a48c40dc1b37a9ca11929b32a5c3fecf02078b42b86073b04fbd632de91de3d238eadac73fcaf0a55ef9a99240dfc1e63eaefabd1c1ee02ac3a7356178c4afd9f70761fbc560425d38ba86094ce36c0b05c493ffa23c3cae0fd128a38a2994594ed7d8ce9df7b2e978e9f584446b7d4de18adec3cbae6f7ecb86a9293ee469", 0xef, 0x81}, {&(0x7f0000003700)="700e6bebbde3d8f3b1788074df0099d0ce9a50145432", 0x16, 0x8}, {&(0x7f0000003740)="2f40bf051f1a6feea2b6a65bf15d23d8ef3098aa8e686567d4feaa1014a250f5b562ff12468139b96f082e91caabe183d6a07bd5a44c895795344709fe98effdf14d8b238556dd29383dd0121168e6d53f0c54fd30e73d1b38064ce31933eaecd95142d2a03ed9e874db5ee2232c14a99fe6e54e293cf55dd90951e516fe64b578d7d415aee84cbbf094966711bde9ff693f622e6069b45306c3c1ef0ed7cf88d6db3e2f106a5a9903a2debb2e42db907d9632503e0c0e1bb08ce675d4769889bbc07f8ae9d99e5dba8a49948212a57f893d609b2e3f072d63db637f10c8312c5b0035dc29b236f493edb96cba0687d4c87ea8e089fd5101", 0xf8, 0x200}, {&(0x7f0000003840)="4e505b981a019a5d5281b50f9e9adfb33677ac276ed8ec95e4acf3dd1eb504e84dce0a6a41d5c0a56b6b67812765e86f773c0ed2264a488010aa24fcf2a47b35039236cec27c8d6285e9f83078063e30090da212ee82c49d471f24949ccde708aa0648c4918d124f4b1aa94ca927b2308a3b3ec575a616e4fd2a9ced5136a79753b3d2498e2323575fa100d0a85aabdba1a8440d8575ae6f09e9bf72056d0fd285bc8cfc73d06a71e0f86428a7c813c875ec540bcc44a9b094476afb0b5e13", 0xbf, 0x8}, {&(0x7f0000003900)="d1197f8fed01162ef8fc6b0f3dee17c3bc408dc2346f4a52706f2e9c5945c180e7ee491a117acee54f0d85c4dc128b2afaa46ce4c1cdb5cbe81725b76266924a356ebd75c87c34b30aae6d5d21843ca42b2eb6a0588ede3b92929caf61a1abb3436ae2c536d1a0e96373671955b39380ba295fbcf4e7b903858b86e74a79bee42e2173c222a571d2a41405d22c87e317ae1ab29cc39ef871367ef00e2cbd82dc247b44a31181b774bc17a15494b12af96210", 0xb2, 0x7a5a}], 0x10040, &(0x7f0000003a80)={[{@stripe={'stripe', 0x3d, 0xfffffffffffffffa}}], [{@smackfshat={'smackfshat', 0x3d, '#}[]\xea)^$]'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x34, 0x37, 0x39, 0x0, 0x36d40b0289061191, 0x62, 0x35], 0x2d, [0x31, 0x33, 0x34, 0x61], 0x2d, [0x64, 0x37, 0x39, 0x62], 0x2d, [0x37, 0x64, 0x33, 0x65], 0x2d, [0x34, 0x34, 0x0, 0x65, 0x33, 0x38, 0x34, 0x32]}}}, {@pcr={'pcr', 0x3d, 0x12}}, {@obj_user}, {@subj_user}, {@smackfshat={'smackfshat', 0x3d, ' \x01\x00'}}, {@pcr={'pcr', 0x3d, 0x8}}]}) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000003bc0)={0x3, &(0x7f0000003b80)=[{0x101, 0x81, 0x4, 0x7fffffff}, {0x0, 0x1f, 0x6, 0x1}, {0x4, 0xc1, 0x0, 0xef3}]}) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000003c00)=""/215, 0xd7}, {&(0x7f0000003d00)=""/9, 0x9}, {&(0x7f0000003d40)=""/29, 0x1d}, {&(0x7f0000003d80)=""/245, 0xf5}, {&(0x7f0000003e80)=""/176, 0xb0}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x6, &(0x7f0000004fc0)=""/111, 0x6f}, 0x80000001}, {{&(0x7f0000005040)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005240)=[{&(0x7f00000050c0)=""/73, 0x49}, {&(0x7f0000005140)=""/56, 0x38}, {&(0x7f0000005180)=""/182, 0xb6}], 0x3}, 0xa5}], 0x2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000005380)={'nat\x00', 0x0, 0x0, 0x0, [0x1ff, 0x7, 0xda, 0x9, 0xeb, 0x101], 0x5, &(0x7f0000005300)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) sendmsg$nl_generic(r2, &(0x7f0000005540)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005500)={&(0x7f00000054c0)={0x28, 0x17, 0x100, 0x70bd29, 0x25dfdbfc, {0x1e}, [@typed={0xc, 0x7e, 0x0, 0x0, @u64=0x80000001}, @typed={0x8, 0x59, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000055c0)={0x7, &(0x7f0000005580)=[{0x400, 0x3, 0x24, 0x985f}, {0x2, 0x98, 0x1f, 0x3}, {0x7ff, 0x1, 0x3f, 0x5}, {0x3, 0x8, 0x3, 0x2}, {0x20, 0x9, 0x9, 0xa2}, {0x20, 0x2, 0x4, 0x3}, {0x80, 0x3, 0x81, 0xaf8}]}) syz_io_uring_setup(0x6ca4, &(0x7f0000005600)={0x0, 0xa2fa, 0x8, 0x3, 0x3e0, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000005680), &(0x7f00000056c0)) fsmount(r2, 0x1, 0x1a) r5 = syz_open_procfs(0x0, &(0x7f0000005700)='net/sockstat\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000005740)) 03:51:54 executing program 5: fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x400100) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x2, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="04fcb442cfe9ad26faba567147d1d780677f3af52876e0e0df499ee2a1265f054a4a4109ce85eacaf50532691e0449c849cb030a252b554c91f02f197999b83327989e3cae1237a421", 0x49, 0x8}, {&(0x7f0000000200)="8f09113cc6759b226387102e5a9906fd95c146010763883eed2c2e11b377fe908882e407b80479e4c5e21f2f3badf2662dfc15c2303a337fee5d16b91e8fb6aa35ab847b", 0x44}, {&(0x7f0000000280)="f2e89eb049a54653d6224acfd2748acd338e10279b1b071fb608b2b704bf56", 0x1f, 0x10000}, {&(0x7f00000002c0)="ea29f91b2fcd82efb6a938a86aa43b47acada65954652179ffda5ba260203bb596e20affb14a7dd6d37ad383774a874fcad40bb98a1293070c67ef1772d16362b9b5c69515329c4c300a33a12aa4aa1ce27b1c9a69edb26997a9635e11cc8fb5e97ebf29e84ae7c8293ef6a90885b80423acfdc70e5321b709e792f6e04e34b8ba934e7b0b03fc39cafb71bc864903b9add1b089083aea691d24977b4b060831b7d9f5368579321dd91441b559f316da4a6edd5819ef3b2b94eb5cd76a9903e1155b", 0xc2, 0xffff}], 0x42080, &(0x7f0000000440)={[{'%'}, {'(+\".$'}, {'@['}, {'/dev/vcsu#\x00'}, {')\'^{!&'}], [{@uid_gt}, {@fsname={'fsname', 0x3d, '}-.'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) readlinkat(r3, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/157, 0x9d) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000740)=0x0) r5 = geteuid() r6 = syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x2, &(0x7f0000000700)=[{&(0x7f0000000640)="82fcf599f9616758ba09b9b830929397947f3ab454c202c7e670e5745325ee46c16a0f4ede9e9616dd4c93cf688a942ecc5b0bc126eba06af99984a2766a98276f47bc6fad118147f07ae255b0cd5fd1fceae75c14ff6d70c919ed66d3cc6bdf7982bb409d8c17b640", 0x69, 0x7fff}, {&(0x7f00000006c0)="587cde5f8bf762c19bc41564e38a830e40755c3528db74bf2e36", 0x1a, 0x2}], 0x10, &(0x7f0000000780)={[{@commit={'commit', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}, {@grpid}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@usrquota}], [{@appraise}, {@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r5}}, {@dont_measure}]}) umount2(&(0x7f0000000880)='./file0\x00', 0xa) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x4e24, 0x2, @local, 0x2eec}}, 0x0, 0x0, 0xa, 0x0, "7ee39b8dbf12281773195b467e7cf3e2b24cc160198335e4edfd2da7032e1d921aad7954683b69eaaa80feb65293e376da683cdfaba32e8694aa62ebf2486358ae2ff5abbb7753245ec58453ab533398"}, 0xd8) lremovexattr(&(0x7f00000009c0)='./file1/file0\x00', &(0x7f0000000a00)=@known='trusted.overlay.redirect\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000a40)='./file1/file1\x00', r0, &(0x7f0000000a80)='./file1/file0\x00', 0x17) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file2\x00'}) lgetxattr(&(0x7f0000000b00)='./file3\x00', &(0x7f0000000b40)=@random={'system.', '}[:&\x00'}, &(0x7f0000000b80)=""/20, 0x14) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1/file1\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r7, r8, 0x0) openat(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x208040, 0x10) 03:51:54 executing program 7: r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3530000000, 0x7, &(0x7f0000000580)=[{&(0x7f0000000080)="8c04da5dcdefa9b77263c75ad1b162bb7f44923d75bc1a5340612030bae093627c37bfb987de104c16aea1a72461044618050eeaa3ce5244ec7a82f143bfe96c56", 0x41, 0x28}, {&(0x7f0000000100)="6f8dfe1b0179dc8e52b8ee3aa19c30e41bd2b569031834481bee2816e4ea475ccded49f8d5af7b840f00b8b204eb6d0770b61d3d0fc6dfbceb5c701ad2068add4cb48c9cc12c98282a64dfa5497506956708caae091c2e93182ff4141720c9db47e2ca48b354ba95b6a8efe3f9cfff702cee15568e87dec5c06767aafe11b50240c1445b509928f77ae83a006b76de6eb557f1cecf0b5928c5a40cd80b706884fccccbb2f9389f239d045af5e1711977a1ec48a9eae32a514250fc", 0xbb, 0x401}, {&(0x7f00000001c0)="36ad", 0x2, 0x9}, {&(0x7f0000000200)="b7ff0642664dea43d199cbde610947f189a435f1dccec8ddb8ef39d1490b5c6d43fe34c36a85656f2b8aa8177fafde87b09ffb16b4198236f693d1fe9d713250d641b9716d8734f973289dfb6c8eed948bc13ed6c16b0f6c4e73ff52ec9b08725ff1c731dd4c806f253452c57e9dd0720782c58fcdd55d7ba60b110b89748d376aa94d29b53749d2d324582ded28b52f851eb9980571b8277150dea3f4ee4861eea73a49cfa0891cbc1beeb4e52e651234dd6490d48341bf2f61995c7e604cf7536f7d3c", 0xc4, 0x200}, {&(0x7f0000000300)="208f0b55d41c0aab9a3741b1266ef8c88c94457994c49f543b5c8b6d152590700eeeefa54c67bed668a7938a42797f74b51c47c331fb7223c91bfb23efd31a140d1dbdae84913849b270b3588792fa043b4a8139c21f37345f9085430f9742fbfe4292b81658d8e43bb69deb97c75c27115574b95339924a2d81c4c2fa6d2ecb8d1ae9c23a0814421eeaf078b8bbda7129a940d4ede26e91a2fe", 0x9a, 0x3}, {&(0x7f00000003c0)="ac54880d926e553e51c6882a423c694cef155e8104b7d38dbfcad1b0fee3f28e21a31f2519db27d138c3ae6177111c28c9526069398c4d6f75d15cba6bcccb0bd333a94a742793c7753897412bef6d973351803c4d1bae1292089fec4cf5cc9833538131bb32c95cc3dea0d0d1362b3f690411eb3b25d55aa3546f453f9eecdda3b50e55dba66a9deeb14502cccd7f5408beef157956d32df62e714f03e1e71eb42dfdc671bdb77e1ab5241a6abb541479949c1d39e92918817b0c814c3706dd47baeabebfec03e658c825", 0xcb, 0x5}, {&(0x7f00000004c0)="ab2fb745218d2699c83cd91859e106c6894c36c03e4c642f9680405c869352d1e9c87d6f612c62bb8a44971ce3b81a32e40adfbe3c5980b76222577cc43639ef52bcd1fcf3baad7c513042c2eb48d3a0b45997b9d055c3b65ea3ae9c5424def8e4d99686625ccaaceb4c5ce39f09bc55139e3ffbf75ddbc4455c0d5868d37d3225707b517413379b6ce906a98c3e093ad345cb1bf10c8d3913b1f7d6695ad09dfdce5a7169132f9603f8febe5fe16fef23cb83", 0xb3, 0x266c5a08}], 0x20, &(0x7f0000000640)={[{}, {'!#\xe5'}, {}], [{@dont_appraise}, {@euid_lt}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '-%/:][{!%]'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x62, 0x32, 0x38, 0x31, 0xd, 0x37, 0x72], 0x2d, [0x56, 0x63, 0x63, 0x61], 0x2d, [0x61, 0x31, 0x39, 0x33], 0x2d, [0x64, 0x33, 0x65, 0x61], 0x2d, [0x35, 0x38, 0x35, 0x66, 0x63, 0x37, 0x31, 0x31]}}}]}) utimes(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={{0x77359400}, {0x77359400}}) unlinkat(r0, &(0x7f0000000780)='./file0\x00', 0x200) unlinkat(r0, &(0x7f00000007c0)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000000940)=0xe8) fchownat(r0, &(0x7f0000000800)='./file0\x00', r1, 0xffffffffffffffff, 0x800) unlinkat(r0, &(0x7f0000000980)='./file0\x00', 0x0) getxattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)=@random={'system.', '-\'\'wI\x00'}, &(0x7f0000000a40)=""/193, 0xc1) r2 = fcntl$getown(0xffffffffffffffff, 0x9) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r0, &(0x7f0000000e00)={0xffffffffffffffff, r0, 0x5}) r3 = memfd_secret(0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000e40)) setxattr$trusted_overlay_redirect(&(0x7f0000000e80)='./file0/file0\x00', &(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x8, 0x2) preadv(r3, &(0x7f0000000fc0)=[{&(0x7f0000000f40)=""/4, 0x4}, {&(0x7f0000000f80)=""/16, 0x10}], 0x2, 0xfffffffd, 0xdf88b347) process_vm_writev(r2, &(0x7f0000001000), 0x0, &(0x7f0000002280)=[{&(0x7f0000001040)=""/201, 0xc9}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/77, 0x4d}, {&(0x7f00000021c0)=""/84, 0x54}, {&(0x7f0000002240)=""/36, 0x24}], 0x5, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000002300)='-*:$!\'\x00', &(0x7f0000002340)='./file0/file0\x00', r0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) openat$full(0xffffffffffffff9c, &(0x7f0000002380), 0x5a3a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r4, {0x5}}, './file1\x00'}) [ 73.750459] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.752592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.754359] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.755898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.757553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.758903] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.761123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.761993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.763566] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.763806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.764639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.767345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.775614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.777937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.799199] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.800280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.802547] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.803870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.805436] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.810089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.811163] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.812481] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.814268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.815370] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.816393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.820214] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.821362] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.821464] Bluetooth: hci3: HCI_REQ-0x0c1a [ 73.822394] Bluetooth: hci0: HCI_REQ-0x0c1a [ 73.829418] Bluetooth: hci2: HCI_REQ-0x0c1a [ 73.839427] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.843589] Bluetooth: hci1: HCI_REQ-0x0c1a [ 73.843594] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.851372] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.857959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.860242] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 73.861997] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.863068] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.869354] Bluetooth: hci6: HCI_REQ-0x0c1a [ 73.876017] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.877749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.886802] Bluetooth: hci4: HCI_REQ-0x0c1a [ 73.903541] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.906142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.907731] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.910282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.911938] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.913277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.914459] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.919347] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.932290] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.939481] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.949426] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.971113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 73.980962] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.991719] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.828074] Bluetooth: hci0: command 0x0409 tx timeout [ 75.891789] Bluetooth: hci6: command 0x0409 tx timeout [ 75.891965] Bluetooth: hci1: command 0x0409 tx timeout [ 75.892586] Bluetooth: hci3: command 0x0409 tx timeout [ 75.893640] Bluetooth: hci2: command 0x0409 tx timeout [ 75.956152] Bluetooth: hci5: command 0x0409 tx timeout [ 75.957136] Bluetooth: hci4: command 0x0409 tx timeout [ 76.019764] Bluetooth: hci7: command 0x0409 tx timeout [ 77.876452] Bluetooth: hci0: command 0x041b tx timeout [ 77.939917] Bluetooth: hci3: command 0x041b tx timeout [ 77.940711] Bluetooth: hci2: command 0x041b tx timeout [ 77.941440] Bluetooth: hci1: command 0x041b tx timeout [ 77.942203] Bluetooth: hci6: command 0x041b tx timeout [ 78.003847] Bluetooth: hci4: command 0x041b tx timeout [ 78.004612] Bluetooth: hci5: command 0x041b tx timeout [ 78.067727] Bluetooth: hci7: command 0x041b tx timeout [ 79.924755] Bluetooth: hci0: command 0x040f tx timeout [ 79.988733] Bluetooth: hci6: command 0x040f tx timeout [ 79.989241] Bluetooth: hci1: command 0x040f tx timeout [ 79.990022] Bluetooth: hci2: command 0x040f tx timeout [ 79.990425] Bluetooth: hci3: command 0x040f tx timeout [ 80.053179] Bluetooth: hci5: command 0x040f tx timeout [ 80.053731] Bluetooth: hci4: command 0x040f tx timeout [ 80.116696] Bluetooth: hci7: command 0x040f tx timeout [ 81.971747] Bluetooth: hci0: command 0x0419 tx timeout [ 82.035790] Bluetooth: hci3: command 0x0419 tx timeout [ 82.036504] Bluetooth: hci2: command 0x0419 tx timeout [ 82.037834] Bluetooth: hci1: command 0x0419 tx timeout [ 82.038496] Bluetooth: hci6: command 0x0419 tx timeout [ 82.100731] Bluetooth: hci4: command 0x0419 tx timeout [ 82.101420] Bluetooth: hci5: command 0x0419 tx timeout [ 82.163731] Bluetooth: hci7: command 0x0419 tx timeout 03:52:48 executing program 3: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x38, 0x0, "19e8013d8301ba0a9edc70483751b43bda26e3586345d0e5fe211f50de5b9817c03bea7d08ffaa3ecb0218f385245ef5981e59ea5c0b42f126a999f7330fd26e93f03a2d14aab6704ffae444363e7ed7"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x80, 0x186}], 0x1) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x8, "ff3cb5bda82760d28dfed59133b64254c4fb30faa8412241e2f3b493af7a9c4b0244a420f0bf3f61c2a5cd0dc6cf8cc5ce8926cad15191a9aaebe64c7137322d24d31d60cba13a3df076e94000fd711029d6ed1fef9045ae6c655027bb3c31b3a7d3b858cfd6e338aedf602e67803e0aa58ce62aed762c2aaeb15b0df435"}, 0x80) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80000) recvmmsg(r0, &(0x7f0000000940)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/13, 0xd}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x2}, 0x7ff}, {{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/191, 0xbf}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/165, 0xa5}], 0x4, &(0x7f0000000880)=""/183, 0xb7}, 0x48961fa2}], 0x3, 0x40003000, &(0x7f0000000a00)={0x0, 0x989680}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000a40)=0x5, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x10080, 0x1) close(r2) r3 = openat(r2, &(0x7f0000000ac0)='.\x00', 0x96503, 0x40) r4 = openat(r3, &(0x7f0000000b00)='./file0\x00', 0x400100, 0x128) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000b40)) setxattr$trusted_overlay_nlink(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), &(0x7f0000000c00)={'L+', 0x80000001}, 0x16, 0x0) fchown(r4, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000c40)={0x2b, @rand_addr=0x64010102, 0x4e24, 0x3, 'fo\x00', 0x848493e3681bf1f9, 0x7, 0xa}, 0x2c) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000cc0)={0x2, 0x38, '\x00', 0x1, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000d00)={'ipvlan0\x00', {0x2, 0x0, @dev}}) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000000d40)=""/132, &(0x7f0000000e00)=0x84) r6 = getegid() mount$9p_tcp(&(0x7f0000000e40), &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x21000, &(0x7f0000000f00)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@access_client}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@uname={'uname', 0x3d, '\x00'}}, {@cache_mmap}, {@cachetag={'cachetag', 0x3d, 'ipvlan0\x00'}}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@privport}, {@cache_none}, {@mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x33, 0x31, 0x33, 0x34, 0x65, 0x33, 0x32], 0x2d, [0x25, 0x38, 0x36, 0x37], 0x2d, [0x36, 0x63, 0x62, 0x31], 0x2d, [0x36, 0x32, 0x30, 0x61], 0x2d, [0x31, 0x38, 0x64, 0x64, 0x0, 0x64, 0x30]}}}, {@permit_directio}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@uid_gt={'uid>', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fowner_lt={'fowner<', 0xee00}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}}) [ 127.124728] loop6: detected capacity change from 0 to 122 [ 127.142448] ======================================================= [ 127.142448] WARNING: The mand mount option has been deprecated and [ 127.142448] and is ignored by this kernel. Remove the mand [ 127.142448] option from the mount to silence this warning. [ 127.142448] ======================================================= 03:52:48 executing program 3: close(0xffffffffffffffff) clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pidfd_send_signal(r0, 0x3b, &(0x7f0000000000)={0x1e, 0xa98, 0xa}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 127.188942] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 127.228541] loop6: detected capacity change from 0 to 122 [ 127.229333] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 127.263564] process 'syz-executor.3' launched './file1' with NULL argv: empty string added 03:52:48 executing program 3: close(0xffffffffffffffff) clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pidfd_send_signal(r0, 0x3b, &(0x7f0000000000)={0x1e, 0xa98, 0xa}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:52:48 executing program 6: r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/189, &(0x7f00000000c0)=0xbd) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000100)=0xc20d, 0x4) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/146, 0x92}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/110, 0x6e}, {0x0}, {&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000540)=""/185, 0xb9}], 0x8, &(0x7f0000000680)=""/200, 0xc8}, 0x5}, {{&(0x7f0000000780)=@un=@abs, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/215, 0xd7}, {&(0x7f0000000900)=""/183, 0xb7}, {&(0x7f00000009c0)=""/30, 0x1e}, {&(0x7f0000000a00)=""/149, 0x95}], 0x4, &(0x7f0000000b00)=""/4096, 0x1000}, 0x80}, {{&(0x7f0000001b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001b80)=""/118, 0x76}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/161, 0xa1}, {&(0x7f0000002cc0)=""/47, 0x2f}], 0x4}, 0x28}, {{&(0x7f0000002d40)=@ax25={{0x3, @netrom}, [@default, @remote, @netrom, @netrom, @remote, @remote, @null]}, 0x80, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)=""/9, 0x9}, 0xb41}, {{&(0x7f0000002e40)=@hci, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002ec0)=""/78, 0x4e}, {&(0x7f0000002f40)}], 0x2}, 0xa52}, {{&(0x7f0000002fc0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003040), 0x0, &(0x7f0000003080)=""/230, 0xe6}}], 0x6, 0x22, &(0x7f0000003300)={0x77359400}) poll(&(0x7f0000003340)=[{r1, 0x9018}, {r0, 0x100c}, {r0, 0x104}], 0x3, 0x8) r2 = dup3(r1, r1, 0x80000) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x4f, &(0x7f0000003440), &(0x7f0000003480)=0x4) connect$inet6(r1, &(0x7f00000034c0)={0xa, 0x4e22, 0x400, @rand_addr=' \x01\x00', 0x8}, 0x1c) r3 = syz_mount_image$ext4(&(0x7f0000003500)='ext2\x00', &(0x7f0000003540)='./file0\x00', 0x7, 0x7, &(0x7f00000039c0)=[{&(0x7f0000003580)="ba0736ec214fbd7ca642f64c812c58e10f5d9e72c0b36c", 0x17, 0x8}, {&(0x7f00000035c0)="c3977ac1d90fbfdfc90ec7a0a1f56b28f899b1", 0x13, 0x40}, {&(0x7f0000003600)="b4b0267a6e4e3217c017ee692ce7740ee154818a6401336afaf4c760a6d43312145c6890f4c844b0e9fcf2d4673dfc884f3e0b2d0992edb3cdedfb65e62df98598aeeb915c472628d170f7d78d62b31954290bf3af25d31c7c29cd1267b51ed934a23999f0443f9f1116dcbcda4e1691a48c40dc1b37a9ca11929b32a5c3fecf02078b42b86073b04fbd632de91de3d238eadac73fcaf0a55ef9a99240dfc1e63eaefabd1c1ee02ac3a7356178c4afd9f70761fbc560425d38ba86094ce36c0b05c493ffa23c3cae0fd128a38a2994594ed7d8ce9df7b2e978e9f584446b7d4de18adec3cbae6f7ecb86a9293ee469", 0xef, 0x81}, {&(0x7f0000003700)="700e6bebbde3d8f3b1788074df0099d0ce9a50145432", 0x16, 0x8}, {&(0x7f0000003740)="2f40bf051f1a6feea2b6a65bf15d23d8ef3098aa8e686567d4feaa1014a250f5b562ff12468139b96f082e91caabe183d6a07bd5a44c895795344709fe98effdf14d8b238556dd29383dd0121168e6d53f0c54fd30e73d1b38064ce31933eaecd95142d2a03ed9e874db5ee2232c14a99fe6e54e293cf55dd90951e516fe64b578d7d415aee84cbbf094966711bde9ff693f622e6069b45306c3c1ef0ed7cf88d6db3e2f106a5a9903a2debb2e42db907d9632503e0c0e1bb08ce675d4769889bbc07f8ae9d99e5dba8a49948212a57f893d609b2e3f072d63db637f10c8312c5b0035dc29b236f493edb96cba0687d4c87ea8e089fd5101", 0xf8, 0x200}, {&(0x7f0000003840)="4e505b981a019a5d5281b50f9e9adfb33677ac276ed8ec95e4acf3dd1eb504e84dce0a6a41d5c0a56b6b67812765e86f773c0ed2264a488010aa24fcf2a47b35039236cec27c8d6285e9f83078063e30090da212ee82c49d471f24949ccde708aa0648c4918d124f4b1aa94ca927b2308a3b3ec575a616e4fd2a9ced5136a79753b3d2498e2323575fa100d0a85aabdba1a8440d8575ae6f09e9bf72056d0fd285bc8cfc73d06a71e0f86428a7c813c875ec540bcc44a9b094476afb0b5e13", 0xbf, 0x8}, {&(0x7f0000003900)="d1197f8fed01162ef8fc6b0f3dee17c3bc408dc2346f4a52706f2e9c5945c180e7ee491a117acee54f0d85c4dc128b2afaa46ce4c1cdb5cbe81725b76266924a356ebd75c87c34b30aae6d5d21843ca42b2eb6a0588ede3b92929caf61a1abb3436ae2c536d1a0e96373671955b39380ba295fbcf4e7b903858b86e74a79bee42e2173c222a571d2a41405d22c87e317ae1ab29cc39ef871367ef00e2cbd82dc247b44a31181b774bc17a15494b12af96210", 0xb2, 0x7a5a}], 0x10040, &(0x7f0000003a80)={[{@stripe={'stripe', 0x3d, 0xfffffffffffffffa}}], [{@smackfshat={'smackfshat', 0x3d, '#}[]\xea)^$]'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x34, 0x37, 0x39, 0x0, 0x36d40b0289061191, 0x62, 0x35], 0x2d, [0x31, 0x33, 0x34, 0x61], 0x2d, [0x64, 0x37, 0x39, 0x62], 0x2d, [0x37, 0x64, 0x33, 0x65], 0x2d, [0x34, 0x34, 0x0, 0x65, 0x33, 0x38, 0x34, 0x32]}}}, {@pcr={'pcr', 0x3d, 0x12}}, {@obj_user}, {@subj_user}, {@smackfshat={'smackfshat', 0x3d, ' \x01\x00'}}, {@pcr={'pcr', 0x3d, 0x8}}]}) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000003bc0)={0x3, &(0x7f0000003b80)=[{0x101, 0x81, 0x4, 0x7fffffff}, {0x0, 0x1f, 0x6, 0x1}, {0x4, 0xc1, 0x0, 0xef3}]}) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000003c00)=""/215, 0xd7}, {&(0x7f0000003d00)=""/9, 0x9}, {&(0x7f0000003d40)=""/29, 0x1d}, {&(0x7f0000003d80)=""/245, 0xf5}, {&(0x7f0000003e80)=""/176, 0xb0}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x6, &(0x7f0000004fc0)=""/111, 0x6f}, 0x80000001}, {{&(0x7f0000005040)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005240)=[{&(0x7f00000050c0)=""/73, 0x49}, {&(0x7f0000005140)=""/56, 0x38}, {&(0x7f0000005180)=""/182, 0xb6}], 0x3}, 0xa5}], 0x2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000005380)={'nat\x00', 0x0, 0x0, 0x0, [0x1ff, 0x7, 0xda, 0x9, 0xeb, 0x101], 0x5, &(0x7f0000005300)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) sendmsg$nl_generic(r2, &(0x7f0000005540)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005500)={&(0x7f00000054c0)={0x28, 0x17, 0x100, 0x70bd29, 0x25dfdbfc, {0x1e}, [@typed={0xc, 0x7e, 0x0, 0x0, @u64=0x80000001}, @typed={0x8, 0x59, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000055c0)={0x7, &(0x7f0000005580)=[{0x400, 0x3, 0x24, 0x985f}, {0x2, 0x98, 0x1f, 0x3}, {0x7ff, 0x1, 0x3f, 0x5}, {0x3, 0x8, 0x3, 0x2}, {0x20, 0x9, 0x9, 0xa2}, {0x20, 0x2, 0x4, 0x3}, {0x80, 0x3, 0x81, 0xaf8}]}) syz_io_uring_setup(0x6ca4, &(0x7f0000005600)={0x0, 0xa2fa, 0x8, 0x3, 0x3e0, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000005680), &(0x7f00000056c0)) fsmount(r2, 0x1, 0x1a) r5 = syz_open_procfs(0x0, &(0x7f0000005700)='net/sockstat\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000005740)) [ 127.371382] loop6: detected capacity change from 0 to 122 [ 127.372884] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 03:52:49 executing program 3: close(0xffffffffffffffff) clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pidfd_send_signal(r0, 0x3b, &(0x7f0000000000)={0x1e, 0xa98, 0xa}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:52:49 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) connect(r0, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0eb5cf44280caad9f2a1d33a96f329c567da804a2f16966f117245e2c44551c9c0770b908bd61dc63c674d251169928b4fbe1d9d080ab1bec2bc7984e0e650"}, 0x80) 03:52:49 executing program 3: close(0xffffffffffffffff) clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pidfd_send_signal(r0, 0x3b, &(0x7f0000000000)={0x1e, 0xa98, 0xa}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:52:49 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) connect(r0, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0eb5cf44280caad9f2a1d33a96f329c567da804a2f16966f117245e2c44551c9c0770b908bd61dc63c674d251169928b4fbe1d9d080ab1bec2bc7984e0e650"}, 0x80) [ 128.535371] loop5: detected capacity change from 0 to 256 [ 128.567263] loop5: detected capacity change from 0 to 127 [ 128.573193] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 128.620288] loop5: detected capacity change from 0 to 256 [ 129.953311] loop7: detected capacity change from 0 to 264192 [ 129.981774] loop7: detected capacity change from 0 to 264192 03:53:06 executing program 3: close(0xffffffffffffffff) clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pidfd_send_signal(r0, 0x3b, &(0x7f0000000000)={0x1e, 0xa98, 0xa}, 0x0) 03:53:06 executing program 2: r0 = fspick(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1) flock(r0, 0x8) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x453, 0x300, 0x70bd2d, 0x25dfdbfc, "85680c25d6f07a026495c4755f039c7ea22faefbc5b2ef952686686ebf4873d5eeb355c81e16af6988ea9e117ae2189d3e07fbd4225959538cfaefae63437fd7f274b1a1c06ac173e53e6652b10b40e83071921bd77fb097e7ab33e4e6dafcb310f05d6b047847f0e082e90598686542a1780c980bcf4dd48bd69c6b23abe3880e3e6074", ["", "", ""]}, 0x94}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000380)={@empty, 0x0, r6}) r7 = signalfd(r4, &(0x7f00000003c0)={[0x1f]}, 0x8) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000000c0)='sit0\x00', 0x0, r2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) r9 = socket$inet(0x2, 0x3, 0x10000000) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x401) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000380)={@empty, 0x0, r8}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0xff, 0xfffff001, 0x9, 0xc910, 0xdc2e}) fremovexattr(r1, &(0x7f0000000180)=@known='system.posix_acl_default\x00') lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00') 03:53:06 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4001813, r2, 0x0) 03:53:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x81, 0xa9, 0x74, 0x2, 0x0, 0x0, 0x80000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x200, 0x8, 0xd8, 0xe, 0x20, 0x1, 0x3, 0x0, 0x4, 0x0, 0xffffffffffffff80}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x45d, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000380)={@empty, 0x0, r4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={r5, 0x101}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000380)={{r5, 0x299d, 0x6, 0x7f, 0x9, 0x1ff, 0x9, 0x1, 0x5, 0xfffffe01, 0x2, 0x20, 0x3, 0x4, 0x9}}) socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180000003280baf9f83d19c3121020f4cd8d22e86d022634546cf73119f07bbebe3bad6f83294587b457f664f11b1565c65d1a8344f5b44bdb2a3b1b17863dca5be00d57cff77d546f6c8e73c391809ab8891fadd449ce0ca6d50e0a316952502f76e9b13f732e2782ff521b44787baf126de9a174a7587d302a6b04392e3d5e56fe", @ANYBLOB="fbace483ee23d88d7fe02051e04b83c3704d4d5a58a64a156385666f69ae42736499ce5dc76b4b52c8184d1e2369bc3e30698da85c1531d9398e10643267f12d3338cb13", @ANYBLOB="00000049000200000000a45218f9c3c8cbdc857beef5fe5b53cf6702934f"]) 03:53:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2, 0x4}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r2, r3, 0x0, 0xffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/221, 0xdd}, {&(0x7f0000000740)=""/82, 0x52}], 0x2, 0x8, 0x20000000) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r5, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0xfffffffffffffffc) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r6, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) 03:53:06 executing program 1: fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x400100) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x2, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="04fcb442cfe9ad26faba567147d1d780677f3af52876e0e0df499ee2a1265f054a4a4109ce85eacaf50532691e0449c849cb030a252b554c91f02f197999b83327989e3cae1237a421", 0x49, 0x8}, {&(0x7f0000000200)="8f09113cc6759b226387102e5a9906fd95c146010763883eed2c2e11b377fe908882e407b80479e4c5e21f2f3badf2662dfc15c2303a337fee5d16b91e8fb6aa35ab847b", 0x44}, {&(0x7f0000000280)="f2e89eb049a54653d6224acfd2748acd338e10279b1b071fb608b2b704bf56", 0x1f, 0x10000}, {&(0x7f00000002c0)="ea29f91b2fcd82efb6a938a86aa43b47acada65954652179ffda5ba260203bb596e20affb14a7dd6d37ad383774a874fcad40bb98a1293070c67ef1772d16362b9b5c69515329c4c300a33a12aa4aa1ce27b1c9a69edb26997a9635e11cc8fb5e97ebf29e84ae7c8293ef6a90885b80423acfdc70e5321b709e792f6e04e34b8ba934e7b0b03fc39cafb71bc864903b9add1b089083aea691d24977b4b060831b7d9f5368579321dd91441b559f316da4a6edd5819ef3b2b94eb5cd76a9903e1155b", 0xc2, 0xffff}], 0x42080, &(0x7f0000000440)={[{'%'}, {'(+\".$'}, {'@['}, {'/dev/vcsu#\x00'}, {')\'^{!&'}], [{@uid_gt}, {@fsname={'fsname', 0x3d, '}-.'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) readlinkat(r3, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/157, 0x9d) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000740)=0x0) r5 = geteuid() r6 = syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x2, &(0x7f0000000700)=[{&(0x7f0000000640)="82fcf599f9616758ba09b9b830929397947f3ab454c202c7e670e5745325ee46c16a0f4ede9e9616dd4c93cf688a942ecc5b0bc126eba06af99984a2766a98276f47bc6fad118147f07ae255b0cd5fd1fceae75c14ff6d70c919ed66d3cc6bdf7982bb409d8c17b640", 0x69, 0x7fff}, {&(0x7f00000006c0)="587cde5f8bf762c19bc41564e38a830e40755c3528db74bf2e36", 0x1a, 0x2}], 0x10, &(0x7f0000000780)={[{@commit={'commit', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}, {@grpid}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@usrquota}], [{@appraise}, {@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r5}}, {@dont_measure}]}) umount2(&(0x7f0000000880)='./file0\x00', 0xa) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x4e24, 0x2, @local, 0x2eec}}, 0x0, 0x0, 0xa, 0x0, "7ee39b8dbf12281773195b467e7cf3e2b24cc160198335e4edfd2da7032e1d921aad7954683b69eaaa80feb65293e376da683cdfaba32e8694aa62ebf2486358ae2ff5abbb7753245ec58453ab533398"}, 0xd8) lremovexattr(&(0x7f00000009c0)='./file1/file0\x00', &(0x7f0000000a00)=@known='trusted.overlay.redirect\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000a40)='./file1/file1\x00', r0, &(0x7f0000000a80)='./file1/file0\x00', 0x17) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file2\x00'}) lgetxattr(&(0x7f0000000b00)='./file3\x00', &(0x7f0000000b40)=@random={'system.', '}[:&\x00'}, &(0x7f0000000b80)=""/20, 0x14) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1/file1\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r7, r8, 0x0) openat(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x208040, 0x10) 03:53:06 executing program 5: fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x400100) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x2, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="04fcb442cfe9ad26faba567147d1d780677f3af52876e0e0df499ee2a1265f054a4a4109ce85eacaf50532691e0449c849cb030a252b554c91f02f197999b83327989e3cae1237a421", 0x49, 0x8}, {&(0x7f0000000200)="8f09113cc6759b226387102e5a9906fd95c146010763883eed2c2e11b377fe908882e407b80479e4c5e21f2f3badf2662dfc15c2303a337fee5d16b91e8fb6aa35ab847b", 0x44}, {&(0x7f0000000280)="f2e89eb049a54653d6224acfd2748acd338e10279b1b071fb608b2b704bf56", 0x1f, 0x10000}, {&(0x7f00000002c0)="ea29f91b2fcd82efb6a938a86aa43b47acada65954652179ffda5ba260203bb596e20affb14a7dd6d37ad383774a874fcad40bb98a1293070c67ef1772d16362b9b5c69515329c4c300a33a12aa4aa1ce27b1c9a69edb26997a9635e11cc8fb5e97ebf29e84ae7c8293ef6a90885b80423acfdc70e5321b709e792f6e04e34b8ba934e7b0b03fc39cafb71bc864903b9add1b089083aea691d24977b4b060831b7d9f5368579321dd91441b559f316da4a6edd5819ef3b2b94eb5cd76a9903e1155b", 0xc2, 0xffff}], 0x42080, &(0x7f0000000440)={[{'%'}, {'(+\".$'}, {'@['}, {'/dev/vcsu#\x00'}, {')\'^{!&'}], [{@uid_gt}, {@fsname={'fsname', 0x3d, '}-.'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) readlinkat(r3, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/157, 0x9d) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000740)=0x0) r5 = geteuid() r6 = syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x2, &(0x7f0000000700)=[{&(0x7f0000000640)="82fcf599f9616758ba09b9b830929397947f3ab454c202c7e670e5745325ee46c16a0f4ede9e9616dd4c93cf688a942ecc5b0bc126eba06af99984a2766a98276f47bc6fad118147f07ae255b0cd5fd1fceae75c14ff6d70c919ed66d3cc6bdf7982bb409d8c17b640", 0x69, 0x7fff}, {&(0x7f00000006c0)="587cde5f8bf762c19bc41564e38a830e40755c3528db74bf2e36", 0x1a, 0x2}], 0x10, &(0x7f0000000780)={[{@commit={'commit', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}, {@grpid}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@usrquota}], [{@appraise}, {@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r5}}, {@dont_measure}]}) umount2(&(0x7f0000000880)='./file0\x00', 0xa) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x4e24, 0x2, @local, 0x2eec}}, 0x0, 0x0, 0xa, 0x0, "7ee39b8dbf12281773195b467e7cf3e2b24cc160198335e4edfd2da7032e1d921aad7954683b69eaaa80feb65293e376da683cdfaba32e8694aa62ebf2486358ae2ff5abbb7753245ec58453ab533398"}, 0xd8) lremovexattr(&(0x7f00000009c0)='./file1/file0\x00', &(0x7f0000000a00)=@known='trusted.overlay.redirect\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000a40)='./file1/file1\x00', r0, &(0x7f0000000a80)='./file1/file0\x00', 0x17) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file2\x00'}) lgetxattr(&(0x7f0000000b00)='./file3\x00', &(0x7f0000000b40)=@random={'system.', '}[:&\x00'}, &(0x7f0000000b80)=""/20, 0x14) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1/file1\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r7, r8, 0x0) openat(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x208040, 0x10) 03:53:06 executing program 7: fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x400100) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x2, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="04fcb442cfe9ad26faba567147d1d780677f3af52876e0e0df499ee2a1265f054a4a4109ce85eacaf50532691e0449c849cb030a252b554c91f02f197999b83327989e3cae1237a421", 0x49, 0x8}, {&(0x7f0000000200)="8f09113cc6759b226387102e5a9906fd95c146010763883eed2c2e11b377fe908882e407b80479e4c5e21f2f3badf2662dfc15c2303a337fee5d16b91e8fb6aa35ab847b", 0x44}, {&(0x7f0000000280)="f2e89eb049a54653d6224acfd2748acd338e10279b1b071fb608b2b704bf56", 0x1f, 0x10000}, {&(0x7f00000002c0)="ea29f91b2fcd82efb6a938a86aa43b47acada65954652179ffda5ba260203bb596e20affb14a7dd6d37ad383774a874fcad40bb98a1293070c67ef1772d16362b9b5c69515329c4c300a33a12aa4aa1ce27b1c9a69edb26997a9635e11cc8fb5e97ebf29e84ae7c8293ef6a90885b80423acfdc70e5321b709e792f6e04e34b8ba934e7b0b03fc39cafb71bc864903b9add1b089083aea691d24977b4b060831b7d9f5368579321dd91441b559f316da4a6edd5819ef3b2b94eb5cd76a9903e1155b", 0xc2, 0xffff}], 0x42080, &(0x7f0000000440)={[{'%'}, {'(+\".$'}, {'@['}, {'/dev/vcsu#\x00'}, {')\'^{!&'}], [{@uid_gt}, {@fsname={'fsname', 0x3d, '}-.'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) readlinkat(r3, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/157, 0x9d) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000740)=0x0) r5 = geteuid() r6 = syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x2, &(0x7f0000000700)=[{&(0x7f0000000640)="82fcf599f9616758ba09b9b830929397947f3ab454c202c7e670e5745325ee46c16a0f4ede9e9616dd4c93cf688a942ecc5b0bc126eba06af99984a2766a98276f47bc6fad118147f07ae255b0cd5fd1fceae75c14ff6d70c919ed66d3cc6bdf7982bb409d8c17b640", 0x69, 0x7fff}, {&(0x7f00000006c0)="587cde5f8bf762c19bc41564e38a830e40755c3528db74bf2e36", 0x1a, 0x2}], 0x10, &(0x7f0000000780)={[{@commit={'commit', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}, {@grpid}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@usrquota}], [{@appraise}, {@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r5}}, {@dont_measure}]}) umount2(&(0x7f0000000880)='./file0\x00', 0xa) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x4e24, 0x2, @local, 0x2eec}}, 0x0, 0x0, 0xa, 0x0, "7ee39b8dbf12281773195b467e7cf3e2b24cc160198335e4edfd2da7032e1d921aad7954683b69eaaa80feb65293e376da683cdfaba32e8694aa62ebf2486358ae2ff5abbb7753245ec58453ab533398"}, 0xd8) lremovexattr(&(0x7f00000009c0)='./file1/file0\x00', &(0x7f0000000a00)=@known='trusted.overlay.redirect\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000a40)='./file1/file1\x00', r0, &(0x7f0000000a80)='./file1/file0\x00', 0x17) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file2\x00'}) lgetxattr(&(0x7f0000000b00)='./file3\x00', &(0x7f0000000b40)=@random={'system.', '}[:&\x00'}, &(0x7f0000000b80)=""/20, 0x14) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1/file1\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r7, r8, 0x0) openat(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x208040, 0x10) [ 145.005593] audit: type=1400 audit(1664509986.592:7): avc: denied { open } for pid=3994 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 145.007173] audit: type=1400 audit(1664509986.592:8): avc: denied { kernel } for pid=3994 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 145.014308] loop5: detected capacity change from 0 to 256 [ 145.016472] ------------[ cut here ]------------ [ 145.016511] [ 145.016517] ====================================================== [ 145.016524] WARNING: possible circular locking dependency detected [ 145.016531] 6.0.0-rc7-next-20220929 #1 Not tainted [ 145.016543] ------------------------------------------------------ [ 145.016549] syz-executor.0/4000 is trying to acquire lock: [ 145.016561] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 145.016630] [ 145.016630] but task is already holding lock: [ 145.016635] ffff88800d75cc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 145.016691] [ 145.016691] which lock already depends on the new lock. [ 145.016691] [ 145.016696] [ 145.016696] the existing dependency chain (in reverse order) is: [ 145.016703] [ 145.016703] -> #3 (&ctx->lock){....}-{2:2}: [ 145.016730] _raw_spin_lock+0x2a/0x40 [ 145.016751] __perf_event_task_sched_out+0x53b/0x18d0 [ 145.016773] __schedule+0xedd/0x2470 [ 145.016800] schedule+0xda/0x1b0 [ 145.016827] futex_wait_queue+0xf5/0x1e0 [ 145.016849] futex_wait+0x28e/0x690 [ 145.016869] do_futex+0x2ff/0x380 [ 145.016887] __x64_sys_futex+0x1c6/0x4d0 [ 145.016908] do_syscall_64+0x3b/0x90 [ 145.016941] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.016966] [ 145.016966] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 145.016993] _raw_spin_lock_nested+0x30/0x40 [ 145.017014] raw_spin_rq_lock_nested+0x1e/0x30 [ 145.017038] task_fork_fair+0x63/0x4d0 [ 145.017070] sched_cgroup_fork+0x3d0/0x540 [ 145.017098] copy_process+0x4183/0x6e20 [ 145.017118] kernel_clone+0xe7/0x890 [ 145.017137] user_mode_thread+0xad/0xf0 [ 145.017157] rest_init+0x24/0x250 [ 145.017180] arch_call_rest_init+0xf/0x14 [ 145.017211] start_kernel+0x4c6/0x4eb [ 145.017239] secondary_startup_64_no_verify+0xe0/0xeb [ 145.017266] [ 145.017266] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 145.017293] _raw_spin_lock_irqsave+0x39/0x60 [ 145.017314] try_to_wake_up+0xab/0x1930 [ 145.017340] up+0x75/0xb0 [ 145.017368] __up_console_sem+0x6e/0x80 [ 145.017398] console_unlock+0x46a/0x590 [ 145.017429] vprintk_emit+0x1bd/0x560 [ 145.017461] vprintk+0x84/0xa0 [ 145.017493] _printk+0xba/0xf1 [ 145.017514] kauditd_hold_skb.cold+0x3f/0x4e [ 145.017546] kauditd_send_queue+0x233/0x290 [ 145.017575] kauditd_thread+0x5f9/0x9c0 [ 145.017602] kthread+0x2ed/0x3a0 [ 145.017630] ret_from_fork+0x22/0x30 [ 145.017682] [ 145.017682] -> #0 ((console_sem).lock){....}-{2:2}: [ 145.017709] __lock_acquire+0x2a02/0x5e70 [ 145.017741] lock_acquire+0x1a2/0x530 [ 145.017772] _raw_spin_lock_irqsave+0x39/0x60 [ 145.017793] down_trylock+0xe/0x70 [ 145.017822] __down_trylock_console_sem+0x3b/0xd0 [ 145.017854] vprintk_emit+0x16b/0x560 [ 145.017886] vprintk+0x84/0xa0 [ 145.017918] _printk+0xba/0xf1 [ 145.017938] report_bug.cold+0x72/0xab [ 145.017969] handle_bug+0x3c/0x70 [ 145.018002] exc_invalid_op+0x14/0x50 [ 145.018035] asm_exc_invalid_op+0x16/0x20 [ 145.018058] group_sched_out.part.0+0x2c7/0x460 [ 145.018093] ctx_sched_out+0x8f1/0xc10 [ 145.018126] __perf_event_task_sched_out+0x6d0/0x18d0 [ 145.018148] __schedule+0xedd/0x2470 [ 145.018175] schedule+0xda/0x1b0 [ 145.018201] futex_wait_queue+0xf5/0x1e0 [ 145.018222] futex_wait+0x28e/0x690 [ 145.018242] do_futex+0x2ff/0x380 [ 145.018261] __x64_sys_futex+0x1c6/0x4d0 [ 145.018281] do_syscall_64+0x3b/0x90 [ 145.018314] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.018341] [ 145.018341] other info that might help us debug this: [ 145.018341] [ 145.018346] Chain exists of: [ 145.018346] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 145.018346] [ 145.018376] Possible unsafe locking scenario: [ 145.018376] [ 145.018380] CPU0 CPU1 [ 145.018384] ---- ---- [ 145.018389] lock(&ctx->lock); [ 145.018399] lock(&rq->__lock); [ 145.018412] lock(&ctx->lock); [ 145.018424] lock((console_sem).lock); [ 145.018436] [ 145.018436] *** DEADLOCK *** [ 145.018436] [ 145.018439] 2 locks held by syz-executor.0/4000: [ 145.018453] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 145.018511] #1: ffff88800d75cc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 145.018563] [ 145.018563] stack backtrace: [ 145.018568] CPU: 0 PID: 4000 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220929 #1 [ 145.018593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 145.018608] Call Trace: [ 145.018614] [ 145.018622] dump_stack_lvl+0x8b/0xb3 [ 145.018658] check_noncircular+0x263/0x2e0 [ 145.018690] ? format_decode+0x26c/0xb50 [ 145.018721] ? print_circular_bug+0x450/0x450 [ 145.018755] ? enable_ptr_key_workfn+0x20/0x20 [ 145.018788] ? format_decode+0x26c/0xb50 [ 145.018823] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 145.018858] __lock_acquire+0x2a02/0x5e70 [ 145.018901] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 145.018946] lock_acquire+0x1a2/0x530 [ 145.018979] ? down_trylock+0xe/0x70 [ 145.019013] ? lock_release+0x750/0x750 [ 145.019054] ? vprintk+0x84/0xa0 [ 145.019089] _raw_spin_lock_irqsave+0x39/0x60 [ 145.019112] ? down_trylock+0xe/0x70 [ 145.019143] down_trylock+0xe/0x70 [ 145.019175] ? vprintk+0x84/0xa0 [ 145.019208] __down_trylock_console_sem+0x3b/0xd0 [ 145.019243] vprintk_emit+0x16b/0x560 [ 145.019280] vprintk+0x84/0xa0 [ 145.019315] _printk+0xba/0xf1 [ 145.019337] ? record_print_text.cold+0x16/0x16 [ 145.019367] ? perf_event_update_userpage+0x4e8/0x7c0 [ 145.019406] ? report_bug.cold+0x66/0xab [ 145.019442] ? group_sched_out.part.0+0x2c7/0x460 [ 145.019479] report_bug.cold+0x72/0xab [ 145.019516] handle_bug+0x3c/0x70 [ 145.019550] exc_invalid_op+0x14/0x50 [ 145.019586] asm_exc_invalid_op+0x16/0x20 [ 145.019612] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 145.019651] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 145.019673] RSP: 0018:ffff8880403d78f8 EFLAGS: 00010006 [ 145.019691] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 145.019706] RDX: ffff888015f40000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 145.019721] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 145.019736] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d75cc00 [ 145.019750] R13: ffff88806ce3f200 R14: ffffffff85238040 R15: 0000000000000002 [ 145.019772] ? group_sched_out.part.0+0x2c7/0x460 [ 145.019812] ? group_sched_out.part.0+0x2c7/0x460 [ 145.019852] ctx_sched_out+0x8f1/0xc10 [ 145.019891] __perf_event_task_sched_out+0x6d0/0x18d0 [ 145.019919] ? lock_is_held_type+0xd7/0x130 [ 145.019946] ? __perf_cgroup_move+0x160/0x160 [ 145.019968] ? set_next_entity+0x304/0x550 [ 145.020007] ? lock_is_held_type+0xd7/0x130 [ 145.020035] __schedule+0xedd/0x2470 [ 145.020069] ? io_schedule_timeout+0x150/0x150 [ 145.020099] ? futex_wait_setup+0x166/0x230 [ 145.020129] schedule+0xda/0x1b0 [ 145.020158] futex_wait_queue+0xf5/0x1e0 [ 145.020183] futex_wait+0x28e/0x690 [ 145.020208] ? futex_wait_setup+0x230/0x230 [ 145.020235] ? wake_up_q+0x8b/0xf0 [ 145.020261] ? do_raw_spin_unlock+0x4f/0x220 [ 145.020299] ? futex_wake+0x158/0x490 [ 145.020332] ? fd_install+0x1f9/0x640 [ 145.020361] do_futex+0x2ff/0x380 [ 145.020384] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 145.020416] __x64_sys_futex+0x1c6/0x4d0 [ 145.020442] ? __x64_sys_futex_time32+0x480/0x480 [ 145.020468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 145.020496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 145.020527] do_syscall_64+0x3b/0x90 [ 145.020562] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.020588] RIP: 0033:0x7ff68958db19 [ 145.020604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 145.020626] RSP: 002b:00007ff686b03218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 145.020647] RAX: ffffffffffffffda RBX: 00007ff6896a0f68 RCX: 00007ff68958db19 [ 145.020662] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff6896a0f68 [ 145.020677] RBP: 00007ff6896a0f60 R08: 0000000000000000 R09: 0000000000000000 [ 145.020691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6896a0f6c [ 145.020705] R13: 00007fffb0ddbfcf R14: 00007ff686b03300 R15: 0000000000022000 [ 145.020731] [ 145.137685] WARNING: CPU: 0 PID: 4000 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 145.139030] Modules linked in: [ 145.139517] CPU: 0 PID: 4000 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220929 #1 [ 145.140690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 145.142313] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 145.143101] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 145.145668] RSP: 0018:ffff8880403d78f8 EFLAGS: 00010006 [ 145.146436] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 145.147456] RDX: ffff888015f40000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 145.148474] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 145.149488] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d75cc00 [ 145.150494] R13: ffff88806ce3f200 R14: ffffffff85238040 R15: 0000000000000002 [ 145.151479] FS: 00007ff686b03700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 145.152582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.153402] CR2: 00007fc346d40160 CR3: 000000001d9ee000 CR4: 0000000000350ef0 [ 145.154412] Call Trace: [ 145.154778] [ 145.155108] ctx_sched_out+0x8f1/0xc10 [ 145.155688] __perf_event_task_sched_out+0x6d0/0x18d0 [ 145.156414] ? lock_is_held_type+0xd7/0x130 [ 145.157019] ? __perf_cgroup_move+0x160/0x160 [ 145.157668] ? set_next_entity+0x304/0x550 [ 145.158292] ? lock_is_held_type+0xd7/0x130 [ 145.158899] __schedule+0xedd/0x2470 [ 145.159443] ? io_schedule_timeout+0x150/0x150 [ 145.160108] ? futex_wait_setup+0x166/0x230 [ 145.160727] schedule+0xda/0x1b0 [ 145.161215] futex_wait_queue+0xf5/0x1e0 [ 145.161816] futex_wait+0x28e/0x690 [ 145.162342] ? futex_wait_setup+0x230/0x230 [ 145.162960] ? wake_up_q+0x8b/0xf0 [ 145.163501] ? do_raw_spin_unlock+0x4f/0x220 [ 145.164183] ? futex_wake+0x158/0x490 [ 145.164766] ? fd_install+0x1f9/0x640 [ 145.165339] do_futex+0x2ff/0x380 [ 145.165872] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 145.166721] __x64_sys_futex+0x1c6/0x4d0 [ 145.167325] ? __x64_sys_futex_time32+0x480/0x480 [ 145.168042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 145.168810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 145.169581] do_syscall_64+0x3b/0x90 [ 145.170164] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.170931] RIP: 0033:0x7ff68958db19 [ 145.171487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 145.174097] RSP: 002b:00007ff686b03218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 145.175199] RAX: ffffffffffffffda RBX: 00007ff6896a0f68 RCX: 00007ff68958db19 [ 145.176247] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff6896a0f68 [ 145.177228] RBP: 00007ff6896a0f60 R08: 0000000000000000 R09: 0000000000000000 [ 145.178279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6896a0f6c [ 145.179324] R13: 00007fffb0ddbfcf R14: 00007ff686b03300 R15: 0000000000022000 [ 145.180372] [ 145.180722] irq event stamp: 202 [ 145.181221] hardirqs last enabled at (201): [] syscall_enter_from_user_mode+0x1d/0x50 [ 145.182629] hardirqs last disabled at (202): [] __schedule+0x1225/0x2470 [ 145.183843] softirqs last enabled at (32): [] __irq_exit_rcu+0x11b/0x180 [ 145.185084] softirqs last disabled at (23): [] __irq_exit_rcu+0x11b/0x180 [ 145.186315] ---[ end trace 0000000000000000 ]--- [ 145.187919] audit: type=1107 audit(1664509986.775:9): pid=3992 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='h %zdu_~/Ų&hnHsUiz>"YYScCtjs>fR @0q3]kxGheBx Mԋ֜k#>`' [ 145.190679] audit: type=1400 audit(1664509986.777:10): avc: denied { setattr } for pid=3992 comm="syz-executor.2" name="sockcreate" dev="proc" ino=14475 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 [ 145.198489] loop5: detected capacity change from 0 to 127 [ 145.200328] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 145.216002] loop7: detected capacity change from 0 to 256 [ 145.219231] loop1: detected capacity change from 0 to 256 [ 145.221366] loop7: detected capacity change from 0 to 127 [ 145.223546] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 145.233209] audit: type=1400 audit(1664509986.820:11): avc: denied { read } for pid=3993 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 145.239664] hrtimer: interrupt took 18275 ns [ 145.244096] audit: type=1107 audit(1664509986.827:12): pid=3992 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='h %zdu_~/Ų&hnHsUiz>"YYScCtjs>fR @0q3]kxGheBx Mԋ֜k#>`' [ 145.257620] loop1: detected capacity change from 0 to 127 [ 145.260911] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 145.389723] loop4: detected capacity change from 0 to 27 [ 145.391535] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 145.467535] loop4: detected capacity change from 0 to 27 [ 145.468920] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 03:53:16 executing program 3: close(0xffffffffffffffff) clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x3b, &(0x7f0000000000)={0x1e, 0xa98, 0xa}, 0x0) 03:53:16 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4001813, r2, 0x0) 03:53:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2, 0x4}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r2, r3, 0x0, 0xffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/221, 0xdd}, {&(0x7f0000000740)=""/82, 0x52}], 0x2, 0x8, 0x20000000) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r5, 0x5390, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0xfffffffffffffffc) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) utimensat(r6, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) 03:53:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x81, 0xa9, 0x74, 0x2, 0x0, 0x0, 0x80000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x200, 0x8, 0xd8, 0xe, 0x20, 0x1, 0x3, 0x0, 0x4, 0x0, 0xffffffffffffff80}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x45d, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000380)={@empty, 0x0, r4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={r5, 0x101}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000380)={{r5, 0x299d, 0x6, 0x7f, 0x9, 0x1ff, 0x9, 0x1, 0x5, 0xfffffe01, 0x2, 0x20, 0x3, 0x4, 0x9}}) socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180000003280baf9f83d19c3121020f4cd8d22e86d022634546cf73119f07bbebe3bad6f83294587b457f664f11b1565c65d1a8344f5b44bdb2a3b1b17863dca5be00d57cff77d546f6c8e73c391809ab8891fadd449ce0ca6d50e0a316952502f76e9b13f732e2782ff521b44787baf126de9a174a7587d302a6b04392e3d5e56fe", @ANYBLOB="fbace483ee23d88d7fe02051e04b83c3704d4d5a58a64a156385666f69ae42736499ce5dc76b4b52c8184d1e2369bc3e30698da85c1531d9398e10643267f12d3338cb13", @ANYBLOB="00000049000200000000a45218f9c3c8cbdc857beef5fe5b53cf6702934f"]) 03:53:16 executing program 7: fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x400100) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x2, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="04fcb442cfe9ad26faba567147d1d780677f3af52876e0e0df499ee2a1265f054a4a4109ce85eacaf50532691e0449c849cb030a252b554c91f02f197999b83327989e3cae1237a421", 0x49, 0x8}, {&(0x7f0000000200)="8f09113cc6759b226387102e5a9906fd95c146010763883eed2c2e11b377fe908882e407b80479e4c5e21f2f3badf2662dfc15c2303a337fee5d16b91e8fb6aa35ab847b", 0x44}, {&(0x7f0000000280)="f2e89eb049a54653d6224acfd2748acd338e10279b1b071fb608b2b704bf56", 0x1f, 0x10000}, {&(0x7f00000002c0)="ea29f91b2fcd82efb6a938a86aa43b47acada65954652179ffda5ba260203bb596e20affb14a7dd6d37ad383774a874fcad40bb98a1293070c67ef1772d16362b9b5c69515329c4c300a33a12aa4aa1ce27b1c9a69edb26997a9635e11cc8fb5e97ebf29e84ae7c8293ef6a90885b80423acfdc70e5321b709e792f6e04e34b8ba934e7b0b03fc39cafb71bc864903b9add1b089083aea691d24977b4b060831b7d9f5368579321dd91441b559f316da4a6edd5819ef3b2b94eb5cd76a9903e1155b", 0xc2, 0xffff}], 0x42080, &(0x7f0000000440)={[{'%'}, {'(+\".$'}, {'@['}, {'/dev/vcsu#\x00'}, {')\'^{!&'}], [{@uid_gt}, {@fsname={'fsname', 0x3d, '}-.'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) readlinkat(r3, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/157, 0x9d) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000740)=0x0) r5 = geteuid() r6 = syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x2, &(0x7f0000000700)=[{&(0x7f0000000640)="82fcf599f9616758ba09b9b830929397947f3ab454c202c7e670e5745325ee46c16a0f4ede9e9616dd4c93cf688a942ecc5b0bc126eba06af99984a2766a98276f47bc6fad118147f07ae255b0cd5fd1fceae75c14ff6d70c919ed66d3cc6bdf7982bb409d8c17b640", 0x69, 0x7fff}, {&(0x7f00000006c0)="587cde5f8bf762c19bc41564e38a830e40755c3528db74bf2e36", 0x1a, 0x2}], 0x10, &(0x7f0000000780)={[{@commit={'commit', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}, {@grpid}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@usrquota}], [{@appraise}, {@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r5}}, {@dont_measure}]}) umount2(&(0x7f0000000880)='./file0\x00', 0xa) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x4e24, 0x2, @local, 0x2eec}}, 0x0, 0x0, 0xa, 0x0, "7ee39b8dbf12281773195b467e7cf3e2b24cc160198335e4edfd2da7032e1d921aad7954683b69eaaa80feb65293e376da683cdfaba32e8694aa62ebf2486358ae2ff5abbb7753245ec58453ab533398"}, 0xd8) lremovexattr(&(0x7f00000009c0)='./file1/file0\x00', &(0x7f0000000a00)=@known='trusted.overlay.redirect\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000a40)='./file1/file1\x00', r0, &(0x7f0000000a80)='./file1/file0\x00', 0x17) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file2\x00'}) lgetxattr(&(0x7f0000000b00)='./file3\x00', &(0x7f0000000b40)=@random={'system.', '}[:&\x00'}, &(0x7f0000000b80)=""/20, 0x14) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1/file1\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r7, r8, 0x0) openat(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x208040, 0x10) 03:53:16 executing program 5: fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x400100) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x2, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="04fcb442cfe9ad26faba567147d1d780677f3af52876e0e0df499ee2a1265f054a4a4109ce85eacaf50532691e0449c849cb030a252b554c91f02f197999b83327989e3cae1237a421", 0x49, 0x8}, {&(0x7f0000000200)="8f09113cc6759b226387102e5a9906fd95c146010763883eed2c2e11b377fe908882e407b80479e4c5e21f2f3badf2662dfc15c2303a337fee5d16b91e8fb6aa35ab847b", 0x44}, {&(0x7f0000000280)="f2e89eb049a54653d6224acfd2748acd338e10279b1b071fb608b2b704bf56", 0x1f, 0x10000}, {&(0x7f00000002c0)="ea29f91b2fcd82efb6a938a86aa43b47acada65954652179ffda5ba260203bb596e20affb14a7dd6d37ad383774a874fcad40bb98a1293070c67ef1772d16362b9b5c69515329c4c300a33a12aa4aa1ce27b1c9a69edb26997a9635e11cc8fb5e97ebf29e84ae7c8293ef6a90885b80423acfdc70e5321b709e792f6e04e34b8ba934e7b0b03fc39cafb71bc864903b9add1b089083aea691d24977b4b060831b7d9f5368579321dd91441b559f316da4a6edd5819ef3b2b94eb5cd76a9903e1155b", 0xc2, 0xffff}], 0x42080, &(0x7f0000000440)={[{'%'}, {'(+\".$'}, {'@['}, {'/dev/vcsu#\x00'}, {')\'^{!&'}], [{@uid_gt}, {@fsname={'fsname', 0x3d, '}-.'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) readlinkat(r3, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/157, 0x9d) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000740)=0x0) r5 = geteuid() r6 = syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x2, &(0x7f0000000700)=[{&(0x7f0000000640)="82fcf599f9616758ba09b9b830929397947f3ab454c202c7e670e5745325ee46c16a0f4ede9e9616dd4c93cf688a942ecc5b0bc126eba06af99984a2766a98276f47bc6fad118147f07ae255b0cd5fd1fceae75c14ff6d70c919ed66d3cc6bdf7982bb409d8c17b640", 0x69, 0x7fff}, {&(0x7f00000006c0)="587cde5f8bf762c19bc41564e38a830e40755c3528db74bf2e36", 0x1a, 0x2}], 0x10, &(0x7f0000000780)={[{@commit={'commit', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}, {@grpid}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@usrquota}], [{@appraise}, {@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r5}}, {@dont_measure}]}) umount2(&(0x7f0000000880)='./file0\x00', 0xa) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x4e24, 0x2, @local, 0x2eec}}, 0x0, 0x0, 0xa, 0x0, "7ee39b8dbf12281773195b467e7cf3e2b24cc160198335e4edfd2da7032e1d921aad7954683b69eaaa80feb65293e376da683cdfaba32e8694aa62ebf2486358ae2ff5abbb7753245ec58453ab533398"}, 0xd8) lremovexattr(&(0x7f00000009c0)='./file1/file0\x00', &(0x7f0000000a00)=@known='trusted.overlay.redirect\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000a40)='./file1/file1\x00', r0, &(0x7f0000000a80)='./file1/file0\x00', 0x17) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file2\x00'}) lgetxattr(&(0x7f0000000b00)='./file3\x00', &(0x7f0000000b40)=@random={'system.', '}[:&\x00'}, &(0x7f0000000b80)=""/20, 0x14) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1/file1\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r7, r8, 0x0) openat(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x208040, 0x10) 03:53:16 executing program 1: fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x400100) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x2, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="04fcb442cfe9ad26faba567147d1d780677f3af52876e0e0df499ee2a1265f054a4a4109ce85eacaf50532691e0449c849cb030a252b554c91f02f197999b83327989e3cae1237a421", 0x49, 0x8}, {&(0x7f0000000200)="8f09113cc6759b226387102e5a9906fd95c146010763883eed2c2e11b377fe908882e407b80479e4c5e21f2f3badf2662dfc15c2303a337fee5d16b91e8fb6aa35ab847b", 0x44}, {&(0x7f0000000280)="f2e89eb049a54653d6224acfd2748acd338e10279b1b071fb608b2b704bf56", 0x1f, 0x10000}, {&(0x7f00000002c0)="ea29f91b2fcd82efb6a938a86aa43b47acada65954652179ffda5ba260203bb596e20affb14a7dd6d37ad383774a874fcad40bb98a1293070c67ef1772d16362b9b5c69515329c4c300a33a12aa4aa1ce27b1c9a69edb26997a9635e11cc8fb5e97ebf29e84ae7c8293ef6a90885b80423acfdc70e5321b709e792f6e04e34b8ba934e7b0b03fc39cafb71bc864903b9add1b089083aea691d24977b4b060831b7d9f5368579321dd91441b559f316da4a6edd5819ef3b2b94eb5cd76a9903e1155b", 0xc2, 0xffff}], 0x42080, &(0x7f0000000440)={[{'%'}, {'(+\".$'}, {'@['}, {'/dev/vcsu#\x00'}, {')\'^{!&'}], [{@uid_gt}, {@fsname={'fsname', 0x3d, '}-.'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) readlinkat(r3, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/157, 0x9d) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000740)=0x0) r5 = geteuid() r6 = syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x2, &(0x7f0000000700)=[{&(0x7f0000000640)="82fcf599f9616758ba09b9b830929397947f3ab454c202c7e670e5745325ee46c16a0f4ede9e9616dd4c93cf688a942ecc5b0bc126eba06af99984a2766a98276f47bc6fad118147f07ae255b0cd5fd1fceae75c14ff6d70c919ed66d3cc6bdf7982bb409d8c17b640", 0x69, 0x7fff}, {&(0x7f00000006c0)="587cde5f8bf762c19bc41564e38a830e40755c3528db74bf2e36", 0x1a, 0x2}], 0x10, &(0x7f0000000780)={[{@commit={'commit', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}, {@grpid}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@usrquota}], [{@appraise}, {@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r5}}, {@dont_measure}]}) umount2(&(0x7f0000000880)='./file0\x00', 0xa) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x4e24, 0x2, @local, 0x2eec}}, 0x0, 0x0, 0xa, 0x0, "7ee39b8dbf12281773195b467e7cf3e2b24cc160198335e4edfd2da7032e1d921aad7954683b69eaaa80feb65293e376da683cdfaba32e8694aa62ebf2486358ae2ff5abbb7753245ec58453ab533398"}, 0xd8) lremovexattr(&(0x7f00000009c0)='./file1/file0\x00', &(0x7f0000000a00)=@known='trusted.overlay.redirect\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000a40)='./file1/file1\x00', r0, &(0x7f0000000a80)='./file1/file0\x00', 0x17) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file2\x00'}) lgetxattr(&(0x7f0000000b00)='./file3\x00', &(0x7f0000000b40)=@random={'system.', '}[:&\x00'}, &(0x7f0000000b80)=""/20, 0x14) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1/file1\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r7, r8, 0x0) openat(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x208040, 0x10) 03:53:16 executing program 2: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) mlock(&(0x7f0000fed000/0x13000)=nil, 0x13000) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffa000/0x3000)=nil) [ 154.963162] loop1: detected capacity change from 0 to 256 03:53:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x81, 0xa9, 0x74, 0x2, 0x0, 0x0, 0x80000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x200, 0x8, 0xd8, 0xe, 0x20, 0x1, 0x3, 0x0, 0x4, 0x0, 0xffffffffffffff80}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x45d, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000380)={@empty, 0x0, r4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={r5, 0x101}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000380)={{r5, 0x299d, 0x6, 0x7f, 0x9, 0x1ff, 0x9, 0x1, 0x5, 0xfffffe01, 0x2, 0x20, 0x3, 0x4, 0x9}}) socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180000003280baf9f83d19c3121020f4cd8d22e86d022634546cf73119f07bbebe3bad6f83294587b457f664f11b1565c65d1a8344f5b44bdb2a3b1b17863dca5be00d57cff77d546f6c8e73c391809ab8891fadd449ce0ca6d50e0a316952502f76e9b13f732e2782ff521b44787baf126de9a174a7587d302a6b04392e3d5e56fe", @ANYBLOB="fbace483ee23d88d7fe02051e04b83c3704d4d5a58a64a156385666f69ae42736499ce5dc76b4b52c8184d1e2369bc3e30698da85c1531d9398e10643267f12d3338cb13", @ANYBLOB="00000049000200000000a45218f9c3c8cbdc857beef5fe5b53cf6702934f"]) 03:53:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x81, 0xa9, 0x74, 0x2, 0x0, 0x0, 0x80000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x200, 0x8, 0xd8, 0xe, 0x20, 0x1, 0x3, 0x0, 0x4, 0x0, 0xffffffffffffff80}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x45d, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000380)={@empty, 0x0, r4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={r5, 0x101}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000380)={{r5, 0x299d, 0x6, 0x7f, 0x9, 0x1ff, 0x9, 0x1, 0x5, 0xfffffe01, 0x2, 0x20, 0x3, 0x4, 0x9}}) socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180000003280baf9f83d19c3121020f4cd8d22e86d022634546cf73119f07bbebe3bad6f83294587b457f664f11b1565c65d1a8344f5b44bdb2a3b1b17863dca5be00d57cff77d546f6c8e73c391809ab8891fadd449ce0ca6d50e0a316952502f76e9b13f732e2782ff521b44787baf126de9a174a7587d302a6b04392e3d5e56fe", @ANYBLOB="fbace483ee23d88d7fe02051e04b83c3704d4d5a58a64a156385666f69ae42736499ce5dc76b4b52c8184d1e2369bc3e30698da85c1531d9398e10643267f12d3338cb13", @ANYBLOB="00000049000200000000a45218f9c3c8cbdc857beef5fe5b53cf6702934f"]) [ 154.995450] loop1: detected capacity change from 0 to 127 [ 155.000298] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 155.005905] loop5: detected capacity change from 0 to 256 [ 155.017128] loop7: detected capacity change from 0 to 256 [ 155.025421] loop5: detected capacity change from 0 to 127 VM DIAGNOSIS: 03:53:06 Registers: info registers vcpu 0 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff8880403d7340 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=000000000000000d R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff686b03700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc346d40160 CR3=000000001d9ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff6896747c0 00007ff6896747c8 YMM02=0000000000000000 0000000000000000 00007ff6896747e0 00007ff6896747c0 YMM03=0000000000000000 0000000000000000 00007ff6896747c8 00007ff6896747c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3f080 RCX=0000000000000000 RDX=ffff88804030d040 RSI=ffffffff813bbb47 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff888020607958 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9c7e11 R14=ffff88806ce3f088 R15=0000000000000001 RIP=ffffffff813bbb49 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555555f400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff68969d0a0 CR3=000000001d9ee000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff6896747c0 00007ff6896747c8 YMM02=0000000000000000 0000000000000000 00007ff6896747e0 00007ff6896747c0 YMM03=0000000000000000 0000000000000000 00007ff6896747c8 00007ff6896747c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000