Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:10573' (ECDSA) to the list of known hosts. 2022/10/01 16:50:05 fuzzer started 2022/10/01 16:50:06 dialing manager at localhost:35095 syzkaller login: [ 35.957575] cgroup: Unknown subsys name 'net' [ 36.032971] cgroup: Unknown subsys name 'rlimit' 2022/10/01 16:50:20 syscalls: 2215 2022/10/01 16:50:20 code coverage: enabled 2022/10/01 16:50:20 comparison tracing: enabled 2022/10/01 16:50:20 extra coverage: enabled 2022/10/01 16:50:20 setuid sandbox: enabled 2022/10/01 16:50:20 namespace sandbox: enabled 2022/10/01 16:50:20 Android sandbox: enabled 2022/10/01 16:50:20 fault injection: enabled 2022/10/01 16:50:20 leak checking: enabled 2022/10/01 16:50:20 net packet injection: enabled 2022/10/01 16:50:20 net device setup: enabled 2022/10/01 16:50:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 16:50:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 16:50:20 USB emulation: enabled 2022/10/01 16:50:20 hci packet injection: enabled 2022/10/01 16:50:20 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 16:50:20 802.15.4 emulation: enabled 2022/10/01 16:50:20 fetching corpus: 50, signal 17899/19753 (executing program) 2022/10/01 16:50:20 fetching corpus: 100, signal 31037/34518 (executing program) 2022/10/01 16:50:20 fetching corpus: 150, signal 39691/44690 (executing program) 2022/10/01 16:50:20 fetching corpus: 200, signal 45363/51849 (executing program) 2022/10/01 16:50:20 fetching corpus: 250, signal 53408/61152 (executing program) 2022/10/01 16:50:20 fetching corpus: 300, signal 57925/66982 (executing program) 2022/10/01 16:50:20 fetching corpus: 350, signal 60938/71312 (executing program) 2022/10/01 16:50:20 fetching corpus: 400, signal 66157/77662 (executing program) 2022/10/01 16:50:21 fetching corpus: 450, signal 69267/81964 (executing program) 2022/10/01 16:50:21 fetching corpus: 500, signal 72723/86528 (executing program) 2022/10/01 16:50:21 fetching corpus: 550, signal 77737/92463 (executing program) 2022/10/01 16:50:21 fetching corpus: 600, signal 81944/97584 (executing program) 2022/10/01 16:50:21 fetching corpus: 650, signal 85952/102439 (executing program) 2022/10/01 16:50:21 fetching corpus: 700, signal 91184/108389 (executing program) 2022/10/01 16:50:21 fetching corpus: 750, signal 95265/113226 (executing program) 2022/10/01 16:50:21 fetching corpus: 800, signal 96842/115807 (executing program) 2022/10/01 16:50:22 fetching corpus: 850, signal 98629/118514 (executing program) 2022/10/01 16:50:22 fetching corpus: 900, signal 100400/121237 (executing program) 2022/10/01 16:50:22 fetching corpus: 950, signal 103710/125206 (executing program) 2022/10/01 16:50:22 fetching corpus: 1000, signal 105964/128212 (executing program) 2022/10/01 16:50:22 fetching corpus: 1050, signal 107423/130542 (executing program) 2022/10/01 16:50:22 fetching corpus: 1100, signal 109334/133183 (executing program) 2022/10/01 16:50:22 fetching corpus: 1150, signal 111659/136202 (executing program) 2022/10/01 16:50:22 fetching corpus: 1200, signal 112889/138261 (executing program) 2022/10/01 16:50:22 fetching corpus: 1250, signal 114407/140572 (executing program) 2022/10/01 16:50:23 fetching corpus: 1300, signal 115842/142710 (executing program) 2022/10/01 16:50:23 fetching corpus: 1350, signal 119047/146245 (executing program) 2022/10/01 16:50:23 fetching corpus: 1400, signal 120104/148045 (executing program) 2022/10/01 16:50:23 fetching corpus: 1450, signal 122545/150876 (executing program) 2022/10/01 16:50:23 fetching corpus: 1500, signal 124947/153711 (executing program) 2022/10/01 16:50:23 fetching corpus: 1550, signal 126533/155875 (executing program) 2022/10/01 16:50:23 fetching corpus: 1600, signal 127761/157707 (executing program) 2022/10/01 16:50:23 fetching corpus: 1650, signal 128414/159118 (executing program) 2022/10/01 16:50:23 fetching corpus: 1700, signal 129646/160952 (executing program) 2022/10/01 16:50:23 fetching corpus: 1750, signal 131178/162986 (executing program) 2022/10/01 16:50:24 fetching corpus: 1800, signal 132753/165016 (executing program) 2022/10/01 16:50:24 fetching corpus: 1850, signal 136720/168621 (executing program) 2022/10/01 16:50:24 fetching corpus: 1900, signal 137691/170144 (executing program) 2022/10/01 16:50:24 fetching corpus: 1950, signal 138922/171823 (executing program) 2022/10/01 16:50:24 fetching corpus: 2000, signal 140789/173878 (executing program) 2022/10/01 16:50:24 fetching corpus: 2050, signal 141744/175342 (executing program) 2022/10/01 16:50:24 fetching corpus: 2100, signal 142991/176983 (executing program) 2022/10/01 16:50:25 fetching corpus: 2150, signal 143815/178355 (executing program) 2022/10/01 16:50:25 fetching corpus: 2200, signal 144615/179712 (executing program) 2022/10/01 16:50:25 fetching corpus: 2250, signal 145596/181228 (executing program) 2022/10/01 16:50:25 fetching corpus: 2300, signal 146622/182727 (executing program) 2022/10/01 16:50:25 fetching corpus: 2350, signal 147667/184230 (executing program) 2022/10/01 16:50:25 fetching corpus: 2400, signal 148533/185501 (executing program) 2022/10/01 16:50:25 fetching corpus: 2450, signal 149870/187022 (executing program) 2022/10/01 16:50:25 fetching corpus: 2500, signal 150881/188387 (executing program) 2022/10/01 16:50:26 fetching corpus: 2550, signal 151942/189754 (executing program) 2022/10/01 16:50:26 fetching corpus: 2600, signal 153491/191375 (executing program) 2022/10/01 16:50:26 fetching corpus: 2650, signal 154569/192643 (executing program) 2022/10/01 16:50:26 fetching corpus: 2700, signal 155781/194057 (executing program) 2022/10/01 16:50:26 fetching corpus: 2750, signal 157135/195471 (executing program) 2022/10/01 16:50:26 fetching corpus: 2800, signal 158114/196652 (executing program) 2022/10/01 16:50:26 fetching corpus: 2850, signal 159459/198052 (executing program) 2022/10/01 16:50:26 fetching corpus: 2900, signal 160732/199401 (executing program) 2022/10/01 16:50:26 fetching corpus: 2950, signal 162045/200709 (executing program) 2022/10/01 16:50:27 fetching corpus: 3000, signal 163677/202198 (executing program) 2022/10/01 16:50:27 fetching corpus: 3050, signal 164531/203248 (executing program) 2022/10/01 16:50:27 fetching corpus: 3100, signal 165249/204270 (executing program) 2022/10/01 16:50:27 fetching corpus: 3150, signal 166186/205335 (executing program) 2022/10/01 16:50:27 fetching corpus: 3200, signal 167686/206619 (executing program) 2022/10/01 16:50:27 fetching corpus: 3250, signal 169061/207873 (executing program) 2022/10/01 16:50:27 fetching corpus: 3300, signal 169819/208824 (executing program) 2022/10/01 16:50:27 fetching corpus: 3350, signal 170620/209754 (executing program) 2022/10/01 16:50:28 fetching corpus: 3400, signal 171757/210861 (executing program) 2022/10/01 16:50:28 fetching corpus: 3450, signal 172772/211860 (executing program) 2022/10/01 16:50:28 fetching corpus: 3500, signal 173746/212822 (executing program) 2022/10/01 16:50:28 fetching corpus: 3550, signal 174959/213873 (executing program) 2022/10/01 16:50:28 fetching corpus: 3600, signal 175759/214732 (executing program) 2022/10/01 16:50:28 fetching corpus: 3650, signal 176256/215437 (executing program) 2022/10/01 16:50:28 fetching corpus: 3700, signal 177296/216369 (executing program) 2022/10/01 16:50:29 fetching corpus: 3750, signal 178020/217138 (executing program) 2022/10/01 16:50:29 fetching corpus: 3800, signal 178847/217958 (executing program) 2022/10/01 16:50:29 fetching corpus: 3850, signal 179373/218665 (executing program) 2022/10/01 16:50:29 fetching corpus: 3900, signal 180179/219468 (executing program) 2022/10/01 16:50:29 fetching corpus: 3950, signal 181077/220264 (executing program) 2022/10/01 16:50:29 fetching corpus: 4000, signal 181826/220981 (executing program) 2022/10/01 16:50:29 fetching corpus: 4050, signal 183010/221905 (executing program) 2022/10/01 16:50:29 fetching corpus: 4100, signal 184503/222872 (executing program) 2022/10/01 16:50:30 fetching corpus: 4150, signal 184973/223490 (executing program) 2022/10/01 16:50:30 fetching corpus: 4200, signal 185866/224197 (executing program) 2022/10/01 16:50:30 fetching corpus: 4250, signal 186397/224822 (executing program) 2022/10/01 16:50:30 fetching corpus: 4300, signal 186923/225425 (executing program) 2022/10/01 16:50:30 fetching corpus: 4350, signal 187446/225989 (executing program) 2022/10/01 16:50:30 fetching corpus: 4400, signal 188416/226807 (executing program) 2022/10/01 16:50:30 fetching corpus: 4450, signal 189151/227397 (executing program) 2022/10/01 16:50:30 fetching corpus: 4500, signal 190153/228033 (executing program) 2022/10/01 16:50:30 fetching corpus: 4550, signal 190634/228571 (executing program) 2022/10/01 16:50:30 fetching corpus: 4600, signal 191172/229125 (executing program) 2022/10/01 16:50:31 fetching corpus: 4650, signal 191801/229675 (executing program) 2022/10/01 16:50:31 fetching corpus: 4700, signal 192498/230299 (executing program) 2022/10/01 16:50:31 fetching corpus: 4750, signal 193007/230809 (executing program) 2022/10/01 16:50:31 fetching corpus: 4800, signal 193658/231338 (executing program) 2022/10/01 16:50:31 fetching corpus: 4850, signal 194263/231865 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/232364 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/232721 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/233114 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/233489 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/233895 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/234318 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/234672 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/235073 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/235486 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/235865 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/236245 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/236650 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/237020 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/237419 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/237798 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/238196 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/238569 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/238942 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/239321 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/239687 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/240049 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/240167 (executing program) 2022/10/01 16:50:31 fetching corpus: 4871, signal 194680/240167 (executing program) 2022/10/01 16:50:34 starting 8 fuzzer processes 16:50:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x2301, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001580)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000001680)=0xe8) r4 = openat$cgroup_type(r2, &(0x7f0000002dc0), 0x2, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000002f80)=0x0) clock_gettime(0x0, &(0x7f0000005dc0)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000005cc0)=[{{&(0x7f0000002fc0)=@abs, 0x6e, &(0x7f0000004240)=[{&(0x7f0000003040)=""/162, 0xa2}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/91, 0x5b}, {&(0x7f0000004180)=""/105, 0x69}, {&(0x7f0000004200)=""/19, 0x13}], 0x5, &(0x7f00000042c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004640)=[{&(0x7f00000043c0)=""/100, 0x64}, {&(0x7f0000004440)=""/238, 0xee}, {&(0x7f0000004540)=""/234, 0xea}], 0x3, &(0x7f0000004680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x108}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/164, 0xa4}, {&(0x7f0000004900)=""/204, 0xcc}], 0x2, &(0x7f0000004a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/67, 0x43}, {&(0x7f0000005b00)=""/227, 0xe3}, {&(0x7f0000005c00)=""/16, 0x10}], 0x4, &(0x7f0000005c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x4, 0x1, &(0x7f0000005e00)={r6, r7+60000000}) recvmmsg$unix(r2, &(0x7f0000007b40)=[{{&(0x7f0000005e40)=@abs, 0x6e, &(0x7f00000070c0)=[{&(0x7f0000005ec0)=""/134, 0x86}, {&(0x7f0000005f80)=""/4096, 0x1000}, {&(0x7f0000006f80)=""/187, 0xbb}, {&(0x7f0000007040)=""/111, 0x6f}], 0x4}}, {{&(0x7f0000007100), 0x6e, &(0x7f0000007700)=[{&(0x7f0000007180)=""/147, 0x93}, {&(0x7f0000007240)=""/234, 0xea}, {&(0x7f0000007340)=""/145, 0x91}, {&(0x7f0000007400)=""/190, 0xbe}, {&(0x7f00000074c0)=""/99, 0x63}, {&(0x7f0000007540)=""/132, 0x84}, {&(0x7f0000007600)=""/50, 0x32}, {&(0x7f0000007640)=""/134, 0x86}], 0x8, &(0x7f0000007780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000077c0)=@abs, 0x6e, &(0x7f0000007a40)=[{&(0x7f0000007840)=""/83, 0x53}, {&(0x7f00000078c0)=""/97, 0x61}, {&(0x7f0000007940)=""/233, 0xe9}], 0x3, &(0x7f0000007a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xb8}}], 0x3, 0x40012062, &(0x7f0000007c00)={0x77359400}) fstat(r2, &(0x7f0000007c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000007cc0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000007dc0)=0xe8) r15 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000007e00)={0x0}, &(0x7f0000007e40)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000007e80)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r18 = getpid() sendmsg$netlink(r1, &(0x7f0000007fc0)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002f40)=[{&(0x7f00000016c0)={0x394, 0x39, 0x400, 0x70bd26, 0xd3a, "", [@typed={0xc, 0x80, 0x0, 0x0, @u64=0x224}, @generic="303e5013e7bbad6db454ed255aa4898d61b165e3a1ed509916cdc5c5d2e348c8f81180ba6cca5aff5a40bad24f5d0989caacf159d146429b478379da428a2091282d47a79fad72d36f62cd62e0678b96627c24be83df7c3d5e0e07791dd113c1e69b2f02f94d34f957b9468e8a4df4dc9b6f9a466a1726de2f63854d552868ef3b16b83677b382794b69ca6b963022df8c8f4fb3f62056223aa8c04f", @typed={0xe, 0x8e, 0x0, 0x0, @str='/dev/vcsu\x00'}, @nested={0x25d, 0x6f, 0x0, 0x1, [@generic="59dfeffb3d75488f5d454c736f1a5d9cc6d54bca64fa61c92c4bb2d799f8ba8cb3e0cade6983bf23623199c3e59203738fba06111d237cfbe123319f69e93f5462cc14d0c47d47b150e9aae0fed4bdbfbb6b84af44155391aefc9a2a67f431e60f2f3c9c5e03c95572684c6dffb6754b7773ffab3393157b", @typed={0x8, 0x31, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x31, 0x0, 0x0, @u64=0x2}, @generic="4860d6c4e1f5476105d851c530ccfe0f5c139c2787bd03fb6260b86e9704171267aac726eef3fb3d4b13dc6c582640f781c454d2f085d2d4c214825371ebcaaa74d5b6826c14577e8ab84a5cabf7cf8bbc5c273f3d4c1af0ecdae1f31cdb9bffd776039b74574e7a30f890ef59a7a571a037851f039e8d334fe3efa5fd85a6aad33e4ffd7ccf987252392cf0c0ba4c29c6ff679369b8fbdb97fe5abb26e7e7684736dfbf026b18fc8ce9dcdadef4bee4c0831052fcee11d289715f76561d05e5fc43c81313978fdd925217353ae5acc5a6678041e88bd293e168e0e9ca6acf6bb662d58c6098858f6c835f5a076a16983be92243b80844", @generic="0792f3aa07888a3cf22df4c4335315ffc8ff02e0c5b87bc13b184f01876f8e4c7ff073a2a06d7129767d8e13536577871e3b4e134275206f24e4f701b4e1d97b15d6ba8d2097b0c853df20e5626e435c5bed6b97caf90dfa230babd403939442eec20f2d711bf587c8be6f5f2ba6803b8dd71473fdd6a898c6a8ec084265b462daac54c3df97660d3493ccd0943c08efffbdcaf5fd0089c2398d73c45ff6b79eac9c0a1d5713ff12cacc8dca82272649d5f4b3e1749b4912144843c18e7a2e26adc16de1674d9ec6942d7578eaf2f6ba11c85f957268"]}, @nested={0x6b, 0x57, 0x0, 0x1, [@generic="302a16c5573c1c818f7b9348ddfb50df9bf3fe34902aeef8f7b9f15e117db68e0b3b9455d6ce834d6e2fd93c3448a460c3cd3e610560aaf3a92be405b6390642f6e407954eb2a49f3c8f5b3c532a04151ea4e58574bcce71e130a138b8cf8266d29144e460a738"]}]}, 0x394}, {&(0x7f0000001a80)={0x12e4, 0x28, 0x8, 0x70bd28, 0x25dfdbfe, "", [@nested={0x12d3, 0x95, 0x0, 0x1, [@generic="ae507c725b8e0738aa25db2b8565806fbeb49be8468d7991cf33d295ba615cbbe024189fa456508a4370a8949f72d63f44a5a1ca43e9ae02fb5894daa9147026510818a8bb6e02073df1cf4fe04b114cad899f923bbe72be1506691353078524e698cc03ab39d6e6600e4e063f45a6020d905d29cd9b19f32cf2d157226b6698bd807d5317b47fe937b930c46497157ab3", @typed={0xc, 0x85, 0x0, 0x0, @u64=0x6}, @generic="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", @typed={0x9, 0x6b, 0x0, 0x0, @str='#!]-\x00'}, @generic="ee2a7199f7d36e60d8212a607d3ecf12d5935bda1eab7e2b4a69a292ac28b33bccb969a87ffe5bbc79f445d61e2fa92bff642e93007269d659da84c9c974ae66639164131142f9fe4356430db36b0248c5b5ebffcb7dfb2ce5f6387bf5800f92bd3e493ee8452d034fd0d28ffc2220178fce64d9199560e0a12ccbba951ee92a6ae6892955ecb4db2991562aca548eae", @generic="14adf73694fc8e06a8332cee972c497b59bdf1021d485fb3b1948362d2f200dd962ded87ab2404abec8b136c7ddbd788532b8e660e3b61d3a273cea6a9fac9bcc3298887ce0b437526c13310981588f3cd3b1a6f030cbb94afedcfda0cfaccb6f34f702fbb108140ff13e93f1c61f2408a81e638f891061fccf4fb33ab898cefc6aac21a5c75134b59595a099dfc7d9e7d424afcea5af5fa5f21bf3dcbe90a74917b3dafd011223ddd63a4fe8a8adaba0d0b24b9347fb22f5231533c69239e4639774fe0b8502496719d885a619ff37efa9e515921a09507575911723361efd5e424bf31d3d7d8b64b0452bfa3e86fe72894e2bce6c103e5b28e298844", @typed={0x8, 0x28, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}, @generic="c0db0e4c5e76a779598380", @typed={0x8, 0xc, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="eb976470543e6f9394ba827048d59d54307dbdaa5121b2be4355ea5fcb65004e66eee49c6b7f17ab04281671a131cd0d41397786fb9f2b58f7bf16750093c078696c77befe599c2b33910050a55021ae4dfb1f0665c87d5b5d92ba3b9d5e1c85ba7444a87894292c6cebdfdca6c6bd9c448f7e4387ca8264b316bb585912"]}]}, 0x12e4}, {&(0x7f0000002d80)={0x20, 0x36, 0x300, 0x70bd28, 0x25dfdbfd, "", [@nested={0x4, 0x15}, @typed={0x8, 0x82, 0x0, 0x0, @uid=0xee00}, @typed={0x4, 0x48}]}, 0x20}, {&(0x7f0000002e00)={0x138, 0x3a, 0x10, 0x70bd26, 0x25dfdbfc, "", [@nested={0x128, 0x91, 0x0, 0x1, [@generic="b47de89bdfa621b8b67be19af04915c16063adb761bfa3c8a8666816014af97d935b486fe413c673a0f1e2deadfba765cfa9f5d852796573992d3cfe1b2e18c43d09ae2271762552c55070142c776391cd18e0a2e31a20ec1ed4e4e7484e4651842a9242cd612447c4ef54f7f6e9c328f206e32c9efdb0c42050955289cd9b46cf449b70f89a7156b48d7650894af97a19f3936f263c99592638b9040fdb617f222c08a7cd5389be7fff5c386db7835ae200274125cc26d3de6fba0a97ad", @typed={0x8, 0x49, 0x0, 0x0, @fd=r4}, @typed={0x4, 0x8a}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x101}, @generic="22bc794a6a200e7dff2e635186be6be35351b99a266eb0e373aebc72b85d6cbd083b84825f303d564220947864a45657d1eeaccdf8b8a300555c930788fabd8802a3ce078dde00ac53b4b5b460c5"]}]}, 0x138}], 0x4, &(0x7f0000007ec0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r2]}}], 0xe0, 0x4000090}, 0x20000000) unlink(&(0x7f0000008000)='./file0\x00') r19 = msgget$private(0x0, 0x224) msgctl$IPC_SET(r19, 0x1, &(0x7f00000080c0)={{0x3, 0x0, 0x0, r10, r13, 0x151}, 0x0, 0x0, 0xffffffffffffffe0, 0x5, 0x0, 0x7ff, 0x1f, 0xbb9b, 0x8, 0x3, r9, r9}) 16:50:34 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x9, 0x7, 0x3, 0x6, 0x0, 0x461, 0x2000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x200, 0x0, 0x3f, 0x3, 0x9, 0x0, 0x2, 0x0, 0x8000, 0x0, 0xdfe9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x1, 0x9, &(0x7f0000000a80)=[{&(0x7f0000000380)="3fbe2b1a12891813623e01aee1c911501a98030d1bcca1942b8acb32845f1f167b459087b0ea3da29fd7cfccbafce1fc8b6f08f79c6aed67d0961423e29daa58df7b943776becb1f6a84ed34988e25eb91ba818b615ffb2eab0a9a519dcfb6463d48feeba7be7c8bc0ac0bf352774d95bd905951d926c73793ca9bec8d2d5ce703e406289a4b55dd5529cc40b4e635a919392e09e4d49cefaea4a5c6137139017134a03a0b53d2e6e1bde7a2ceefacf72333560fd24a781835c1636f2babd4597673e16db5a92dd33df634564ae605590789536e9f97", 0xd6, 0x9}, {&(0x7f0000000480)="e0d2bdf763ec5c3c5f62af55863fdc7497339cf0d72b707bb5f7f99d2c5650fe22fcd0a58496ddf539aad2567c2def8ef0fa7518cc9e6f2769b605142959a847d1485f216f8ab65ff200ee5a2896efc784c369f3a14117e35b1cd7d8959bac13fdeed256defd6cd0a45d2ca731f729edc921e866d9455bccad738ac32f4912f1467a344a569691590d31aea819095dd8ff055a4c249e0293b6844ad9304194e0b507bc183c02099b9795a156e37732629f122d3a08bd5e", 0xb7, 0x2}, {&(0x7f0000000540)="dab6702662b5078ffe6dce77b0405bbb4b6d8bf75f37d9213ff2b01e467ea23d1a0d67cd4102e838b0b91596263a94efe7cda365c5da3d5a0151f3cfe5b5e9ed0bdf974c38bad538daeece44d40d694d151241addf98ac56ba9800f984a6354163becf77ad56c58e60322421f9a650d32d4ec53e8e16243b5506043358a05b838639519453410a0cf2f7f59b0e2f70381c93baaa108db15d09a03170629617f9fb20d12f053d7f59f1fdfd784d72bd156239b339fa71f882db5673f5288b666e02b23a9f61a792f457e4e4c0d6c8c5dd2adc039695cd4e64b25dfba15d38744c8ebdf816819fdcac4eedd0592422a9fcfb91c1b2922c2134", 0xf8, 0x8}, {&(0x7f0000000640)="075ad00df7f2a8cf40341dfb6391d2d4729069db5cb71c3792f05d69fd23badbad591a23d234a836c5c8fe6e3bdff2899690925afc8bd25c3911d6814c29f0d5807d14298b68a9e066f54da7d1250f8129a2f115406572e9df1caf8abdf378b32f61874c431e1438e661", 0x6a, 0x100}, {&(0x7f00000006c0)="6bc79ae0acd460aaaa3c56bb0abffed9231fb401f891f1fe34d8704fd5b1ce6d3faa9bdc9479ac8a3a539b296f39f0fc6577a2747a0d996903e1c6e9d5f46e93536d1fdd68f0d4a6f4f6157ac80e14843584df", 0x53, 0x377}, {&(0x7f0000000740)="55fcf2adafb82d45021bc19aead4ff226d25fc2563b8055804c3a45de9fc86ce64141280610922e1f490a909a832b9be550ff87f940971298e0543d2b5a6972f93f423f2f55eccee2a0ce2908527c11be763d7e410a70eb2c8ecfe8f17a63dc4388559207e1e594638587f83b91510331d7645991715c7d466d5a96b23a20d6708e21d2756c670673f963974f4b863075be0131878f66d01e74deb273afd4e34ff9dec7eac7af73577d8112db1657d7fa9e57721adca8218", 0xb8, 0x1}, {&(0x7f0000000800)="aaf18ca23ee8f9f25cf9e3e5ce1a8d593ce09166b9786571146f677ace0f610577854c32aa450f4eca35a699628788fc2a39b33e0a00c3e46cc822f8c7ee9d654df65cdac3c39b03ba5cdc7c4759e6a7293f8e4d8700f1c33a37f9105ca81a44383e00dfa635f1696262a4f515bf7f147fca84e541869f897cd2f18e21571af0cf218ec332790501f405e47839fa400c0532462fc2539cf0c0450ff1a3674eec9f45c3676e79def5726525e7a0ed4f1a8952f57d6fa21efb05952529d9a7dcbe0d2faf37f82c4336fb73db5fa8d15b0d14c1d9ef141aff95b19c5c929c05c68cd598c4bb6fcf942dfff2", 0xea, 0x9}, {&(0x7f0000000900)="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", 0xfb, 0x3}, {&(0x7f0000000a00)="a8cc16de47f6ebf1d5cd8e87b91281e63b3fdd0c9be9157df901621dd80c8a56d5578a74548d91d39f33667728554e452e0cf417fa19ef8abc7f6e57316963f1ea1f9d8cec369e1b472d3510bd14d2c58b45efc08ebf0c3d71c3e6bb4ac0bab2aeccd027facd4843b59eab085499b0", 0x6f}], 0x100001, &(0x7f0000000b80)={[{@nodots}, {@fat=@nocase}, {@fat=@nfs}, {}, {@nodots}, {@dots}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', 0xee00}}, {@hash}, {@subj_type={'subj_type', 0x3d, '$'}}, {@audit}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) fchdir(r2) fchdir(r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000c40)={0x0, @broadcast, @broadcast}, &(0x7f0000000c80)=0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.net/syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff, r1, r4], 0x3) perf_event_open$cgroup(&(0x7f0000000d40)={0x2, 0x80, 0x1f, 0x3, 0x8, 0x1f, 0x0, 0x8, 0x20000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x1f, 0x6}, 0x4000, 0x3, 0x8, 0x7, 0xe51, 0x10000, 0xcf, 0x0, 0xf47, 0x0, 0x2}, r1, 0x2, r1, 0x8) r5 = fcntl$getown(r2, 0x9) clone3(&(0x7f0000001f80)={0x28100000, &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40), {0x2b}, &(0x7f0000000e80)=""/149, 0x95, &(0x7f0000000f40)=""/4096, &(0x7f0000001f40)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0x0, 0x0], 0x5, {r4}}, 0x58) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000002000)='BPRM_CHECK') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002040)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r7 = syz_io_uring_setup(0x6e27, &(0x7f0000002080)={0x0, 0xbf57, 0x4, 0x2, 0x3dd, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002100), &(0x7f0000002140)) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000022c0)=0x0) clone3(&(0x7f0000002340)={0x200, &(0x7f0000002180), &(0x7f00000021c0), &(0x7f0000002200), {0x22}, &(0x7f0000002240)=""/59, 0x3b, &(0x7f0000002280), &(0x7f0000002300)=[r8], 0x1, {r4}}, 0x58) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002440)={'syztnl2\x00', &(0x7f00000023c0)={'sit0\x00', r3, 0x2f, 0x7, 0x5, 0x7f, 0x6, @loopback, @mcast1, 0x10, 0x1, 0x6, 0x7f73}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000002500)={'syztnl0\x00', &(0x7f0000002480)={'sit0\x00', r9, 0x2f, 0xd7, 0x7, 0x7, 0x14, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8, 0x4a12, 0xf88}}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000002540)={0x0, "9ebd2ff28e90a96bf47d6f1194daae55"}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000003540)={0x1, 0x2, @start={r10, 0x1, "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", "403825ea278a1a1765f58b384eec0d3f32f79bbd619b84473ea97301228277f64b06e04ee8cd7813205e33bcf9ad85a6d49ed1df86215cd9f113981c6f7f2e85141bb226354e036b83b5556386a0c3ca6b7e866ab360a685b64f6d15ec4ece89d25d8f5a313ab0a74dc170078022e4e8f5a7023fb4e03650618047e0ce4b498e241c68d47a5ec9396f53068a1c9ebb5dbc92c9c427cd24edf2e5203278f18f8cb62bec2b439e05547fc9bf1dbb65cb23afb55edfcc177079f5057d6db5e7c2bf473b656347d3f60e11f6f4bf0d0c568c1d6aa7f37dcd45e2e3b4ad5230733fa5c91c449383bcd28a7e8d9b13b68fd8f40b9e17b334fd699f2cfcf56f7fd822e5b370bec6f0c9bf2305503b6408b97c0b3a800397361250df86bd3f60dfc6fca252d8e8440d459111d0f99e86a12ce70246091297c5f5d04b09051c5dcb8f62e3da2315338ace7a33ef8d582d1f5566a2e3980f3151c4f7672d9ee69a6f74fd3f957d15e428e6fff65da4d9e77e826b122e0e13b3a8bbcc3d3f002b4007d66cdf056ff5414b2184754971b9c99f611b5cf8137c50ea48b295c3ae09ea94ec077e75881e137bd8269740d1521e6b585d3fbbc4ce9ad9be078f6c7172c1dd0a399781954cead9d501add496cdcb990973303276858331428dcf63ef060820faebe0d4939b646ccca9a158131e56f10989e79c2a79f361d3fede4a5e67e517c3e11c7bfd47d2034c9796f234f6015a5773671b3f2416ef1d33a1aee8bd0d2c8ba0e976f24ae53c16765e47c712a0bd54061497a5a4ad49681191a3f764b08d745c81ec7b3591f1cd0e4041ca11ab448bf8bfe1f0969176524dd4230fca403248d4a7db098336bb6cdb5d5db9d635877db42f36303b7680ad2d3ea0d1a5fb69f578b6180e5cfc8120ceed9c73bd24ee8c7c417dd64e7c62a8fa7588e28d2849cee62f78aa39b29eeeb3364b18128f8b58b673fcfcf2d274215ddce7ade73f6c39e1309c4b1fffd58a655450dd79f2e3c2f22f3f84d400cb1025622d1c769b17e398984c9b4a00e2fa7cfd236a7a22a6db58a8729d58c33291b99b8678469747809640128955bc9267277da8097b234be3e691d2d9dd14ea73c68c9c6fa1abe91d16bba281a26beae52c4497a2a8cb1a8218bd531de5c7b282f95a13f5194313fcf9cf31dc3927691cf2901e3e0a1b406568681f042f6a8e5b6d3b3d373990836770ab309fb6865b367552245f73d2faae530f27dea0ba490c4c621b9d19b6fb842006081f7448bc12bffe383f58472851f8bfc02ba622f1516cd8f3b8d089b4507056649309d94adcdcea03e10fac7db071cac888db8b779655e1d431b3820388974bf111e11bb97318bb80c19465c1d74c103eb0ffc7bba2c7a5557c1d80c950a1f89e34c620224f866fd4e7e516fc324090abc9eb354894903fab2d540e0fae5ace31"}, [0xfffffffffffffff8, 0x3, 0x8, 0x5a56, 0x80, 0xa4f, 0x2, 0x864, 0x8, 0xffffffff00000001, 0xac, 0x48000000, 0x800, 0xffffffffffff5a24, 0x10001, 0x4, 0xffffffffe22b8719, 0x1ff, 0x400, 0x1, 0x3, 0x1, 0xd02, 0x3f, 0x1, 0x2, 0x1, 0x2, 0x2, 0xfffffffffffffffd, 0x9, 0x0, 0x6, 0x0, 0x7, 0x9, 0xc970, 0x9, 0x7, 0xff, 0x8000, 0xfffffffffffffff9, 0x7ff, 0x5, 0x4, 0x8, 0x4a548fd6, 0x4, 0xffff, 0x100, 0x5, 0x5b, 0x9, 0x1, 0xe2, 0xac, 0xfffffffffffffffe, 0x626, 0x3, 0x5, 0x3, 0x2, 0x8, 0x9]}) [ 64.459709] audit: type=1400 audit(1664643034.788:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:50:34 executing program 2: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x202, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28000801}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x4, 0x6, 0x1, 0x7, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x40, 0x1, 0x9, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)={0x398, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x8a, 0x3, "b4d8caaea7abe38f9f0f4d3c7ef1efd4227e2391145cb789fce9d949c85843891c2ad9cad47248a1295848c058e3f1ececa545a058856c1c6c826e69ffc9d8e700d6ab0527fdd2e9c99a1eb8e879c50a182b0795d9a4340f8aae3c44c17872b92267564cfe880a6dbe4c095f56b3124ded03596253d6d46110795bb9fb30847e561841a645fe"}, @ETHTOOL_A_WOL_MODES={0x148, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%!}!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}{]{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.&{O-\xf1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*)/.\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/$[*&6@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&]+-(}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!)]@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.-(\\#\\,\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x21, 0x3, "f7fa7d4354ae3d77f749212d411b3bab05d3d2f6291a2dd0253514f52d"}, @ETHTOOL_A_WOL_MODES={0x16c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7a, 0x4, "b73fbe5274c2aece4362f5540393bc390b172481cf7d30084febde7ac0b6c7cc66fdeefab5f78eaaf7aab6cad1c951b9487a4ff585c2a1db18601bfc64a8a7d84922501909148cb5280ca0dd685201e8010fb5e4e5e12a8ddfde562a72b23fb9c979743fe056e42860e387d2b4d6108cef4cb60d92d3"}, @ETHTOOL_A_BITSET_MASK={0x71, 0x5, "c45b18e2b6413c6fdb58f3d5e9f7f6b8a357d2bfaaa86f1f141faecc0e21e8a8b17254401c8f9160ae49f4b4b177fe0e97731339d71ea8a49c96e2a00817f7e2562d4b866e55121fb1cb44dce6c7ed084508322d43d1efd5e2c76805c769a8e2b820569c48caa826653ac84957"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-]]-/]-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(\xe9*@&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^^$%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-()*#],\x00'}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x400c0}, 0x24008000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x24}}, 0x800) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20000840) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000001ec0)=[{{&(0x7f0000000b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000bc0)=""/36, 0x24}, {&(0x7f0000000c00)=""/144, 0x90}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/35, 0x23}, {&(0x7f0000001d00)=""/215, 0xd7}], 0x5, &(0x7f0000001e80)=""/21, 0x15}}], 0x1, 0x0, &(0x7f0000001f40)={r5, r6+10000000}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x44, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c044}, 0x24048901) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x28, r2, 0xf06, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x3b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x80) clock_gettime(0x0, &(0x7f0000002200)={0x0, 0x0}) utimes(&(0x7f00000021c0)='./file0\x00', &(0x7f0000002240)={{}, {r8, r9/1000+60000}}) clock_gettime(0x0, &(0x7f00000022c0)={0x0, 0x0}) futimesat(r4, &(0x7f0000002280)='./file0\x00', &(0x7f0000002300)={{}, {r10, r11/1000+10000}}) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000002500)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000024c0)={&(0x7f00000023c0)={0xdc, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000010}, 0x2004c014) 16:50:34 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', r1, 0x29, 0x0, 0x5, 0xf46, 0x24, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x8000, 0x100, 0x21}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r1, 0x4, 0x7, 0x1b, 0x1, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x10, 0x700, 0xbd, 0x400}}) write(r0, &(0x7f0000000200)="b9f3b737fded9a11ef1c20fe473adada32b5dac14fed98f254e73b7dedb69f3786a864b3bfacb8b64dad03c090d8b86d2808f9a8156fdfdcf65dd295be79feaf935883910ff4301da6fe49fee26ee6e1e0579e94de076bc07ee7c9b934bdfb88", 0x60) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x208101, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x480c0) r5 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) syncfs(r5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x2040, 0x0) r8 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) io_submit(0x0, 0x4, &(0x7f0000000880)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x431e, r6, &(0x7f0000000400)="df90b5688f0263719f3260b922f34eba705c034e5401d9736b7bf07c996745a906be4410333abc9604a0e68242a57a43e4cdfd506f392679b87027442e165a49e9851c338bfd4e566448036ae650abba02e413887d76e0250e243b67e08bf08fc9c48b6d4789555aff33f1d12a110bc2bcfac0387995a803636dd7c60ed5c6471db78146b53233b314a93650e1b40a646f2863a5df", 0x95, 0xffff, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x1, r4, &(0x7f0000000500)="76b442041277738507715fc157710423f1b6a1f6b6d54772626eeb9ed32b1c3f7029db99811c266c4fea8fd317ce3f30410ab1c4292c543eafaa9bdd09c75b864e9f30945d8a2f8495d0c9f2cc2860b63d695bcf9892ae385edb8fe1f7a0a328c22bb29243b08976b46b16528bbabb7ff6ba1e6b691565ed5fb77e65b2840042206565872ca1b0282ddeb1b55ec2551d337a4730bff70dbeb32818b3369b5c3a38e637ef9ab2bf031e44d9ced0f31e2e39f350599d43da6f914e0215a2d0ad21", 0xc0, 0x8, 0x0, 0x3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x2daa, r7, &(0x7f0000000640)="a0dcebeee315d9480270a9681a14f7789f029cb9b92fcb6a88763222725a9b8efb00b4842b901abfedb2ab45d5a2c2e1cde9d8b7227e535e9eeeccb2a7239e644f8963f2f87729d397ee34f4de86e9ec7b694e35171753423143bee4852d50547cd01d9304ee10a788829582df5a3eec3fed52b29e03b363406d8a0e6b82e14d1eb76946aa9e701b263be4589a5b486c7abe5041dfa48665acc9dca01e71216b9ca0a08c1ab2120bfd994ff9712f535b786d588eabf4", 0xb6, 0x81}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0xcf83, r8, &(0x7f0000000740)="0e87a69cbcb8911f3efdbc956233b26576ecee1a4c5d97f2bb1a9eb7312c63d50ec71d255f63aed46a9c2a57a29409811cf1511fa77107fdfaa6d1d4083bea3f111d77655066107280014d83ebcf2b6455266f44c54be2698e90ff42239392a80799e214a26b7f1eb60400f205d0ca0ad322b6cb304714ae42bd6c89394fa6c922a6569706ebc30faccb595754a8b644ebf68d11abedd44185ba90075e5dca07e44e46dcc06a099223c8df4ce55d94f65e5611b564edf69988b45034455290230744f725754219d68f7ed51bc336f96035ef3b1437c50057ca840de2a38f4788584cbf345319108051d7a73b86ebc86568058edc4b8306e9", 0xf8, 0xeb5, 0x0, 0x1}]) r9 = syz_open_dev$mouse(&(0x7f00000008c0), 0x3ff, 0x1002) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000900)) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000a00)=@get={0x1, &(0x7f0000000940)=""/160, 0x3ff}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x80000, 0x6, 0xa}, 0x18) dup2(0xffffffffffffffff, r10) openat(0xffffffffffffffff, &(0x7f0000000b00)='./file0\x00', 0x200001, 0x8) 16:50:34 executing program 3: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000000)={0x7, 0x7, 0x1}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000080)={0x0, 0x9}) r2 = perf_event_open(&(0x7f00000010c0)={0x0, 0x80, 0x7, 0x81, 0xbb, 0x4, 0x0, 0x9, 0x7d004, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000001080), 0xd}, 0x0, 0x8, 0x0, 0x9, 0x6, 0xfffff0c0, 0x382, 0x0, 0x7f, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000001140)={0x1f, 0x0, @fixed}, &(0x7f0000001180)=0xe, 0x80000) close_range(0xffffffffffffffff, r3, 0x0) r4 = dup2(r0, r1) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000001200)={0x7, &(0x7f00000011c0)=[{0x3, 0x3d, 0x6, 0xbc8c}, {0x8001, 0x5, 0x8, 0x3}, {0x6c, 0x1, 0x3f, 0x7f}, {0x5, 0x8, 0x8, 0x6}, {0xf40e, 0x0, 0x0, 0x8}, {0x3, 0x5, 0x5, 0x1}, {0x1000, 0x6, 0x40, 0x2}]}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x4000, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000001280)) poll(&(0x7f00000012c0)=[{r2, 0x410}], 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1, {0x20b6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000001340)={{0x1, 0x1, 0x18, r6, @in_args={0x2}}, './file0\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001380), 0x100, 0x0) ioctl$BLKFLSBUF(r6, 0x1261, &(0x7f00000013c0)=0x101) r7 = fsmount(r6, 0x0, 0x74) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000001400)={'batadv_slave_1\x00', {0x2, 0x0, @dev}}) setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f0000001440)=0x1, 0x4) 16:50:34 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2b}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x33}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xdc, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004001) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r2, &(0x7f0000000400)={{0xcc, 0x8, 0x8, 0x134, 0x74, 0x7, 0x2ff, 0x8}, "8205a59c8689a1083542ffe0a8cdac2524e12e4bcf6d5943dfae66fc7b9034995e93b957ff8490dd39d859e26edc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa4e) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000e80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000ec0)='net/igmp6\x00') write$binfmt_misc(r4, &(0x7f0000000f00)={'syz0', "5fdb269d5589c236d00c3f8f4bee4f357d94b6523cb456cd861de5fdbe4bf242cd6bd0e57d90ffaafe653565fe39911adb11f5cbc7943f024c91c30d2d122b"}, 0x43) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000f80)={@initdev, 0x0}, &(0x7f0000000fc0)=0x14) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8050108}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x5c, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x180000000}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000001180)={{0x81, 0x6}, {}, 0x1, 0x1, 0x81}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001200)={0xffffffffffffffff, 0x7, 0x81, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000001240)={0x6, 0x7, 0x1, 'queue1\x00', 0x3}) r8 = inotify_init1(0x80c00) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001440)={'ip6gre0\x00', &(0x7f00000013c0)={'syztnl0\x00', r5, 0x29, 0x2, 0xfe, 0x7fffffff, 0x54, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8000, 0x20, 0x217, 0xd08f}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001c80)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001480)={0x7b8, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x288, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-*,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '1\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'queue1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}]}, @ETHTOOL_A_BITSET_MASK={0x89, 0x5, "fb2aaa79e8f49c51d0afe6e74c9bce9216d089c9e717175c82380e475e234a45f94d6a275f0961b974143cd07ad794b5acdf5c1c9f4e53385a88ee9a234789f42d2611e01907c764975cca8f1c654c068b72a17534417f6009711be4462f10e12a99c608b95b4fd7dbe7b3b5f45bd803df2483e57fc3b5f62d8a4eff948ee7d06bd7eb2c4d"}, @ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "2a9e8afb16001faa311c6ad353a793935a9e31def373518df76f7cd748fdf59b53dfc71d0d0f462b642628128a4a3bf59bdd4c63193f77a833901fbccb1e067f72b3fef892d5eb371169e65146a3a838a21f051180e53e7cbb3134475df94efd26a23e17d9000fa9551a4a78e5a0620186183ef67c8b7a1c5b69363818735b63068e234a866b831dc687915c47bcae2aac13ed53c11bdbdf0b3f57d2cc5dc742d713b05b08ff7e0e9ed113eb8bbbf69e4bf47e858c87b71e00738cb8d0d1051afb6bc53ff5f4725a40a64ca07de6f3b3255f5c54fa3375b825858b"}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "068ab988e7c4d272c512eea2957f23c011b57634b319bb29b664c38a252b6de8e0f21bf1a354b54abba5aa37636937f91c24e4890a52a4f91f2ce9f7e5d0dd287ddef0c113"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x31, 0x5, "beb3469b99ecce6d71090f68bb3996c5a3bc6a2c2160af011dbb86786eb7b5b4572f7971046d8f7eb70ee889ba"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x57, 0x4, "b9d97f55733907df660b2205de3ed1a0720e786aadc269f200f8506bc2056ef7d7b891a2aae3368dc7bf009e0212495ef2a446164a9180558d43e1f90396f0548a184ca003ed7c285e9cdd62a196f4f30b22d7"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x444, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&\'*\x00'}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, ':\x92.)/)&([+}\xdb\xa9\\/\xd8\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'queue1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/{@#$\xb2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x250}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'queue1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '\'*\'/:/:*&@#{@:.[@\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x1a, 0x5, "c2a31cb157a9958caf7aee1145f362f49124aef41be2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "c38c40a6cc335c07fdabfab3e9742866fbd8aeef60598739ff3e26471a0d91757e80a12f1a4d6a6de0fdb4567eb48aa9cbf3f0f3474ac459a70e471ece00ed99fc7dd641625720e38c3b8d41f9e6f04f0aa115fa9c48c8694a8ed8220c5103d4fa8de1ade19b30fefe9d013004dd1db95b46f9e8004ab69ba3d7bd7133d3ccff73614e905867229d009b518af82269c34cdfb93520913c48d48453493fea5d6cc24edca76e35d16ce5a30390eafaea113827400ac820d29cb13ce53ef811935aa9a0aa817ca7b52a1db8632dbc104815859e1e2f1a24540de94cf671c76131b00d7dc4ebf9cb5ec859e58a246867603bc21c7abda5c2"}, @ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "76ba215418db"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@-]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+[\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/zero\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'queue1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x600}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/zero\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'syz0'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'd{(#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x49}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^!}*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'syz0'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/zero\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/zero\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/zero\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\')-^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'net/igmp6\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x7b8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) 16:50:34 executing program 7: ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/90}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = syz_open_pts(0xffffffffffffffff, 0x60000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x101, 0xfffffffc, 0x800, 0x0, 0x40, "1361f0acb2086aeb07e4d5a11991f1fbe6b691", 0x0, 0x7fffffff}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file1\x00'}) ioctl$TIOCNXCL(r3, 0x540d) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4100, 0x0) ioctl$TIOCCBRK(r4, 0x5428) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000240)={0x0, 0x6, @status={[0x2, 0x400, 0x0, 0x1, 0x1, 0x2d]}, [0x5, 0x8, 0x3, 0x6, 0x3, 0x31, 0x89, 0xfffffffffffffffe, 0xffff, 0x7, 0x7f, 0x800, 0x8001, 0x1, 0x4, 0x4, 0x80000000, 0x3, 0x5, 0x40, 0x9, 0x40, 0x1, 0x10000, 0x0, 0x6, 0x8000, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xbb, 0xe4e, 0x3, 0x7f, 0x3, 0x1, 0x4, 0x9, 0x2, 0x2, 0x100000001, 0x3c1, 0x5, 0xffffffff, 0x1, 0x4, 0xffffffffffffff9f, 0x80000001, 0x20, 0x40, 0x200, 0xffffffffffffffff, 0xffffffffffff8001, 0x3ff, 0x1, 0x9, 0x8, 0x1e7, 0x20, 0x4, 0x3, 0xc4, 0x81]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000c80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1200000}}, './file1\x00'}) lseek(r5, 0x3, 0x2) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000d00)='./file1\x00', 0x8, 0x1, &(0x7f0000000e00)=[{&(0x7f0000000d40)="c85965d7601e92bb87f55e3107d77e459bd053b4e9cf38cbcf6f1c69da05e1101fb91dbddbcef9bc2be41915eb3d66f399cddea5101fb334fe3021dedccdfa3ec5a1b4f3869c93f3f1e036ebf5d6bdfb8453a906462614b12b171fb2b21bfb32345e7b24234c8af28904ada9355054a7c7bf684c9d7e7b2183dba05095682f039438d34a6afc195dcbe66072cb3f754ce6440fb5115411740f8db930f2777d79e15ccb5b01e991e8", 0xa8}], 0x8440, &(0x7f0000000e40)={[{@utf8}], [{@subj_user={'subj_user', 0x3d, '/dev/hpet\x00'}}]}) r6 = signalfd(r2, &(0x7f0000000e80)={[0x6]}, 0x8) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000ec0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x440900, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001040)={{0x1, 0x1, 0x18, r0, {0x8, 0xfff}}, './file1\x00'}) io_submit(0x0, 0x4, &(0x7f0000001300)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x8, 0x68f3, r7, &(0x7f0000000f40)="c7e5ce56a80b6b74b994b178d0d8d113098432bc1f059b0ea11e78cf34d4717009aa67c3b513cc18a9276e57743de9a268bdd170f21d8cd00a99c368c24335af3904b71c5588442ec200b9feb1a957b4fd60d0704539b31f57dffba6162b50efd38e2ec4b40154fb2539d12e5e9e21d400494df28d6de4fb741b4535892f5a8fc9740cce1208196c47a0baa5ebbd743002446858803db2a37b478314bc5e0be5a66028a9ee3797db8a43c8af5ea50fa241c864ecb304dc02fb2fb64e36fb6510f4181094bf31688eb9c9fac98d88e96c622a2d254e4be1bd22907a4f", 0xdc, 0x9, 0x0, 0x2, r8}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x6, 0x54c, 0xffffffffffffffff, &(0x7f00000010c0)="a2a5b6a00a9a6e5ba45d2414d3aea867b0677cab8dfc828afbc64be0b9f83f8739e5bc32234105ba5a8bfd59be792fcd9e172ac9b7ff4a0a2b487b0a20e3a77903bc8c5d7f622bcd2f12515eb77aebb2fba3a4bd5e668f84707164ff3eb23e7d583e92dc1746afb952fe106059ac2922fc3834da93c00310393a4a236eb4e3b05f292488e0fc4b71", 0x88, 0x7fffffff, 0x0, 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x6, 0xff, 0xffffffffffffffff, &(0x7f00000011c0)="0989ac30800af6fdbbcd5d91968cb5430d09de4e3229cd22c1bdb6cd2746831931422fedcfef9bdcc5c93d01f76e197daa3e5cc727333a5f600efee5d8", 0x3d, 0xb99, 0x0, 0x1}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f0000001280)="68db9b42db26b873c749d1d5f7a187c233f861fb", 0x14, 0xcd0, 0x0, 0x0, r1}]) 16:50:34 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x402, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = socket(0x2b, 0x6, 0x8001) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000854}, 0x8800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x73}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x402c005) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x149c5}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x2, 0x9, 0x5, 0x0, 0x0, {0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40100) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket(0x3, 0x6, 0xe07b) sendmsg$NL80211_CMD_DISASSOCIATE(r9, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x14) [ 65.742544] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.744725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.746171] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.749396] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.751287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.752745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.758035] Bluetooth: hci0: HCI_REQ-0x0c1a [ 65.812166] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.813947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.816542] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.820249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.823965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.825140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.826505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.827507] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.828778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.832263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.834669] Bluetooth: hci3: HCI_REQ-0x0c1a [ 65.836482] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.838040] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.842326] Bluetooth: hci1: HCI_REQ-0x0c1a [ 65.866721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.868754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.871009] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.874921] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.881013] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.883746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.888310] Bluetooth: hci2: HCI_REQ-0x0c1a [ 65.889783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.895627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.902037] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.909200] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.923277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.924790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.931108] Bluetooth: hci4: HCI_REQ-0x0c1a [ 65.989958] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.989998] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.998702] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.998761] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.002109] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.004728] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.015679] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.024890] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.029117] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.034413] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.035420] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.052647] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.080223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.124195] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.831640] Bluetooth: hci0: command 0x0409 tx timeout [ 67.894896] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 67.894953] Bluetooth: hci3: command 0x0409 tx timeout [ 67.896251] Bluetooth: hci1: command 0x0409 tx timeout [ 67.958887] Bluetooth: hci4: command 0x0409 tx timeout [ 67.958924] Bluetooth: hci2: command 0x0409 tx timeout [ 68.087899] Bluetooth: hci7: command 0x0409 tx timeout [ 68.151956] Bluetooth: hci6: command 0x0409 tx timeout [ 69.879864] Bluetooth: hci0: command 0x041b tx timeout [ 69.942923] Bluetooth: hci1: command 0x041b tx timeout [ 69.943929] Bluetooth: hci3: command 0x041b tx timeout [ 70.006876] Bluetooth: hci4: command 0x041b tx timeout [ 70.007857] Bluetooth: hci2: command 0x041b tx timeout [ 70.135843] Bluetooth: hci7: command 0x041b tx timeout [ 70.199909] Bluetooth: hci6: command 0x041b tx timeout [ 71.927888] Bluetooth: hci0: command 0x040f tx timeout [ 71.990987] Bluetooth: hci3: command 0x040f tx timeout [ 71.991327] Bluetooth: hci1: command 0x040f tx timeout [ 72.055918] Bluetooth: hci2: command 0x040f tx timeout [ 72.056512] Bluetooth: hci4: command 0x040f tx timeout [ 72.183882] Bluetooth: hci7: command 0x040f tx timeout [ 72.247921] Bluetooth: hci6: command 0x040f tx timeout [ 73.207914] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 73.975842] Bluetooth: hci0: command 0x0419 tx timeout [ 74.038861] Bluetooth: hci1: command 0x0419 tx timeout [ 74.039281] Bluetooth: hci3: command 0x0419 tx timeout [ 74.103891] Bluetooth: hci4: command 0x0419 tx timeout [ 74.104307] Bluetooth: hci2: command 0x0419 tx timeout [ 74.230970] Bluetooth: hci7: command 0x0419 tx timeout [ 74.295840] Bluetooth: hci6: command 0x0419 tx timeout [ 76.014545] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.015693] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.021553] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.030407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.039318] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 76.052426] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.058348] Bluetooth: hci5: HCI_REQ-0x0c1a [ 78.134862] Bluetooth: hci5: command 0x0409 tx timeout [ 80.183919] Bluetooth: hci5: command 0x041b tx timeout [ 82.231911] Bluetooth: hci5: command 0x040f tx timeout [ 84.278929] Bluetooth: hci5: command 0x0419 tx timeout 16:51:31 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x24, @short}, 0x14, &(0x7f0000000600)={&(0x7f00000005c0)="f8", 0x1}}, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) [ 120.926980] Unsupported ieee802154 address type: 0 [ 120.936845] Unsupported ieee802154 address type: 0 16:51:31 executing program 6: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000080)='./file1\x00', 0x131000, 0x58) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)={{0x107, 0x6, 0x8f, 0x2aa, 0xd, 0x1ff, 0x170, 0x4}, "98e9aaf1e49e9277ce46ccf3a739c43e74b657d791ff24a54a3ec66e0dda6f83d744ed4487c5544a70ffcb3318bacedac4d30d1eda2f2d088381c059d6256540e52f45df5ecb49c94f0125774214d27970edd7386486bca683c4994ee8e1ac50e6c2677d4a619286981ebdad0a511d7429c9b0995db9f9ec46d8f7cda5e64d154f567a7d962abfce665de7745e21b0f05d67e6f58249725dd90113fda092ca7ea3b54124a4744cec371be1a1afd9b4c332fe1cae23a8ee9bc89134c106492efa423d88780b1001038d3aa28601c97e858136159d2d", ['\x00', '\x00', '\x00']}, 0x3f5) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unlink(&(0x7f00000000c0)='./file1\x00') sendfile(r2, r1, 0x0, 0xfffffdef) [ 121.038553] loop6: detected capacity change from 0 to 40 [ 121.118094] audit: type=1400 audit(1664643091.446:7): avc: denied { open } for pid=3743 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.119691] audit: type=1400 audit(1664643091.446:8): avc: denied { kernel } for pid=3743 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.130921] ------------[ cut here ]------------ [ 121.130942] [ 121.130945] ====================================================== [ 121.130949] WARNING: possible circular locking dependency detected [ 121.130953] 6.0.0-rc7-next-20220930 #1 Not tainted [ 121.130960] ------------------------------------------------------ [ 121.130963] syz-executor.6/3744 is trying to acquire lock: [ 121.130970] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 121.131009] [ 121.131009] but task is already holding lock: [ 121.131012] ffff88800da04c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.131039] [ 121.131039] which lock already depends on the new lock. [ 121.131039] [ 121.131042] [ 121.131042] the existing dependency chain (in reverse order) is: [ 121.131046] [ 121.131046] -> #3 (&ctx->lock){....}-{2:2}: [ 121.131059] _raw_spin_lock+0x2a/0x40 [ 121.131071] __perf_event_task_sched_out+0x53b/0x18d0 [ 121.131083] __schedule+0xedd/0x2470 [ 121.131099] schedule+0xda/0x1b0 [ 121.131114] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.131127] syscall_exit_to_user_mode+0x19/0x40 [ 121.131140] do_syscall_64+0x48/0x90 [ 121.131157] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.131170] [ 121.131170] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 121.131184] _raw_spin_lock_nested+0x30/0x40 [ 121.131195] raw_spin_rq_lock_nested+0x1e/0x30 [ 121.131208] task_fork_fair+0x63/0x4d0 [ 121.131225] sched_cgroup_fork+0x3d0/0x540 [ 121.131239] copy_process+0x4183/0x6e20 [ 121.131250] kernel_clone+0xe7/0x890 [ 121.131259] user_mode_thread+0xad/0xf0 [ 121.131269] rest_init+0x24/0x250 [ 121.131281] arch_call_rest_init+0xf/0x14 [ 121.131299] start_kernel+0x4c6/0x4eb [ 121.131314] secondary_startup_64_no_verify+0xe0/0xeb [ 121.131328] [ 121.131328] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 121.131341] _raw_spin_lock_irqsave+0x39/0x60 [ 121.131352] try_to_wake_up+0xab/0x1930 [ 121.131365] up+0x75/0xb0 [ 121.131379] __up_console_sem+0x6e/0x80 [ 121.131395] console_unlock+0x46a/0x590 [ 121.131411] vprintk_emit+0x1bd/0x560 [ 121.131427] vprintk+0x84/0xa0 [ 121.131442] _printk+0xba/0xf1 [ 121.131454] kauditd_hold_skb.cold+0x3f/0x4e [ 121.131487] kauditd_send_queue+0x233/0x290 [ 121.131502] kauditd_thread+0x5f9/0x9c0 [ 121.131516] kthread+0x2ed/0x3a0 [ 121.131530] ret_from_fork+0x22/0x30 [ 121.131542] [ 121.131542] -> #0 ((console_sem).lock){....}-{2:2}: [ 121.131555] __lock_acquire+0x2a02/0x5e70 [ 121.131572] lock_acquire+0x1a2/0x530 [ 121.131588] _raw_spin_lock_irqsave+0x39/0x60 [ 121.131599] down_trylock+0xe/0x70 [ 121.131613] __down_trylock_console_sem+0x3b/0xd0 [ 121.131629] vprintk_emit+0x16b/0x560 [ 121.131645] vprintk+0x84/0xa0 [ 121.131661] _printk+0xba/0xf1 [ 121.131671] report_bug.cold+0x72/0xab [ 121.131687] handle_bug+0x3c/0x70 [ 121.131703] exc_invalid_op+0x14/0x50 [ 121.131720] asm_exc_invalid_op+0x16/0x20 [ 121.131732] group_sched_out.part.0+0x2c7/0x460 [ 121.131749] ctx_sched_out+0x8f1/0xc10 [ 121.131766] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.131777] __schedule+0xedd/0x2470 [ 121.131790] schedule+0xda/0x1b0 [ 121.131803] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.131814] syscall_exit_to_user_mode+0x19/0x40 [ 121.131826] do_syscall_64+0x48/0x90 [ 121.131843] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.131855] [ 121.131855] other info that might help us debug this: [ 121.131855] [ 121.131858] Chain exists of: [ 121.131858] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 121.131858] [ 121.131872] Possible unsafe locking scenario: [ 121.131872] [ 121.131875] CPU0 CPU1 [ 121.131877] ---- ---- [ 121.131879] lock(&ctx->lock); [ 121.131885] lock(&rq->__lock); [ 121.131892] lock(&ctx->lock); [ 121.131898] lock((console_sem).lock); [ 121.131903] [ 121.131903] *** DEADLOCK *** [ 121.131903] [ 121.131905] 2 locks held by syz-executor.6/3744: [ 121.131912] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 121.131941] #1: ffff88800da04c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.131967] [ 121.131967] stack backtrace: [ 121.131970] CPU: 1 PID: 3744 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220930 #1 [ 121.131982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.131990] Call Trace: [ 121.131994] [ 121.131998] dump_stack_lvl+0x8b/0xb3 [ 121.132016] check_noncircular+0x263/0x2e0 [ 121.132032] ? format_decode+0x26c/0xb50 [ 121.132048] ? print_circular_bug+0x450/0x450 [ 121.132065] ? simple_strtoul+0x30/0x30 [ 121.132080] ? __lockdep_reset_lock+0x180/0x180 [ 121.132096] ? format_decode+0x26c/0xb50 [ 121.132113] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 121.132131] __lock_acquire+0x2a02/0x5e70 [ 121.132153] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 121.132175] lock_acquire+0x1a2/0x530 [ 121.132191] ? down_trylock+0xe/0x70 [ 121.132208] ? lock_release+0x750/0x750 [ 121.132227] ? find_held_lock+0x2c/0x110 [ 121.132243] ? vprintk+0x84/0xa0 [ 121.132261] _raw_spin_lock_irqsave+0x39/0x60 [ 121.132272] ? down_trylock+0xe/0x70 [ 121.132288] down_trylock+0xe/0x70 [ 121.132303] ? vprintk+0x84/0xa0 [ 121.132320] __down_trylock_console_sem+0x3b/0xd0 [ 121.132337] vprintk_emit+0x16b/0x560 [ 121.132356] vprintk+0x84/0xa0 [ 121.132373] _printk+0xba/0xf1 [ 121.132385] ? record_print_text.cold+0x16/0x16 [ 121.132398] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 121.132412] ? lock_downgrade+0x6d0/0x6d0 [ 121.132430] ? report_bug.cold+0x66/0xab [ 121.132448] ? group_sched_out.part.0+0x2c7/0x460 [ 121.132466] report_bug.cold+0x72/0xab [ 121.132484] handle_bug+0x3c/0x70 [ 121.132502] exc_invalid_op+0x14/0x50 [ 121.132520] asm_exc_invalid_op+0x16/0x20 [ 121.132532] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.132552] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.132563] RSP: 0018:ffff888018417c48 EFLAGS: 00010006 [ 121.132572] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.132580] RDX: ffff888018869ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 121.132588] RBP: ffff88803fba8000 R08: 0000000000000005 R09: 0000000000000001 [ 121.132595] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800da04c00 [ 121.132602] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 121.132613] ? group_sched_out.part.0+0x2c7/0x460 [ 121.132633] ? group_sched_out.part.0+0x2c7/0x460 [ 121.132653] ctx_sched_out+0x8f1/0xc10 [ 121.132672] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.132686] ? lock_is_held_type+0xd7/0x130 [ 121.132700] ? __perf_cgroup_move+0x160/0x160 [ 121.132710] ? set_next_entity+0x304/0x550 [ 121.132728] ? update_curr+0x267/0x740 [ 121.132746] ? lock_is_held_type+0xd7/0x130 [ 121.132760] __schedule+0xedd/0x2470 [ 121.132777] ? io_schedule_timeout+0x150/0x150 [ 121.132793] ? __x64_sys_futex_time32+0x480/0x480 [ 121.132808] schedule+0xda/0x1b0 [ 121.132823] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.132835] syscall_exit_to_user_mode+0x19/0x40 [ 121.132849] do_syscall_64+0x48/0x90 [ 121.132866] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.132879] RIP: 0033:0x7fd8b85a0b19 [ 121.132887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.132898] RSP: 002b:00007fd8b5b16218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.132909] RAX: 0000000000000001 RBX: 00007fd8b86b3f68 RCX: 00007fd8b85a0b19 [ 121.132916] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd8b86b3f6c [ 121.132923] RBP: 00007fd8b86b3f60 R08: 000000000000000e R09: 0000000000000000 [ 121.132930] R10: 0000000000000007 R11: 0000000000000246 R12: 00007fd8b86b3f6c [ 121.132937] R13: 00007ffc4e55cfcf R14: 00007fd8b5b16300 R15: 0000000000022000 [ 121.132950] [ 121.190922] WARNING: CPU: 1 PID: 3744 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 121.191614] Modules linked in: [ 121.191862] CPU: 1 PID: 3744 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220930 #1 [ 121.192460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.193299] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.193713] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.195061] RSP: 0018:ffff888018417c48 EFLAGS: 00010006 [ 121.195456] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.196001] RDX: ffff888018869ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 121.196530] RBP: ffff88803fba8000 R08: 0000000000000005 R09: 0000000000000001 [ 121.197066] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800da04c00 [ 121.197597] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 121.198134] FS: 00007fd8b5b16700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 121.198724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.199161] CR2: 00007f9efee0b4a1 CR3: 000000000ddc4000 CR4: 0000000000350ee0 [ 121.199695] Call Trace: [ 121.199895] [ 121.200072] ctx_sched_out+0x8f1/0xc10 [ 121.200381] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.200766] ? lock_is_held_type+0xd7/0x130 [ 121.201096] ? __perf_cgroup_move+0x160/0x160 [ 121.201429] ? set_next_entity+0x304/0x550 [ 121.201748] ? update_curr+0x267/0x740 [ 121.202051] ? lock_is_held_type+0xd7/0x130 [ 121.202380] __schedule+0xedd/0x2470 [ 121.202665] ? io_schedule_timeout+0x150/0x150 [ 121.203021] ? __x64_sys_futex_time32+0x480/0x480 [ 121.203390] schedule+0xda/0x1b0 [ 121.203657] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.204028] syscall_exit_to_user_mode+0x19/0x40 [ 121.204392] do_syscall_64+0x48/0x90 [ 121.204679] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.205070] RIP: 0033:0x7fd8b85a0b19 [ 121.205349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.206687] RSP: 002b:00007fd8b5b16218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.207260] RAX: 0000000000000001 RBX: 00007fd8b86b3f68 RCX: 00007fd8b85a0b19 [ 121.207804] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd8b86b3f6c [ 121.208336] RBP: 00007fd8b86b3f60 R08: 000000000000000e R09: 0000000000000000 [ 121.208866] R10: 0000000000000007 R11: 0000000000000246 R12: 00007fd8b86b3f6c [ 121.209396] R13: 00007ffc4e55cfcf R14: 00007fd8b5b16300 R15: 0000000000022000 [ 121.209939] [ 121.210114] irq event stamp: 3908 [ 121.210373] hardirqs last enabled at (3907): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 121.211070] hardirqs last disabled at (3908): [] __schedule+0x1225/0x2470 [ 121.211698] softirqs last enabled at (3528): [] __irq_exit_rcu+0x11b/0x180 [ 121.212338] softirqs last disabled at (3369): [] __irq_exit_rcu+0x11b/0x180 [ 121.212970] ---[ end trace 0000000000000000 ]--- [ 121.318418] syz-executor.6: attempt to access beyond end of device [ 121.318418] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 121.319598] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 121.338130] syz-executor.6: attempt to access beyond end of device [ 121.338130] loop6: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 121.342730] syz-executor.6: attempt to access beyond end of device [ 121.342730] loop6: rw=2049, sector=44, nr_sectors = 4 limit=40 16:51:31 executing program 6: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000080)='./file1\x00', 0x131000, 0x58) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)={{0x107, 0x6, 0x8f, 0x2aa, 0xd, 0x1ff, 0x170, 0x4}, "98e9aaf1e49e9277ce46ccf3a739c43e74b657d791ff24a54a3ec66e0dda6f83d744ed4487c5544a70ffcb3318bacedac4d30d1eda2f2d088381c059d6256540e52f45df5ecb49c94f0125774214d27970edd7386486bca683c4994ee8e1ac50e6c2677d4a619286981ebdad0a511d7429c9b0995db9f9ec46d8f7cda5e64d154f567a7d962abfce665de7745e21b0f05d67e6f58249725dd90113fda092ca7ea3b54124a4744cec371be1a1afd9b4c332fe1cae23a8ee9bc89134c106492efa423d88780b1001038d3aa28601c97e858136159d2d", ['\x00', '\x00', '\x00']}, 0x3f5) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unlink(&(0x7f00000000c0)='./file1\x00') sendfile(r2, r1, 0x0, 0xfffffdef) [ 121.411528] loop6: detected capacity change from 0 to 40 [ 121.480137] syz-executor.6: attempt to access beyond end of device [ 121.480137] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 121.481156] Buffer I/O error on dev loop6, logical block 10, lost async page write 16:51:31 executing program 6: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000080)='./file1\x00', 0x131000, 0x58) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)={{0x107, 0x6, 0x8f, 0x2aa, 0xd, 0x1ff, 0x170, 0x4}, "98e9aaf1e49e9277ce46ccf3a739c43e74b657d791ff24a54a3ec66e0dda6f83d744ed4487c5544a70ffcb3318bacedac4d30d1eda2f2d088381c059d6256540e52f45df5ecb49c94f0125774214d27970edd7386486bca683c4994ee8e1ac50e6c2677d4a619286981ebdad0a511d7429c9b0995db9f9ec46d8f7cda5e64d154f567a7d962abfce665de7745e21b0f05d67e6f58249725dd90113fda092ca7ea3b54124a4744cec371be1a1afd9b4c332fe1cae23a8ee9bc89134c106492efa423d88780b1001038d3aa28601c97e858136159d2d", ['\x00', '\x00', '\x00']}, 0x3f5) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unlink(&(0x7f00000000c0)='./file1\x00') sendfile(r2, r1, 0x0, 0xfffffdef) [ 121.596308] loop6: detected capacity change from 0 to 40 [ 121.649143] syz-executor.6: attempt to access beyond end of device [ 121.649143] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 121.650273] Buffer I/O error on dev loop6, logical block 10, lost async page write 16:51:32 executing program 6: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000080)='./file1\x00', 0x131000, 0x58) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)={{0x107, 0x6, 0x8f, 0x2aa, 0xd, 0x1ff, 0x170, 0x4}, "98e9aaf1e49e9277ce46ccf3a739c43e74b657d791ff24a54a3ec66e0dda6f83d744ed4487c5544a70ffcb3318bacedac4d30d1eda2f2d088381c059d6256540e52f45df5ecb49c94f0125774214d27970edd7386486bca683c4994ee8e1ac50e6c2677d4a619286981ebdad0a511d7429c9b0995db9f9ec46d8f7cda5e64d154f567a7d962abfce665de7745e21b0f05d67e6f58249725dd90113fda092ca7ea3b54124a4744cec371be1a1afd9b4c332fe1cae23a8ee9bc89134c106492efa423d88780b1001038d3aa28601c97e858136159d2d", ['\x00', '\x00', '\x00']}, 0x3f5) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unlink(&(0x7f00000000c0)='./file1\x00') sendfile(r2, r1, 0x0, 0xfffffdef) [ 121.756558] loop6: detected capacity change from 0 to 40 [ 121.800762] syz-executor.6: attempt to access beyond end of device [ 121.800762] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 121.802285] Buffer I/O error on dev loop6, logical block 10, lost async page write 16:51:32 executing program 6: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000080)='./file1\x00', 0x131000, 0x58) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)={{0x107, 0x6, 0x8f, 0x2aa, 0xd, 0x1ff, 0x170, 0x4}, "98e9aaf1e49e9277ce46ccf3a739c43e74b657d791ff24a54a3ec66e0dda6f83d744ed4487c5544a70ffcb3318bacedac4d30d1eda2f2d088381c059d6256540e52f45df5ecb49c94f0125774214d27970edd7386486bca683c4994ee8e1ac50e6c2677d4a619286981ebdad0a511d7429c9b0995db9f9ec46d8f7cda5e64d154f567a7d962abfce665de7745e21b0f05d67e6f58249725dd90113fda092ca7ea3b54124a4744cec371be1a1afd9b4c332fe1cae23a8ee9bc89134c106492efa423d88780b1001038d3aa28601c97e858136159d2d", ['\x00', '\x00', '\x00']}, 0x3f5) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 121.900178] loop6: detected capacity change from 0 to 40 [ 121.957516] syz-executor.6: attempt to access beyond end of device [ 121.957516] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 121.959895] Buffer I/O error on dev loop6, logical block 10, lost async page write 16:51:32 executing program 6: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000080)='./file1\x00', 0x131000, 0x58) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)={{0x107, 0x6, 0x8f, 0x2aa, 0xd, 0x1ff, 0x170, 0x4}, "98e9aaf1e49e9277ce46ccf3a739c43e74b657d791ff24a54a3ec66e0dda6f83d744ed4487c5544a70ffcb3318bacedac4d30d1eda2f2d088381c059d6256540e52f45df5ecb49c94f0125774214d27970edd7386486bca683c4994ee8e1ac50e6c2677d4a619286981ebdad0a511d7429c9b0995db9f9ec46d8f7cda5e64d154f567a7d962abfce665de7745e21b0f05d67e6f58249725dd90113fda092ca7ea3b54124a4744cec371be1a1afd9b4c332fe1cae23a8ee9bc89134c106492efa423d88780b1001038d3aa28601c97e858136159d2d", ['\x00', '\x00', '\x00']}, 0x3f5) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 122.071272] loop6: detected capacity change from 0 to 40 [ 122.133140] syz-executor.6: attempt to access beyond end of device [ 122.133140] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 122.134184] Buffer I/O error on dev loop6, logical block 10, lost async page write 16:51:32 executing program 6: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000080)='./file1\x00', 0x131000, 0x58) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)={{0x107, 0x6, 0x8f, 0x2aa, 0xd, 0x1ff, 0x170, 0x4}, "98e9aaf1e49e9277ce46ccf3a739c43e74b657d791ff24a54a3ec66e0dda6f83d744ed4487c5544a70ffcb3318bacedac4d30d1eda2f2d088381c059d6256540e52f45df5ecb49c94f0125774214d27970edd7386486bca683c4994ee8e1ac50e6c2677d4a619286981ebdad0a511d7429c9b0995db9f9ec46d8f7cda5e64d154f567a7d962abfce665de7745e21b0f05d67e6f58249725dd90113fda092ca7ea3b54124a4744cec371be1a1afd9b4c332fe1cae23a8ee9bc89134c106492efa423d88780b1001038d3aa28601c97e858136159d2d", ['\x00', '\x00', '\x00']}, 0x3f5) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 122.223315] loop6: detected capacity change from 0 to 40 [ 122.297051] syz-executor.6: attempt to access beyond end of device [ 122.297051] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 122.298191] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 122.779855] ======================================================= [ 122.779855] WARNING: The mand mount option has been deprecated and [ 122.779855] and is ignored by this kernel. Remove the mand [ 122.779855] option from the mount to silence this warning. [ 122.779855] ======================================================= [ 123.489103] loop1: detected capacity change from 0 to 3 [ 123.528248] loop1: detected capacity change from 0 to 3 VM DIAGNOSIS: 16:51:31 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00007f54b37c4d82 RCX=0000000000000000 RDX=ffff88803e9d1ac0 RSI=ffffffff81006ffc RDI=0000000000000007 RBP=0000000000000001 RSP=ffff88803fb67750 R8 =0000000000000007 R9 =ffffffffff600000 R10=00007f54b37c4000 R11=000000000003603d R12=0000000000000000 R13=0000000000000000 R14=ffff88803e9d1ac0 R15=ffff88800d99e870 RIP=ffffffff81007000 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f54b37a41f0 CR3=000000000f3d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888018417690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd8b5b16700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9efee0b4a1 CR3=000000000ddc4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000