Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 33.765027] sshd (243) used greatest stack depth: 24784 bytes left Warning: Permanently added '[localhost]:21146' (ECDSA) to the list of known hosts. 2022/10/02 14:37:04 fuzzer started 2022/10/02 14:37:05 dialing manager at localhost:35095 [ 35.725847] cgroup: Unknown subsys name 'net' [ 35.835014] cgroup: Unknown subsys name 'rlimit' 2022/10/02 14:37:18 syscalls: 2215 2022/10/02 14:37:18 code coverage: enabled 2022/10/02 14:37:18 comparison tracing: enabled 2022/10/02 14:37:18 extra coverage: enabled 2022/10/02 14:37:18 setuid sandbox: enabled 2022/10/02 14:37:18 namespace sandbox: enabled 2022/10/02 14:37:18 Android sandbox: enabled 2022/10/02 14:37:18 fault injection: enabled 2022/10/02 14:37:18 leak checking: enabled 2022/10/02 14:37:18 net packet injection: enabled 2022/10/02 14:37:18 net device setup: enabled 2022/10/02 14:37:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 14:37:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 14:37:18 USB emulation: enabled 2022/10/02 14:37:18 hci packet injection: enabled 2022/10/02 14:37:18 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 14:37:18 802.15.4 emulation: enabled 2022/10/02 14:37:18 fetching corpus: 50, signal 28793/30578 (executing program) 2022/10/02 14:37:18 fetching corpus: 100, signal 40130/43559 (executing program) 2022/10/02 14:37:18 fetching corpus: 150, signal 47550/52509 (executing program) 2022/10/02 14:37:18 fetching corpus: 200, signal 57825/64147 (executing program) 2022/10/02 14:37:18 fetching corpus: 250, signal 61748/69507 (executing program) 2022/10/02 14:37:19 fetching corpus: 300, signal 63845/73063 (executing program) 2022/10/02 14:37:19 fetching corpus: 350, signal 69211/79703 (executing program) 2022/10/02 14:37:19 fetching corpus: 400, signal 72791/84545 (executing program) 2022/10/02 14:37:19 fetching corpus: 450, signal 75239/88313 (executing program) 2022/10/02 14:37:19 fetching corpus: 500, signal 79067/93311 (executing program) 2022/10/02 14:37:19 fetching corpus: 550, signal 82432/97843 (executing program) 2022/10/02 14:37:19 fetching corpus: 600, signal 85678/102254 (executing program) 2022/10/02 14:37:19 fetching corpus: 650, signal 88084/105808 (executing program) 2022/10/02 14:37:20 fetching corpus: 700, signal 93753/112303 (executing program) 2022/10/02 14:37:20 fetching corpus: 750, signal 98594/117960 (executing program) 2022/10/02 14:37:20 fetching corpus: 800, signal 102415/122651 (executing program) 2022/10/02 14:37:20 fetching corpus: 850, signal 104630/125884 (executing program) 2022/10/02 14:37:20 fetching corpus: 900, signal 106705/128930 (executing program) 2022/10/02 14:37:20 fetching corpus: 950, signal 109141/132231 (executing program) 2022/10/02 14:37:20 fetching corpus: 1000, signal 111089/135072 (executing program) 2022/10/02 14:37:20 fetching corpus: 1050, signal 112696/137645 (executing program) 2022/10/02 14:37:21 fetching corpus: 1100, signal 115404/141101 (executing program) 2022/10/02 14:37:21 fetching corpus: 1150, signal 118364/144715 (executing program) 2022/10/02 14:37:21 fetching corpus: 1200, signal 119150/146503 (executing program) 2022/10/02 14:37:21 fetching corpus: 1250, signal 120149/148449 (executing program) 2022/10/02 14:37:21 fetching corpus: 1300, signal 121416/150655 (executing program) 2022/10/02 14:37:21 fetching corpus: 1350, signal 123403/153350 (executing program) 2022/10/02 14:37:21 fetching corpus: 1400, signal 125440/156146 (executing program) 2022/10/02 14:37:21 fetching corpus: 1450, signal 126613/158207 (executing program) 2022/10/02 14:37:21 fetching corpus: 1500, signal 127814/160271 (executing program) 2022/10/02 14:37:22 fetching corpus: 1550, signal 129294/162456 (executing program) 2022/10/02 14:37:22 fetching corpus: 1600, signal 131309/165113 (executing program) 2022/10/02 14:37:22 fetching corpus: 1650, signal 132629/167200 (executing program) 2022/10/02 14:37:22 fetching corpus: 1700, signal 133705/169039 (executing program) 2022/10/02 14:37:22 fetching corpus: 1750, signal 134926/170969 (executing program) 2022/10/02 14:37:22 fetching corpus: 1800, signal 136103/172915 (executing program) 2022/10/02 14:37:22 fetching corpus: 1850, signal 137271/174849 (executing program) 2022/10/02 14:37:22 fetching corpus: 1900, signal 137848/176304 (executing program) 2022/10/02 14:37:22 fetching corpus: 1950, signal 139486/178500 (executing program) 2022/10/02 14:37:22 fetching corpus: 2000, signal 140220/180057 (executing program) 2022/10/02 14:37:23 fetching corpus: 2050, signal 141040/181588 (executing program) 2022/10/02 14:37:23 fetching corpus: 2100, signal 142061/183313 (executing program) 2022/10/02 14:37:23 fetching corpus: 2150, signal 143634/185337 (executing program) 2022/10/02 14:37:23 fetching corpus: 2200, signal 145590/187652 (executing program) 2022/10/02 14:37:23 fetching corpus: 2250, signal 147821/190123 (executing program) 2022/10/02 14:37:23 fetching corpus: 2300, signal 150125/192622 (executing program) 2022/10/02 14:37:23 fetching corpus: 2350, signal 150983/194164 (executing program) 2022/10/02 14:37:23 fetching corpus: 2400, signal 151679/195493 (executing program) 2022/10/02 14:37:23 fetching corpus: 2450, signal 152218/196760 (executing program) 2022/10/02 14:37:23 fetching corpus: 2500, signal 153176/198325 (executing program) 2022/10/02 14:37:24 fetching corpus: 2550, signal 154488/200043 (executing program) 2022/10/02 14:37:24 fetching corpus: 2600, signal 155501/201535 (executing program) 2022/10/02 14:37:24 fetching corpus: 2650, signal 156110/202806 (executing program) 2022/10/02 14:37:24 fetching corpus: 2700, signal 157336/204447 (executing program) 2022/10/02 14:37:24 fetching corpus: 2750, signal 158291/205937 (executing program) 2022/10/02 14:37:24 fetching corpus: 2800, signal 158949/207178 (executing program) 2022/10/02 14:37:24 fetching corpus: 2850, signal 159599/208409 (executing program) 2022/10/02 14:37:24 fetching corpus: 2900, signal 160527/209773 (executing program) 2022/10/02 14:37:25 fetching corpus: 2950, signal 162252/211622 (executing program) 2022/10/02 14:37:25 fetching corpus: 3000, signal 162895/212839 (executing program) 2022/10/02 14:37:25 fetching corpus: 3050, signal 164404/214519 (executing program) 2022/10/02 14:37:25 fetching corpus: 3100, signal 165066/215669 (executing program) 2022/10/02 14:37:25 fetching corpus: 3150, signal 165767/216917 (executing program) 2022/10/02 14:37:25 fetching corpus: 3200, signal 166554/218147 (executing program) 2022/10/02 14:37:25 fetching corpus: 3250, signal 166964/219154 (executing program) 2022/10/02 14:37:25 fetching corpus: 3300, signal 167719/220384 (executing program) 2022/10/02 14:37:25 fetching corpus: 3350, signal 168561/221634 (executing program) 2022/10/02 14:37:26 fetching corpus: 3400, signal 169393/222852 (executing program) 2022/10/02 14:37:26 fetching corpus: 3450, signal 172038/224951 (executing program) 2022/10/02 14:37:26 fetching corpus: 3500, signal 172883/226121 (executing program) 2022/10/02 14:37:26 fetching corpus: 3550, signal 173601/227276 (executing program) 2022/10/02 14:37:26 fetching corpus: 3600, signal 174653/228558 (executing program) 2022/10/02 14:37:26 fetching corpus: 3650, signal 175253/229609 (executing program) 2022/10/02 14:37:26 fetching corpus: 3700, signal 175950/230657 (executing program) 2022/10/02 14:37:27 fetching corpus: 3750, signal 176359/231543 (executing program) 2022/10/02 14:37:27 fetching corpus: 3800, signal 176830/232531 (executing program) 2022/10/02 14:37:27 fetching corpus: 3850, signal 177555/233706 (executing program) 2022/10/02 14:37:27 fetching corpus: 3900, signal 178167/234766 (executing program) 2022/10/02 14:37:27 fetching corpus: 3950, signal 179062/235969 (executing program) 2022/10/02 14:37:27 fetching corpus: 4000, signal 179481/236860 (executing program) 2022/10/02 14:37:27 fetching corpus: 4050, signal 180054/237841 (executing program) 2022/10/02 14:37:27 fetching corpus: 4100, signal 181076/239009 (executing program) 2022/10/02 14:37:27 fetching corpus: 4150, signal 181779/240006 (executing program) 2022/10/02 14:37:28 fetching corpus: 4200, signal 182850/241222 (executing program) 2022/10/02 14:37:28 fetching corpus: 4250, signal 183720/242252 (executing program) 2022/10/02 14:37:28 fetching corpus: 4300, signal 184581/243278 (executing program) 2022/10/02 14:37:28 fetching corpus: 4350, signal 185317/244257 (executing program) 2022/10/02 14:37:28 fetching corpus: 4400, signal 186223/245299 (executing program) 2022/10/02 14:37:28 fetching corpus: 4450, signal 186726/246163 (executing program) 2022/10/02 14:37:28 fetching corpus: 4500, signal 187619/247180 (executing program) 2022/10/02 14:37:28 fetching corpus: 4550, signal 188347/248041 (executing program) 2022/10/02 14:37:28 fetching corpus: 4600, signal 188993/248940 (executing program) 2022/10/02 14:37:29 fetching corpus: 4650, signal 189972/249919 (executing program) 2022/10/02 14:37:29 fetching corpus: 4700, signal 190646/250800 (executing program) 2022/10/02 14:37:29 fetching corpus: 4750, signal 191163/251613 (executing program) 2022/10/02 14:37:29 fetching corpus: 4800, signal 191783/252440 (executing program) 2022/10/02 14:37:29 fetching corpus: 4850, signal 192674/253382 (executing program) 2022/10/02 14:37:29 fetching corpus: 4900, signal 193723/254316 (executing program) 2022/10/02 14:37:29 fetching corpus: 4950, signal 194261/255128 (executing program) 2022/10/02 14:37:29 fetching corpus: 4996, signal 194783/255893 (executing program) 2022/10/02 14:37:29 fetching corpus: 4996, signal 194783/256485 (executing program) 2022/10/02 14:37:29 fetching corpus: 4996, signal 194783/257105 (executing program) 2022/10/02 14:37:29 fetching corpus: 4996, signal 194783/257719 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/258373 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/258974 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/259606 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/260220 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/260861 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/261479 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/262051 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/262702 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/263290 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/263895 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/264502 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/265101 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/265735 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/266366 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/266987 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/267573 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/268171 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/268778 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/269374 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/270005 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/270619 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/271242 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/271867 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/272503 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/273102 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/273705 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/274324 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/274959 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/275588 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/276195 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/276818 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/277435 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/278063 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/278681 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/279305 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/279369 (executing program) 2022/10/02 14:37:30 fetching corpus: 4996, signal 194783/279369 (executing program) 2022/10/02 14:37:33 starting 8 fuzzer processes 14:37:33 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="685c7951529c6ed99ce192c87e42cc8fe1b9cfca4d4c3610d628b00a45e4fbc9363d3ec8256f400635a9b08316beaf06690bf074df8d28a76f2e9af05a51e8cefb1579a3d330c6635a418c04c1331266c0af9cf179010f047f7f3d7e83764bb182017081df2c182d34a36779e50a19c053623d4587c2e185cbfcd1854e2d78eb4378796a38193ffa5aead8f16e0b633b1b7e637074cd9eb88837d6156d8622ef41b182ead1c7b8d11f6eee43d9bd956dd94154248ab26f30a77399bd2b4f9421ee1d0ebc502f91e21b35b92483075d7f0a40e2cfa8c56994970ef6d428f7502cd2a598e6", 0xe4, 0x5}, {&(0x7f0000000180)="3745de60926afb58ac5d3b4d47f5922447537e771a902dfbb5bf05d5", 0x1c, 0x9}, {&(0x7f00000001c0)="050f30fcb4e46f8399c3de2459aae0fe1a204039174d", 0x16, 0x2}], 0x60000, &(0x7f0000000280)={[{@dots}, {@fat=@check_strict}, {@dots}, {@dots}, {@nodots}, {@fat=@flush}, {@dots}, {@nodots}, {@dots}], [{@context={'context', 0x3d, 'staff_u'}}]}) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000300)) r1 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x3f, 0x3, &(0x7f0000000600)=[{&(0x7f00000003c0)="e712ef625676c6f6eab176cdf327193065c12b177c4b7582e08b58e99a727a84bd0b0393f8e4d26d86c58e5828c148ac9953e7b77f770722bc36c96661b96cfef2d21eb30cb0b1aa4b780acda88a4bcb493d0e85457220afba05019be274980339355f9bb07d4b7da309ec4f69be689023cb6d5a8b44e3a5b54cf969d58b3cffd4955f901762bc3c484bf1498eaa1728b2176862615f12fcded8ca818488650422bd985059a2b9c7f96ef975def5e6979c1def310a25deebf961dd75640ff35aef8424f1ae5a6788e031ab034d8b50261813e6e1261bbe5c3882960e40109e4c3388", 0xe2}, {&(0x7f00000004c0)="104e3d877de0e5edb3d5abeb9b00cb84a8c72c63e7aee19ceb24f16339929e7daa2c162e002a7b9cb6dd3dae8d869d1f9abcbcb1eff14f6da4895087bc51aa2c900f6ea84978e38fad80e221218b419b20b5e9aa109044c212f6bae745da6264483b8a9974202dad8ec497b51cb4302988f78e44f43cceccbabfedb15d9f5452217ee6a5fc35eb65767be75d9203177a758f3b7ce1a9ac099d36a573ca3e3d908d3d687538c7587e3705d35eb51b44741f615ecfb09a59da35013a2a1a31316acc1ca33f19f53e4677e12202c8d2613a922b24c47217d5b4aa", 0xd9, 0x6}, {&(0x7f00000005c0)="b286617dc18ffd9bd254cdb617eefe96d706d4fb9db823cbb0fa56fb3f2b2421", 0x20, 0xa9}], 0x1002000, &(0x7f0000000680)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) r2 = openat2(r1, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x22c800, 0xd3}, 0x18) flistxattr(r2, &(0x7f0000000740)=""/30, 0x1e) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000780), 0x4) r3 = syz_mount_image$iso9660(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x8, 0x1, &(0x7f0000000880)=[{&(0x7f0000000840)="9fe1a056ebb65d25a18ff8d23b3826e080dfab", 0x13, 0x6}], 0x1000000, &(0x7f00000008c0)={[{}], [{@permit_directio}, {@pcr={'pcr', 0x3d, 0x1c}}, {@subj_user={'subj_user', 0x3d, ',,+]'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000d80)={0x5, &(0x7f0000000cc0)=[{0x8, 0xe9, &(0x7f0000000940)="ba47ac4acaeb366b67ff18d71d2e74a51292a04e46766b27e294e32d023ba0210465834442bc46191c5becb9c16392fb626b307253374a8820947e13c66b3a34135cb60d3c0afdecd73e6452a5c5c7e0dc8e3a755c0d489e723697a296348e031b73ba8eac441b733fc0bf36c3e66302427deedc84dda26edaa298666e397e9b9529cf611c1136a382dcaada0e8bf0e4d162a76e63cb9104b76c49e290f0b903b6fe5cb4ea32059864fd786305eced3b513dfa06875e9cf21363704faff3bd1dda9fa79419323a9d5c08daa8ad9246194959f78ad00d10ee1ab263d10410a0774c2b9557719aa992f3", 0x1, 0x1}, {0x100, 0x55, &(0x7f0000000a40)="d76ba54c9e1d0db5520dfc4ec383a4ef8c7025a365c1ecfa625f768dd90cd8d7c7782fc282d24984819193b4113f9b97cec0214bb7c857abe7f045196ca1a03c6e3d76e73fa7d61a9016585991ec3ca803de570dd7", 0x1, 0x1}, {0x3, 0xbc, &(0x7f0000000ac0)="824f335fb8b8cff895dcda1bb5a942d64050893aea78f29069fb853e67ef7f6f7d4ce45617257c8ef8bc4807c9eaa5736be153a4d9229866bfa76f7ffb6248a7666e42e33cbdcfc63af7784a34f1ff28ac90ba64a6c0d27d5f804826a6d53898ca310f57e360f4d3abea0b8687f6ba1c5e66d7331cb338014a42b342d34323a79c188e20b12fb81f25dbe9a34e781e0ac069494f823808411c41d82229469fc48e23c7794170910f9186cc7ec818cfab2e7d41baecae6358a0242c42", 0x1, 0x1}, {0x286b, 0x23, &(0x7f0000000b80)="a373cb6d3bdb86a952d081b2744743b5d00bc1fd038a5a841a8741d376133e19a9ee75", 0x1, 0x1}, {0x45, 0xe9, &(0x7f0000000bc0)="186ce3cdc6c1517dd0e614fdc17643b2c65a1a23ff6be81425a4d63ec1e906bbc46ffdd4a89ea505832b3e2de3c22211ab36f3b4b70455c990a53c203c160116e1a7f49653f56bec8bf23b2307de2a54a6e57f3bbda2bed51bb90f94978e1bca38ff3beaa2de7c917eca28b1e373d9bcff3bb5c39c420eb59d8a3f6203feef569037d2b194b63574b9db38409b0aa1047c5c036cb326ac39869562dc8e5a705c066d5dd8b0d5367312c0854f7a6c3bb60e928ac9889a6293dd6ce3cb327d328de23239daf8af12bfd5d5bd327beb2e5625d0a86987dad16e01a612ca36e683b0b52a0e27d88b100aa2", 0x1, 0x1}]}) lseek(r1, 0x8, 0x2) openat(r1, &(0x7f0000000dc0)='./file0\x00', 0x54000, 0x7e6f0324b8288b66) symlinkat(&(0x7f0000000e00)='./file0\x00', r2, &(0x7f0000000e40)='./file0\x00') r4 = openat2(r2, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x1, 0x3}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000f00)={{{@in=@multicast2, @in=@broadcast}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@loopback}}, &(0x7f0000001000)=0xe8) openat(r0, &(0x7f0000001040)='./file0\x00', 0x8000, 0x10) r5 = signalfd(r4, &(0x7f0000001080)={[0x1]}, 0x8) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000010c0)={0x0, @multicast2, @local}, &(0x7f0000001100)=0xc) bind$packet(r5, &(0x7f0000001140)={0x11, 0xbaf4b6394789d136, r6, 0x1, 0x20, 0x6, @random="1f15d403c73f"}, 0x14) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000001180)) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) 14:37:33 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x804, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xf801}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x2004404c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000841}, 0x20040000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x2000800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = pidfd_getfd(r2, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x4, 0x4, 0x1, 0x7, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, @mcast2, 0x20, 0x0, 0x9}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000006c0)={0x0, @private}, &(0x7f0000000700)=0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x2f, 0x69, 0x2, 0x47f3878e, 0x68, @dev={0xfe, 0x80, '\x00', 0x3a}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x80, 0x80000000, 0x3}}) getpeername$packet(r4, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1c0, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000ac0)={r10, 0x1, 0x6, @broadcast}, 0x10) accept4$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0}, &(0x7f0000000b40)=0x14, 0x80000) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b80)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e24, 0x1ff, 0x8, 0x8001, 0x2, 0xa0, 0xa0, 0x32, r11, r6}, {0x9, 0x4, 0xfffffffffffffffc, 0x3, 0x5, 0x4, 0xfffffffffffffffd, 0x7fffffff}, {0xdf, 0x5, 0x0, 0xfddd}, 0x8, 0x6e6bbb, 0x2, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x3501, 0x0, 0x1, 0x1f, 0xd9b, 0x8, 0x2}}, 0xe8) r12 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000cc0)={'ip6gre0\x00', r7, 0x29, 0x8, 0x1, 0x5ad, 0x4a, @remote, @empty, 0x700, 0x1, 0x6, 0x20}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000000fc0)={0x164, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x83f33f347ff4acca}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x164}}, 0x800) 14:37:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = syz_io_uring_setup(0x3d9c, &(0x7f0000000040)={0x0, 0x7da4, 0x2, 0x3, 0x15f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x3) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000200)={{r0}, 0xa, &(0x7f0000000180)=[0x2, 0x5, 0x8, 0x0, 0x1, 0x1, 0x6c, 0x4, 0x6, 0x94b0], 0x0, 0x3, [0x8, 0x0, 0x6, 0xa21]}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000280)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000300)={0x0, 0x7, 0x6, 0x800, 0x14, "5de562b000b55bd2"}) syz_io_uring_setup(0x5451, &(0x7f0000000340)={0x0, 0x6983, 0x4, 0x1, 0x1de, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) r4 = gettid() clone3(&(0x7f0000000700)={0x209000000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2a}, &(0x7f0000000500)=""/169, 0xa9, &(0x7f00000005c0)=""/128, &(0x7f00000006c0)=[0xffffffffffffffff, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x0, 0xffffffffffffffff], 0x8, {r0}}, 0x58) r5 = inotify_init1(0x40000) fcntl$getown(r5, 0x9) r6 = inotify_init() ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000000780)={{r1}, "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"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001780)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) inotify_add_watch(r7, &(0x7f00000017c0)='./file0\x00', 0x804) syz_io_uring_setup(0x2c33, &(0x7f0000001800)={0x0, 0xfcd6, 0x8, 0x3, 0x367, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000001880)=0x0, &(0x7f00000018c0)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000001980)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r7, 0x80, &(0x7f0000001900)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x0, 0x0, 0x1}, 0x96ba) chroot(&(0x7f00000019c0)='./file0\x00') [ 63.789502] audit: type=1400 audit(1664721453.260:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:37:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}}, 0x8) r1 = socket$inet(0x2, 0x800, 0x8) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@empty, @remote, 0x1, 0x1, [@empty]}, 0x14) sendto$inet(r1, &(0x7f0000000100)="e78bb47128a6a128b5a8bafdc4b977d91effadc1a8f21bd1fd81173c618bfe2ee9fc84efa766ad7e39a277b4c1541a860af3da66f07bdb1d3b5555cc50b4e03890f9007c5fa16a4d84b7a40af818a6c498309b0d286e2fc3d60d25212f34f3e75f4d40e8f6365cdd4da9c3edcb91b5e046aa700b8d959e9eec650544f68b1ce864246850dabf6d216541c073d5e130b795b53f68f75693b0807ef2433055b83471ed2a4d1387ca80cc2c9579a70e29311731fee4d86f73967b0cecfd4eeae8822320e5b35f425b2bd64a46358777b01c82f40035be6abfb13446a04d359b7387e62c0e", 0xe3, 0x8004, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0xb2, [0x2, 0x6, 0x400, 0x2, 0xa43, 0x4], 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)=""/178}, &(0x7f00000003c0)=0x78) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in6=@remote}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) r2 = openat$cgroup_ro(r1, &(0x7f0000000540)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000640)={'nat\x00', 0x0, 0x3, 0x66, [0x4, 0x2, 0xfff, 0x2, 0xc000000000000000, 0x9], 0x4, &(0x7f0000000580)=[{}, {}, {}, {}], &(0x7f00000005c0)=""/102}, &(0x7f00000006c0)=0x78) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x1010c0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000840)={0x1, 0x1, 0x1000, 0x77, &(0x7f0000000740)="7899b37de7af244eda0c52c86a11df2ea27c2e51e8879d278246764c4c8d8d55ec370db7be0e6cbaf4fbacfbc0d1eba0b9c2525e52446521698b7623f5953dbbadc2a6c00beafdc5b45e7ca955e593be9e324580afac9dd47859e7b68ad8c6bbab164890c8fd77af7752b7d188542cdae5b126484e2bed", 0x7e, 0x0, &(0x7f00000007c0)="8c7c856f3f89398fd837acc3c7fa2aeab2e0ef8db44e27d36102814690021b32f6772dce7073f82dae8e28e8eb8d003558d0f50579244220aee5afd307d58da0e9f6f2d3985d5445a72310c956b5b9609496762732cc99b4513f47bca6e85183e3496e73ed1e51102da1bb0ecef915b0b3c3192d3d0b6ac50d8e9c0fd589"}) r4 = signalfd4(r3, &(0x7f00000008c0)={[0x2]}, 0x8, 0xc0800) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000900)={@broadcast}, &(0x7f0000000940)=0xc) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001980)=@get={0x1, &(0x7f0000000980)=""/4096, 0xaa74}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r4) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, r5, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x40400c1}, 0x5) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000001b00)={0x1, 0x100}) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r4, {0x6392}}, './file0\x00'}) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000001cc0)={'nat\x00', 0x0, 0x4, 0x9a, [0x7ff, 0x10001, 0x100000001, 0x7, 0x681, 0x9], 0x7, &(0x7f0000001b80)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001c00)=""/154}, &(0x7f0000001d40)=0x78) 14:37:33 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x94401, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x9, 0x1, 0x2, 0x0, 0x5, 0x7}, {0x2, 0x4, 0x6, 0x7f, 0x6, 0xfff}], ['\x00', '\x00', '\x00']}) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)={0x0, 0x72, "9aa43849253a08c1056129bb88337883ab811a0a6cc91ad8734bae3159d2e2b457ed3786c3bba1fe07565257b09f26b6bfedfa7851f4463991bf262ef3e78b9ba8fc96094ff456985f3b6bcb1edbbeca207c6c07d263da17fa2f8bc3e3d0c7c449424ac8b925e6d84fd01800b444ed5795bc"}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000240)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x2, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20bb15804e70dd85) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f00000003c0)=0xcfc) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000400)=0x8) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0xfffffffffffffc01]}, 0x8, 0x80000) fsync(r3) fadvise64(r3, 0x1, 0x7fffffff, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000480)) fchdir(r1) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1e4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xee}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xcc8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x104, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x6, 0x5, 0x6b, 0x48, 0xb, 0x0, 0x1, 0x6c, 0x9, 0xc, 0xc, 0x36, 0x9, 0x4, 0x16, 0x1, 0x12, 0x24, 0x48, 0x30, 0xc, 0x6, 0xc, 0x48, 0x60, 0x18, 0x9, 0x5c, 0xc]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x36, 0x3, 0x24, 0x16, 0x3, 0x2, 0x4, 0x30, 0x5, 0x2, 0x3, 0x1e, 0x48, 0x3, 0x6, 0x5, 0x24, 0x4, 0x6c, 0x18, 0x16, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6c, 0x4, 0xe01bbe59cff413e8, 0x12, 0x24, 0x18, 0x18, 0x48, 0xc, 0x36, 0x4, 0x18, 0xb, 0x48, 0x1b, 0x0, 0xb]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x8}, {0x6, 0x1}, {0x1, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x1}, {0x1, 0x4}, {0x2, 0xa}, {0x6, 0x5}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x6, 0x5}, {0x5, 0x7}, {0x4, 0x7}, {0x7, 0x5}, {0x7}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0x2}, {0x7, 0xa}, {0x2, 0x1}, {0x6, 0x9}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x4, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0x5}, {0x4, 0xa}, {0x6, 0x9}, {0x1, 0x6}, {0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0x1}, {0x5, 0x4}, {0x7, 0x7}, {0x6}, {0x3, 0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0xa}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x7, 0x5}, {0x1, 0x6}, {0x5, 0x1}, {0x2, 0x4}, {0x4, 0x7}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x0, 0x7, 0x5, 0x5, 0x400, 0xbf00]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x1}, {0x6, 0x6}, {0x2, 0xa}, {0x5}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x8}, {0x1, 0x3}, {0x4, 0x2}, {0x6, 0x7}, {0x2, 0x5}, {0x5, 0x5}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0x5}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0xa}, {0x5, 0x2}, {0x6, 0x5}, {0x3, 0x4}, {0x1, 0x1}, {0x6, 0x3}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0xa}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x5, 0x0, 0x4000, 0x8, 0x7fff, 0xf67]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x880}, 0x24048880) fcntl$getflags(r2, 0x40a) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000780)={0x9, 0x0, 0x7, 0x2, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000007c0)={0x40000001}) fsync(r0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000840)=0x401) 14:37:33 executing program 5: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x3331, 0x44000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f00000000c0)=""/60, 0x100000001}) io_setup(0x4ce6e050, &(0x7f0000000140)=0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540), 0x200000, 0x0) io_submit(r1, 0x7, &(0x7f00000017c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x100, r0, &(0x7f0000000180)="d928942f5c7c9da5e14c2aab5649db09168e835bdd52a9ed0b7d88c847fcd247b9f66054a1bf07c00abc281f1be0524fd4e18518eef3e48329246312610a3acf234fa57ec672b4d56dc0a3fc35a4671b498d970eb514325f7107eca2aafc5303a7f1bbb1c2202ddefec60e80a6cdac4a7de90f5c0e6b850467fb00730d07b11215ac30ed9cf82b844d729cfc4cc3ffc83d64aacc73db84f2a5e51409a2623c2af3890acecdd11fc2775922fc511dfda964fed0f1ff", 0xb5, 0xfff, 0x0, 0x2, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2e50, r2, &(0x7f0000000280)="76d45c4af15dda2c34d820823140aa21d52bea275c8131fd2c86175d1c5cf1b17f849e46894554320015a4da6449a910d6f1f8b22e33be4caa5f402fd167f4d8dedc52", 0x43, 0xec, 0x0, 0x1, r0}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0x4c16, r0, &(0x7f0000000340)="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", 0x1000, 0x1, 0x0, 0x1}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r0, &(0x7f0000001380)="37d6059e537906d1", 0x8, 0xfffffffffffffffb, 0x0, 0x2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000001400)="cb2146028204bbb65cb2e1ff68e263345c0ac2c6c83f42037ae6758f15dad818991ad7875a63fdc54b894aa4f4210480c1f1f2d382eb811ffbdacf97806c5e0cb3a0836c147c2ea9fd551e3229816cc0d7cd4f62007e3107f1048b2ecae3e2995163f863c9dcd009f34063a6aa5a022109667eeca26d82c873144f1ea9ac1ada3e0a3a5b9fb3f080802647a7ae2b42170236ce433414c1d48a06c424ab138d684334e4ec2aa7e45440bdfbe262cf878e68a1136fb83654ea065ed5953aeb5e", 0xbf, 0x56d80, 0x0, 0x4, r3}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0xd6f, r4, &(0x7f0000001580)="cf175718fbee2bbcf8958f52b756492e63812b2e9f091cbea00d1e20fb73ed37ac14d848540a2cdb66d49853000fd279396c3edab0ed7f0b6c8535d8e2d5986bfcc3d532b61375365a5aaeb8eb46dd0244f9ffe29300692feac06474128da7d902b0007670bb8527ea4490ead2c594fc40706b1fb351a5d25a1c9a782e4b2a0c0bd3f6436722ab412a007e9e3c93c1889a47a4082da4001fa8edc5fb72a009996ac5c61ac74ddd2dde7d438b004f96c3974725531bea0664217b9ff0d80bbaab0e8a58faeceb38344a91264646", 0xcd, 0x0, 0x0, 0x1, r0}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x100, r0, &(0x7f00000016c0)="c4702a3024b3d4294f3748fbf686361d30484cb2700ba4462bc471c58053a5843dd7c8e7402fe19096f1aa5299f59ad279f80edbb53fe4eadde7a78433acdac3d4833f029e810c4de7ef112266cf93373be29c9b8fbb80b1abf8176bbff6267cf5bb6e4a99b9a0ace0e1fbe3cc6446cb263adbcde9dd7d97750585955e40835f67722c2991c28bf9b6c3a773aa521c0e8c4bb036ab2c06adc5dae88f0a4ddd", 0x9f, 0x3, 0x0, 0x7, r0}]) io_setup(0x4, &(0x7f0000001800)=0x0) io_destroy(r5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) lseek(r0, 0x9, 0x4) r6 = fsopen(&(0x7f0000001840)='esdfs\x00', 0x1) io_submit(r1, 0x3, &(0x7f0000002a80)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x6, 0x2, r6, &(0x7f0000001880)="3afe7e51b45fc321b2332860840eba32ffe571345a5ce12b94e2622760b8352b1f7abcda7b3d8a206819673d8a0a2d2c650a011da8b664dfd05cb6d9350ed3bf83bd512f7c59cf0a6871e4bf96b8efb287d8c2ee0a43f29d8ca4c86a6ba61398ad9924d36355", 0x66, 0x8, 0x0, 0x0, r4}, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x7, 0x100, r0, &(0x7f0000001940)="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", 0x1000, 0x3, 0x0, 0x1, r4}, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x6, 0x7, r3, &(0x7f0000002980)="56a9a423191599c049fdc79346b8c23f6169ec4c54df0baaf580fa45cddd51a6cd44483deeb3dcc66b2f65133c098f30c6dd6a072b906cfe72080302cac09ad2257caeebe066c7c754afe22a5b21ef8f6678cf59fb91571cdac4c29df4fffa1496ce15b61c5e06a8bc16a3f572bce30155b07e4256a09e23b286d4fba28d698424895856bdd24389b4441a11d2ebbce91adc79232441cf42c0fa4a4d1f467026aafb65ae804020", 0xa7, 0xffff, 0x0, 0x1}]) io_setup(0x9, &(0x7f0000002ac0)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000002b00)={{0x1, 0x1, 0x18, r0, {r0}}, '.\x00'}) r10 = dup2(0xffffffffffffffff, r6) io_submit(r7, 0x2, &(0x7f0000002c80)=[&(0x7f0000002b80)={0x0, 0x0, 0x0, 0x7, 0x8f, r9, &(0x7f0000002b40)="619be9dbe303f00d188fb8c680f1911a8d7a668d1b7d9b8bb2fd47dede40ee60f81093d6287a9c55", 0x28, 0x8, 0x0, 0x1, r3}, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x2, 0x2, r2, &(0x7f0000002bc0)="60019447c95168435b283870dd9470422a8f7ef3b7d63144613223cc5be698c692a16290abf60e30afc57778905d2fcc8677fe8c38897cbf89ba37576599d2d4163aaf610a6a2189e3ad788ad519905583de2964028159e9dc068dafb3d1db6d43a8d7085f30fec2499f99d4b7292392dfa7", 0x72, 0x8, 0x0, 0x0, r10}]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000002cc0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) fsmount(r11, 0x1, 0x0) 14:37:33 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x28}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12020000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xe7}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x810) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '\xe1\\-:*{@:#\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r3) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x4, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x40001) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000840), r3) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xed}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8881}, 0x40010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40804) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ac0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 14:37:33 executing program 7: fallocate(0xffffffffffffffff, 0x47, 0xe9a, 0x40) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f00000000c0)=""/203, 0xcb}, {&(0x7f00000001c0)=""/101, 0x65}], 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x401, 0x4) r0 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4, 0x1a0) r1 = accept4$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, &(0x7f0000000380)=0x10, 0x80000) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x14000, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0x1000}}, {@uid_lt}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&-}\''}}, {@obj_user={'obj_user', 0x3d, '-@'}}]}}) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000540)) r2 = syz_mount_image$nfs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0xa47, 0x4, &(0x7f0000000900)=[{&(0x7f0000000600)="339343", 0x3}, {&(0x7f0000000640)="f97acffce5a65afe2585001a98718260fbb5064f1f68f0e6e9f7d2b412b6d7ed68ee1646360df7fad64341319e97d7b976fa87f7a2054444396102e3c6d978b9ac2ee7b8e2d1627a023fc2c4662d3d3b5fbd9de7010d800dc4fcb4be7ec05cb2d1afef5502a380d76ff6fb609c0c7adecd6369daced670731b4c28553ac16fb43e8123282838ed1e85e5647eef18218a3a897ceedf964e562865dd", 0x9b, 0x4}, {&(0x7f0000000700)="161f20125780bb5be43b16dd9e4c7601621c6daaba214a42fb43ad619b1b17c3799a31f1cc555434d4498fe0ae0de0ea03bcdfb1764da602f5a87d861921e1a9f6aebf28b7b878215fc858e81d3c161d8ec1cb68da1615540319247981e4c4cbf9dd416da66fdf0274d16f91eeed682a05cd8ca9c5bc3e1d900540da09ea81ee041a630a6cb456f1ee5da3f487324cba8ea1cd16074c30e12e43ff1678ebd536cf528bf53531e24401ab35233a7684dd595d78d33926987ab17a596fb770fbe5c250feb756ee3d41f69d", 0xca, 0x700}, {&(0x7f0000000800)="9190ab74e12e6bdf3b4b3438718af5069ebf1339c1f062640a24e41875a863b3b3427030a055264ab5b08639d6a511c6c65cab2f41cb4a5cb50abbe6e602030851b2f6bc1abc9e2c0ee061056207743cb375054ae1b28c14d915752fd8c87b6c3a77f59814e15cbe4bafab8f022e0d698cce4afa809ace4b72338b3a6e8d93f5136fd90c85851a450bdaee517decc22fefeab495bb8186e5bfdb758204a14453a6c19f058fa0408782adc7e0bd7c696d11712d1040800a3a47b83ccff546ba0daa65cfd9b107b29ac1dd38caea58b87dee", 0xd1, 0x2}], 0x2000, &(0x7f0000000980)={[], [{@subj_user={'subj_user', 0x3d, 'fsmagic'}}]}) r3 = openat(r2, &(0x7f00000009c0)='./file1\x00', 0x21c0, 0x10) r4 = openat(r3, &(0x7f0000000a00)='./file1\x00', 0x48100, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r1, {0xee00, r5}}, './file1\x00'}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0x50000, 0x0) openat(r8, &(0x7f0000000b00)='./file0\x00', 0x105100, 0x100) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000000b40)) lstat(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000b80)='./file2\x00', &(0x7f0000000bc0), 0x12010, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@cache_none}, {@version_L}, {@version_u}, {@access_uid={'access', 0x3d, r7}}, {@loose}], [{@uid_eq={'uid', 0x3d, r9}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, 'nfs\x00'}}, {@smackfsfloor}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@smackfsdef={'smackfsdef', 0x3d, '---/$,'}}, {@subj_user={'subj_user', 0x3d, 'obj_user'}}, {@fsname={'fsname', 0x3d, ':'}}]}}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000e00)=0x1) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000e40), 0x200, 0x0) openat(r10, &(0x7f0000000e80)='./file2\x00', 0x20000, 0x2) [ 65.119537] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.121575] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.124534] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.128038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.132107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.135318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.141426] Bluetooth: hci0: HCI_REQ-0x0c1a [ 65.186017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.188958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.193076] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.200493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.202961] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.208887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.216852] Bluetooth: hci1: HCI_REQ-0x0c1a [ 65.263042] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.275433] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.277564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.279397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.282506] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.284048] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.285437] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.287032] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.291049] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.292389] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.297271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.303748] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.305092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.307237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.311815] Bluetooth: hci2: HCI_REQ-0x0c1a [ 65.313398] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.314749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.316503] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.317917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.319371] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.324937] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.326430] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.328005] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.329564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.330395] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.341168] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 65.341261] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 65.348777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.350242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.351278] Bluetooth: hci4: HCI_REQ-0x0c1a [ 65.351897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.357092] Bluetooth: hci7: HCI_REQ-0x0c1a [ 65.358281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.365890] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.371201] Bluetooth: hci3: HCI_REQ-0x0c1a [ 65.372182] Bluetooth: hci6: HCI_REQ-0x0c1a [ 65.411923] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.422263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.430499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.443210] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.444864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.460950] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.205945] Bluetooth: hci0: command 0x0409 tx timeout [ 67.269671] Bluetooth: hci1: command 0x0409 tx timeout [ 67.332957] Bluetooth: hci2: command 0x0409 tx timeout [ 67.396694] Bluetooth: hci4: command 0x0409 tx timeout [ 67.396738] Bluetooth: hci3: command 0x0409 tx timeout [ 67.397473] Bluetooth: hci6: command 0x0409 tx timeout [ 67.460662] Bluetooth: hci7: command 0x0409 tx timeout [ 67.525675] Bluetooth: hci5: command 0x0409 tx timeout [ 69.252671] Bluetooth: hci0: command 0x041b tx timeout [ 69.316680] Bluetooth: hci1: command 0x041b tx timeout [ 69.380717] Bluetooth: hci2: command 0x041b tx timeout [ 69.444652] Bluetooth: hci6: command 0x041b tx timeout [ 69.445783] Bluetooth: hci3: command 0x041b tx timeout [ 69.445816] Bluetooth: hci4: command 0x041b tx timeout [ 69.508702] Bluetooth: hci7: command 0x041b tx timeout [ 69.572820] Bluetooth: hci5: command 0x041b tx timeout [ 71.300717] Bluetooth: hci0: command 0x040f tx timeout [ 71.364649] Bluetooth: hci1: command 0x040f tx timeout [ 71.429215] Bluetooth: hci2: command 0x040f tx timeout [ 71.492710] Bluetooth: hci3: command 0x040f tx timeout [ 71.492736] Bluetooth: hci4: command 0x040f tx timeout [ 71.493189] Bluetooth: hci6: command 0x040f tx timeout [ 71.556856] Bluetooth: hci7: command 0x040f tx timeout [ 71.620729] Bluetooth: hci5: command 0x040f tx timeout [ 73.349675] Bluetooth: hci0: command 0x0419 tx timeout [ 73.413671] Bluetooth: hci1: command 0x0419 tx timeout [ 73.477642] Bluetooth: hci2: command 0x0419 tx timeout [ 73.540658] Bluetooth: hci4: command 0x0419 tx timeout [ 73.540678] Bluetooth: hci3: command 0x0419 tx timeout [ 73.541702] Bluetooth: hci6: command 0x0419 tx timeout [ 73.604711] Bluetooth: hci7: command 0x0419 tx timeout [ 73.668698] Bluetooth: hci5: command 0x0419 tx timeout 14:38:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8919, &(0x7f0000000000)={'lo\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8918, &(0x7f0000000000)={'lo\x00'}) listen(r0, 0x4) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e21, @private=0xa010101}, 0x10) ioctl$BLKZEROOUT(r3, 0x40086602, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)) 14:38:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8919, &(0x7f0000000000)={'lo\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8918, &(0x7f0000000000)={'lo\x00'}) listen(r0, 0x4) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e21, @private=0xa010101}, 0x10) ioctl$BLKZEROOUT(r3, 0x40086602, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)) 14:38:25 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x8040, 0x4, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, r3, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ff6000/0x1000)=nil) [ 116.143611] audit: type=1400 audit(1664721505.614:7): avc: denied { open } for pid=3858 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 116.145165] audit: type=1400 audit(1664721505.614:8): avc: denied { kernel } for pid=3858 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 116.158799] ------------[ cut here ]------------ [ 116.158820] [ 116.158822] ====================================================== [ 116.158826] WARNING: possible circular locking dependency detected [ 116.158830] 6.0.0-rc7-next-20220930 #1 Not tainted [ 116.158836] ------------------------------------------------------ [ 116.158839] syz-executor.5/3861 is trying to acquire lock: [ 116.158845] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 116.158885] [ 116.158885] but task is already holding lock: [ 116.158888] ffff88800fb88420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 116.158915] [ 116.158915] which lock already depends on the new lock. [ 116.158915] [ 116.158918] [ 116.158918] the existing dependency chain (in reverse order) is: [ 116.158921] [ 116.158921] -> #3 (&ctx->lock){....}-{2:2}: [ 116.158934] _raw_spin_lock+0x2a/0x40 [ 116.158946] __perf_event_task_sched_out+0x53b/0x18d0 [ 116.158957] __schedule+0xedd/0x2470 [ 116.158971] schedule+0xda/0x1b0 [ 116.158984] exit_to_user_mode_prepare+0x114/0x1a0 [ 116.158997] syscall_exit_to_user_mode+0x19/0x40 [ 116.159009] do_syscall_64+0x48/0x90 [ 116.159027] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 116.159039] [ 116.159039] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 116.159053] _raw_spin_lock_nested+0x30/0x40 [ 116.159063] raw_spin_rq_lock_nested+0x1e/0x30 [ 116.159076] task_fork_fair+0x63/0x4d0 [ 116.159093] sched_cgroup_fork+0x3d0/0x540 [ 116.159107] copy_process+0x4183/0x6e20 [ 116.159118] kernel_clone+0xe7/0x890 [ 116.159127] user_mode_thread+0xad/0xf0 [ 116.159137] rest_init+0x24/0x250 [ 116.159149] arch_call_rest_init+0xf/0x14 [ 116.159167] start_kernel+0x4c6/0x4eb [ 116.159182] secondary_startup_64_no_verify+0xe0/0xeb [ 116.159196] [ 116.159196] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 116.159209] _raw_spin_lock_irqsave+0x39/0x60 [ 116.159219] try_to_wake_up+0xab/0x1930 [ 116.159232] up+0x75/0xb0 [ 116.159246] __up_console_sem+0x6e/0x80 [ 116.159262] console_unlock+0x46a/0x590 [ 116.159278] vprintk_emit+0x1bd/0x560 [ 116.159294] vprintk+0x84/0xa0 [ 116.159309] _printk+0xba/0xf1 [ 116.159321] kauditd_hold_skb.cold+0x3f/0x4e [ 116.159338] kauditd_send_queue+0x233/0x290 [ 116.159353] kauditd_thread+0x5f9/0x9c0 [ 116.159367] kthread+0x2ed/0x3a0 [ 116.159381] ret_from_fork+0x22/0x30 [ 116.159396] [ 116.159396] -> #0 ((console_sem).lock){....}-{2:2}: [ 116.159409] __lock_acquire+0x2a02/0x5e70 [ 116.159426] lock_acquire+0x1a2/0x530 [ 116.159442] _raw_spin_lock_irqsave+0x39/0x60 [ 116.159452] down_trylock+0xe/0x70 [ 116.159467] __down_trylock_console_sem+0x3b/0xd0 [ 116.159483] vprintk_emit+0x16b/0x560 [ 116.159498] vprintk+0x84/0xa0 [ 116.159514] _printk+0xba/0xf1 [ 116.159524] report_bug.cold+0x72/0xab [ 116.159540] handle_bug+0x3c/0x70 [ 116.159556] exc_invalid_op+0x14/0x50 [ 116.159573] asm_exc_invalid_op+0x16/0x20 [ 116.159584] group_sched_out.part.0+0x2c7/0x460 [ 116.159602] ctx_sched_out+0x8f1/0xc10 [ 116.159619] __perf_event_task_sched_out+0x6d0/0x18d0 [ 116.159630] __schedule+0xedd/0x2470 [ 116.159643] schedule+0xda/0x1b0 [ 116.159656] exit_to_user_mode_prepare+0x114/0x1a0 [ 116.159666] syscall_exit_to_user_mode+0x19/0x40 [ 116.159679] do_syscall_64+0x48/0x90 [ 116.159695] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 116.159707] [ 116.159707] other info that might help us debug this: [ 116.159707] [ 116.159710] Chain exists of: [ 116.159710] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 116.159710] [ 116.159725] Possible unsafe locking scenario: [ 116.159725] [ 116.159727] CPU0 CPU1 [ 116.159730] ---- ---- [ 116.159732] lock(&ctx->lock); [ 116.159738] lock(&rq->__lock); [ 116.159744] lock(&ctx->lock); [ 116.159750] lock((console_sem).lock); [ 116.159756] [ 116.159756] *** DEADLOCK *** [ 116.159756] [ 116.159757] 2 locks held by syz-executor.5/3861: [ 116.159765] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 116.159793] #1: ffff88800fb88420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 116.159820] [ 116.159820] stack backtrace: [ 116.159822] CPU: 1 PID: 3861 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 116.159835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 116.159843] Call Trace: [ 116.159846] [ 116.159850] dump_stack_lvl+0x8b/0xb3 [ 116.159868] check_noncircular+0x263/0x2e0 [ 116.159885] ? format_decode+0x26c/0xb50 [ 116.159901] ? print_circular_bug+0x450/0x450 [ 116.159918] ? simple_strtoul+0x30/0x30 [ 116.159933] ? format_decode+0x26c/0xb50 [ 116.159950] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 116.159968] __lock_acquire+0x2a02/0x5e70 [ 116.159989] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 116.160011] lock_acquire+0x1a2/0x530 [ 116.160027] ? down_trylock+0xe/0x70 [ 116.160044] ? lock_release+0x750/0x750 [ 116.160065] ? vprintk+0x84/0xa0 [ 116.160082] _raw_spin_lock_irqsave+0x39/0x60 [ 116.160093] ? down_trylock+0xe/0x70 [ 116.160109] down_trylock+0xe/0x70 [ 116.160125] ? vprintk+0x84/0xa0 [ 116.160141] __down_trylock_console_sem+0x3b/0xd0 [ 116.160158] vprintk_emit+0x16b/0x560 [ 116.160177] vprintk+0x84/0xa0 [ 116.160194] _printk+0xba/0xf1 [ 116.160208] ? record_print_text.cold+0x16/0x16 [ 116.160226] ? report_bug.cold+0x66/0xab [ 116.160244] ? group_sched_out.part.0+0x2c7/0x460 [ 116.160262] report_bug.cold+0x72/0xab [ 116.160280] handle_bug+0x3c/0x70 [ 116.160297] exc_invalid_op+0x14/0x50 [ 116.160330] asm_exc_invalid_op+0x16/0x20 [ 116.160342] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 116.160362] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 116.160374] RSP: 0018:ffff88803e5d7c48 EFLAGS: 00010006 [ 116.160383] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 116.160390] RDX: ffff88801d808000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 116.160398] RBP: ffff88803e5e8000 R08: 0000000000000005 R09: 0000000000000001 [ 116.160406] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800fb88400 [ 116.160413] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 116.160424] ? group_sched_out.part.0+0x2c7/0x460 [ 116.160444] ? group_sched_out.part.0+0x2c7/0x460 [ 116.160464] ctx_sched_out+0x8f1/0xc10 [ 116.160483] __perf_event_task_sched_out+0x6d0/0x18d0 [ 116.160497] ? lock_is_held_type+0xd7/0x130 [ 116.160511] ? __perf_cgroup_move+0x160/0x160 [ 116.160521] ? set_next_entity+0x304/0x550 [ 116.160539] ? update_curr+0x267/0x740 [ 116.160557] ? lock_is_held_type+0xd7/0x130 [ 116.160571] __schedule+0xedd/0x2470 [ 116.160588] ? io_schedule_timeout+0x150/0x150 [ 116.160604] ? rcu_read_lock_sched_held+0x3e/0x80 [ 116.160625] schedule+0xda/0x1b0 [ 116.160640] exit_to_user_mode_prepare+0x114/0x1a0 [ 116.160652] syscall_exit_to_user_mode+0x19/0x40 [ 116.160665] do_syscall_64+0x48/0x90 [ 116.160683] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 116.160696] RIP: 0033:0x7f522f58ab19 [ 116.160704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 116.160715] RSP: 002b:00007f522cb00218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.160725] RAX: 0000000000000001 RBX: 00007f522f69df68 RCX: 00007f522f58ab19 [ 116.160732] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f522f69df6c [ 116.160740] RBP: 00007f522f69df60 R08: 000000000000000e R09: 0000000000000000 [ 116.160747] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f522f69df6c [ 116.160754] R13: 00007ffee85e142f R14: 00007f522cb00300 R15: 0000000000022000 [ 116.160766] [ 116.216345] WARNING: CPU: 1 PID: 3861 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 116.217016] Modules linked in: [ 116.217260] CPU: 1 PID: 3861 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 116.217850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 116.218660] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 116.219063] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 116.220387] RSP: 0018:ffff88803e5d7c48 EFLAGS: 00010006 [ 116.220776] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 116.221297] RDX: ffff88801d808000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 116.221820] RBP: ffff88803e5e8000 R08: 0000000000000005 R09: 0000000000000001 [ 116.222334] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800fb88400 [ 116.222855] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 116.223375] FS: 00007f522cb00700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 116.223961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.224399] CR2: 00007f58f6be4260 CR3: 0000000015e6e000 CR4: 0000000000350ee0 [ 116.224921] Call Trace: [ 116.225119] [ 116.225293] ctx_sched_out+0x8f1/0xc10 [ 116.225590] __perf_event_task_sched_out+0x6d0/0x18d0 [ 116.225974] ? lock_is_held_type+0xd7/0x130 [ 116.226294] ? __perf_cgroup_move+0x160/0x160 [ 116.226630] ? set_next_entity+0x304/0x550 [ 116.226950] ? update_curr+0x267/0x740 [ 116.227244] ? lock_is_held_type+0xd7/0x130 [ 116.227566] __schedule+0xedd/0x2470 [ 116.227854] ? io_schedule_timeout+0x150/0x150 [ 116.228193] ? rcu_read_lock_sched_held+0x3e/0x80 [ 116.228558] schedule+0xda/0x1b0 [ 116.228821] exit_to_user_mode_prepare+0x114/0x1a0 [ 116.229184] syscall_exit_to_user_mode+0x19/0x40 [ 116.229545] do_syscall_64+0x48/0x90 [ 116.229834] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 116.230220] RIP: 0033:0x7f522f58ab19 [ 116.230496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 116.231809] RSP: 002b:00007f522cb00218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.232374] RAX: 0000000000000001 RBX: 00007f522f69df68 RCX: 00007f522f58ab19 [ 116.232884] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f522f69df6c [ 116.233396] RBP: 00007f522f69df60 R08: 000000000000000e R09: 0000000000000000 [ 116.233916] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f522f69df6c [ 116.234443] R13: 00007ffee85e142f R14: 00007f522cb00300 R15: 0000000000022000 [ 116.234961] [ 116.235135] irq event stamp: 1280 [ 116.235395] hardirqs last enabled at (1279): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 116.236071] hardirqs last disabled at (1280): [] __schedule+0x1225/0x2470 [ 116.236690] softirqs last enabled at (1268): [] __irq_exit_rcu+0x11b/0x180 [ 116.237311] softirqs last disabled at (1261): [] __irq_exit_rcu+0x11b/0x180 [ 116.237933] ---[ end trace 0000000000000000 ]--- 14:38:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xf1887000) chroot(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x40086602, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r2, 0x40086602, 0x0) openat(r2, &(0x7f0000000000)='./file1\x00', 0x8140, 0x83) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) [ 116.443813] loop1: detected capacity change from 0 to 40 [ 116.540989] syz-executor.1: attempt to access beyond end of device [ 116.540989] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 116.542486] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 116.584193] random: crng reseeded on system resumption [ 116.585520] Restarting kernel threads ... done. 14:38:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xf1887000) chroot(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x40086602, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r2, 0x40086602, 0x0) openat(r2, &(0x7f0000000000)='./file1\x00', 0x8140, 0x83) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) [ 116.652714] loop1: detected capacity change from 0 to 40 [ 116.670720] loop7: detected capacity change from 0 to 7 [ 116.686541] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 116.687901] loop7: detected capacity change from 0 to 7 [ 116.703898] random: crng reseeded on system resumption 14:38:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32323330373039383000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000004300000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000daf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011600)="20000000641e8ebf641e8ebf00000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011700)="8081000000601020daf4655fdaf4655fdaf4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000daf4655f00"/160, 0xa0, 0x2600}, {&(0x7f0000011800)="c041000000380000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000020000000", 0x40, 0x2a00}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f000000000000000000000000000002ea00"/64, 0x40, 0x2a80}, {&(0x7f0000011a00)="ed4100003c000000dbf4655fdbf4655fdbf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000904a5ec200000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011b00)="ed8100001a040000dbf4655fdbf4655fdbf4655f00000000000001004000000000000800010000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000046b58a6000000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011c00)="ffa1000026000000dbf4655fdbf4655fdbf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3232333037303938302f66696c65302f66696c65300000000000000000000000000000000000000000000029d1c2e100000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011d00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011f00)="ed81000064000000dbf4655fdbf4655fdbf4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cb822423400000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x3000}, {&(0x7f0000012000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x10000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012300)="0000000000080040e81800000000000000000400"/32, 0x20, 0x11000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012800)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033320075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x28000}], 0x0, &(0x7f0000012e00)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x40086602, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @desc4}, &(0x7f0000000ac0)={0x0, "7dd2a7a5b6373bbe7de3b65676cd5ef810a1d9249c749864e6b0dc494786c009286aaf53d60d493f5882f4846f8261c422245093bfdd3abdbbb783c708c751df"}, 0x48, r1) keyctl$unlink(0x9, r2, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000040)={@id, 0x40, r2, '\x00', @b}) [ 116.754460] syz-executor.1: attempt to access beyond end of device [ 116.754460] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 116.755687] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 116.780195] loop7: detected capacity change from 0 to 2048 14:38:26 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x8040, 0x4, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, r3, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ff6000/0x1000)=nil) 14:38:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xf1887000) chroot(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x40086602, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKZEROOUT(r2, 0x40086602, 0x0) openat(r2, &(0x7f0000000000)='./file1\x00', 0x8140, 0x83) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) [ 116.835140] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 116.867554] random: crng reseeded on system resumption [ 116.870783] Restarting kernel threads ... done. [ 116.888974] loop1: detected capacity change from 0 to 40 [ 116.924300] EXT4-fs (loop7): unmounting filesystem. [ 116.992109] syz-executor.1: attempt to access beyond end of device [ 116.992109] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 116.993156] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 117.038374] syz-executor.1 (3935) used greatest stack depth: 24728 bytes left [ 117.306714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3967 comm=syz-executor.4 [ 117.315982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3969 comm=syz-executor.4 VM DIAGNOSIS: 14:38:25 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00007f9adadb0699 RCX=ffffffff812a1cb8 RDX=0000000000000000 RSI=00007f9adadb0699 RDI=ffffffff8544da60 RBP=00007f9adadb0699 RSP=ffff88800f86f8a0 R8 =0000000000000000 R9 =ffffffff85b06ed7 R10=0000000000000000 R11=0000000000000001 R12=ffff88800f86f9b8 R13=0000000000000000 R14=ffff88800dd75040 R15=ffff88800843d280 RIP=ffffffff814683b2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9adb1b86f4 CR3=0000000005226000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f9adb1c7470 00007f9adb1c6f20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803e5d7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000064 R11=0000000000000001 R12=0000000000000064 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f522cb00700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f58f6be4260 CR3=0000000015e6e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f522f6717c0 00007f522f6717c8 YMM02=0000000000000000 0000000000000000 00007f522f6717e0 00007f522f6717c0 YMM03=0000000000000000 0000000000000000 00007f522f6717c8 00007f522f6717c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000