Warning: Permanently added '[localhost]:31970' (ECDSA) to the list of known hosts. 2022/10/03 09:34:34 fuzzer started 2022/10/03 09:34:35 dialing manager at localhost:35095 syzkaller login: [ 36.771438] cgroup: Unknown subsys name 'net' [ 36.869351] cgroup: Unknown subsys name 'rlimit' 2022/10/03 09:34:49 syscalls: 2215 2022/10/03 09:34:49 code coverage: enabled 2022/10/03 09:34:49 comparison tracing: enabled 2022/10/03 09:34:49 extra coverage: enabled 2022/10/03 09:34:49 setuid sandbox: enabled 2022/10/03 09:34:49 namespace sandbox: enabled 2022/10/03 09:34:49 Android sandbox: enabled 2022/10/03 09:34:49 fault injection: enabled 2022/10/03 09:34:49 leak checking: enabled 2022/10/03 09:34:49 net packet injection: enabled 2022/10/03 09:34:49 net device setup: enabled 2022/10/03 09:34:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 09:34:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 09:34:49 USB emulation: enabled 2022/10/03 09:34:49 hci packet injection: enabled 2022/10/03 09:34:49 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 09:34:49 802.15.4 emulation: enabled 2022/10/03 09:34:50 fetching corpus: 50, signal 27147/28957 (executing program) 2022/10/03 09:34:50 fetching corpus: 100, signal 36225/39740 (executing program) 2022/10/03 09:34:50 fetching corpus: 150, signal 47698/52763 (executing program) 2022/10/03 09:34:50 fetching corpus: 200, signal 53568/60124 (executing program) 2022/10/03 09:34:50 fetching corpus: 250, signal 58366/66397 (executing program) 2022/10/03 09:34:50 fetching corpus: 300, signal 62466/71931 (executing program) 2022/10/03 09:34:50 fetching corpus: 350, signal 67020/77861 (executing program) 2022/10/03 09:34:50 fetching corpus: 400, signal 71150/83294 (executing program) 2022/10/03 09:34:51 fetching corpus: 450, signal 75136/88538 (executing program) 2022/10/03 09:34:51 fetching corpus: 500, signal 78404/93131 (executing program) 2022/10/03 09:34:51 fetching corpus: 550, signal 85135/100844 (executing program) 2022/10/03 09:34:51 fetching corpus: 600, signal 89235/106040 (executing program) 2022/10/03 09:34:51 fetching corpus: 650, signal 92266/110239 (executing program) 2022/10/03 09:34:51 fetching corpus: 700, signal 95325/114401 (executing program) 2022/10/03 09:34:51 fetching corpus: 750, signal 97852/118001 (executing program) 2022/10/03 09:34:52 fetching corpus: 800, signal 101207/122395 (executing program) 2022/10/03 09:34:52 fetching corpus: 850, signal 102347/124680 (executing program) 2022/10/03 09:34:52 fetching corpus: 900, signal 103895/127335 (executing program) 2022/10/03 09:34:52 fetching corpus: 950, signal 105950/130449 (executing program) 2022/10/03 09:34:52 fetching corpus: 1000, signal 107521/133096 (executing program) 2022/10/03 09:34:52 fetching corpus: 1050, signal 109559/136161 (executing program) 2022/10/03 09:34:52 fetching corpus: 1100, signal 110726/138418 (executing program) 2022/10/03 09:34:52 fetching corpus: 1150, signal 112266/140975 (executing program) 2022/10/03 09:34:52 fetching corpus: 1200, signal 114526/144131 (executing program) 2022/10/03 09:34:53 fetching corpus: 1250, signal 116246/146791 (executing program) 2022/10/03 09:34:53 fetching corpus: 1300, signal 119152/150402 (executing program) 2022/10/03 09:34:53 fetching corpus: 1350, signal 121139/153265 (executing program) 2022/10/03 09:34:53 fetching corpus: 1400, signal 123265/156201 (executing program) 2022/10/03 09:34:53 fetching corpus: 1450, signal 125117/158883 (executing program) 2022/10/03 09:34:53 fetching corpus: 1500, signal 127202/161730 (executing program) 2022/10/03 09:34:53 fetching corpus: 1550, signal 127982/163553 (executing program) 2022/10/03 09:34:53 fetching corpus: 1600, signal 129981/166331 (executing program) 2022/10/03 09:34:53 fetching corpus: 1650, signal 131750/168820 (executing program) 2022/10/03 09:34:54 fetching corpus: 1700, signal 133542/171299 (executing program) 2022/10/03 09:34:54 fetching corpus: 1750, signal 135791/174175 (executing program) 2022/10/03 09:34:54 fetching corpus: 1800, signal 137122/176263 (executing program) 2022/10/03 09:34:54 fetching corpus: 1850, signal 138306/178257 (executing program) 2022/10/03 09:34:54 fetching corpus: 1900, signal 139546/180282 (executing program) 2022/10/03 09:34:54 fetching corpus: 1950, signal 141537/182766 (executing program) 2022/10/03 09:34:54 fetching corpus: 2000, signal 143409/185248 (executing program) 2022/10/03 09:34:54 fetching corpus: 2050, signal 144276/186916 (executing program) 2022/10/03 09:34:55 fetching corpus: 2100, signal 145365/188748 (executing program) 2022/10/03 09:34:55 fetching corpus: 2150, signal 146862/190842 (executing program) 2022/10/03 09:34:55 fetching corpus: 2200, signal 148372/192896 (executing program) 2022/10/03 09:34:55 fetching corpus: 2250, signal 149588/194777 (executing program) 2022/10/03 09:34:55 fetching corpus: 2300, signal 151137/196931 (executing program) 2022/10/03 09:34:55 fetching corpus: 2350, signal 152243/198717 (executing program) 2022/10/03 09:34:55 fetching corpus: 2400, signal 153025/200235 (executing program) 2022/10/03 09:34:55 fetching corpus: 2450, signal 154287/202055 (executing program) 2022/10/03 09:34:56 fetching corpus: 2500, signal 155160/203639 (executing program) 2022/10/03 09:34:56 fetching corpus: 2550, signal 156125/205249 (executing program) 2022/10/03 09:34:56 fetching corpus: 2600, signal 156922/206723 (executing program) 2022/10/03 09:34:56 fetching corpus: 2650, signal 157917/208323 (executing program) 2022/10/03 09:34:56 fetching corpus: 2700, signal 159167/210035 (executing program) 2022/10/03 09:34:56 fetching corpus: 2750, signal 159915/211425 (executing program) 2022/10/03 09:34:56 fetching corpus: 2800, signal 161865/213619 (executing program) 2022/10/03 09:34:57 fetching corpus: 2850, signal 163711/215646 (executing program) 2022/10/03 09:34:57 fetching corpus: 2900, signal 164381/216976 (executing program) 2022/10/03 09:34:57 fetching corpus: 2950, signal 165210/218347 (executing program) 2022/10/03 09:34:57 fetching corpus: 3000, signal 165862/219630 (executing program) 2022/10/03 09:34:57 fetching corpus: 3050, signal 166671/221046 (executing program) 2022/10/03 09:34:57 fetching corpus: 3100, signal 167448/222415 (executing program) 2022/10/03 09:34:57 fetching corpus: 3150, signal 168116/223680 (executing program) 2022/10/03 09:34:57 fetching corpus: 3200, signal 169285/225259 (executing program) 2022/10/03 09:34:57 fetching corpus: 3250, signal 170667/226925 (executing program) 2022/10/03 09:34:58 fetching corpus: 3300, signal 171083/228007 (executing program) 2022/10/03 09:34:58 fetching corpus: 3350, signal 171659/229216 (executing program) 2022/10/03 09:34:58 fetching corpus: 3400, signal 172325/230404 (executing program) 2022/10/03 09:34:58 fetching corpus: 3450, signal 173415/231832 (executing program) 2022/10/03 09:34:58 fetching corpus: 3500, signal 174263/233169 (executing program) 2022/10/03 09:34:58 fetching corpus: 3550, signal 174855/234301 (executing program) 2022/10/03 09:34:58 fetching corpus: 3600, signal 175684/235559 (executing program) 2022/10/03 09:34:58 fetching corpus: 3650, signal 176632/236897 (executing program) 2022/10/03 09:34:58 fetching corpus: 3700, signal 177494/238194 (executing program) 2022/10/03 09:34:59 fetching corpus: 3750, signal 178150/239317 (executing program) 2022/10/03 09:34:59 fetching corpus: 3800, signal 178777/240457 (executing program) 2022/10/03 09:34:59 fetching corpus: 3850, signal 179761/241736 (executing program) 2022/10/03 09:34:59 fetching corpus: 3900, signal 180221/242769 (executing program) 2022/10/03 09:34:59 fetching corpus: 3950, signal 180866/243868 (executing program) 2022/10/03 09:34:59 fetching corpus: 4000, signal 181206/244840 (executing program) 2022/10/03 09:34:59 fetching corpus: 4050, signal 182426/246163 (executing program) 2022/10/03 09:34:59 fetching corpus: 4100, signal 182876/247109 (executing program) 2022/10/03 09:34:59 fetching corpus: 4150, signal 183314/248069 (executing program) 2022/10/03 09:34:59 fetching corpus: 4200, signal 183936/249166 (executing program) 2022/10/03 09:35:00 fetching corpus: 4250, signal 184568/250163 (executing program) 2022/10/03 09:35:00 fetching corpus: 4300, signal 185710/251445 (executing program) 2022/10/03 09:35:00 fetching corpus: 4350, signal 187422/252971 (executing program) 2022/10/03 09:35:00 fetching corpus: 4400, signal 188475/254190 (executing program) 2022/10/03 09:35:00 fetching corpus: 4450, signal 189028/255150 (executing program) 2022/10/03 09:35:00 fetching corpus: 4500, signal 189529/256104 (executing program) 2022/10/03 09:35:00 fetching corpus: 4550, signal 189844/256972 (executing program) 2022/10/03 09:35:00 fetching corpus: 4600, signal 190435/257947 (executing program) 2022/10/03 09:35:01 fetching corpus: 4650, signal 191312/259050 (executing program) 2022/10/03 09:35:01 fetching corpus: 4700, signal 191876/259969 (executing program) 2022/10/03 09:35:01 fetching corpus: 4750, signal 192271/260825 (executing program) 2022/10/03 09:35:01 fetching corpus: 4800, signal 192945/261804 (executing program) 2022/10/03 09:35:01 fetching corpus: 4850, signal 193478/262777 (executing program) 2022/10/03 09:35:01 fetching corpus: 4900, signal 193848/263634 (executing program) 2022/10/03 09:35:01 fetching corpus: 4950, signal 194343/264498 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/265333 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/266037 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/266753 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/267480 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/268200 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/268891 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/269578 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/270274 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/271011 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/271720 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/272435 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/273094 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/273780 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/274467 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/275162 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/275919 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/276610 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/277283 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/277985 (executing program) 2022/10/03 09:35:01 fetching corpus: 4998, signal 194783/278699 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/279397 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/280110 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/280829 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/281516 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/282219 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/282958 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/283637 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/284337 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/285027 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/285733 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/286457 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/287142 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/287890 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/288615 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/289287 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/289977 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/290660 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/291368 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/292114 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/292849 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/293588 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/294282 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/294984 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/295663 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/296363 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/297077 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/297792 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/298486 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/299219 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/299281 (executing program) 2022/10/03 09:35:02 fetching corpus: 4998, signal 194783/299281 (executing program) 2022/10/03 09:35:05 starting 8 fuzzer processes 09:35:05 executing program 0: setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=0xf79, 0x8, 0x3) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = open_tree(r0, &(0x7f00000001c0)='./file0\x00', 0x8000) setxattr$incfs_metadata(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)="d9e04d005c3d91b1377eac04206c74e5944067f0f84cee6c5311b58032d790a7cb7748765bfc84a80e605b252ea23abfc0139bef39548e36909dc119ae8b53a7c3368c2a92a45bf54546a4bfb5bd2f5974922d93dd1fca6fe5a9f405332b38bcc78ad33498f66ec6de49037a64ebb95d15a7b3121d10b98699ff81829f31cb86788b7ba8a9b70afd829b209cb99c1b73db8bf5eb0350d5afa81deee4f3112808ec66d5717204cc59dba92def25a2227714eb1dad8b76219911bec216a794e0fc4a66a9fc85e14589d647eda53b", 0xcd, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x80c2, 0x0) r3 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000003c0), 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000400)={@empty, @initdev, 0x0}, &(0x7f0000000440)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x9, 0x40, 0x4, 0x11, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x0, 0x40, 0x7, 0x2}}) r5 = openat$incfs(r0, &(0x7f0000000540)='.pending_reads\x00', 0x40000, 0x27) r6 = syz_mount_image$ext4(&(0x7f00000005c0)='ext2\x00', &(0x7f0000000600)='./file1\x00', 0x80, 0x6, &(0x7f0000001940)=[{&(0x7f0000000640)="c4b49aa68bd3ff491c3d41fa2d13c155ceb6246b92b3f5ec4fdae8bedd17d5740fe79be079aecf43938c15a3ea95422ebd79e961363190f9c10a7f2991e70072b3c2f510c63ba0673fc47e3efdddce2f048c01e148ee0dddd1491b4ac4160f4c2b01f7d6a72773df3fb945ef1c794b87a1498a2fc8a559912758453bdfcdbd8cfe4eb51aae9eb3f76f10d53094613331bcfa1f", 0x93, 0x2000000}, {&(0x7f0000000700)="11a9e16ef5e4addffbea44dde754ae32b6457e10e99d00dfa8a1b68f91270956f7336b01a3e58af4f4fdb482a9b96f94cc30c488143bd5401762ee507279f9048796886bc1871d4410d4cf451170766efcad4d3190a9a8cc78a774371c953acc50a0541f541e542fdcd3acbe3ba90a318cd7c21d28", 0x75, 0xd34c}, {&(0x7f0000000780)="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", 0x1000, 0x45f}, {&(0x7f0000001780)="8164336c7234500b71708f834459826bcacfb2b594ef7f39369c167be9542d87c19e2f00399da74d4392770ca318837b60d889de67dfca4b079cc31cebe5338a64e1afb4a4332d0c1292a88fa0579412bb6b1530ff2c3ec1f711253668686769e6b43521ed86200b236d5ff665cc430d56cdcdbf7533b72a827e2645953b58934e5b815e37dfe9140eb52918cbc6734e63eee13ee0c336ead58dd3d82ba038143bd5dcb0fce270dff7dadc3182230724fb4de0b0fdc23298e6ed1365910253e117be993961fd0412c0668cdc599d52112c076f95e573e7b19fd2db2574adcf559561e38f502b0c4bc1c432df31a4f90117e8ac65b46716", 0xf7, 0x5}, {&(0x7f0000001880)="a4ae0081", 0x4, 0x8000}, {&(0x7f00000018c0)="a934abc7c3eeed686b9f0dc9074d00214bb84ef4a1c77cc701aff83c8e4841c130ed585fde080a6a520679eaa0dadf883febdd14ab0250feb45fc1c2807020dd78f0f4a4d49832a072ad0bca155321a1e7d82ff28fbb9257e03d9324d3ff4d92f6c8d11bb1305d765202", 0x6a, 0x100000001}], 0x4002, &(0x7f0000001a00)={[{@nobarrier}, {@noload}, {@jqfmt_vfsv1}, {@errors_continue}, {@stripe={'stripe', 0x3d, 0x4}}, {@grpid}, {@abort}], [{@smackfsdef={'smackfsdef', 0x3d, 'net/ip6_mr_vif\x00'}}, {@smackfshat={'smackfshat', 0x3d, '!^,-{,#\\\'^!^'}}, {@appraise}, {@dont_measure}, {@seclabel}, {@dont_appraise}]}) move_mount(r5, &(0x7f0000000580)='./file1\x00', r6, &(0x7f0000001ac0)='./file0\x00', 0x0) syz_io_uring_setup(0x1940, &(0x7f0000001b00)={0x0, 0x355f, 0x8, 0x3, 0x3ca}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001b80)=0x0, &(0x7f0000001bc0)) r8 = signalfd(r0, &(0x7f0000001c00)={[0x53819859]}, 0x8) syz_io_uring_submit(r7, 0x0, &(0x7f0000001d80)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f0000001c40), &(0x7f0000001d40)='./file0\x00', 0x400, 0x6000, 0x1}, 0xfff) openat(0xffffffffffffffff, &(0x7f0000001dc0)='./file1\x00', 0x1b1300, 0xb8) readlink(&(0x7f0000001e00)='./file1\x00', &(0x7f0000001e40)=""/188, 0xbc) syz_open_dev$ptys(0xc, 0x3, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000001f00)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r4}, 0x14) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000001f40), &(0x7f0000001f80)=0x2) 09:35:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\\@\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x44}}, 0x2404c8e4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x4024841) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20108100}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x270, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_TX_RATES={0x250, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x2}, {0x1, 0x9}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x7}, {0x0, 0x5}, {0x6, 0x6}, {0x4}, {0x5, 0x9}, {0x2, 0x9}, {0x5, 0xa}, {0x4, 0x9}, {0x7, 0x2}, {0x2, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x8}, {0x5, 0xa}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x1}, {0x6, 0x6}, {0x3, 0x6}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a56, 0x7, 0x6, 0x3, 0x81, 0x0, 0x5, 0xf47a]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x16, 0x1, 0x18, 0x4, 0x30, 0x6c, 0x4, 0x3, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x101, 0x5, 0x2, 0x4, 0x24d, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x8}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x7}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x9}, {0x7, 0xa}, {0x5}, {0x7, 0x8}, {0x2, 0x9}, {0x6}, {0x0, 0xa}, {0x6, 0x5}, {0x0, 0x2}, {0x5, 0xa}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x3}, {0x2, 0x4}, {0x5}, {0x3, 0x8}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0x4}, {0x5, 0x8}, {0x3, 0x9}, {0x1, 0x9}, {0x2}, {0x5, 0x9}, {0x3}, {0x1, 0x5}, {0x4, 0x7}, {0x6, 0x6}, {0x7, 0x8}, {0x4, 0x7}, {0x0, 0x1}, {0x0, 0x7}, {0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x4, 0x6}, {0x3, 0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x5}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x1}, {0x5, 0xa}, {0x1}, {0x1, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x8}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x7}, {0x2, 0x9}, {}, {0x1, 0xe}, {0x1}, {0x7, 0x9}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x8}, {0x4, 0x1}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x3}, {0x1, 0x7}, {0x7, 0x8}, {0x3}, {0x4, 0xa}, {0x3, 0x7}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x4}, {0x7, 0x2}, {0x5, 0x1}, {0x5, 0x5}, {0x1, 0xa}, {0x4, 0x8}, {0x5, 0x7}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffc, 0x101, 0x1, 0x0, 0x6, 0x3, 0xfffb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x2, 0x8, 0x40, 0x7, 0x5, 0xd27, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x18, 0x12, 0x36, 0x2, 0x3, 0x50, 0x60, 0x6, 0x18, 0x2, 0x4e, 0x3, 0x18, 0x16, 0x4, 0x6, 0xf0a6b5d4eec58f14, 0x48, 0xd, 0x16, 0x1b, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0xa19a, 0x100, 0x80, 0x6, 0x8, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x16, 0xc, 0x6, 0x2, 0x30, 0x0, 0x60, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc79d, 0xffff, 0xfff, 0x5d, 0x9, 0xffc1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x0, 0x5, 0x5, 0x3f, 0x2, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x4, 0x2, 0x9, 0x3, 0x6c, 0x2, 0x24, 0x24, 0xb, 0x4, 0x18, 0x0, 0x60, 0x46a368c5422d185d]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0x9}, {0x5}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x9}, {0x1, 0x9}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x6}, {0x2, 0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x9}, {0x2, 0x3}, {0x3, 0x8}, {0x4, 0x1}, {0x5, 0x8}, {0x7, 0x2}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x9}, {0x7, 0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x5}, {0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x2, 0x4}, {0x4, 0x8}, {0x0, 0x5}, {0x2, 0x2}, {0x5, 0x4}, {0x5, 0xa}, {0x2, 0x6}, {0x3, 0x9}, {0x1, 0x9}, {0x1, 0xa}, {}, {0x1, 0x9}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x9}, {0x2, 0x5}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x4}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x28, 0x36, 0x1b, 0x36, 0x3e09fa0f99d3c368, 0x1, 0x1b, 0x6c, 0x6]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x2}, {0x2, 0x1}, {0x1, 0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x8}, {0x3, 0x5}, {0x2, 0x5}, {0x2, 0x6}, {0x5, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x1, 0x4}, {0x4, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x4, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x6}, {0x5, 0x4}, {0x2, 0x3}, {0x3, 0x3}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x5}, {0x5, 0x2}, {0x2, 0x6}, {0x4, 0x8}, {0x6}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x9}, {0x5, 0xa}, {0x0, 0x7}, {0x6, 0x9}, {0x2, 0x3}, {0x0, 0x8}, {0x4, 0x1}, {0x5, 0x9}, {0x0, 0x9}, {0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x1, 0x9}, {0x6}, {0x3, 0x3}, {0x7, 0x1}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x4}, {0x4, 0x4}, {0x5, 0x6}, {0x4, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x6, 0xa}]}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40004}, 0x15) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r2) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x28}}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xec, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:init_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:hald_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x14}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000cc0), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:35:05 executing program 2: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100)={r0, 0x46, 0x89}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'blake2s-128-x86\x00'}}, &(0x7f00000001c0)="0caf5ebeb45c74f3ae7059affc7f909f559bb082077f72f9a0e149d205ef5ec34660082b52b3433a309591bc1d89589aab4fc00e9655d7b5d41a83bf6fe9f675ed9bc7a5a1a5", &(0x7f0000000240)=""/137) r1 = request_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='syz', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0)={r1, 0xf0, 0x89}, &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'sha3-256-generic\x00'}}, &(0x7f0000000480)="1bbe0b8cfb603789a2f6e70b5d522458261103c3ef14d7756b28f7447b33bce21f35eff66caa33d2eeaf8f67c6c9d8a25fd97b46252a9894633379822c387a3ac0ed39b965a711a2167708a315e54b893c6c37da87250a60e7caec3a27fa4934ddd99e2db3c5bbec78add4dd53be78d90a9567e3967cc8e3bbcae4fee91ebdd80c5238c4303326493da6a8fda674efc0f7295eff528e60bfb38b892b36daa2c1267e5db4ca5b8e89e822ac42140059146c4fe6acb93cd95086b255c474417cc3f3c37f609a43c4edabe2045c289dbd0dd1f9747f4d9b9b3ff5c9340eac34059a1ae74d984b6a16578e111e821f999100", &(0x7f0000000580)=""/137) keyctl$negate(0xd, 0x0, 0x3, r1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000640)={r1, 0x40, 0x97}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'blake2s-160\x00'}}, &(0x7f0000000700)="9c4ba8e1c1106198151617a02b56ef9797afe9a6ec090e9c8ff6cce15e4735db750a950afd31862499aeb3e8d37ff877b3a3f4dabcd416d4a083c4596633276a", &(0x7f0000000740)=""/151) r2 = add_key$fscrypt_provisioning(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x2}, &(0x7f0000000880)={0x7, 0x0, @c}, 0x29, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000008c0)={r2, 0xc4, 0x8f}, &(0x7f0000000900)={'enc=', 'raw', ' hash=', {'sm3\x00'}}, &(0x7f0000000980)="1d227bbe9fa26f4b9ce890384ac5659a17a3bf4a7b8481125b8eff7773bbb7e1df9d33b6033a9d0a99713fc17506597f0635e08e39aca97fe6328b3ccf0710c31a7ef23cf637b0fce5496ad1bdef570da42d1c07273265efe89ba774fd7e4417ea9102b5515585dcd43061b32e125cb6115c643d70dc377b0d85ae878438dd5543da1d6d11869d7be9d05692b87347a3390ab892a1a65384ef36e5b304fdb9d4017c6c5f21a6ac6cef56ff7073560698e01cdaa4d541309c841be7160458d8d8a3c8338d", &(0x7f0000000a80)=""/143) r3 = add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @desc4}, &(0x7f0000000d40)={0x0, "dbb206093d4c09bec11def6e2ef927f5dbc29c9b4770f8da0b14a075293723412d67e04d353f3426e8f6a807c9dd36f92ebbaad3e765daff0f4b5b30f7cb9daa", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x2}, &(0x7f0000000bc0)="3062342883c0f6b474243eb4666a9a2095338794bf77339a6bf617561c4d7525be9100046cbc6fe75c0af15a475fb0e594a35f9c177e1c597193c547ce69ea598155f441ccdae9855dd6c9f1af6d763d2e1bc7ee916acc9b98fa3651fae1c142c66820f02b34e63f774adeef28cb146b7fe2b56c8c6b2158f0c7f31f6583d9a6d648d73ae0566ed4f29ba396ee237d56e2d4c404cda754afe0c40573500ca5d69d1d8ce08730279dfaaebe68f86eea3ff97f108085dc908f7ad495343e75b6a6ca8d733286c81a3edc94d5f252b60c91e4ecbdeec944", 0xd6, r3) r4 = add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x65, 0x39, 0x30, 0x38, 0x37, 0x34, 0x30, 0x33, 0xa7bedc4677e061c7, 0x64, 0x65, 0x0, 0x61, 0x30, 0x64, 0x63]}, &(0x7f0000000e40)={0x0, "437cdba2f16f327229a1fc2195e879a92bf357642ae568fb883a20152c4f4985df03e3af5738c12a32ec430a5321c67d92ca99ddbc23c5c17775202088b8bd29", 0x2f}, 0x48, r3) keyctl$setperm(0x5, r4, 0x2000) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000ec0)={r2, 0x39, 0x89}, &(0x7f0000000f00)={'enc=', 'pkcs1', ' hash=', {'hmac(sm3-ce)\x00'}}, &(0x7f0000000f80)="342dd8786982e716ac97f7f4abafe268bd6b5f6674d27954ac9ed65e71e8474b23cca9d6304eefbee23bbdc1bc163836dfeeb37cca2101619a", &(0x7f0000000fc0)="7d1df19086ec6294d411c8c89019724916c56d5e61cde4b69de7113dd4a26ec098bdbab445973d3f3d7f33e1a4607e8975662d8fcbdb19282198740962c0ad55bb45a875f638a73def66f6e6644b3d63316d19a8c88144bd66d0f2bb4a8bc6671317cec531366df31e2105ac9c514be8cd9ded6f67393e9b5d82225115d6b45393b0502d2e1c94d671") r5 = add_key(&(0x7f0000001080)='.dead\x00', &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000001100)="2a444cfa64d141e4bbab4c91d5e3f402d5f445294b5db38a0fd6091f1ea8667e704064015157a0fe4c4340e8c7b63e0d71efe298a8690d713fa77de51e401f04a28d1f271b48a991272564cd51b4cbf8652c23b3ef01621ce0570a1e8cd6187c3115c285dbfbf3cc0cd2406a885b06ee1f8835c89b0ede21eaba3ffbeae7080e69ffe74dfb1dcfabaa6b8ba5d38d563f37fb974982345901253e714853ddf45d18c8a1abf055b463cfff0202", 0xac, 0x0) r6 = add_key$keyring(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r0, r5, r6, 0x0) r7 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xee01, r7) add_key(&(0x7f00000012c0)='.request_key_auth\x00', &(0x7f0000001300)={'syz', 0x0}, &(0x7f0000001340)="9d154ebd76577be02400df04b0ba7caa9b4587e369d56e0271da3624a320b9ca19b362042cc6065699ddd616be3a06d5e87d6b1f121c0a4f188802de1fa9363fa589a62700a5fa414833c11acafb66e9ea90f5a9bccae4b53fc823e8cc6b5dbb75c29c8b1865a900d1afd1614b7325680ab1f1b52666b5ece6dc4271d553b122562876b21c19c07c9c0caec26f1f01dcf845333fa5", 0x95, 0xfffffffffffffffd) keyctl$get_security(0x11, 0x0, &(0x7f00000014c0)=""/90, 0x5a) [ 66.671788] audit: type=1400 audit(1664789705.298:6): avc: denied { execmem } for pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:35:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, '\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x6, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x80) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1b0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7728d830}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9ed}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000810}, 0x80) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4000082) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x22004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f5, 0x800, 0x70bd25, 0x25dfdbfd, "", [""]}, 0x10}}, 0x44) r4 = dup2(r1, r3) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x34}}}}, [@NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x40, 0x7}, {0x7, 0x5}, {}, {0x4, 0x6}, {0x81, 0x1}, {0x9}, {0x1, 0x4}, {0xd3, 0x4}, {0x98, 0x6}], "e14a7384886ec01e"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x1, 0x1}, {0x3f, 0x2}, {0x8, 0x7}, {0x97, 0x2}, {0xdc, 0x1}, {0x3, 0x2}, {0x80}], "527d938b1d0a7b4c"}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004044) r5 = pidfd_getfd(r2, r4, 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000008c0)=0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x80, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x48}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x4b, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6f7}, @random="21d9fc8fb91b", @device_a, @broadcast, {0xb, 0x1}}, {0x9, 0x1, 0x3, 0x0, 0x2}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x88}, @broadcast, @random="16a0026b6f42", @random="2118dcd421f1", {0x8, 0x8}}, {0x8, 0x1, 0x1, 0x1, 0x4}}}, @ver_80211n={0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1}}, @random="c40cfda82e030c6202bb28a28647fc"}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r3, {r6, 0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0xa4000030}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x56}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x800}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x60, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8b52}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x40080) r9 = openat$cgroup_pressure(r5, &(0x7f0000000d40)='io.pressure\x00', 0x2, 0x0) pwrite64(r9, &(0x7f0000000d80)="93a2fd7d3f2355d8118466a4980b0095a6920f7232e61a9d7d748f356ce3bac039a799c33ddc4634342833ef755d579a5c6c3f07754ec38d3ebe0841bd3774d5a3d14a299ad76909e108b0f178c830df138ec5248ed4fe252c2e961e1e256115aedb5a628035cbc8f825a9bb194a349939eb192f287ab09a2e40a58b7af3a2d7596b3e0a07c55ea26b3fc7ce76272be639fa3b807175d85d2f846d179cb7f081d42ab3e8e4258a1aa359114b412f81ae9749c2e166ff5f22a6ffec8dae66375d60e9b69eaeb21e046077e3fcb33e22", 0xcf, 0x3) shutdown(r4, 0x1) 09:35:05 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x408c0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x800) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'macvlan1\x00', 0x0}) r5 = fsmount(r0, 0x1, 0x2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000017c0)={'ip6tnl0\x00', &(0x7f0000001740)={'ip6_vti0\x00', r4, 0x29, 0x2, 0x1, 0x2, 0x40, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x1, 0xfffffc01, 0x3}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62021}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4004050) bind(r0, &(0x7f00000018c0)=@phonet={0x23, 0x5, 0x4, 0x8c}, 0x80) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001940), 0x610401, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x4040000) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0x58}}, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x38, 0x0, 0x14, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r5, {r8}}, './file0\x00'}) r9 = creat(&(0x7f0000001d00)='./file0\x00', 0x1) setsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000001d40)={@private=0xa010101, @multicast1, r6}, 0xc) 09:35:05 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x20, 0x6182, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x5, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x71, 0x2, 0x6d2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1, 0x20, 0x8, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000018c0)={'syztnl0\x00', &(0x7f0000001840)={'sit0\x00', 0x0, 0x4, 0x1f, 0x81, 0x0, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x1, 0x20, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001a40)={'sit0\x00', &(0x7f00000019c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x7f, 0x200, 0x46, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, @local, 0x7800, 0x1, 0x7f, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001b00)={'sit0\x00', &(0x7f0000001a80)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x6, 0x4, 0x40, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8, 0x700, 0x4, 0x87}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001bc0)={'ip6tnl0\x00', &(0x7f0000001b40)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x6, 0x9, 0x8, @remote, @empty, 0x700, 0x8000, 0x8, 0x8}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x1bc, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x60000e0}, 0x1) r6 = syz_open_dev$vcsu(&(0x7f0000001e40), 0x670a9c, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000002680)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002640)={&(0x7f0000001f40)={0x6d8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "d1cc81397d09a613a9a0cb66b1db77d447ab604030036c792acd4d2f9a0444ef32ec0e66f2d36b0d405c3211037611ba87eb9372bf80df80bd89515a7239fe96f4a38c0b84ef5dbdc512c114c5ee5ca901516da41f367dfb7bce476c7554c1ec88ae81cfaae733d172190fbe4fe60642d7695607aeb6c242489b8aff3f5eea0f5e78c18b6b8c0135d3b2fcd4f9d4b345e406a39e4576c9ec670c925198feaea4"}, @ETHTOOL_A_BITSET_MASK={0x10, 0x5, "0bf5f906951575d5d24a45cb"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x500, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x188, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[%%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x37c12bf9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x120}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{[:#{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ':\xe8\x0f+)-&{-\f\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#\'&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#%\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x4a, 0x5, "e84f8410e80c97e8f5586980126d9091353f0b64c5f6d5ea4ac4265663408b9287b50470952255672388dedf309ba29450cd18c197cc51b771d4955f24f22a1f22fc71b693bb"}, @ETHTOOL_A_BITSET_MASK={0x31, 0x5, "d7e92bc60fb285008904821cf6ee48d28188cae949abc75dcd46aa9f68acfe73210929971d70f3329b1fd4a5b8"}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "c82192e8b24d3f0afa412f3768159d4219690b0c9631b1978904f29483a65b136728da25fe52170514a82320c2c2c1f1bf74e3698a054e99a7613f968bacf41eb0ec0c54efd9a8e34ee7d3ed1a188baac031c98d1b5fd13c9f92ad9daa2636987643709b4864954bd559fb4075d91e947cd6d422c41f4876378229a4700311bc68e6bc4b7e215c5b03f1406686bb0b3ef47ad10d38da8ed8ba51befd561ce067799ada"}, @ETHTOOL_A_BITSET_VALUE={0xbc, 0x4, "4febd2d99084161231f45b4add6b079785c80d458068508b6750ae71d3ee33d66e0193ce2405e7a63826a4211b6aad70ba997e952af660ebf1f3baf28319db0d44b55de5d0098b9090fc7bd7f11fa444229edb48a81139c032e38bf13ce61b557a2b38b54ca5d2b80606b28930f0c416072c2fb73ed3fd3edc274c758f4e6727e8c616a38b0439322d50d4b9ac1e86de5fd5602448bc99ebe9ba177dcd596e386a5f334f4cabd6a48ca85f8c65bf733db305a3bfdf38742c"}, @ETHTOOL_A_BITSET_VALUE={0x24, 0x4, "02267ad51b2ec3c71b5de27a00d4cdc1a23bb87ed2723520a84580b87f64d83e"}, @ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'netpci0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/%$,/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '(]%\'/}-],*%#-l-@^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#&,\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ',-@#.*@.%&+%!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}]}]}, @ETHTOOL_A_BITSET_MASK={0x15, 0x5, "f1630c8ebddeaf628e1dfd1a5899d8b1f2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2800}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x20024080}, 0x40044) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x44, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffdbad}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040010}, 0x8014) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000002980)={'syztnl0\x00', &(0x7f0000002900)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x1f, 0x8, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x8000, 0x8, 0x1db4, 0x5f0f}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000002a40)={'syztnl2\x00', &(0x7f00000029c0)={'ip6gre0\x00', r3, 0x29, 0x3f, 0x1f, 0x3f, 0x28, @mcast2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7800, 0x40, 0xffffffff, 0x9e1f}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002b00)={'gre0\x00', &(0x7f0000002a80)={'syztnl0\x00', r0, 0x40, 0x7d0, 0x7, 0x6, {{0xc, 0x4, 0x2, 0x3c, 0x30, 0x65, 0x1ff, 0xe3, 0x2f, 0x0, @multicast2, @loopback, {[@end, @lsrr={0x83, 0xf, 0xd1, [@broadcast, @remote, @remote]}, @lsrr={0x83, 0xb, 0xfc, [@private=0xa010100, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000002c80)={&(0x7f0000002b40)={0x120, r7, 0xa, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000002d00)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000002e00)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002e40)={'syztnl2\x00', r12, 0x700, 0x7, 0x0, 0x10001, {{0x3e, 0x4, 0x1, 0x5, 0xf8, 0x68, 0x0, 0x20, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0x8a, 0x0, 0x7, [0x0, 0x8000, 0x81, 0x9, 0x6, 0x6]}, @timestamp_addr={0x44, 0x44, 0x81, 0x1, 0x9, [{@private=0xa010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xfffff824}, {@local, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x3}, {@loopback, 0x6}]}, @end, @timestamp={0x44, 0x10, 0xfd, 0x0, 0xe, [0x0, 0xa1, 0xffff]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x5, 0x6, "e0641171"}, {0x1, 0xe, "9877b22a3b8b7ad124250f4a"}, {0x6, 0x7, "dc0fcece3a"}, {0x7, 0xd, "9b10e78996ade08f38ac10"}, {0x2, 0xa, "97c2bac8883643e1"}]}, @timestamp_prespec={0x44, 0x1c, 0x3e, 0x3, 0xb, [{@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f}, {@empty, 0x7}]}, @generic={0x94, 0xf, "24e2c3dc1a3ee4bde45fe83f56"}, @noop, @timestamp_addr={0x44, 0xc, 0xc0, 0x1, 0xf, [{@broadcast, 0xffffffff}]}]}}}}}) r13 = socket$netlink(0x10, 0x3, 0x15) sendmsg(r13, &(0x7f0000003040)={&(0x7f0000002fc0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x8, @empty}}}, 0x80, 0xfffffffffffffffe}, 0x1) 09:35:05 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xd5e7, 0x381600) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x140, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000050}, 0x4008000) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r0, 0x0, &(0x7f00000003c0)="4d144fca29c17fa9188ba168b7409c4133abf41273eb2017ee40b61be27da192dac36c22615f88aa001458a2318a08d10c702bfd40a5c1b02363099d283caa9989c1ed8432eeb6d8a90901a0a1764b9d2e2f9e33a445ade62c47c22d238eaf0d95f11c2a8409539fd940ef46fb21a124f481d840ce9abaa637b167844d9b725c76313c12cfb8bac7760e1c54377c44b7204e80418ded26250ae97f8d640ec9e8561bd051212766c63b783a9f2b6ee66f78ad768c943792ce9ce1d12630bbba4158ea4526c70d675a96fc4586137d3f68a6dbf6a3cc70a0a079f01f9082e1bc6ba3d606f06b006348", 0xe8, 0x4055}, 0x400) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6tnl0\x00', r6, 0x4, 0x6, 0xff, 0x3ff, 0x41, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x41, 0x700, 0xfffffffc, 0x9a}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000005c0)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f0000000600)="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") sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40880) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000800), 0x40000, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r9, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x128, 0x0, 0x900, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x10) bind$802154_raw(r0, &(0x7f0000000a40)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x118, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfb, 0x4, "a5a9de7d8f06e9e677206d78a2ae8ea412346ee5e49b49497179f6b9dafefbc34bde5a6dc2f840de23f4cd5039ad2632d814012d29e129f6eb0263afbdb70707622490008da5da345acee5038cd761e92adb0b82b83cd34d53521345696fc5200eb5ff7c9eb09df4d1b7825dd48264fe2497389c359a24c495093b658a5b863987269876d9c901fcbc8d2f4ed6c2d179274d81bc5acc79659b3661d76d90257105bbdd76aed58e43677082546f584a0b8276fcf70f892e3dfc730f152c8120c865642fcb14b6ed74a9eb0fc3b00eaa6608bd6e8f20a7a4c9d81f8f726f4fdd2b2da161bf0ab6d0ca5dfbb954bdcd98466c15d0a45b4857"}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004051}, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000c80)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000e80), 0x181400, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000f00)={r8, 0x1, 0x6, @random="eca07ac71141"}, 0x10) 09:35:05 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)="a6bb24", 0x3, 0x7}, {&(0x7f00000000c0)="4b56f7658176d577b59f831a5832a22be921d3930fa677c40c53b7a1b0760858e2bf3ff9e9f31a9553da8c9547219e3818cc1812c1f06bfe820d82a58040773fc88bf818377f39975acc49ac89d7b96f41a2d5d6daa23528afe6512e376e5df3281d3b6702b768ed635a75", 0x6b, 0xffffffffffff0000}], 0x80, &(0x7f0000000180)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp864'}}], [{@dont_hash}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101, 0x60) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf17}}, './file0\x00'}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0\x00'}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x40c42, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000400)={0x0, 0x1, 0x3}) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000800)={{r2}, {@val={r7}, @max}}) fadvise64(0xffffffffffffffff, 0x1, 0x8, 0x4) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f0000000840)=0x2) syz_mount_image$msdos(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x9, 0x2, &(0x7f0000000a40)=[{&(0x7f0000000900)="fe1ff0f9dd06014117a8a44b63eabd8a43ff272a8581af151cf1b9d2459f94c75feb7007f046d8633a7944ffcd7ea634eda9606a46e66bf06b0c063f7f37fbfa75231f092e014eea972595d7a89624003f74e5025e333e29e01845282aa825a9c13b7e02a76c6e3ea32fc47a0ec71fc3fe54fc07df002b6783abae54f22d0dc193d669e9ef", 0x85, 0x7}, {&(0x7f00000009c0)="c448777c497ac4269d13bc0b4d7ab6332d2bb0586c784298d8ed0bc4b688dc362bd4eb26ed5ff6859129766532acad339284b528a0348cb135c310cdd3f702860d3579baea3895fb3968fa670ab91358dc36c087697e776d3b9edc7c7648cbdf1ec33fe6a39a38074f", 0x69, 0x31e1}], 0x2000, &(0x7f0000000a80)={[{@dots}], [{@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '+*^)\\\'/#)\'['}}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]}) fallocate(r6, 0x0, 0x80000000, 0xbbbb) io_submit(0x0, 0x1, &(0x7f0000000b80)=[&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x2, r3, &(0x7f0000000b00), 0x0, 0x5, 0x0, 0x1, r4}]) openat$cgroup_ro(r6, &(0x7f0000000bc0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r4, 0x5321, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) truncate(&(0x7f0000000c40)='./file0\x00', 0xffffffffffff8001) [ 67.976375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.978993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.980521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.983493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.985278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.986726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.992579] Bluetooth: hci0: HCI_REQ-0x0c1a [ 68.031412] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.041476] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.042836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.045802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.049284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.051943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.053835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.055229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.059365] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.060978] Bluetooth: hci2: HCI_REQ-0x0c1a [ 68.093417] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.095253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.096638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.098169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.099469] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.101531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.102931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.106194] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.107245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.108234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.109441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.110565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.114708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.116364] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.118881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.128180] Bluetooth: hci5: HCI_REQ-0x0c1a [ 68.132198] Bluetooth: hci1: HCI_REQ-0x0c1a [ 68.147168] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.148085] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.154887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.156289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.157673] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.159331] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 68.160768] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.161833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.187174] Bluetooth: hci6: HCI_REQ-0x0c1a [ 68.194149] Bluetooth: hci4: HCI_REQ-0x0c1a [ 68.220426] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.234265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.237527] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.238764] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.262296] Bluetooth: hci3: HCI_REQ-0x0c1a [ 70.057478] Bluetooth: hci0: command 0x0409 tx timeout [ 70.121343] Bluetooth: hci2: command 0x0409 tx timeout [ 70.185208] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 70.185417] Bluetooth: hci1: command 0x0409 tx timeout [ 70.186711] Bluetooth: hci5: command 0x0409 tx timeout [ 70.250174] Bluetooth: hci6: command 0x0409 tx timeout [ 70.250221] Bluetooth: hci4: command 0x0409 tx timeout [ 70.313115] Bluetooth: hci3: command 0x0409 tx timeout [ 72.105077] Bluetooth: hci0: command 0x041b tx timeout [ 72.169106] Bluetooth: hci2: command 0x041b tx timeout [ 72.233074] Bluetooth: hci1: command 0x041b tx timeout [ 72.234127] Bluetooth: hci5: command 0x041b tx timeout [ 72.297269] Bluetooth: hci6: command 0x041b tx timeout [ 72.298129] Bluetooth: hci4: command 0x041b tx timeout [ 72.361098] Bluetooth: hci3: command 0x041b tx timeout [ 73.203675] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.205923] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.207001] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.208826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.209835] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 73.210564] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.246888] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.153123] Bluetooth: hci0: command 0x040f tx timeout [ 74.217118] Bluetooth: hci2: command 0x040f tx timeout [ 74.281131] Bluetooth: hci5: command 0x040f tx timeout [ 74.281200] Bluetooth: hci1: command 0x040f tx timeout [ 74.345139] Bluetooth: hci4: command 0x040f tx timeout [ 74.345565] Bluetooth: hci6: command 0x040f tx timeout [ 74.409067] Bluetooth: hci3: command 0x040f tx timeout [ 75.305324] Bluetooth: hci7: command 0x0409 tx timeout [ 76.201098] Bluetooth: hci0: command 0x0419 tx timeout [ 76.265191] Bluetooth: hci2: command 0x0419 tx timeout [ 76.329148] Bluetooth: hci1: command 0x0419 tx timeout [ 76.330372] Bluetooth: hci5: command 0x0419 tx timeout [ 76.393484] Bluetooth: hci6: command 0x0419 tx timeout [ 76.394432] Bluetooth: hci4: command 0x0419 tx timeout [ 76.457128] Bluetooth: hci3: command 0x0419 tx timeout [ 77.353134] Bluetooth: hci7: command 0x041b tx timeout [ 79.401233] Bluetooth: hci7: command 0x040f tx timeout [ 81.449111] Bluetooth: hci7: command 0x0419 tx timeout [ 119.123956] loop7: detected capacity change from 0 to 16128 [ 119.135800] FAT-fs (loop7): Unrecognized mount option "dont_hash" or missing value [ 119.152138] loop7: detected capacity change from 0 to 49 [ 119.161005] loop7: detected capacity change from 0 to 16128 [ 119.161996] FAT-fs (loop7): Unrecognized mount option "dont_hash" or missing value [ 119.183320] loop7: detected capacity change from 0 to 49 09:35:57 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') fstat(r4, &(0x7f0000000a40)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000bc0)=0xe8) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='(*(\x00', 0x0, r4) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 119.307216] loop7: detected capacity change from 0 to 40 [ 119.366634] audit: type=1400 audit(1664789757.993:7): avc: denied { open } for pid=3727 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.368303] audit: type=1400 audit(1664789757.993:8): avc: denied { kernel } for pid=3727 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.382078] ------------[ cut here ]------------ [ 119.382098] [ 119.382101] ====================================================== [ 119.382104] WARNING: possible circular locking dependency detected [ 119.382108] 6.0.0-rc7-next-20220930 #1 Not tainted [ 119.382114] ------------------------------------------------------ [ 119.382118] syz-executor.7/3729 is trying to acquire lock: [ 119.382124] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 119.382164] [ 119.382164] but task is already holding lock: [ 119.382167] ffff88800f04b020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.382194] [ 119.382194] which lock already depends on the new lock. [ 119.382194] [ 119.382197] [ 119.382197] the existing dependency chain (in reverse order) is: [ 119.382201] [ 119.382201] -> #3 (&ctx->lock){....}-{2:2}: [ 119.382214] _raw_spin_lock+0x2a/0x40 [ 119.382226] __perf_event_task_sched_out+0x53b/0x18d0 [ 119.382237] __schedule+0xedd/0x2470 [ 119.382251] schedule+0xda/0x1b0 [ 119.382264] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.382277] syscall_exit_to_user_mode+0x19/0x40 [ 119.382290] do_syscall_64+0x48/0x90 [ 119.382308] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.382320] [ 119.382320] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 119.382334] _raw_spin_lock_nested+0x30/0x40 [ 119.382344] raw_spin_rq_lock_nested+0x1e/0x30 [ 119.382357] task_fork_fair+0x63/0x4d0 [ 119.382374] sched_cgroup_fork+0x3d0/0x540 [ 119.382388] copy_process+0x4183/0x6e20 [ 119.382399] kernel_clone+0xe7/0x890 [ 119.382408] user_mode_thread+0xad/0xf0 [ 119.382419] rest_init+0x24/0x250 [ 119.382430] arch_call_rest_init+0xf/0x14 [ 119.382448] start_kernel+0x4c6/0x4eb [ 119.382463] secondary_startup_64_no_verify+0xe0/0xeb [ 119.382478] [ 119.382478] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 119.382491] _raw_spin_lock_irqsave+0x39/0x60 [ 119.382501] try_to_wake_up+0xab/0x1930 [ 119.382514] up+0x75/0xb0 [ 119.382528] __up_console_sem+0x6e/0x80 [ 119.382544] console_unlock+0x46a/0x590 [ 119.382560] vprintk_emit+0x1bd/0x560 [ 119.382576] vprintk+0x84/0xa0 [ 119.382591] _printk+0xba/0xf1 [ 119.382603] regdb_fw_cb.cold+0x6c/0xa7 [ 119.382620] request_firmware_work_func+0x12e/0x240 [ 119.382640] process_one_work+0xa17/0x16a0 [ 119.382657] worker_thread+0x637/0x1260 [ 119.382673] kthread+0x2ed/0x3a0 [ 119.382688] ret_from_fork+0x22/0x30 [ 119.382700] [ 119.382700] -> #0 ((console_sem).lock){....}-{2:2}: [ 119.382713] __lock_acquire+0x2a02/0x5e70 [ 119.382730] lock_acquire+0x1a2/0x530 [ 119.382746] _raw_spin_lock_irqsave+0x39/0x60 [ 119.382757] down_trylock+0xe/0x70 [ 119.382771] __down_trylock_console_sem+0x3b/0xd0 [ 119.382787] vprintk_emit+0x16b/0x560 [ 119.382803] vprintk+0x84/0xa0 [ 119.382818] _printk+0xba/0xf1 [ 119.382828] report_bug.cold+0x72/0xab [ 119.382844] handle_bug+0x3c/0x70 [ 119.382860] exc_invalid_op+0x14/0x50 [ 119.382877] asm_exc_invalid_op+0x16/0x20 [ 119.382889] group_sched_out.part.0+0x2c7/0x460 [ 119.382907] ctx_sched_out+0x8f1/0xc10 [ 119.382924] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.382934] __schedule+0xedd/0x2470 [ 119.382948] schedule+0xda/0x1b0 [ 119.382961] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.382971] syscall_exit_to_user_mode+0x19/0x40 [ 119.382983] do_syscall_64+0x48/0x90 [ 119.383000] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.383012] [ 119.383012] other info that might help us debug this: [ 119.383012] [ 119.383015] Chain exists of: [ 119.383015] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 119.383015] [ 119.383029] Possible unsafe locking scenario: [ 119.383029] [ 119.383032] CPU0 CPU1 [ 119.383034] ---- ---- [ 119.383037] lock(&ctx->lock); [ 119.383042] lock(&rq->__lock); [ 119.383048] lock(&ctx->lock); [ 119.383055] lock((console_sem).lock); [ 119.383060] [ 119.383060] *** DEADLOCK *** [ 119.383060] [ 119.383062] 2 locks held by syz-executor.7/3729: [ 119.383069] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 119.383098] #1: ffff88800f04b020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.383124] [ 119.383124] stack backtrace: [ 119.383126] CPU: 1 PID: 3729 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 119.383139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 119.383147] Call Trace: [ 119.383150] [ 119.383154] dump_stack_lvl+0x8b/0xb3 [ 119.383172] check_noncircular+0x263/0x2e0 [ 119.383188] ? format_decode+0x26c/0xb50 [ 119.383205] ? print_circular_bug+0x450/0x450 [ 119.383221] ? simple_strtoul+0x30/0x30 [ 119.383237] ? format_decode+0x26c/0xb50 [ 119.383254] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 119.383271] __lock_acquire+0x2a02/0x5e70 [ 119.383293] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 119.383315] lock_acquire+0x1a2/0x530 [ 119.383331] ? down_trylock+0xe/0x70 [ 119.383348] ? lock_release+0x750/0x750 [ 119.383368] ? vprintk+0x84/0xa0 [ 119.383386] _raw_spin_lock_irqsave+0x39/0x60 [ 119.383397] ? down_trylock+0xe/0x70 [ 119.383413] down_trylock+0xe/0x70 [ 119.383428] ? vprintk+0x84/0xa0 [ 119.383445] __down_trylock_console_sem+0x3b/0xd0 [ 119.383462] vprintk_emit+0x16b/0x560 [ 119.383480] vprintk+0x84/0xa0 [ 119.383498] _printk+0xba/0xf1 [ 119.383509] ? record_print_text.cold+0x16/0x16 [ 119.383525] ? report_bug.cold+0x66/0xab [ 119.383542] ? group_sched_out.part.0+0x2c7/0x460 [ 119.383560] report_bug.cold+0x72/0xab [ 119.383579] handle_bug+0x3c/0x70 [ 119.383596] exc_invalid_op+0x14/0x50 [ 119.383614] asm_exc_invalid_op+0x16/0x20 [ 119.383626] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.383647] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.383658] RSP: 0018:ffff888019e67c48 EFLAGS: 00010006 [ 119.383667] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.383674] RDX: ffff88803efe1ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 119.383682] RBP: ffff88801bfa8000 R08: 0000000000000005 R09: 0000000000000001 [ 119.383689] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800f04b000 [ 119.383697] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 119.383707] ? group_sched_out.part.0+0x2c7/0x460 [ 119.383727] ? group_sched_out.part.0+0x2c7/0x460 [ 119.383747] ctx_sched_out+0x8f1/0xc10 [ 119.383766] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.383780] ? lock_is_held_type+0xd7/0x130 [ 119.383794] ? __perf_cgroup_move+0x160/0x160 [ 119.383804] ? set_next_entity+0x304/0x550 [ 119.383822] ? update_curr+0x267/0x740 [ 119.383840] ? lock_is_held_type+0xd7/0x130 [ 119.383854] __schedule+0xedd/0x2470 [ 119.383870] ? io_schedule_timeout+0x150/0x150 [ 119.383887] ? rcu_read_lock_sched_held+0x3e/0x80 [ 119.383907] schedule+0xda/0x1b0 [ 119.383922] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.383934] syscall_exit_to_user_mode+0x19/0x40 [ 119.383947] do_syscall_64+0x48/0x90 [ 119.383965] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.383978] RIP: 0033:0x7f3976bdfb19 [ 119.383986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.383997] RSP: 002b:00007f3974155218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.384007] RAX: 0000000000000001 RBX: 00007f3976cf2f68 RCX: 00007f3976bdfb19 [ 119.384015] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3976cf2f6c [ 119.384022] RBP: 00007f3976cf2f60 R08: 000000000000000e R09: 0000000000000000 [ 119.384029] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f3976cf2f6c [ 119.384036] R13: 00007ffd9b30bfff R14: 00007f3974155300 R15: 0000000000022000 [ 119.384048] [ 119.441239] WARNING: CPU: 1 PID: 3729 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 119.441928] Modules linked in: [ 119.442169] CPU: 1 PID: 3729 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 119.442760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 119.443597] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.444009] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.445358] RSP: 0018:ffff888019e67c48 EFLAGS: 00010006 [ 119.445756] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.446289] RDX: ffff88803efe1ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 119.446833] RBP: ffff88801bfa8000 R08: 0000000000000005 R09: 0000000000000001 [ 119.447369] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800f04b000 [ 119.447898] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 119.448441] FS: 00007f3974155700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 119.449040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.449469] CR2: 000055cdbff71c78 CR3: 000000003fb36000 CR4: 0000000000350ee0 [ 119.450001] Call Trace: [ 119.450201] [ 119.450381] ctx_sched_out+0x8f1/0xc10 [ 119.450683] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.451072] ? lock_is_held_type+0xd7/0x130 [ 119.451399] ? __perf_cgroup_move+0x160/0x160 [ 119.451735] ? set_next_entity+0x304/0x550 [ 119.452065] ? update_curr+0x267/0x740 [ 119.452377] ? lock_is_held_type+0xd7/0x130 [ 119.452697] __schedule+0xedd/0x2470 [ 119.452987] ? io_schedule_timeout+0x150/0x150 [ 119.453349] ? rcu_read_lock_sched_held+0x3e/0x80 [ 119.453731] schedule+0xda/0x1b0 [ 119.453997] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.454368] syscall_exit_to_user_mode+0x19/0x40 [ 119.454730] do_syscall_64+0x48/0x90 [ 119.455023] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.455407] RIP: 0033:0x7f3976bdfb19 [ 119.455690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.457043] RSP: 002b:00007f3974155218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.457619] RAX: 0000000000000001 RBX: 00007f3976cf2f68 RCX: 00007f3976bdfb19 [ 119.458162] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3976cf2f6c [ 119.458687] RBP: 00007f3976cf2f60 R08: 000000000000000e R09: 0000000000000000 [ 119.459216] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f3976cf2f6c [ 119.459752] R13: 00007ffd9b30bfff R14: 00007f3974155300 R15: 0000000000022000 [ 119.460295] [ 119.460478] irq event stamp: 4598 [ 119.460735] hardirqs last enabled at (4597): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 119.461440] hardirqs last disabled at (4598): [] __schedule+0x1225/0x2470 [ 119.462057] softirqs last enabled at (4330): [] __irq_exit_rcu+0x11b/0x180 [ 119.462699] softirqs last disabled at (4255): [] __irq_exit_rcu+0x11b/0x180 [ 119.463347] ---[ end trace 0000000000000000 ]--- [ 119.826419] syz-executor.7: attempt to access beyond end of device [ 119.826419] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 119.827650] Buffer I/O error on dev loop7, logical block 10, lost async page write 09:35:58 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') fstat(r4, &(0x7f0000000a40)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000bc0)=0xe8) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='(*(\x00', 0x0, r4) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 119.939768] loop7: detected capacity change from 0 to 40 [ 120.026440] syz-executor.7: attempt to access beyond end of device [ 120.026440] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 120.027687] Buffer I/O error on dev loop7, logical block 10, lost async page write 09:35:58 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') fstat(r4, &(0x7f0000000a40)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000bc0)=0xe8) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='(*(\x00', 0x0, r4) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 120.138640] loop7: detected capacity change from 0 to 40 [ 120.212491] syz-executor.7: attempt to access beyond end of device [ 120.212491] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 120.213510] Buffer I/O error on dev loop7, logical block 10, lost async page write 09:35:58 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') fstat(r4, &(0x7f0000000a40)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000bc0)=0xe8) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='(*(\x00', 0x0, r4) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 120.340900] loop7: detected capacity change from 0 to 40 09:35:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') fstat(r4, &(0x7f0000000a40)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000bc0)=0xe8) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='(*(\x00', 0x0, r4) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 120.421456] syz-executor.7: attempt to access beyond end of device [ 120.421456] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 120.422444] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 120.458206] loop2: detected capacity change from 0 to 40 09:35:59 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') fstat(r4, &(0x7f0000000a40)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000bc0)=0xe8) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='(*(\x00', 0x0, r4) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 120.527779] loop7: detected capacity change from 0 to 40 [ 120.564931] syz-executor.7: attempt to access beyond end of device [ 120.564931] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 120.565870] Buffer I/O error on dev loop7, logical block 10, lost async page write 09:35:59 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') fstat(r4, &(0x7f0000000a40)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000bc0)=0xe8) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='(*(\x00', 0x0, r4) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 120.647262] loop7: detected capacity change from 0 to 40 [ 120.691684] syz-executor.7: attempt to access beyond end of device [ 120.691684] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 120.692685] Buffer I/O error on dev loop7, logical block 10, lost async page write 09:35:59 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') fstat(r4, &(0x7f0000000a40)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000bc0)=0xe8) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='(*(\x00', 0x0, r4) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 120.773565] loop7: detected capacity change from 0 to 40 [ 120.814806] syz-executor.7: attempt to access beyond end of device [ 120.814806] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 120.815801] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 120.928576] syz-executor.2: attempt to access beyond end of device [ 120.928576] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 120.930553] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 121.097373] loop0: detected capacity change from 0 to 264192 [ 121.105476] ext2: Unknown parameter 'smackfsdef' [ 121.118890] loop0: detected capacity change from 0 to 264192 [ 121.126239] ext2: Unknown parameter 'smackfsdef' VM DIAGNOSIS: 09:35:58 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=dffffc0000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff81e4eb00 RDI=ffff888008703684 RBP=0000000000000001 RSP=ffff88801be77ab0 R8 =0000000000000002 R9 =0000000000000007 R10=0000000000000007 R11=0000000000000001 R12=ffff888008703680 R13=0000000000000007 R14=0000000000000005 R15=0000000000000007 RIP=ffffffff81e4eb1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd68a65d1f0 CR3=00000000103b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888019e67690 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002e R11=0000000000000001 R12=000000000000002e R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3974155700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055cdbff71c78 CR3=000000003fb36000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000