Warning: Permanently added '[localhost]:1599' (ECDSA) to the list of known hosts. 2022/10/03 10:27:36 fuzzer started 2022/10/03 10:27:36 dialing manager at localhost:35095 syzkaller login: [ 36.770777] cgroup: Unknown subsys name 'net' [ 36.858406] cgroup: Unknown subsys name 'rlimit' 2022/10/03 10:27:49 syscalls: 2215 2022/10/03 10:27:49 code coverage: enabled 2022/10/03 10:27:49 comparison tracing: enabled 2022/10/03 10:27:49 extra coverage: enabled 2022/10/03 10:27:49 setuid sandbox: enabled 2022/10/03 10:27:49 namespace sandbox: enabled 2022/10/03 10:27:49 Android sandbox: enabled 2022/10/03 10:27:49 fault injection: enabled 2022/10/03 10:27:49 leak checking: enabled 2022/10/03 10:27:49 net packet injection: enabled 2022/10/03 10:27:49 net device setup: enabled 2022/10/03 10:27:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 10:27:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 10:27:49 USB emulation: enabled 2022/10/03 10:27:49 hci packet injection: enabled 2022/10/03 10:27:49 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 10:27:49 802.15.4 emulation: enabled 2022/10/03 10:27:49 fetching corpus: 50, signal 22187/24042 (executing program) 2022/10/03 10:27:50 fetching corpus: 100, signal 35405/38937 (executing program) 2022/10/03 10:27:50 fetching corpus: 150, signal 46743/51810 (executing program) 2022/10/03 10:27:50 fetching corpus: 200, signal 54194/60768 (executing program) 2022/10/03 10:27:50 fetching corpus: 250, signal 59125/67206 (executing program) 2022/10/03 10:27:50 fetching corpus: 300, signal 66916/76307 (executing program) 2022/10/03 10:27:50 fetching corpus: 350, signal 70524/81290 (executing program) 2022/10/03 10:27:50 fetching corpus: 400, signal 72103/84309 (executing program) 2022/10/03 10:27:50 fetching corpus: 450, signal 76357/89821 (executing program) 2022/10/03 10:27:51 fetching corpus: 500, signal 79201/93961 (executing program) 2022/10/03 10:27:51 fetching corpus: 550, signal 82462/98445 (executing program) 2022/10/03 10:27:51 fetching corpus: 600, signal 84786/102009 (executing program) 2022/10/03 10:27:51 fetching corpus: 650, signal 87729/106136 (executing program) 2022/10/03 10:27:51 fetching corpus: 700, signal 90980/110512 (executing program) 2022/10/03 10:27:51 fetching corpus: 750, signal 94633/115191 (executing program) 2022/10/03 10:27:51 fetching corpus: 800, signal 98858/120329 (executing program) 2022/10/03 10:27:51 fetching corpus: 850, signal 103362/125696 (executing program) 2022/10/03 10:27:52 fetching corpus: 900, signal 106996/130224 (executing program) 2022/10/03 10:27:52 fetching corpus: 950, signal 108744/133028 (executing program) 2022/10/03 10:27:52 fetching corpus: 1000, signal 110781/136051 (executing program) 2022/10/03 10:27:52 fetching corpus: 1050, signal 112765/139018 (executing program) 2022/10/03 10:27:52 fetching corpus: 1100, signal 114638/141870 (executing program) 2022/10/03 10:27:52 fetching corpus: 1150, signal 116695/144825 (executing program) 2022/10/03 10:27:52 fetching corpus: 1200, signal 118411/147495 (executing program) 2022/10/03 10:27:52 fetching corpus: 1250, signal 121142/151045 (executing program) 2022/10/03 10:27:52 fetching corpus: 1300, signal 121958/152899 (executing program) 2022/10/03 10:27:53 fetching corpus: 1350, signal 122791/154737 (executing program) 2022/10/03 10:27:53 fetching corpus: 1400, signal 124110/156962 (executing program) 2022/10/03 10:27:53 fetching corpus: 1450, signal 126074/159704 (executing program) 2022/10/03 10:27:53 fetching corpus: 1500, signal 128002/162449 (executing program) 2022/10/03 10:27:53 fetching corpus: 1550, signal 129153/164533 (executing program) 2022/10/03 10:27:53 fetching corpus: 1600, signal 130273/166546 (executing program) 2022/10/03 10:27:53 fetching corpus: 1650, signal 131715/168785 (executing program) 2022/10/03 10:27:53 fetching corpus: 1700, signal 133678/171459 (executing program) 2022/10/03 10:27:53 fetching corpus: 1750, signal 135035/173615 (executing program) 2022/10/03 10:27:54 fetching corpus: 1800, signal 136044/175467 (executing program) 2022/10/03 10:27:54 fetching corpus: 1850, signal 137445/177624 (executing program) 2022/10/03 10:27:54 fetching corpus: 1900, signal 138386/179467 (executing program) 2022/10/03 10:27:54 fetching corpus: 1950, signal 139509/181395 (executing program) 2022/10/03 10:27:54 fetching corpus: 2000, signal 140069/182902 (executing program) 2022/10/03 10:27:54 fetching corpus: 2050, signal 141823/185216 (executing program) 2022/10/03 10:27:54 fetching corpus: 2100, signal 142332/186673 (executing program) 2022/10/03 10:27:54 fetching corpus: 2150, signal 143232/188370 (executing program) 2022/10/03 10:27:54 fetching corpus: 2200, signal 144193/190166 (executing program) 2022/10/03 10:27:55 fetching corpus: 2250, signal 145770/192315 (executing program) 2022/10/03 10:27:55 fetching corpus: 2300, signal 147723/194714 (executing program) 2022/10/03 10:27:55 fetching corpus: 2350, signal 149842/197137 (executing program) 2022/10/03 10:27:55 fetching corpus: 2400, signal 152303/199834 (executing program) 2022/10/03 10:27:55 fetching corpus: 2450, signal 152984/201263 (executing program) 2022/10/03 10:27:55 fetching corpus: 2500, signal 153674/202695 (executing program) 2022/10/03 10:27:55 fetching corpus: 2550, signal 154168/204030 (executing program) 2022/10/03 10:27:55 fetching corpus: 2600, signal 155097/205598 (executing program) 2022/10/03 10:27:56 fetching corpus: 2650, signal 156530/207521 (executing program) 2022/10/03 10:27:56 fetching corpus: 2700, signal 157341/208992 (executing program) 2022/10/03 10:27:56 fetching corpus: 2750, signal 157960/210359 (executing program) 2022/10/03 10:27:56 fetching corpus: 2800, signal 159099/212068 (executing program) 2022/10/03 10:27:56 fetching corpus: 2850, signal 160031/213608 (executing program) 2022/10/03 10:27:56 fetching corpus: 2900, signal 160667/214936 (executing program) 2022/10/03 10:27:56 fetching corpus: 2950, signal 161361/216263 (executing program) 2022/10/03 10:27:56 fetching corpus: 3000, signal 162238/217700 (executing program) 2022/10/03 10:27:56 fetching corpus: 3050, signal 163935/219602 (executing program) 2022/10/03 10:27:57 fetching corpus: 3100, signal 164683/220969 (executing program) 2022/10/03 10:27:57 fetching corpus: 3150, signal 166068/222676 (executing program) 2022/10/03 10:27:57 fetching corpus: 3200, signal 166784/224008 (executing program) 2022/10/03 10:27:57 fetching corpus: 3250, signal 167478/225297 (executing program) 2022/10/03 10:27:57 fetching corpus: 3300, signal 168176/226566 (executing program) 2022/10/03 10:27:57 fetching corpus: 3350, signal 168620/227744 (executing program) 2022/10/03 10:27:57 fetching corpus: 3400, signal 169348/229046 (executing program) 2022/10/03 10:27:57 fetching corpus: 3450, signal 170263/230423 (executing program) 2022/10/03 10:27:58 fetching corpus: 3500, signal 170999/231681 (executing program) 2022/10/03 10:27:58 fetching corpus: 3550, signal 173641/233932 (executing program) 2022/10/03 10:27:58 fetching corpus: 3600, signal 174456/235173 (executing program) 2022/10/03 10:27:58 fetching corpus: 3650, signal 175169/236395 (executing program) 2022/10/03 10:27:58 fetching corpus: 3700, signal 176216/237763 (executing program) 2022/10/03 10:27:58 fetching corpus: 3750, signal 176808/238903 (executing program) 2022/10/03 10:27:58 fetching corpus: 3800, signal 177476/240024 (executing program) 2022/10/03 10:27:59 fetching corpus: 3850, signal 177891/241088 (executing program) 2022/10/03 10:27:59 fetching corpus: 3900, signal 178350/242149 (executing program) 2022/10/03 10:27:59 fetching corpus: 3950, signal 179068/243365 (executing program) 2022/10/03 10:27:59 fetching corpus: 4000, signal 179675/244490 (executing program) 2022/10/03 10:27:59 fetching corpus: 4050, signal 180540/245795 (executing program) 2022/10/03 10:27:59 fetching corpus: 4100, signal 180963/246793 (executing program) 2022/10/03 10:27:59 fetching corpus: 4150, signal 181780/247976 (executing program) 2022/10/03 10:27:59 fetching corpus: 4200, signal 182527/249117 (executing program) 2022/10/03 10:27:59 fetching corpus: 4250, signal 183245/250225 (executing program) 2022/10/03 10:28:00 fetching corpus: 4300, signal 184290/251518 (executing program) 2022/10/03 10:28:00 fetching corpus: 4350, signal 185140/252617 (executing program) 2022/10/03 10:28:00 fetching corpus: 4400, signal 185971/253719 (executing program) 2022/10/03 10:28:00 fetching corpus: 4450, signal 186688/254795 (executing program) 2022/10/03 10:28:00 fetching corpus: 4500, signal 187597/255901 (executing program) 2022/10/03 10:28:00 fetching corpus: 4550, signal 187908/256771 (executing program) 2022/10/03 10:28:00 fetching corpus: 4600, signal 188968/257914 (executing program) 2022/10/03 10:28:00 fetching corpus: 4650, signal 189698/258936 (executing program) 2022/10/03 10:28:00 fetching corpus: 4700, signal 190311/259896 (executing program) 2022/10/03 10:28:01 fetching corpus: 4750, signal 191074/260934 (executing program) 2022/10/03 10:28:01 fetching corpus: 4800, signal 191744/261940 (executing program) 2022/10/03 10:28:01 fetching corpus: 4850, signal 192247/262865 (executing program) 2022/10/03 10:28:01 fetching corpus: 4900, signal 192875/263835 (executing program) 2022/10/03 10:28:01 fetching corpus: 4950, signal 193762/264877 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/265929 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/266665 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/267347 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/268047 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/268705 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/269446 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/270168 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/270854 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/271559 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/272309 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/273009 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/273698 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/274430 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/275114 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/275859 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/276549 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/277296 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/277970 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/278650 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/279354 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/280041 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/280702 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/281419 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/282109 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/282837 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/283541 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/284232 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/284967 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/285671 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/286372 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/287068 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/287788 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/288503 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/289247 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/289965 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/290677 (executing program) 2022/10/03 10:28:01 fetching corpus: 4999, signal 194783/291386 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/292074 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/292760 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/293484 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/294174 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/294858 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/295555 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/296255 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/297001 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/297731 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/298442 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/299169 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/299884 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/300303 (executing program) 2022/10/03 10:28:02 fetching corpus: 4999, signal 194783/300303 (executing program) 2022/10/03 10:28:04 starting 8 fuzzer processes 10:28:04 executing program 0: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/56) r0 = msgget$private(0x0, 0x1) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/206) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/18) r1 = msgget$private(0x0, 0x4) msgsnd(r1, &(0x7f0000000180)={0x3, "31601089b0099e8a77a23d8b0f0d429091caf3ac2af87b72552c4c4ff3c3828fb637f3e8c6a8391d2e8b727c44b5e043067849ea7756a18daaaacd12f7fad4e368034ed1b66c9c4152a95e917b23686077e0cea78dad50c188c209dc6f34696ec6467f80c8a623495104ed08126c277d7055f12eda8de98fa48153e6639078193525bd66393ba87d308dbf"}, 0x93, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000240)={0x0, ""/12}, 0x14, 0x1, 0x2800) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)) r2 = msgget$private(0x0, 0x2) msgsnd(r2, &(0x7f00000002c0)={0x3, "74abe452c811cdc1330007f4eb0fe0e1f4e27148913b6e78f50d897b431b555e2c445f1c25cd2460b9c0232d1d2e9328d7438d15bb3603a0a76d39d00cc32c940fb7f33d6ee7a4bb4a74a8be1c7da242ce672b132aca669d43060e94c5e3106cdef700fd35aebbb0df10dec470ef0ac5c3b885e561d3d2a604c120e61653fe5ec62863fb85f51ae23b1ccfdb41f81b21b9e66d126cca70c97dad965f965facb44da43ff3f9b5c1da4bab73216faf91705fc667679f3c3b564c92307ff10b3ebb6d1cf76857dc3fb1f01604bfaf4a68d41e73f5c7"}, 0xdc, 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f00000003c0)={0x3, "ed66f18285"}, 0xd, 0x0) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000400)=""/6) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000440)=""/219) msgsnd(r3, &(0x7f0000000540)={0x3, "b3482a149b8df51459d848e7198809b17f5ad20c808ed33f0d8d86cfd199a4a3ebb33f3262396464d2daea9155fbb31edacb28563501b1f176c6ab4111a6e3127088e34acff910cd1e140b707d9739905fa9b8a6bdca331ff99a4675931b18a5b9ab031fde5d72f1af6e91e9135b1293641d0ef3918b4f6817ac95b94236a5bb6cbcdb96a44c54ff64e59235cc2a7b31439776b0f641130608bda3a226f076a7f9ce386f6b0aee279b9f37a4fe66c863478d10a0bc6bc6c9c9d6e55f3411b60458934d09e487e97e030dfe9392b36c22"}, 0xd8, 0x800) msgsnd(r3, &(0x7f0000000640)={0x2, "3b32c83c647ccbaefa7522cf6048cbeb199a2dbe5512477438a4"}, 0x22, 0x800) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000680)=""/171) r4 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000740)=""/203) msgsnd(0x0, &(0x7f0000000840)={0x2, "51977b7ed780e6a583934de1eab0788048b30e969f079d3d77d2e51a8ef7c250f418902d10d412ff1a505e8b1b02a83af31436c040a974dd61caf2485c04d6d1d0433f173315dd8cbf7d3c32562179d944f73132bda1e8b959e6"}, 0x62, 0x0) 10:28:04 executing program 1: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r0 = openat2(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x400280, 0x5c, 0xa}, 0x18) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000004c0)=0x7d, 0x4) syncfs(r0) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000500)={0x1000, 0x7, 0x7, 0x7}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000580), &(0x7f00000005c0)={'U-', 0x8}, 0x16, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000640)={0x7, 0x0, &(0x7f0000000600)=[r1]}, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000680)) r3 = memfd_secret(0x80000) ioctl$KDADDIO(r3, 0x4b34, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000000780)={0x3f, 0x48, [0x40, 0x8, 0x800, 0x100], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000007c0)={0x3, 0x9, 0x8}) getpeername$inet(r1, &(0x7f0000000800)={0x2, 0x0, @empty}, &(0x7f0000000840)=0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) timerfd_settime(r4, 0x1, &(0x7f00000008c0)={{0x77359400}, {r5, r6+60000000}}, &(0x7f0000000900)) fcntl$addseals(r4, 0x409, 0xe) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x800, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@uname={'uname', 0x3d, 'U-'}}, {@access_uid}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'IDLETIMER\x00'}}]}}) 10:28:04 executing program 2: ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r0 = inotify_init() ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000040)={0x1, 0x8000}) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000080)=0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)=""/26, 0x1a}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}, 0x1) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x8, 0x2) r12 = dup3(r11, r10, 0x0) ioctl$RTC_WKALM_SET(r12, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0xd, 0x2d, 0x14, 0xb, 0x3, 0x5, 0x2, 0xe6, 0x1}}) fcntl$dupfd(r5, 0x0, r9) r13 = syz_mount_image$iso9660(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x9, 0x8, &(0x7f0000000b00)=[{&(0x7f00000004c0)="4d8ae3bc52ba998ba8e32dd4fa6848649d3dcf5f79d332606a01b3a947cffcc20f6abadca7aa5b1db58fb7b79c9c6980d9e3c3d3c84b7030dcb51814eaad44b10961d4", 0x43, 0x9}, {&(0x7f0000000540)="bbf7805ff8fc84ef4f8f9668d0e580d29f412ed60d14c30b8e95b57bb6365b26a2c85b9b15ba4711146ba9c0ca769c44387b8d0bde4c9b402eac4a87a45f55bfa27ea2a98138c9fe000975c7b33a1cefc061eb364b0f2a187affefb5901bd72045dfad35d8cdf6241b701b09c88a51098c265fdb46eb1544ae54f50b90fb2f1494af5841fea5efa9889e9e46094a3d56cb", 0x91, 0x7}, {&(0x7f0000000600)="b3e7058fb01198dbfa3d93787227d7bcfc696375da673ddfa17a4092f9dc654808f4ce542d22e578ebe893e34432abccf7b3576daa3e0c3aa549fd4f3d5e36d9cffd687af19ee0f3231f87679e2129367ebf4d4727f9c9c6006a67405ba829a2b41434937af22f72b08d827712817b81a7e5a243c450679cb4336bf6927c45d5ee6f45e14ae3dac1c23d96cf99b1a47e3576f5610457768914e3b28e961462e041115fdc57c736a25c59dd341629041982a10542e9b57a48a897a68d35cc155bf2ceadecf9ab82e8", 0xc8, 0xca}, {&(0x7f0000000700)="790ed718b75f21d92439fd3a15a77e120714be4b2edeb857eb652ef1e113633acc11a8abf2f98655d2cfdeaa94f1bae0c8d7b6057326b08488acce790a7d3c6d9ce3890c612afbc49cc875fce883d4478910149d824fd3a640b78aa003ba2b153f6aee368a9b0e2452f0708d909562f054da3ab3166142823e6a6cbd8cd2c093784cd363bb7f7e209550fde4b174f218cf98cc5a7d1519cee05283b93e4aab7f1eaaa2a37d9dd071ff2bb4ba600b5f3df9a03cce6c339571af9cb45b2fba153568437742b5e58e6a090c9291a91c5e5bdc20517ebae72d40b17f1b0e6ff726b40a5ccf0d337d4eb6470622e61f8ad81ff180", 0xf2, 0xe116}, {&(0x7f0000000800)="bb64eb88367dd17a7e222ad04dfb81832fa618a8f4c50d73de02ea35c04eb88127bceabcc8df35e8731734e5f7437b8c2241108553b60700b29c05f87b51167493f1c3558f8af12262e6126fbff7dea323f73c5c5173a5e3816fda71d1a142f20d9e456292d89eee8cdbf9061cfe76b648697f0b4afbe9669e2fbe7c93ef157c391e008e9be384f16d2c870069217b3f5485a79908fde4fc977abcb30ec325bc6d715c7c447333975cb6940f724b5f1e86539f4e73d8c589f6", 0xb9}, {&(0x7f00000008c0)="2d021295674b7adaa7d9de6fffda12920989129de2341622a808adf270abb4bbdf9a1da824474a4881e798a8f1dbc43712ac3ae89dd7c23da52edb39be19a362a131bec2354412c951fb6aab20881ccf8faad4306a8161ac3b405fc09fe6ad2502651d0d09", 0x65, 0x1}, {&(0x7f0000000940)="c356621a6168cd49991fa76b8acf70111a0e6d7fa5a5e315c83d6b82495a33ac86b11e2ccf86c071418936740a045d00db7f1bf62615704b346a2b04055b94146f0bb7ea7120a65921de077da6e4c75f350ddf8919833691b3f5ede3edf4028e5b3e83063719e7d745a157aaa2f1b533cfe22cf87bc1228b23145e0ff75b1684280aaba890b5fb6c90e2f6826a03f74b9a124f1a4a9c920a3ca96260", 0x9c, 0x80}, {&(0x7f0000000a00)="1d57edcf1b61db1d2a1849dbbc66e4529d015f7145f095a1c89dfeef555c28aef86ab6757ec55f6150c8ea2cab1a0ee391cae58b41555f0e172e07ee7879aec1df2b5ffe04b1455ec3aa07607bb7d6e4c51217a7ac36463aa64a6c52318fc9835d423e5e88b303b13da465b8d2c55a4015722a19a65324b941177633002ef758c59763d629f2b1b98984294b106bda91ba0ef7ee1303b49634d4aafb5c034a9d3fbd651042dd0a06ef905462288ddea65cdc6e3856c77a94dac9bfa3b09a02cb29088a47bbf6a07f", 0xc8}], 0x40000, &(0x7f0000000bc0)={[{@map_normal}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x38, 0x32, 0x62, 0x35, 0x65, 0x34, 0x30], 0x2d, [0x38, 0x66, 0x37, 0x61], 0x2d, [0x65, 0x37, 0x39, 0x35], 0x2d, [0x63, 0x31, 0x66, 0x31], 0x2d, [0x64, 0x38, 0x0, 0x65, 0x34, 0x66, 0x32, 0x64]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) openat(r13, &(0x7f0000000c40)='./file0\x00', 0x1a100, 0x0) preadv2(r4, &(0x7f0000001000)=[{&(0x7f0000000c80)=""/227, 0xe3}, {&(0x7f0000000d80)=""/149, 0x95}, {&(0x7f0000000e40)=""/144, 0x90}, {&(0x7f0000000f00)=""/208, 0xd0}], 0x4, 0x7, 0xd6, 0x10) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000001040)={0xf, 0x16, 0x16, 0x13, 0xb, 0x80000000, 0x0, 0xb3, 0xffffffffffffffff}) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000001080)=0x7ab3) unlinkat(r8, &(0x7f00000010c0)='./file0\x00', 0x0) r14 = syz_open_procfs(r2, &(0x7f0000001100)='net/ip6_mr_cache\x00') epoll_ctl$EPOLL_CTL_DEL(r14, 0x2, r10) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000012c0)={0x1, 0x0, 0x1000, 0xc4, &(0x7f0000001180)="7291827752a6c408c144ae0c54fc8237870e6647585f5e6056d3393d5470a7ede68810742f9b67ce567be54b083384b43513415b8aed6ad1608852573af110819c684e098524af547686d0592e5208572a941f6a3ec3c0967c9325af96f9e53f6348a51f720463f2f8ab4f11317818a2514426701f8303ba9fbf1ce1047b92627b1fe4fc0788053e1216faba64f7c87fdbeb839ad82f3cacb05bc4024d42029398b098f79141ec24c61395bb35d4eccc67496580bbfccbb55c678f34c7405231e667efbb", 0xc, 0x0, &(0x7f0000001280)="2345a217c89489efe310c465"}) [ 64.787222] audit: type=1400 audit(1664792884.734:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:28:04 executing program 3: ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x80, 0x4) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x93, "bd8595fb8a07d6d00d0b64b9ddc17b9614de05739a291dc368abdd797f9159e5448eb4f653213b79a615665ec2e9e8a8d92387a2c92a29064cadb45cf365c00419c5f4e4feace741e4a46f0fbd1d717458032297dace23200a21929ef9f9f9cbfd7a5132e29334b919af2687db5da9131ff9868bc8ee0c61f277f5664bc67c78c66065f0ddcf839226d38a63be3789c5bfae7d"}, &(0x7f00000001c0)=0xb7) r0 = accept(0xffffffffffffffff, &(0x7f0000000200)=@generic, &(0x7f0000000280)=0x80) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x122, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x7fffffff, 0x1f}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x13c, 0x0, 0x1, 0x501, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TUPLE_ORIG={0xc8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}]}]}, 0x13c}}, 0x400c000) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000540)={@initdev, @remote}, &(0x7f0000000580)=0x8) r1 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x13c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x90}, 0x20000850) r2 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x100, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x440) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r4, &(0x7f0000000940)={0x1f, @none}, 0x8) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3f6, 0x100, 0x70bd2c, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40048d4}, 0x801) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) connect$bt_sco(r5, &(0x7f0000000ac0), 0x8) ioprio_get$pid(0x2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000b00)={0xfffffff8, 0x5, 0x6, 0x80000000, 0x7fffffff, 0xffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b80)={0x0, @remote, @multicast2}, &(0x7f0000000bc0)=0xc) 10:28:04 executing program 4: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x9, 0x9, 0x1ff, 0x5, 0x9, 0x8}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/234) r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x4, 0x4000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) flistxattr(0xffffffffffffffff, &(0x7f0000000580)=""/58, 0x3a) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000800)={"0ff5b7ba3afd6b1c082f3257456067ac", 0x0, 0x0, {0x40, 0x8}, {0x7, 0x7}, 0xffffffffffff8000, [0x0, 0x1c9e, 0x5, 0x3ff, 0x2, 0x10001, 0x3, 0x9, 0x20, 0x9, 0x6, 0xffff, 0xfffffffffffffff8, 0x80000000, 0x8, 0x2]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000980)={{}, r1, 0x0, @inherit={0x68, &(0x7f0000000900)={0x0, 0x4, 0x50cf, 0x6, {0x0, 0x5, 0x800, 0x92b, 0x2}, [0xf463, 0x6, 0x4, 0x1]}}, @subvolid=0x2b}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001980)={{r2}, {@void, @actul_num={@void, 0xffff, 0x6d}}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000019c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001bc0)={0x0, r3, "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", "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"}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000002bc0)=""/88, &(0x7f0000002c40)=0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000002c80)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r5 = syz_open_dev$mouse(&(0x7f0000002cc0), 0x0, 0x80022) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000002d40)={{0x1, 0x1, 0x18, r6, {0x3ff, 0x7}}, './file0\x00'}) openat$vcs(0xffffffffffffff9c, &(0x7f0000002d80), 0x400, 0x0) write$binfmt_aout(r4, &(0x7f0000002dc0)={{0x1c8, 0x6c, 0x35, 0x93, 0x284, 0x3d, 0x3e0, 0x6}, "f07bee0914e7395e074f7844e8e9561a2519a17b35b952af8c15a88d9ced68f427376abd87d450df17376b635786f383914042d8c1da37fffa4d9127f7c555068eafa8cd3437e82041cc3f65a1becaebc263d9eaf0cef8181dabfabb", ['\x00', '\x00', '\x00']}, 0x37c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000003140)) 10:28:04 executing program 5: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000040)={{r0}, 0x0, 0xa, @unused=[0x7, 0x10000, 0xbac, 0x80000001], @subvolid=0x86bb}) execveat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', &(0x7f0000001240)=[&(0x7f0000001080)='\'\x00', &(0x7f00000010c0)=']%+!\x00', &(0x7f0000001100)='\x00', &(0x7f0000001140)='#{%-:!--@$[,@\x00', &(0x7f0000001180)='-\\\x00', &(0x7f00000011c0)='-(\x00', &(0x7f0000001200)='.\x00'], &(0x7f00000012c0)=[&(0x7f0000001280)='\x00'], 0x1000) statx(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x4000, 0x10, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000014c0)}}, {{&(0x7f0000001500), 0x6e, &(0x7f0000001680)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/58, 0x3a}], 0x2, &(0x7f00000016c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000001700)=""/152, 0x98}, {&(0x7f00000017c0)=""/14, 0xe}, {&(0x7f0000001800)=""/200, 0xc8}, {&(0x7f0000001900)=""/244, 0xf4}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x5, &(0x7f0000002a80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003c00)=[{&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/80, 0x50}], 0x2, &(0x7f0000003c40)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000003cc0), 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000003d40)=""/99, 0x63}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x5, 0x40, &(0x7f0000005000)={0x77359400}) setxattr$system_posix_acl(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='system.posix_acl_access\x00', &(0x7f0000005040)={{}, {0x1, 0x5}, [{0x2, 0x3}, {0x2, 0x1, r1}], {0x4, 0x2}, [{0x8, 0x6, r8}, {0x8, 0x0, 0xee01}, {0x8, 0x3}, {}, {0x8, 0x5}], {}, {0x20, 0x4}}, 0x5c, 0x0) r12 = syz_open_dev$vcsn(&(0x7f00000050c0), 0x10000, 0x101400) ioctl$AUTOFS_IOC_SETTIMEOUT(r12, 0x80049367, &(0x7f0000005100)=0x691b) flistxattr(r9, &(0x7f0000005140)=""/129, 0x81) r13 = timerfd_create(0x7, 0x800) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000005200)={0x0, r2, 0x1, 0x9, 0xf224, 0xa1}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005280), r10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f0000005340)={'ip6tnl0\x00', &(0x7f00000052c0)={'syztnl1\x00', 0x0, 0x2f, 0x56, 0x35, 0x8000, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x8, 0x2, 0xfffffffe}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000005440)={'veth1_vlan\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000005500)={'syztnl1\x00', &(0x7f0000005480)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x0, 0x1, 0x10, @empty, @private2, 0x8080, 0x1, 0x1ff, 0x3}}) getpeername$packet(r5, &(0x7f0000005540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005580)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f00000061c0)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006180)={&(0x7f00000055c0)={0xbb0, r14, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x334, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',([^&.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9f6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#/[{.\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc10}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^)-\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x1e8, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ',$-^&%/:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.-/.-\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4b5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, 'system.posix_acl_access\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xfd$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, 'system.posix_acl_access\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6b}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, 'system.posix_acl_access\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '#{%-:!--@$[,@\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-@/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4e}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '++^-@-$&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, 'system.posix_acl_access\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcs#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "749a7ecd48294dd97c1d2bc897afa07d08b31db7f7942c5eb6e794f2bb2e7fa21a0a3a18f1cfd08533d8c1ee3c6b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @ETHTOOL_A_DEBUG_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x294, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xee, 0x4, "e7b79900ba38bced051ee1a33491a846a20c74c898b0c4a9037644846e930a037a71277468f123fea13c4c8c7924f0262a2f3f8bee582ad308f1842b60dd7967acf12d1de1396261ff8fcec6c73383e94ea8cfb9942c1f85857cde4a9aba50f06772cd7a1144e596f5f7a8d1cf56ac96b3912fcd76a1baa5c13e9e5ac3d4036c98a2d8859658e182993011304dab0b16b2b187e106f2950d6e3c5ad80933995287a70c6fefa6e21ee74848e6fa358a17a2962b4350ae6b5932b704390593b7fefdeb5e644e68f437b3d2830d5e41c9f690e95b0760491e4eedd19a923d1aac4d13acf41173c62a753cba"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "5c27a0aba2cec2821c7949814dad845d0872d4f97fdfb7cd53b0aac1a9852990dc339756e96a881e2bdd0c8dada54f5caa1a37da8302d871c8b58d2f27bca082922509468ba66c3d690abdc45d5c7da562c7fb38d5ea73b1549f42937ec35934cfee3bd6aea3b1e4b1d98496c8478cbb520b03f3428426c4e2a15ddea3f840d9780b8c4a13d8c03e9642f0c2862a4d359f8a81fe537c248927"}, @ETHTOOL_A_BITSET_MASK={0xdb, 0x5, "38e4a90045f7c2f558b2ceabf1148aa4cc95d6d14437d4607f42c7547812aa01d2a8e1ea8b2fe46a838b5afc39c7429ff7fda0556c334a606e9e4e5dbdc3cfc7bcdb293213512fe38a3255dc05f2ab1c15f260585d74792eeb8c3db78047dd9ddab34215e1cd31a5d0b4931b5e585ac9b4520c8c6270c19c91f8e060caa118975eb26f546aa29935caaefb9a521332a7b9ab9031e2b46737f9b015b46762084a06e42f1a7a18617fb6da7f6254a94bd42ca334b46e45b63aafcef8a39dc02c5ca3034f1a20dc0a745d990b38434db780473aedd0de0b3f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x184, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "3e54c9d146941c3f7bb55819c338c9e769c6827cb0de54203e910ead5f31f68c3519fed3bd7f1a3837"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\f\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+:(f%[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9f96}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "6415d74999ff93d8c80e43cde2c877475d7ad143b948935d77d4934bfbf27fd6b650f6a3d3893a4657dfcb83f08ee717ae6484fce3bf307532f1278adfd82e84b7e839c9e397d2e34a2b78ad7c9717b3ea27724b266abe0ef7b72bf166ac11fcfc355506f7a006b507f3439338c8ca3108a254ea9d941cc4274427de11f4fd9e9cce3a3a922d559075"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',@]*]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x234, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x76, 0x5, "17e9eca10294e0c7e9f843984491ac6e9581389d494dcf724356ffd99f3d4ebba0c3c5dd51a27803e60257805b0c52646051c25ba55175ef373ce0a64f17d999313689e31b0ae2a33bd36942eb33355e87c3a996e1157031f2edabb4f820808d0e8c89fbae043d86bae56a71bc3509f121d7"}, @ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "bbe318f2419af9e0442a95c44b0b34d28806035a"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xfb, 0x5, "515666b6b695b5057821e0b847bbc586dd69cc2f2ff35bbc15dacde409acbdfb6daed55e032deec6a38ff0491ddc2ddde799c424e1c68f9d91daecb5648c096c1e5e5c6a34fc48664d5b32f2db03e9b67053e32a180e0bdd9735b4610787072868e2407147bd63a23835ef9e92b6ff02eda74a5e977a570fcff61e452a1df533a6f841cba6ab7a5ef6a92d8ef9f67210313f474fcf2dd40dec4c3f6135c5e28d535c5ec910d7ab10210aac1798d5424ca60f5390752815754efd2518b2b4c0c6cb0bcf9661b91f1a4b493e6666d86f186fd3c834069a6b974fd5d838fcc85973451e50e0c6981e2438cc68219268ffc26e3049d34f095c"}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "e7604f9d5939c6d43fc0234784737b75d9bf1cb09ae9c42d8b2801016aa1b76e98b2685967a413870fbfdeada3c1e5926d30b9df2cde4b90f55479a67cbe75000616f7c07e6ba76f0d3e3c1928f19fa08bff5493881d6a61ec273acdfa6d2fee1159f0ad105998310c519e155fffe56aaadbf2c5fdfe04998be542b42d328e3a61f039951bfcdbd33537747c6a2173db1d744765cb4e97b9"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xea, 0x5, "0137076ea517f5816abebdffc9d371694733a3e51028463197c259aadb5b12b990b7d8c6a75f14b777e3ddec01aaf8590a5db83d2ce2f2bc649919b1aabcd848b7ac2283d5c95f48e9f24edb1fff20dacf5171b440185b7ac98a415759cf48a611860ae304869340bf92f333d06c51a23bd08e974d98e857045cf4a46e62857415d11a76d2ba1423af06a72771540223258f7095355f51df0be905d6a0768623fb7926be8fbb8b19c4b2b091fd0609709dae8b9c24c572fa374d40508d788350abf93fd3ff17f1a05caeb2b4ebb39737597a40898c8dc96779e343099127a649a19a5b023187"}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xbb0}, 0x1, 0x0, 0x0, 0x800}, 0x1) r19 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006240), r11) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000006480)={&(0x7f0000006200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006440)={&(0x7f00000063c0)={0x54, r19, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4) 10:28:04 executing program 6: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0xd5, 0x9}) r0 = memfd_secret(0x80000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc3f}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000018}, 0x4800) recvmmsg(r1, &(0x7f0000004040)=[{{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000001440)=[{&(0x7f0000000300)=""/139, 0x8b}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000001480)=""/215, 0xd7}, 0x8}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001600)=""/85, 0x55}, {&(0x7f0000001680)=""/2, 0x2}, {&(0x7f00000016c0)=""/53, 0x35}, {&(0x7f0000001700)=""/6, 0x6}, {&(0x7f0000001740)=""/157, 0x9d}, {&(0x7f0000001800)=""/22, 0x16}, {&(0x7f0000001840)=""/156, 0x9c}], 0x7, &(0x7f0000001980)=""/4096, 0x1000}, 0xfff}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002980)=""/196, 0xc4}, {&(0x7f0000002a80)=""/206, 0xce}], 0x2, &(0x7f0000002bc0)=""/116, 0x74}, 0xf0}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c40)=""/57, 0x39}], 0x1}, 0x72}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000002cc0)=""/101, 0x65}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/38, 0x26}, {&(0x7f0000003d80)=""/40, 0x28}, {&(0x7f0000003dc0)=""/172, 0xac}, {&(0x7f0000003e80)=""/104, 0x68}, {&(0x7f0000003f00)=""/82, 0x52}], 0x7, &(0x7f0000004000)=""/47, 0x2f}, 0xa5}], 0x5, 0x40000003, &(0x7f0000004180)={0x0, 0x989680}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000041c0), 0xc0000, 0x0) close(r3) statx(r1, &(0x7f0000004200)='./file0\x00', 0x6000, 0x10, &(0x7f0000004240)) ioctl$CDROMCLOSETRAY(r0, 0x5319) statx(r1, &(0x7f0000004340)='./file0\x00', 0x0, 0x20, &(0x7f0000004380)) write$binfmt_elf32(r0, &(0x7f0000004480)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x7f, 0x7, 0x3, 0x3223d47c, 0x3, 0x5, 0x7fffffff, 0x175, 0x38, 0x23d, 0x2, 0xf994, 0x20, 0x2, 0x707, 0x7, 0x4}, [{0x2, 0x10001, 0x7, 0x3, 0x3, 0x1, 0x7fff, 0x3f}, {0x1, 0x20, 0x1, 0x2de, 0x3f, 0x9, 0x81, 0x4}], "c54ac8477b02ca538c4be2dc890ecf", ['\x00']}, 0x187) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004640), 0x200100) pwritev2(r4, &(0x7f0000004800)=[{&(0x7f0000004680)="2c7c4f3cb97ab3aab06c34f04691fb4241f5df87e435296872e3a700c6c77227a8bf76b78510182d8a0efd506438b0d96e27e85c4e0b724a00e30ad26de35335cb9a16df75503cd263f71ab9b3ae97fc4657caf70cd1f252b1e4f005c08242560c97963a67667bb5488c577a244e1b2e62e2f9d252d4e7f1a3715925a617817715e69571c73fca1629bda7115e3d1719d590adf6fcf42eb740f8542b4bc54eb596e7372aac897c0591", 0xa9}, {&(0x7f0000004740)="a1ad45a8fa84414df436c0310ba54214474c3399a774508c42cd9e6763b8654f54289ee47c350bd6e68c32b9c052074a8e0a08e43bcaf9eedbebd53151fed7825cd86712c0b31365a54a73ecb2661be5d01f9c5235c176033ab2870e600ed6", 0x5f}, {&(0x7f00000047c0)="4497d4", 0x3}], 0x3, 0x7ff, 0x0, 0x10) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000004840)={0x4, 0x40, 0x40, 0x14, 0x3, 0x2}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000052c0)) fallocate(r4, 0x1, 0x5, 0x7ff) r5 = syz_open_dev$vcsu(&(0x7f0000005300), 0xd7, 0x18280) ioctl$FIONCLEX(r5, 0x5450) 10:28:04 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) r1 = signalfd4(r0, &(0x7f0000000080)={[0x2]}, 0x8, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0x1ff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pata_sch', 0x0, 0x40) r3 = pidfd_getfd(r2, r0, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0x7, &(0x7f0000000180)=0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200802, 0xf446671fda0e2f6) mknodat(r4, &(0x7f0000000200)='./file0\x00', 0x200, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'bond0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000280)={0x0, 0x4c74839, 0x0, [0x3, 0x4, 0x5, 0x81, 0x5], [0x80, 0x8, 0x7, 0x0, 0x99, 0x80, 0xfff, 0x8, 0x3f, 0x400, 0xaeb, 0x7, 0x1ff, 0x8146, 0x3f, 0x7fffffff, 0xfffffffffffffffa, 0x9, 0xffff, 0x7, 0x5, 0x80000000, 0x7, 0xfffffffffffffffd, 0x7ff, 0xffffffffffffff80, 0x7, 0x1, 0x400, 0x5, 0x3, 0x1, 0x8, 0x1, 0xa123, 0x5, 0x5, 0x6, 0x4, 0x5, 0x800, 0x824, 0x6, 0x5, 0x1000, 0x5, 0x3, 0x100000000, 0x1, 0x22, 0x0, 0xfffffffffffffffb, 0x2735, 0x8, 0x9, 0x3, 0x3, 0x0, 0x426, 0x8, 0x2d0, 0x5, 0x4, 0x7, 0x7f, 0x6, 0xfffffffffffffffc, 0x8, 0x3f, 0x7fffffff, 0x88, 0x48, 0x6, 0x1000, 0x2d, 0x6, 0x6, 0x401, 0x5, 0x9c, 0x10001, 0x100000000, 0x6, 0x8001, 0x8, 0x2, 0x8f2d, 0x8, 0x3ff, 0x0, 0x9, 0x8, 0x0, 0x100, 0x4a, 0x20, 0x3e0000000, 0x9, 0x40, 0x200, 0x2, 0x8, 0x1ff, 0x9, 0x0, 0x7f, 0x0, 0x3, 0x4, 0x0, 0x101, 0x7, 0x4a50, 0x7fffffff, 0x7, 0x6, 0xb62c000000000000, 0x4, 0xc36, 0x9, 0x4efe]}) execveat(r2, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)=[&(0x7f0000000700)='bond0\x00'], &(0x7f0000000940)=[&(0x7f0000000780)='%\'+^\x91\x00', &(0x7f00000007c0)=')\x00', &(0x7f0000000800)='bond0\x00', &(0x7f0000000840)='/\x00', &(0x7f0000000880)='&)}\x00', &(0x7f00000008c0)='}\x00', &(0x7f0000000900)='bond0\x00'], 0x400) r5 = open(&(0x7f0000000980)='./file0/file0\x00', 0x400300, 0x40) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) utimensat(r5, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a40)={{r6, r7/1000+10000}, {0x77359400}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000a80)) r8 = open(&(0x7f0000000ac0)='./file0/file0\x00', 0x0, 0xac) ioctl$TIOCSRS485(r8, 0x542f, &(0x7f0000000b00)={0x1000, 0x2, 0x6}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000b40), r2) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@local, @in6=@mcast2, 0x4e21, 0x0, 0x4e23, 0x0, 0xa, 0x80, 0x80, 0x2b, 0x0, 0xffffffffffffffff}, {0x10000, 0x5, 0x100, 0x100, 0x0, 0x100000000, 0x2, 0xde}, {0x9, 0xffffffff7fffffff, 0x80, 0x60000000}, 0x7fff, 0x6e6bbe, 0x2, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4d3, 0xff}, 0x2, @in=@private=0xa010100, 0x3505, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1}}, 0xe8) [ 66.119078] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.120978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.123636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.140006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.143978] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.145889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.154253] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.181823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.183562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.205637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.208017] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.209995] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.211824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.213189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.214201] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.226432] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.229329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.231548] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.232637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.245405] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.248080] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.249606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.252491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.254078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.255605] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.258211] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.260875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.269068] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.270461] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.273353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.275086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.279514] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.282917] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.284310] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.286653] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.288558] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.290020] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.291279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.294010] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.295476] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.298914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.304698] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.306173] Bluetooth: hci5: HCI_REQ-0x0c1a [ 66.309211] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.312929] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.319374] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.354958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.363114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.369920] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.376453] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.378188] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.380056] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.386991] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.390406] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.391609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.396676] Bluetooth: hci6: HCI_REQ-0x0c1a [ 68.199103] Bluetooth: hci0: command 0x0409 tx timeout [ 68.262818] Bluetooth: hci7: command 0x0409 tx timeout [ 68.326850] Bluetooth: hci3: command 0x0409 tx timeout [ 68.327063] Bluetooth: hci5: command 0x0409 tx timeout [ 68.391023] Bluetooth: hci2: command 0x0409 tx timeout [ 68.392359] Bluetooth: hci4: command 0x0409 tx timeout [ 68.393305] Bluetooth: hci1: command 0x0409 tx timeout [ 68.455811] Bluetooth: hci6: command 0x0409 tx timeout [ 70.247202] Bluetooth: hci0: command 0x041b tx timeout [ 70.311776] Bluetooth: hci7: command 0x041b tx timeout [ 70.375239] Bluetooth: hci5: command 0x041b tx timeout [ 70.375849] Bluetooth: hci3: command 0x041b tx timeout [ 70.438855] Bluetooth: hci1: command 0x041b tx timeout [ 70.439285] Bluetooth: hci4: command 0x041b tx timeout [ 70.439674] Bluetooth: hci2: command 0x041b tx timeout [ 70.502870] Bluetooth: hci6: command 0x041b tx timeout [ 72.294778] Bluetooth: hci0: command 0x040f tx timeout [ 72.358775] Bluetooth: hci7: command 0x040f tx timeout [ 72.422799] Bluetooth: hci3: command 0x040f tx timeout [ 72.423239] Bluetooth: hci5: command 0x040f tx timeout [ 72.486792] Bluetooth: hci2: command 0x040f tx timeout [ 72.487226] Bluetooth: hci4: command 0x040f tx timeout [ 72.487627] Bluetooth: hci1: command 0x040f tx timeout [ 72.550876] Bluetooth: hci6: command 0x040f tx timeout [ 74.342816] Bluetooth: hci0: command 0x0419 tx timeout [ 74.406844] Bluetooth: hci7: command 0x0419 tx timeout [ 74.470804] Bluetooth: hci5: command 0x0419 tx timeout [ 74.471242] Bluetooth: hci3: command 0x0419 tx timeout [ 74.534879] Bluetooth: hci1: command 0x0419 tx timeout [ 74.535319] Bluetooth: hci4: command 0x0419 tx timeout [ 74.536095] Bluetooth: hci2: command 0x0419 tx timeout [ 74.598820] Bluetooth: hci6: command 0x0419 tx timeout [ 120.630801] loop2: detected capacity change from 0 to 225 [ 120.659591] loop2: detected capacity change from 0 to 225 10:29:15 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000540)="647055e23745d8875993623c08515ba601b79410e215bb357a9a74481a9e32ad0075d4cb40064c3efd686686ebd9fdd599945f3d09bf346431c715176116891a2e02e86ce4bdeae9bff00e809b94833c333c809c556681c25a419773dc82530da7621aadf58db9119894d808802baba4224859979868a6fa3038f0929a38c502a968a86b86046ed61dc7bd2db8c95ab1b51c7c9346b2c811f3174782e0b55ab84e91b285c1eae37c8acecdf9034cc7b160412cf59b05e630c9c661eb7082f88fcf6d929c30f0f931f269c5e5", 0xcc}, {&(0x7f0000000440)="f771f4c89d8a5d32c2d242f7e8a0c4cdcf6b179f1b8452b99f550b01c5a8a61abcaebc680ccf7bb0b2db2a9b4ffd460655201863421477d1ed84c1b16b2f8085f8b9709573d6776aa0582504823146de39d70137a3fba50de75e4bbaf99d731974ae3ac6059d69dd794c24000b4232a93029d34977e63846d664152b648b4fef4c6a21e64ae6c0a2024b4d90f7505adc65976625cd9f285fdb9e4ad721563d", 0x9f}, {&(0x7f0000000180)="b2d9933b01c6a25679b9188e35723f675f399928d4c8f0ae2cd936cac7a3c38cac2479eaac3a7bbc056a34254ac14cc59b15738239ee7e953633322e32eb87e9e4340e1116da7a42cefdbe5f3fe19b1d3158c4069ded63a94b678788af14b6ac61c119c9204de9ade173dacde543a746e939b086e07858db74bd2da1f2745ae4", 0x80}, {&(0x7f0000000000)="09ec47e1d7c0c9899af98632f3191fbf92c2ff42f31d025d29344600a3b1405b086a7e609d2d8fe5a217a1c7c5f8d53731a1632c03310ff4502a5efb", 0x3c}, {&(0x7f0000000640)="c29699120aade047abd68557a040fca52f74bd6661b41ba8988097795ec1bbde20b8b5ab5614fc1a8204b91b54bcbf041d8fbf47fb96ae899849ac00dd1d2c7707e25a5eda761393f1bf89eb5054557e199a8740c40abc00a4f18c0a0cd3c79c42595d39f9b7c3433a4d54e2d1c674190836d495fa6bcb8505c9a987f58945386ad903fc49bf2ca90fb4813f93ea03912a9cca28730f1bd77ee90ae304e376c8f02cac981e9c9ade02c04eb1be1e54cd481e38f66ab16a0e2ba32897", 0xbc}, {&(0x7f0000000700)="7d7f634ef16c7022f69ee2fcaac2eb97996726ed69d1b0a4bacdd561aae773200fbbc579f3c809540972e021c4156e354e704c019b71c962133aca420e12bc8d955f946463356ffb19b0b91efac91384ee411550386815aea6ef51f142055ca80875aa256f428c4f6aa5df87ec997624fdf29889a33018c6684a028ab1d5c45232db95f95f9f209a31bbde27e5d8df54cf72acf042bc25310c3065d8fe998a1b5a1b8377018ce80bc842d79abc34df1d3e827b9f339d0ee227ce8a3da04df2acbe00c8", 0xc3}, {&(0x7f0000000800)="47fcc2d660a50e1e5cae13d79338df9a93964d004d0361c046c397cc2b636c7eecc93365b45c494a631d0ff1c4f59c464a76d0a9c964113d6a42ceb7f458b3b3701c9e347565755c94d936ffb952cc87a2a35425d0ce8393a620a6aa7d0168aba0ae63190cb7fdc718cbe41558b3dd9c1470dc9122f5d77177304f17909aeb48523c3de0200ee955fcf53e1b400dbd3ea92d28bba22d78dfddb9c0f72d5c311029df3840e8d823361f7c679b37aa67625f8ead94da25888f4bb680065c17ea405da7ac0b61a35176cd9a89647cf82662d1308e81e63c23caaa9c17660bbffaef9d", 0xe1}], 0x7, 0x4, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000900)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151aa55ad07e5d3ceed7bcdee5006dc37b469f1f5131c33f52031061ff9058b6e8ab081be20ac713115d8ef233fe76b5598581daab2c199ca9b89e55a58a08f064ba37f4543db9b8756b70d1edad68e95543d52e8b181724369615fed67714bda29207f5a8202fd16058ceb6", @ANYRES32, @ANYRES64=r0]) socket$inet(0x2, 0x2, 0x3ff) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(r4, &(0x7f00000017c0)=[{&(0x7f00000006c0)=' ', 0x1}], 0x1) fcntl$setown(r4, 0x8, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 10:29:15 executing program 2: r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(r1, &(0x7f00000017c0)=[{&(0x7f00000006c0)=' ', 0x1}], 0x1) signalfd(r1, &(0x7f0000000040)={[0x8]}, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000000)=""/42, 0x2a) 10:29:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) io_setup(0x3ff, &(0x7f0000000140)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') io_submit(r5, 0x1, &(0x7f0000001340)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x200000}]) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x1000000d}) dup2(r4, r1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) close_range(0xffffffffffffffff, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000500000000002000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18}, 0x0) dup2(r7, r8) 10:29:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0xfff, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 10:29:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7eb8}}, './file0\x00'}) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 10:29:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000012000b0127bd7000fc010025090000000600030000000000060003"], 0x64}, 0x1, 0x0, 0x0, 0x4000811}, 0x20000041) [ 135.735164] loop4: detected capacity change from 0 to 40 10:29:15 executing program 1: syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000100), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0xf) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) 10:29:15 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40095) sendfile(r0, r0, &(0x7f0000000200), 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40045) [ 135.753548] audit: type=1400 audit(1664792955.700:7): avc: denied { open } for pid=3957 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.757794] audit: type=1400 audit(1664792955.700:8): avc: denied { kernel } for pid=3957 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.762399] ------------[ cut here ]------------ [ 135.762418] [ 135.762420] ====================================================== [ 135.762424] WARNING: possible circular locking dependency detected [ 135.762428] 6.0.0-rc7-next-20220930 #1 Not tainted [ 135.762434] ------------------------------------------------------ [ 135.762438] syz-executor.3/3968 is trying to acquire lock: [ 135.762444] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 135.762483] [ 135.762483] but task is already holding lock: [ 135.762486] ffff88800d263020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.762512] [ 135.762512] which lock already depends on the new lock. [ 135.762512] [ 135.762515] [ 135.762515] the existing dependency chain (in reverse order) is: [ 135.762519] [ 135.762519] -> #3 (&ctx->lock){....}-{2:2}: [ 135.762532] _raw_spin_lock+0x2a/0x40 [ 135.762544] __perf_event_task_sched_out+0x53b/0x18d0 [ 135.762555] __schedule+0xedd/0x2470 [ 135.762568] schedule+0xda/0x1b0 [ 135.762582] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.762594] syscall_exit_to_user_mode+0x19/0x40 [ 135.762607] do_syscall_64+0x48/0x90 [ 135.762624] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.762637] [ 135.762637] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 135.762650] _raw_spin_lock_nested+0x30/0x40 [ 135.762661] raw_spin_rq_lock_nested+0x1e/0x30 [ 135.762674] task_fork_fair+0x63/0x4d0 [ 135.762690] sched_cgroup_fork+0x3d0/0x540 [ 135.762704] copy_process+0x4183/0x6e20 [ 135.762718] kernel_clone+0xe7/0x890 [ 135.762727] user_mode_thread+0xad/0xf0 [ 135.762737] rest_init+0x24/0x250 [ 135.762749] arch_call_rest_init+0xf/0x14 [ 135.762767] start_kernel+0x4c6/0x4eb [ 135.762782] secondary_startup_64_no_verify+0xe0/0xeb [ 135.762796] [ 135.762796] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 135.762809] _raw_spin_lock_irqsave+0x39/0x60 [ 135.762820] try_to_wake_up+0xab/0x1930 [ 135.762833] up+0x75/0xb0 [ 135.762847] __up_console_sem+0x6e/0x80 [ 135.762863] console_unlock+0x46a/0x590 [ 135.762878] vprintk_emit+0x1bd/0x560 [ 135.762894] vprintk+0x84/0xa0 [ 135.762910] _printk+0xba/0xf1 [ 135.762921] regdb_fw_cb.cold+0x6c/0xa7 [ 135.762938] request_firmware_work_func+0x12e/0x240 [ 135.762958] process_one_work+0xa17/0x16a0 [ 135.762975] worker_thread+0x637/0x1260 [ 135.762991] kthread+0x2ed/0x3a0 [ 135.763006] ret_from_fork+0x22/0x30 [ 135.763018] [ 135.763018] -> #0 ((console_sem).lock){....}-{2:2}: [ 135.763031] __lock_acquire+0x2a02/0x5e70 [ 135.763048] lock_acquire+0x1a2/0x530 [ 135.763063] _raw_spin_lock_irqsave+0x39/0x60 [ 135.763074] down_trylock+0xe/0x70 [ 135.763088] __down_trylock_console_sem+0x3b/0xd0 [ 135.763104] vprintk_emit+0x16b/0x560 [ 135.763120] vprintk+0x84/0xa0 [ 135.763136] _printk+0xba/0xf1 [ 135.763146] report_bug.cold+0x72/0xab [ 135.763162] handle_bug+0x3c/0x70 [ 135.763178] exc_invalid_op+0x14/0x50 [ 135.763194] asm_exc_invalid_op+0x16/0x20 [ 135.763207] group_sched_out.part.0+0x2c7/0x460 [ 135.763224] ctx_sched_out+0x8f1/0xc10 [ 135.763241] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.763252] __schedule+0xedd/0x2470 [ 135.763265] schedule+0xda/0x1b0 [ 135.763278] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.763289] syscall_exit_to_user_mode+0x19/0x40 [ 135.763301] do_syscall_64+0x48/0x90 [ 135.763317] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.763330] [ 135.763330] other info that might help us debug this: [ 135.763330] [ 135.763333] Chain exists of: [ 135.763333] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 135.763333] [ 135.763347] Possible unsafe locking scenario: [ 135.763347] [ 135.763350] CPU0 CPU1 [ 135.763352] ---- ---- [ 135.763354] lock(&ctx->lock); [ 135.763360] lock(&rq->__lock); [ 135.763367] lock(&ctx->lock); [ 135.763373] lock((console_sem).lock); [ 135.763378] [ 135.763378] *** DEADLOCK *** [ 135.763378] [ 135.763380] 2 locks held by syz-executor.3/3968: [ 135.763387] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 135.763416] #1: ffff88800d263020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.763442] [ 135.763442] stack backtrace: [ 135.763445] CPU: 0 PID: 3968 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 135.763457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.763465] Call Trace: [ 135.763468] [ 135.763472] dump_stack_lvl+0x8b/0xb3 [ 135.763490] check_noncircular+0x263/0x2e0 [ 135.763506] ? format_decode+0x26c/0xb50 [ 135.763523] ? print_circular_bug+0x450/0x450 [ 135.763539] ? simple_strtoul+0x30/0x30 [ 135.763555] ? format_decode+0x26c/0xb50 [ 135.763572] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 135.763590] __lock_acquire+0x2a02/0x5e70 [ 135.763611] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 135.763633] lock_acquire+0x1a2/0x530 [ 135.763650] ? down_trylock+0xe/0x70 [ 135.763667] ? lock_release+0x750/0x750 [ 135.763687] ? vprintk+0x84/0xa0 [ 135.763705] _raw_spin_lock_irqsave+0x39/0x60 [ 135.763716] ? down_trylock+0xe/0x70 [ 135.763732] down_trylock+0xe/0x70 [ 135.763747] ? vprintk+0x84/0xa0 [ 135.763764] __down_trylock_console_sem+0x3b/0xd0 [ 135.763781] vprintk_emit+0x16b/0x560 [ 135.763800] vprintk+0x84/0xa0 [ 135.763817] _printk+0xba/0xf1 [ 135.763828] ? record_print_text.cold+0x16/0x16 [ 135.763844] ? report_bug.cold+0x66/0xab [ 135.763862] ? group_sched_out.part.0+0x2c7/0x460 [ 135.763880] report_bug.cold+0x72/0xab [ 135.763899] handle_bug+0x3c/0x70 [ 135.763916] exc_invalid_op+0x14/0x50 [ 135.763934] asm_exc_invalid_op+0x16/0x20 [ 135.763947] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.763967] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.763978] RSP: 0018:ffff888040e2fc48 EFLAGS: 00010006 [ 135.763987] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.763995] RDX: ffff88800e273580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 135.764002] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 135.764010] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d263000 [ 135.764017] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 135.764028] ? group_sched_out.part.0+0x2c7/0x460 [ 135.764048] ? group_sched_out.part.0+0x2c7/0x460 [ 135.764068] ctx_sched_out+0x8f1/0xc10 [ 135.764087] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.764101] ? lock_is_held_type+0xd7/0x130 [ 135.764115] ? __perf_cgroup_move+0x160/0x160 [ 135.764125] ? set_next_entity+0x304/0x550 [ 135.764143] ? update_curr+0x267/0x740 [ 135.764161] ? lock_is_held_type+0xd7/0x130 [ 135.764175] __schedule+0xedd/0x2470 [ 135.764192] ? io_schedule_timeout+0x150/0x150 [ 135.764208] ? rcu_read_lock_sched_held+0x3e/0x80 [ 135.764229] schedule+0xda/0x1b0 [ 135.764244] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.764256] syscall_exit_to_user_mode+0x19/0x40 [ 135.764269] do_syscall_64+0x48/0x90 [ 135.764287] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.764300] RIP: 0033:0x7f5024ffdb19 [ 135.764308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.764319] RSP: 002b:00007f5022573218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.764329] RAX: 0000000000000001 RBX: 00007f5025110f68 RCX: 00007f5024ffdb19 [ 135.764337] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5025110f6c [ 135.764344] RBP: 00007f5025110f60 R08: 000000000000000e R09: 0000000000000000 [ 135.764351] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5025110f6c [ 135.764358] R13: 00007ffd9b5a87df R14: 00007f5022573300 R15: 0000000000022000 [ 135.764370] [ 135.764375] WARNING: CPU: 0 PID: 3968 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 135.764399] Modules linked in: [ 135.764404] CPU: 0 PID: 3968 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 135.764416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.764423] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.764443] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.764454] RSP: 0018:ffff888040e2fc48 EFLAGS: 00010006 [ 135.764463] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.764470] RDX: ffff88800e273580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 135.764478] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 135.764486] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d263000 [ 135.764493] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 135.764503] FS: 00007f5022573700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 135.764516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.764524] CR2: 00007ff4a927cd58 CR3: 000000001d5c8000 CR4: 0000000000350ef0 [ 135.764532] Call Trace: [ 135.764535] [ 135.764540] ctx_sched_out+0x8f1/0xc10 [ 135.764560] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.764575] ? lock_is_held_type+0xd7/0x130 [ 135.764589] ? __perf_cgroup_move+0x160/0x160 [ 135.764600] ? set_next_entity+0x304/0x550 [ 135.764618] ? update_curr+0x267/0x740 [ 135.764636] ? lock_is_held_type+0xd7/0x130 [ 135.764651] __schedule+0xedd/0x2470 [ 135.764668] ? io_schedule_timeout+0x150/0x150 [ 135.764685] ? rcu_read_lock_sched_held+0x3e/0x80 [ 135.764705] schedule+0xda/0x1b0 [ 135.764720] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.764733] syscall_exit_to_user_mode+0x19/0x40 [ 135.764747] do_syscall_64+0x48/0x90 [ 135.764765] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.764778] RIP: 0033:0x7f5024ffdb19 [ 135.764786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.764797] RSP: 002b:00007f5022573218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.764809] RAX: 0000000000000001 RBX: 00007f5025110f68 RCX: 00007f5024ffdb19 [ 135.764816] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5025110f6c [ 135.764824] RBP: 00007f5025110f60 R08: 000000000000000e R09: 0000000000000000 [ 135.764831] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5025110f6c [ 135.764839] R13: 00007ffd9b5a87df R14: 00007f5022573300 R15: 0000000000022000 [ 135.764852] [ 135.764856] irq event stamp: 702 [ 135.764860] hardirqs last enabled at (701): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 135.764875] hardirqs last disabled at (702): [] __schedule+0x1225/0x2470 [ 135.764893] softirqs last enabled at (476): [] __irq_exit_rcu+0x11b/0x180 [ 135.764913] softirqs last disabled at (411): [] __irq_exit_rcu+0x11b/0x180 [ 135.764933] ---[ end trace 0000000000000000 ]--- [ 135.775851] audit: type=1400 audit(1664792955.722:9): avc: denied { block_suspend } for pid=3957 comm="syz-executor.3" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 135.793735] hrtimer: interrupt took 15368 ns [ 135.817892] netlink: 'syz-executor.0': attribute type 16 has an invalid length. 10:29:15 executing program 7: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(r1, &(0x7f00000017c0)=[{&(0x7f00000006c0)=' ', 0x1}], 0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x3ff, 0xa0}) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sendmail_exec_t:s0\x00', 0x25) 10:29:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x82c66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) socket$unix(0x1, 0x5, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x102) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) memfd_create(&(0x7f0000000200)='-%@,/.(\x00', 0x6) ftruncate(r0, 0x1) [ 135.977273] audit: type=1400 audit(1664792955.924:10): avc: denied { create } for pid=3981 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sendmail_exec_t:s0 tclass=key permissive=1 10:29:15 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x84, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2048800}, 0x40) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73666e6c9200080101000440002000f801002000400003000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1800}, {&(0x7f0000010400)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x2000}, {&(0x7f0000010500)="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", 0x120, 0x2800}, {&(0x7f0000010700)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x3800}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x4000}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x4800}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x7800}], 0x0, &(0x7f0000010f00)=ANY=[@ANYBLOB=',']) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r1 = semget(0x0, 0x4, 0x23c) semctl$GETPID(r1, 0x3, 0xb, &(0x7f0000000000)=""/200) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r2, 0xffffffffffffffff, 0x0, 0xee00, 0x6}, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x891c}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000580)=0xe8) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x20000, &(0x7f00000005c0)={'trans=unix,', {[{@cache_loose}, {@privport}, {@debug={'debug', 0x3d, 0x40}}, {@access_uid={'access', 0x3d, r2}}, {@access_client}, {@nodevmap}, {@posixacl}], [{@appraise_type}, {@euid_lt={'euid<', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@,])%M$}\']'}}, {@smackfsdef}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x200}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}) [ 136.006381] loop5: detected capacity change from 0 to 128 10:29:15 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="cbb99259fe8508e533109e853c4d053f404e1b79d4fe4b598872e458775f6a92cc8681cd0462cea58abc6c66bda24aa0b9dc002c2d389af1adcff6007498ff3abb0341da17f371894bf64eb726c5a8ea4c6e12d2413c484111edb0626605dc0a8ab7827c7054fae9a513e108b6635c9af363955081114e11b729c9b55423c8b1d809968d49a98ee963f1d2a2828688d13e645d2cf5d41709af277c4c24501adc800190c0eb6d52e76ef77693fa9a5f286fdc13a689aad1bb457955d0705d51242a640fae0da743b13a24f09230e9211a04c54a9bc1926dc721946ec8be2c5267bbb0f464160090a9ac9919403b719cce75628b1393181b845e67", 0xfa}, {&(0x7f0000000300)="f2ec808a70fcabd2307b5fb247e1e29b9957bbedd6a3e338f04e72600684dd04f968c675c1285fd83211ab3d3faab7146b3fb9a3367e6f38c20bc4173e0dc49aba884cea0f8755807c86bec9b6e1d3e0f22987ccf6b7173c0d98c9b69cd7be", 0x5f}, {&(0x7f0000000380)="b5cb7b33fcd1af723187b94e88e115fe77e2c419335faf1408a4fa4ca5fd4b7872088b08cf52fdc4d0dc7953", 0x2c}], 0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(r4, &(0x7f00000017c0)=[{&(0x7f00000006c0)=' ', 0x1}], 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x160140, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRESHEX=r4, @ANYRES64=r3]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') open(0x0, 0x40, 0x5e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x24, 0x66, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc4ee871c650108390"]}, 0x24}], 0x1}, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 136.062411] syz-executor.4: attempt to access beyond end of device [ 136.062411] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 136.140528] netlink: 'syz-executor.0': attribute type 16 has an invalid length. VM DIAGNOSIS: 10:29:15 Registers: info registers vcpu 0 RAX=00000058c123e440 RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000058 RSI=ffff88806ce27140 RDI=00000000000008fa RBP=ffff88806ce27140 RSP=ffff88806ce09810 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000019b4 R11=0000000000000001 R12=00000000000008fa R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce2a640 RIP=ffffffff810f2351 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5022573700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f502510d000 CR3=000000001d5c8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f50250e47c0 00007f50250e47c8 YMM02=0000000000000000 0000000000000000 00007f50250e47e0 00007f50250e47c0 YMM03=0000000000000000 0000000000000000 00007f50250e47c8 00007f50250e47c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffed1001b81358 RBX=ffffed1001b81359 RCX=ffffffff81690fb8 RDX=ffffed1001b81359 RSI=0000000000000008 RDI=ffff88800dc09ac0 RBP=ffffed1001b81358 RSP=ffff888040dff628 R8 =0000000000000000 R9 =ffff88800dc09ac7 R10=ffffed1001b81358 R11=0000000000000001 R12=ffff888040dffa30 R13=800000003b4df007 R14=dffffc0000000000 R15=00007f10bde00000 RIP=ffffffff81787785 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f81e6884000 CR3=000000000db34000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000