Warning: Permanently added '[localhost]:51503' (ECDSA) to the list of known hosts. 2022/10/03 12:59:04 fuzzer started 2022/10/03 12:59:04 dialing manager at localhost:35095 syzkaller login: [ 35.325565] cgroup: Unknown subsys name 'net' [ 35.429414] cgroup: Unknown subsys name 'rlimit' 2022/10/03 12:59:18 syscalls: 2215 2022/10/03 12:59:18 code coverage: enabled 2022/10/03 12:59:18 comparison tracing: enabled 2022/10/03 12:59:18 extra coverage: enabled 2022/10/03 12:59:18 setuid sandbox: enabled 2022/10/03 12:59:18 namespace sandbox: enabled 2022/10/03 12:59:18 Android sandbox: enabled 2022/10/03 12:59:18 fault injection: enabled 2022/10/03 12:59:18 leak checking: enabled 2022/10/03 12:59:18 net packet injection: enabled 2022/10/03 12:59:18 net device setup: enabled 2022/10/03 12:59:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 12:59:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 12:59:18 USB emulation: enabled 2022/10/03 12:59:18 hci packet injection: enabled 2022/10/03 12:59:18 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 12:59:18 802.15.4 emulation: enabled 2022/10/03 12:59:18 fetching corpus: 50, signal 25973/27785 (executing program) 2022/10/03 12:59:18 fetching corpus: 100, signal 35631/39121 (executing program) 2022/10/03 12:59:18 fetching corpus: 150, signal 43042/48152 (executing program) 2022/10/03 12:59:18 fetching corpus: 200, signal 54739/61222 (executing program) 2022/10/03 12:59:19 fetching corpus: 250, signal 60042/68001 (executing program) 2022/10/03 12:59:19 fetching corpus: 300, signal 64101/73514 (executing program) 2022/10/03 12:59:19 fetching corpus: 350, signal 70191/80892 (executing program) 2022/10/03 12:59:19 fetching corpus: 400, signal 74899/86861 (executing program) 2022/10/03 12:59:19 fetching corpus: 450, signal 78375/91626 (executing program) 2022/10/03 12:59:19 fetching corpus: 500, signal 82609/97051 (executing program) 2022/10/03 12:59:19 fetching corpus: 550, signal 86918/102557 (executing program) 2022/10/03 12:59:19 fetching corpus: 600, signal 88533/105492 (executing program) 2022/10/03 12:59:20 fetching corpus: 650, signal 91737/109809 (executing program) 2022/10/03 12:59:20 fetching corpus: 700, signal 93905/113185 (executing program) 2022/10/03 12:59:20 fetching corpus: 750, signal 95761/116288 (executing program) 2022/10/03 12:59:20 fetching corpus: 800, signal 98530/120129 (executing program) 2022/10/03 12:59:20 fetching corpus: 850, signal 100501/123200 (executing program) 2022/10/03 12:59:20 fetching corpus: 900, signal 103177/126905 (executing program) 2022/10/03 12:59:20 fetching corpus: 950, signal 105100/129890 (executing program) 2022/10/03 12:59:20 fetching corpus: 1000, signal 110182/135566 (executing program) 2022/10/03 12:59:21 fetching corpus: 1050, signal 113204/139413 (executing program) 2022/10/03 12:59:21 fetching corpus: 1100, signal 115901/142975 (executing program) 2022/10/03 12:59:21 fetching corpus: 1150, signal 117618/145671 (executing program) 2022/10/03 12:59:21 fetching corpus: 1200, signal 119182/148207 (executing program) 2022/10/03 12:59:21 fetching corpus: 1250, signal 120821/150790 (executing program) 2022/10/03 12:59:21 fetching corpus: 1300, signal 122288/153249 (executing program) 2022/10/03 12:59:21 fetching corpus: 1350, signal 123487/155445 (executing program) 2022/10/03 12:59:21 fetching corpus: 1400, signal 125631/158441 (executing program) 2022/10/03 12:59:21 fetching corpus: 1450, signal 127872/161447 (executing program) 2022/10/03 12:59:21 fetching corpus: 1500, signal 129338/163767 (executing program) 2022/10/03 12:59:22 fetching corpus: 1550, signal 130047/165502 (executing program) 2022/10/03 12:59:22 fetching corpus: 1600, signal 131274/167594 (executing program) 2022/10/03 12:59:22 fetching corpus: 1650, signal 132441/169650 (executing program) 2022/10/03 12:59:22 fetching corpus: 1700, signal 134755/172678 (executing program) 2022/10/03 12:59:22 fetching corpus: 1750, signal 135896/174663 (executing program) 2022/10/03 12:59:22 fetching corpus: 1800, signal 136973/176583 (executing program) 2022/10/03 12:59:22 fetching corpus: 1850, signal 137997/178446 (executing program) 2022/10/03 12:59:22 fetching corpus: 1900, signal 139937/180963 (executing program) 2022/10/03 12:59:22 fetching corpus: 1950, signal 141121/182891 (executing program) 2022/10/03 12:59:23 fetching corpus: 2000, signal 142145/184692 (executing program) 2022/10/03 12:59:23 fetching corpus: 2050, signal 142919/186346 (executing program) 2022/10/03 12:59:23 fetching corpus: 2100, signal 144298/188416 (executing program) 2022/10/03 12:59:23 fetching corpus: 2150, signal 145415/190255 (executing program) 2022/10/03 12:59:23 fetching corpus: 2200, signal 145903/191671 (executing program) 2022/10/03 12:59:23 fetching corpus: 2250, signal 147014/193426 (executing program) 2022/10/03 12:59:23 fetching corpus: 2300, signal 148155/195309 (executing program) 2022/10/03 12:59:23 fetching corpus: 2350, signal 148933/196872 (executing program) 2022/10/03 12:59:23 fetching corpus: 2400, signal 149846/198554 (executing program) 2022/10/03 12:59:23 fetching corpus: 2450, signal 151162/200427 (executing program) 2022/10/03 12:59:24 fetching corpus: 2500, signal 153264/202807 (executing program) 2022/10/03 12:59:24 fetching corpus: 2550, signal 154416/204550 (executing program) 2022/10/03 12:59:24 fetching corpus: 2600, signal 156763/207046 (executing program) 2022/10/03 12:59:24 fetching corpus: 2650, signal 157745/208707 (executing program) 2022/10/03 12:59:24 fetching corpus: 2700, signal 158381/210123 (executing program) 2022/10/03 12:59:24 fetching corpus: 2750, signal 159022/211501 (executing program) 2022/10/03 12:59:24 fetching corpus: 2800, signal 159721/212901 (executing program) 2022/10/03 12:59:25 fetching corpus: 2850, signal 160998/214609 (executing program) 2022/10/03 12:59:25 fetching corpus: 2900, signal 161815/216069 (executing program) 2022/10/03 12:59:25 fetching corpus: 2950, signal 162273/217270 (executing program) 2022/10/03 12:59:25 fetching corpus: 3000, signal 163219/218735 (executing program) 2022/10/03 12:59:25 fetching corpus: 3050, signal 164277/220287 (executing program) 2022/10/03 12:59:25 fetching corpus: 3100, signal 164846/221503 (executing program) 2022/10/03 12:59:25 fetching corpus: 3150, signal 165565/222853 (executing program) 2022/10/03 12:59:25 fetching corpus: 3200, signal 166200/224131 (executing program) 2022/10/03 12:59:25 fetching corpus: 3250, signal 168129/226120 (executing program) 2022/10/03 12:59:25 fetching corpus: 3300, signal 168755/227356 (executing program) 2022/10/03 12:59:26 fetching corpus: 3350, signal 170155/229034 (executing program) 2022/10/03 12:59:26 fetching corpus: 3400, signal 170739/230214 (executing program) 2022/10/03 12:59:26 fetching corpus: 3450, signal 171426/231485 (executing program) 2022/10/03 12:59:26 fetching corpus: 3500, signal 172288/232803 (executing program) 2022/10/03 12:59:26 fetching corpus: 3550, signal 172620/233875 (executing program) 2022/10/03 12:59:26 fetching corpus: 3600, signal 173177/235003 (executing program) 2022/10/03 12:59:26 fetching corpus: 3650, signal 174105/236346 (executing program) 2022/10/03 12:59:26 fetching corpus: 3700, signal 175006/237641 (executing program) 2022/10/03 12:59:27 fetching corpus: 3750, signal 176805/239417 (executing program) 2022/10/03 12:59:27 fetching corpus: 3800, signal 178087/240879 (executing program) 2022/10/03 12:59:27 fetching corpus: 3850, signal 178967/242133 (executing program) 2022/10/03 12:59:27 fetching corpus: 3900, signal 179646/243298 (executing program) 2022/10/03 12:59:27 fetching corpus: 3950, signal 180592/244577 (executing program) 2022/10/03 12:59:27 fetching corpus: 4000, signal 181183/245630 (executing program) 2022/10/03 12:59:27 fetching corpus: 4050, signal 181653/246681 (executing program) 2022/10/03 12:59:27 fetching corpus: 4100, signal 182037/247683 (executing program) 2022/10/03 12:59:28 fetching corpus: 4150, signal 182670/248856 (executing program) 2022/10/03 12:59:28 fetching corpus: 4200, signal 183242/249946 (executing program) 2022/10/03 12:59:28 fetching corpus: 4250, signal 184015/251191 (executing program) 2022/10/03 12:59:28 fetching corpus: 4300, signal 184500/252183 (executing program) 2022/10/03 12:59:28 fetching corpus: 4350, signal 184979/253184 (executing program) 2022/10/03 12:59:28 fetching corpus: 4400, signal 185908/254368 (executing program) 2022/10/03 12:59:28 fetching corpus: 4450, signal 186709/255468 (executing program) 2022/10/03 12:59:28 fetching corpus: 4500, signal 187459/256520 (executing program) 2022/10/03 12:59:29 fetching corpus: 4550, signal 188387/257706 (executing program) 2022/10/03 12:59:29 fetching corpus: 4600, signal 189119/258723 (executing program) 2022/10/03 12:59:29 fetching corpus: 4650, signal 190007/259839 (executing program) 2022/10/03 12:59:29 fetching corpus: 4700, signal 190894/260923 (executing program) 2022/10/03 12:59:29 fetching corpus: 4750, signal 191287/261811 (executing program) 2022/10/03 12:59:29 fetching corpus: 4800, signal 192265/262904 (executing program) 2022/10/03 12:59:29 fetching corpus: 4850, signal 192934/263894 (executing program) 2022/10/03 12:59:29 fetching corpus: 4900, signal 193327/264747 (executing program) 2022/10/03 12:59:29 fetching corpus: 4950, signal 194334/265878 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/266726 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/267459 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/268174 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/268899 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/269644 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/270388 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/271082 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/271789 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/272516 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/273238 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/273972 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/274699 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/275412 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/276174 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/276857 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/277553 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/278288 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/278971 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/279701 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/280413 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/281145 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/281840 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/282527 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/283230 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/283988 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/284709 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/285448 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/286186 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/286883 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/287587 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/288345 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/289116 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/289836 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/290513 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/291219 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/291909 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/292623 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/293375 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/294057 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/294756 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/295435 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/296140 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/296865 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/297577 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/298312 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/299020 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/299720 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/300434 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/301181 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/301874 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/302381 (executing program) 2022/10/03 12:59:30 fetching corpus: 5000, signal 194783/302381 (executing program) 2022/10/03 12:59:33 starting 8 fuzzer processes 12:59:33 executing program 0: semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)=[0x4000]) r0 = semget$private(0x0, 0x3, 0x40c) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x2, 0x1000}, {0x1, 0x6, 0x1800}, {0x4, 0x3, 0x800}, {0x0, 0xfff}, {0x1, 0x200, 0x1000}, {0x2, 0x9, 0x1800}], 0x6, &(0x7f0000000080)={0x0, 0x3938700}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x4, 0x2}, {0x1, 0x3, 0x1800}], 0x2, &(0x7f0000000140)={r1, r2+10000000}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x20, 0xffff, 0x6, 0x2, 0xfff, 0x7, 0xa92]) clock_gettime(0x2, &(0x7f00000001c0)) clock_gettime(0x1, &(0x7f0000000200)) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0x10001, 0x4e1000) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) mq_timedreceive(r3, &(0x7f0000000280), 0x0, 0xbb10, &(0x7f0000000300)={r4, r5+60000000}) futex(&(0x7f0000000340)=0x1, 0xb, 0x2, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)=0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000400)=[0x0, 0x8001, 0xdf]) clock_gettime(0x7, &(0x7f0000000440)) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000480)=""/171) recvmmsg$unix(r3, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/216, 0xd8}], 0x3, &(0x7f00000016c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000001800), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/130, 0x82}, {&(0x7f0000002940)=""/113, 0x71}, {&(0x7f00000029c0)=""/228, 0xe4}, {&(0x7f0000002ac0)=""/115, 0x73}, {&(0x7f0000002b40)=""/103, 0x67}, {&(0x7f0000002bc0)=""/188, 0xbc}, {&(0x7f0000002c80)=""/243, 0xf3}, {&(0x7f0000002d80)=""/35, 0x23}], 0x9}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/208, 0xd0}, {&(0x7f0000003f80)=""/145, 0x91}], 0x3}}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000004080)=""/236, 0xec}, {&(0x7f0000004180)=""/227, 0xe3}, {&(0x7f0000004280)=""/58, 0x3a}], 0x3, &(0x7f0000004300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004340)=@abs, 0x6e, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/39, 0x27}], 0x1, &(0x7f0000004440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x160}}], 0x5, 0x43, &(0x7f0000004700)) pipe2(&(0x7f0000004740)={0xffffffffffffffff}, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004780), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004980)={0x44, 0x0, &(0x7f00000048c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000004800)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, &(0x7f00000047c0)=""/55, 0x37, 0x2, 0x1e}, @fda={0x66646185, 0x5, 0x0, 0x23}}, &(0x7f0000004880)={0x0, 0x18, 0x40}}}], 0x34, 0x0, &(0x7f0000004940)="0f0fb4808af88edcf824cb7eac3cca98dedbde23a6d343547de18e0862acab0fb7f9c7b98ee33f19a39a8c679f3fadd4f2661672"}) rt_sigtimedwait(&(0x7f00000049c0), &(0x7f0000004a00), &(0x7f0000004a80), 0x8) 12:59:33 executing program 2: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000080)}, 0x0, 0x122, 0x0, {0x3, r0}}, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000180)=0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x11}, @val={0x8}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x20040000) recvmsg$unix(r2, &(0x7f00000029c0)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/132, 0x84}, {&(0x7f0000001740)=""/70, 0x46}, {&(0x7f00000017c0)=""/186, 0xba}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x9, &(0x7f0000002940)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x40000002) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000002ac0)={'sit0\x00', &(0x7f0000002a40)={'syztnl1\x00', 0x0, 0x6, 0x0, 0x5, 0x4, 0x4, @loopback, @empty, 0x7800, 0x8, 0x8, 0x6}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x7, 0x4896, 0x0, 0xa2, 0x3, 0x1, {0x0, r3}}, 0x9) openat(r2, &(0x7f0000002b40)='./file0\x00', 0x301002, 0x188) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002c80)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000002d80)=0xe8) syz_mount_image$vfat(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0\x00', 0x81, 0x1, &(0x7f0000002c40)=[{&(0x7f0000002c00), 0x0, 0x4}], 0x20, &(0x7f0000002dc0)={[{@utf8no}, {@nonumtail}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp855'}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@fsmagic={'fsmagic', 0x3d, 0xf8}}, {@subj_type={'subj_type', 0x3d, 'nl80211\x00'}}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x61, 0x34, 0x36, 0x63, 0x32, 0x37, 0x63], 0x2d, [0x66, 0x65, 0x39, 0x36], 0x2d, [0x65, 0x64, 0x65, 0x36], 0x2d, [0x62, 0x31, 0x66, 0x36], 0x2d, [0x36, 0x38, 0x32, 0x62, 0x61, 0x1, 0x39, 0x63]}}}, {@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}]}) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000002ec0)=0x3) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r10) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002f40)='/sys/module/ehci_hcd', 0x200000, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000002f00), r11) 12:59:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_secret(0x80000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x3, 0x3397, 0x2, 0x2, 0x0, [0x5, 0xfff, 0x7fffffff, 0x5]}) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x400000, 0x142) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)={{0x107, 0xff, 0x7, 0x2fc, 0x1b7, 0x9, 0x36d}, "8c3e3755fcbe048f3ccb9bc5fc1a4124fefb8e93a79b1ae0bd3f9d1db8a4a3a217762fcd4bea5388e5fe572ac761092239d0352f2334cf3c89cdd79630844be0ee379d78883d21b6cf1a073f5904287ba7a35ae41314b05599b8484813fb477e8298f7093bfe92bf330e23a6d5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98d) connect$packet(r2, &(0x7f0000000a80)={0x11, 0xf5, 0x0, 0x1, 0x9, 0x6, @link_local}, 0x14) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000ac0)={"8c8a813f9ec620b2c4cf9b0af787dd1e", 0x0, 0x0, {0x3, 0x9}, {0x2, 0x2}, 0x7, [0x80000000, 0xdbf, 0x80, 0x7, 0x8, 0x7, 0x6, 0xd90000000, 0x1f, 0x4, 0x1, 0x0, 0x3, 0x1, 0x5, 0x3]}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000bc0), 0x4) pwrite64(r1, &(0x7f0000000c00)="1111824a05523d6c398afddf2c34c397ed7215d28fa1f2d9988ceccca5e0d668a9df756be0f31a25694a3f7ba5b6d781b1196870c12a220786ea4971353c4d31fb955c86242db02012f4a5f5c9f19a52eb1596948ab401ac1fde645eaf380f270684c3d9bb39833369f1d02d168187a8495f4e5e8cc797a6780955c2b31cbda4a411c7721e96cd8c2226e79ebb97723949edc4439f43c8dfac8ed8f424649758ef01d42db9bab3e928688f676aab1efbf99333510e606d9b0a7b238814cfff531105eb052e24d0e610fa2800ee6d05863e38e18760cfc4925640439a87f8353d3d368c7087536b598031ceedc9d03dca683a2465", 0xf4, 0x100000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000d00)={0x9, 0x2, 0x4, 0x0, 0x7}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000d40)) r5 = openat$incfs(r1, &(0x7f0000000d80)='.log\x00', 0x208041, 0x92) r6 = socket$inet6(0xa, 0x5, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000dc0)=[r5, r3, r4, r6], 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000e40)={0xb381, 0x2, 0xbd2924fcc75c4c43, 0x6, 0x1, [0x2b78a832, 0x8001, 0x21, 0xfff]}) 12:59:33 executing program 7: ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0xc8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/17, &(0x7f00000000c0)=0x11) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x101001, 0x102) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000180)) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder-control\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000780)=[{&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/235, 0xeb}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x7, 0x3, 0xffff) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000c00)={0x0, 0x1, 0x16, 0x2, 0xc0, &(0x7f0000000800)="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"}) openat(r1, &(0x7f0000000c40)='./file0\x00', 0x80000, 0x10) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000c80), 0x101000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000cc0)={{r5}, "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"}) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000001cc0)) syz_mount_image$nfs4(&(0x7f0000001d00), &(0x7f0000001d40)='./file0\x00', 0x80000001, 0x1, &(0x7f0000001e40)=[{&(0x7f0000001d80)="780fbb39643214792aa4b5ec6e7fb7585a92cb276d59918dc9cee3311af4adf6100deb276c8b8cbda01698daf5c482d53511aa8691c1d9b67a74b7b07316477bdbd2bf24fe1ffc2e405b9152f39628ef72c1dc95aef62393125776c566ca59ee90baf0de1633bfbac8d58c1d4b7fc82381cd9772af7cb5b5620598b8cdc02e96eeaa147de30ea5054addfc54336bfcce35d306a5377bbe901705fdc1e6c73166564fd0d2d7ec8b2a8d1239f146bce80512dedca696ec9678242f1a4f65", 0xbd, 0x800}], 0x820840, &(0x7f0000001e80)={[{'^'}, {'%'}, {'!#!'}, {'/dev/vcsa\x00'}, {'/dev/random\x00'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x5a, 0x30, 0x37, 0x75496c47e6c4f990, 0x31, 0x33, 0x31], 0x2d, [0x66, 0x32, 0x65, 0x31], 0x2d, [0x37, 0x32, 0x31, 0x63], 0x2d, [0x64, 0x30, 0x0, 0x64], 0x2d, [0x61, 0x61, 0x36, 0x33, 0x35, 0x64, 0x37, 0x33]}}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@audit}, {@subj_user={'subj_user', 0x3d, './binderfs2/binder-control\x00'}}, {@subj_type={'subj_type', 0x3d, '\xa7:\xf4'}}, {@obj_role={'obj_role', 0x3d, ':^'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/random\x00'}}]}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000001f80)={0x1, 0x6, 0x1f, 0x5, 0xa, "215eb10f80c5ceb0"}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000001fc0)={0x3, 0x1, 0x2, 0x2, 0x3, [0xfffeffff, 0x3, 0xf7f6, 0x8]}) ioctl$KDSETLED(r1, 0x4b32, 0x5d) 12:59:33 executing program 3: recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/52, 0x34, 0x40000002, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x60}}, 0x8382df93c3e269d0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom1\x00', 0x1800, 0x0) fsetxattr(r1, &(0x7f0000000300)=@random={'security.', 'trusted.overlay.opaque\x00'}, &(0x7f0000000340)='{.-}*#.{!#\x00', 0xb, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x6, 0x7f}}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb8, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1f}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xba}, {0x6, 0x11, 0xfff8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x96ef}}]}, 0xb8}, 0x1, 0x0, 0x0, 0xa1}, 0x48001) r3 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000580)={0x7, 'bridge_slave_1\x00', {0x7}, 0x3d}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000ec0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000640)={0x828, r4, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_TID_CONFIG={0x90, 0x11d, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x80, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x100, 0x4f, 0x81, 0x9a, 0xa000, 0x80]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x36, 0x48, 0x24, 0x1b, 0x1b, 0x1, 0x18, 0x1b]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0x30, 0xc, 0x2, 0x60, 0xd108348222b81a7e, 0x16, 0x3, 0x0, 0x30, 0x4, 0x2cfdc81437dde81, 0x2]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0xc, 0x4, 0x5, 0x6, 0x6c, 0x24, 0xb, 0x16, 0x60, 0x1, 0x36, 0x9, 0x36]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x2, 0xc, 0x18, 0x18, 0x5, 0x1, 0x6c, 0x6c, 0x6c, 0x60, 0x60, 0x1, 0x9, 0x3, 0x4, 0x2, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1cc, 0x11d, 0x0, 0x1, [{0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x2, 0xb, 0x3, 0x1, 0x6, 0x48, 0x48]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x7, 0x3}, {0x1, 0x9}, {0x5, 0x3}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0xa}, {0x3, 0x1e}, {0x3, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x3}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x8, 0x7ff, 0x5, 0x400, 0x9, 0x7, 0x8]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x19, 0xb, 0x5, 0x6c, 0x12, 0x5, 0x60, 0x3, 0x30, 0x5, 0x16, 0x3, 0xb, 0x5, 0x1b, 0x2, 0x12, 0x6, 0x1, 0x16, 0x36, 0x60, 0x1, 0x60, 0x1, 0x9, 0x30, 0xc, 0x18, 0x1b, 0x30]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x48, 0x12, 0x12, 0xb, 0xc, 0x1b, 0x60, 0x2, 0x48, 0x5, 0xc, 0x1b, 0x18, 0x30, 0x60, 0x6c, 0x3, 0x5, 0x26, 0xc]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1f, 0x5, 0x7, 0xe5f1, 0xa87b, 0x8a0e, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x7}, {0x3, 0x9}, {0x1, 0x5}, {0x1}, {0x7, 0xa}, {0x1}, {0x2, 0x6}, {0x6, 0xa}, {0x6}, {0x4, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x4, 0x7}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x2, 0xa}, {0x6, 0x3}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x2, 0x5}, {0x4, 0x6}, {0x2, 0xa}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0xa}, {0x1}, {0x1, 0x3}, {0x6, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {}, {0x6, 0x2}, {0x5, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0x4}, {0x7, 0x7}, {0x5, 0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x6}, {0x7, 0x9}, {0x5, 0x4}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0x1}, {0x6, 0x2}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x2, 0x3}, {0x4, 0x5}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0xa}, {0x3, 0x7}, {0x1, 0xa}, {0x4, 0x5}, {0x4, 0x4}, {0x6, 0x5}, {0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x6, 0xc, 0x5, 0x30, 0x24]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x7}, {0x7, 0x9}, {0x1}, {0x4, 0x8}, {0x1}, {0x7, 0xa}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf9, 0x7, 0xfa29, 0x100, 0x8, 0x3f, 0x9, 0x101]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x8c, 0x1f, 0x5, 0x400, 0x5, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0xa, 0x3, 0x14, 0x5b, 0x36, 0x16, 0x24, 0x6, 0x4, 0x2, 0x16, 0x2, 0xb, 0x1, 0x1, 0x24, 0x2, 0x2a, 0x18, 0x24, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1f}]}]}, @NL80211_ATTR_TID_CONFIG={0x110, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xec}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8da, 0x0, 0x100, 0x925, 0x1, 0xff19, 0x31d, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x28, 0x7, 0x117, 0x80, 0x8, 0x8, 0x7ff]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x2}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x5}, {0x6, 0x3}, {0x2}, {0x2, 0x9}, {0x6}, {0x3, 0x3}, {0x3, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x3}, {0x0, 0x3}, {0x2, 0xa}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x2}, {0x3, 0x8}, {0x4, 0x9}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x6, 0x0, 0x1, 0x48, 0x3f, 0x0, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x3cc, 0x11d, 0x0, 0x1, [{0x3a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x12, 0x3]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x24, 0x1, 0x48, 0x1b, 0x1b, 0x16, 0x30, 0x6, 0x2, 0x48, 0x0]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x48, 0x1b, 0x1b, 0xb, 0x6, 0x1a, 0x87a873810c52ba6e, 0x3, 0x48, 0xb, 0xc, 0x6c, 0x4, 0x5, 0xc, 0x18, 0x9, 0x60, 0x1, 0x60, 0x12, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x73, 0x7f, 0x6, 0x84f8, 0xff, 0x7, 0x3c6d]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x3, 0x36, 0x1, 0xb, 0x18, 0x60, 0x18, 0x30, 0xc, 0x1b, 0x1, 0x16, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bcf, 0xec8, 0x7, 0x7ff, 0xff5f, 0x7, 0x100]}}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x60, 0x6c, 0x2, 0x48, 0xb, 0x5, 0x9, 0x6c, 0x60, 0x4, 0x16, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x2659, 0x9, 0x20, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x8}, {0x2, 0xa}, {0x6, 0x5}, {}, {0x6, 0x1}, {0x1, 0x2}, {0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0x1}, {0x6, 0x4}, {0x7, 0xa}, {0x7, 0x2}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x60, 0x18, 0x6, 0x6c, 0x18, 0xb, 0x3, 0x0, 0x9, 0x18, 0x6, 0x4, 0x5, 0x16, 0x1b, 0x3, 0x36, 0x5, 0x38, 0x1, 0x48, 0xb, 0x0, 0x18, 0x12]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x4, 0x24, 0x6, 0x76b6e0896eca9e49, 0x6c, 0x4, 0x5, 0x6c, 0x1, 0x36, 0x1b, 0x48, 0x60, 0x18, 0xc, 0x36, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x3, 0xff7f, 0x3, 0x1ff, 0x1, 0x60, 0x8c9d]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x1, 0x1b, 0x4, 0x36, 0x6c, 0x30, 0x1, 0x6, 0x16, 0x1b, 0x3, 0x2e]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x6}, {0x2, 0x2}, {0x6, 0xa}, {0x2, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x7}, {0x2, 0x6}, {0x3, 0x9}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x5}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0xa}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0x5}, {0x6}, {0x7, 0x9}, {0x6, 0x4}, {0x2}, {0x6, 0x8}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x5, 0x9}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x6}, {0x3, 0x3}, {0x5, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x5, 0x5}, {0x2, 0xa}, {0x0, 0x8}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x3, 0x5, 0x3, 0x7ff, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x1, 0x18, 0x1b, 0x3, 0x4, 0x12, 0x30, 0x6c, 0x60, 0xb, 0x12, 0x18, 0xc, 0x24, 0x1b, 0x4, 0x9, 0x48, 0x60, 0xb, 0x16, 0x9, 0x48, 0x36, 0x16, 0x3, 0x4]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x92d, 0x6000, 0xea71, 0x80, 0xc311, 0xc00]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x8}, {0x6, 0x9}, {0x1, 0x8}, {0x5, 0x4}, {0x4, 0x8}, {0x3, 0x1}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x8}, {0x6, 0x6}, {}, {0x4, 0x2}, {0x4}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0x3}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x4}, {0x6, 0x3}, {0x6}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x4}, {0x4, 0xa}, {0x5, 0x5}, {0x7, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x3, 0x5}, {0x5, 0x4}, {0x5}, {0x3, 0x4}, {0x6, 0x1}, {0x7, 0x9}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x5, 0x2, 0xc, 0x5, 0x2, 0x2, 0x36, 0xb, 0x3, 0x6b, 0xb, 0x2, 0x4, 0x12, 0x6c, 0x9, 0x6, 0x9, 0x9, 0x30, 0xc, 0x36, 0xc]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x3, 0x24, 0x30, 0x5, 0x36, 0x4, 0x2, 0x12, 0xb, 0x1b, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x1}, {0x3, 0x5}, {0x3, 0x2}, {0x4, 0x9}, {0x3, 0x7}, {0x6}, {0x7, 0xa}, {0x7, 0xa}, {0x7, 0x6}, {0x0, 0x1}, {0x4}, {0x5, 0x4}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x8}, {0x3, 0x4}, {0x2}, {0x7, 0x2}, {0x5, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x7}, {0x7, 0x9}, {0x7, 0x7}, {0x7, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x6, 0x5}, {}, {0x6, 0x6}, {0x4, 0x7}, {0x0, 0x5}, {0x5, 0x1}, {0x3, 0x6}, {0x1}, {0x7, 0x9}, {0x2, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x7, 0x7}, {0x5, 0x3}, {0x2, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xf001, 0x0, 0x59, 0x8001, 0x0, 0x80, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x4}, {}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x36, 0xc, 0x3, 0x5, 0x60, 0x60, 0x0, 0x9, 0xc811782a60311b0f]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2}, {0x5, 0xa}, {0x7, 0x3}, {0x1, 0x3}, {0x5, 0x9}, {0x3, 0x9}, {0x0, 0x7}, {0x5, 0x5}, {0x0, 0x8}, {0x6, 0x1}, {0x0, 0x3}, {0x7, 0x4}, {0x0, 0x6}, {0x5, 0xa}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x9}, {0x4, 0x5}, {0x2, 0x8}, {0x2, 0x7}, {0x6, 0x4}, {0x7, 0x6}, {0x0, 0x5}, {0x4}, {}, {0x5, 0x7}, {0x6, 0x7}, {0x7, 0x8}, {0x0, 0x3}, {0x5, 0x7}, {0x2, 0x8}, {0x4, 0x2}, {0x4, 0x3}, {0x0, 0x2}, {0x4, 0x5}, {0x4, 0x7}, {}, {0x6, 0x2}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x2}, {0x5, 0x5}, {0x4, 0x8}, {0x3, 0x8}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x5}, {0x4}, {0x1, 0x5}, {0x4, 0x1}, {0x1, 0x8}, {0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x4, 0x5}, {0x1}, {0x5, 0x5}, {0x4, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x4, 0x8}, {0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x4}, {0x4, 0x2}, {0x7, 0x6}, {0x4, 0x6}, {0x1, 0x8}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x9, 0x18, 0x4, 0x1, 0x23, 0x36, 0x48, 0x48, 0x36, 0x554c95550dec28f6, 0x4, 0x24, 0x1b, 0x24, 0xc]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8b, 0xff, 0xfffd, 0x8, 0x4, 0x8000, 0x32fa]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0x36, 0x0]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x4}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x1}, {0x7, 0x2}, {0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0x5}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x7}, {0x1, 0x7}, {0x3, 0x9}, {0x1, 0x9}, {0x7, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x7, 0xa}, {0x2, 0x9}, {0x6, 0x2}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0xa}, {0x6, 0x5}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x7, 0x8}, {0x3, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xce}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd0}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000100000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}]}, 0x828}, 0x1, 0x0, 0x0, 0x4080}, 0x4000015) r5 = dup2(r2, r3) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f40)={0x1d8, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xee, 0xc5, "7cd7393e7b52a29c76c323437862fe4b50c8ad3a9e9b508e4e58f620771c96b40073ae33429df68488350ae3146043fb67bfbf1c12cae0ad06964253a256582b12b84f17945cddcd70fbbacf068e5012c555458c00a4450cf1653d384027abba9d9a6907a0af80a3e7139a99093193dbb73c0eaddb682188b82d2746e54f38c09c10f96cad2a7b7158fa8244fcf885ae2c8aebe8b1be746d41af1080a118805ac2c3211fbc38813f217638a9312b6a86dfc8ccef62986b1a76de00098498cb0ec5f87d3d09b3700c62f03cb6942bec2bfc6dbb396ef95f84eedf64002b7698fd08d377ced0e4e639c984"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x97f}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x24, 0xc5, "993efddd4c34eeaf8d37f1292b7ba1e9fbb65572d02a0d20813f181d8f44adf5"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x96, 0xc5, "3e50aade23dd5cfa3e8867c3ebea04aed989c7dcea81dd0bee810c36ef6535b2affedd1246949294bfc0996fba43d1f63720684b800bd5f618500b20b4d03df707900457108a53d3dfc6dfb780c6d90ef66205fcb9f3e424be0bd117a5bb439da69ef6db4edd485a1da28eca4150bcb58e83a9917355b1058dc676f69788a51926778ea4765aa8a5fa866d83b0f3aee16689"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40050}, 0x41044) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001200), r5) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000012c0)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f00000013c0)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000014c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x68, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4085}, 0x48c4) fcntl$dupfd(r3, 0x406, r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001500)={'wg0\x00'}) 12:59:33 executing program 5: r0 = fork() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) clone3(&(0x7f0000000340)={0x10110400, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x24}, &(0x7f00000001c0)=""/2, 0x2, &(0x7f0000000200)=""/215, &(0x7f0000000300)=[r1, r0, r0, r1, r0, 0xffffffffffffffff, r0], 0x7}, 0x58) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x2) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x9, 0xf1, 0x1, 0x0, 0xac, 0x48281, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x61, 0x1}, 0x420, 0xca75, 0x6c, 0x9, 0x200, 0x9, 0x4, 0x0, 0x80000001, 0x0, 0x3}, r2, 0x10, r3, 0x3) r5 = eventfd(0x8000) fsetxattr$security_capability(r5, &(0x7f0000000400), &(0x7f0000000440)=@v1={0x1000000, [{0xffffffff, 0x8000}]}, 0xc, 0x0) inotify_init1(0x0) r6 = memfd_secret(0x80000) r7 = fcntl$dupfd(r6, 0x0, r5) execveat(r7, &(0x7f0000000480)='./file0\x00', &(0x7f0000000580)=[&(0x7f00000004c0)='security.capability\x00', &(0x7f0000000500)='security.capability\x00', &(0x7f0000000540)='security.capability\x00'], &(0x7f00000007c0)=[&(0x7f00000005c0)='+\x00', &(0x7f0000000600)=')\\[\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='security.capability\x00', &(0x7f00000006c0)=')D\x00', &(0x7f0000000700)='security.capability\x00', &(0x7f0000000740)='.\'^{)&-\x00', &(0x7f0000000780)='security.capability\x00'], 0x1000) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000800)=r6, 0x1) r8 = openat$cgroup_devices(r6, &(0x7f0000000840)='devices.deny\x00', 0x2, 0x0) fsetxattr$security_capability(r8, &(0x7f0000000880), &(0x7f00000008c0)=@v3={0x3000000, [{0x7, 0x3f}, {0x4}], 0xee00}, 0x18, 0x1) r9 = open$dir(&(0x7f0000000900)='./file1\x00', 0x40001, 0x0) openat(r9, &(0x7f0000000940)='./file0\x00', 0x42000, 0x0) perf_event_open(&(0x7f00000009c0)={0x0, 0x80, 0x96, 0x6, 0x6, 0x66, 0x0, 0x7fff, 0x2004, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000980), 0xe}, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x20}, r1, 0xe, r6, 0x8) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000a40)) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x301083, 0x0) fcntl$dupfd(r4, 0x0, r10) 12:59:33 executing program 6: ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x220003, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_netfilter(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000080)={0x5e4, 0xe, 0xb, 0x301, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x8}, [@generic="72b839f0c621e3c6bf34d73d1a4ca4be488e663e89421d4a906b2caf6fb616906c6b719902bdf0734c91d9bb57fb258eb52d3b5aedf5b83ceb720135", @typed={0x8, 0x33, 0x0, 0x0, @fd}, @generic="c697ada5376d7a8486377b34dd57481f102ff6ad1291ecfeca361ff55ce84182e55e96388ce54acf03b9e0918aba20404141eb98776e6388792d016fd78b1c5557a23b7010d4d719158b2438c047d4e2b955874b29a4924a9023f8d860ed424e9c76171d0a951b1d56ea9f0e00024b1c2d5cb652178ea8fb8eefa8c22d5c6b36a9a20ffca04c6d012f87bd5d5f4880347c8dacd766134e3eacdc5d6fbe14e827cd1b75f7110d93ccfacf46fb24c9147c303e529d127adc527c82724e8cc9e51734412e8b69596ebfd59931e2c26c736dbb75c4b499ae81", @nested={0x344, 0x93, 0x0, 0x1, [@generic="e545e65b7d0e5b89d8cdba683c54bc284d7c6bc0b9e5db9d2a5ce6df3666486886ba0e0faef8b2aaceac8260ea9506b3f5c7a6150debc6022fed902017945a92e6c4f5620a2da9e5182667c2331eba3c04907eec3acdf5658590b39442d6ededcfc6d1c992575359fd170c5631545591d36288a93bb6fe45c37895f03f40ecd53b00d66fa0e772f1", @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}, @generic="f5b794abb6296882afcebca29d0a500f80a70ebe824305bc33a17e4f9295796daf3abc4e6a3342201b91d0b5fd99c50dd2d1787329f67976c95e22c23f3d02af14073f965a3c3a254ea8d2326863ef64b84fc9507034b0e57dc42864aef071b92e1eccb0c1609d6ef79dc2c182a4a07492278469c232f4942090019e9bd5b71fd8e7ee688165c4e651bd788425f466cf9e18272d694c4c7943e7ec12fe4f8df411c6291f49d040581242bc5b7d19bf5afc91b19618835910873cc685a40ba6db95fd8d0bb0f5417cf1ee7037211635d9", @typed={0x14, 0x5f, 0x0, 0x0, @ipv6=@private0}, @typed={0x7, 0x35, 0x0, 0x0, @str='-]\x00'}, @generic="e3237f2c89c745e93657142b9121f5a4d71b1137a22d23258df0fbddd02c7a2827a66723e37fce571a1fd2bfc5b610da6a5c2704c108780fc58cb03f8aa915ebdb14a949e8967ebe1197cdb4fe31c241891fdc70bd91aee9e435b43e519460c4cf260d5b5ec6f1bca2b115048186c4f770a636bccaa416d4aedb1bd4fa3280978dc742ae9d7b7acfc6c08eefd6fdc365ea344f163a8b7bfc421763d430c611eeda7e03df46b296c3ba0b4fdc19ced56ac2faaf868adeb8f75226cd409f0eac72424951b40a3a7c5d69b58e9698505d71c50f18e9bab5582c6001", @generic="0d627efc140fd0bf10608403de474f03ed6f44e3f9d969f593ef54a563f5faa7b91ac92d2baf397bc8d4c45c8a09cf4fa4f4f541a5569de6c6cbd6682292e220f6a686586b5ee82590fce9f656835231292992357ed8bc78745231e0c45a88bd0b79886f5a9b67f1964378e6352c97b27b4bb784a9073802ec8206d083485d1fe8e79e117fd6701c74bb166b940470e1ef9fb1d350cd1b19e109f778d6539353141c3d641fe0f20a35d758f4ca6dec89f8cb45a45f99bb21c672f446901fb1b1163bc514fe3b8fad95", @generic="91c03507982a005293cdcd30b6e747a838d07841c8bf4724f0187c364c3e55664a"]}, @generic="e6d571d51dcd6d71f28a469034332615919ef707523b1b1d12b2bfae5cee02c84d9b2d36fd295cadfe46c63361013cfd38f4bf03883e6430acb8a5b25624d2da232abd60cf934c2dd5e3c6cf54", @typed={0x5e, 0x13, 0x0, 0x0, @binary="11021a420ddc5fc1e306c2ef84cb814da7c6f3c98ac280096cb7b605749f19efa5107399a88520147bd156f1fc6a7788dbeb7381562eda04d591ff47d6b85ee4aeda7e148dbfba23b7799d3f9949076771d49c5b17c6583b74b0"}, @nested={0xc1, 0x59, 0x0, 0x1, [@generic="fa83459de5a509f7969fe3a75a4ea982519f85838b13451de27457c5e5f16ff9205b7eacecd5d011ca685cfa265fee2b9322738af9bd3c52ff05bf2fed5aace3204c20ec31821ebdc282b9401528830e51979c343281791c8ef799104ae1b43192cd375e347687f0746ddddc46517a74e993ec17b94d22df02376bfff8e87a4ae14036b6567af945c00397142375dec89a4cf1b6e363795e1fb26675aaeac15d99", @generic="0e8831db107cc00af06e91a216237387a9c99cabb4630e6ebb5a7261"]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x801}, 0x50) ioctl$CDROM_DISC_STATUS(r0, 0x5327) r2 = fsmount(r0, 0x1, 0x8) splice(r2, &(0x7f0000000700)=0x800000000000, r1, &(0x7f0000000740)=0x4, 0x0, 0x2) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000780)=@copyright={0x1, 0x0, 0x0, 0x1f}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000001000)={&(0x7f0000000fc0)=[0x0, 0x0, 0x0], 0x3, 0x3}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x8c, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, @IPSET_ATTR_ETHER={0xa, 0x11, @local}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = memfd_create(&(0x7f0000001300)='!+-\x00', 0x6) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001380)={0x0, 0x6, 0x1, [0x0, 0xc835, 0x5, 0xfffffffffffffffa, 0x10001], [0x0, 0x1, 0x3, 0x77497f12, 0x5, 0x1, 0x800, 0xa2e, 0x800, 0xfffffffffffffc01, 0x2, 0x5, 0x1, 0x5b3, 0xfffffffffffffffa, 0x20, 0x7fffffff0000, 0x35cc, 0xb280, 0x1ff, 0x5, 0x8001, 0x7, 0x10001, 0x0, 0x6, 0x1, 0x200, 0x5, 0x1, 0xffffffff80000000, 0x76, 0x3, 0x9, 0x6, 0x4, 0x8, 0x8e, 0xfffffffffffffff8, 0x5, 0x1, 0xfffffffffffffe00, 0x2, 0x9, 0x12000, 0x40, 0x1f, 0x0, 0x817c, 0x6, 0x80, 0x65c, 0xb5, 0x200, 0x7fffffff, 0x401, 0x4, 0x400, 0x4, 0x8, 0x9, 0x80000000, 0x4fda, 0x81, 0x0, 0xc764, 0x401, 0x3, 0x1, 0x1e, 0x80, 0x8, 0x3, 0x3ce0c0000000000, 0xc0c, 0xfcd, 0x3, 0x0, 0xb0, 0x4, 0xbb3, 0xfff, 0x80000000, 0x9, 0xffffffffffffa727, 0x1, 0x4, 0x0, 0x9, 0x7ff, 0x4, 0x7d, 0xbca, 0x2, 0x9, 0xfffffffffffffffe, 0x1, 0x41fd, 0xff, 0x6, 0x5, 0xfff, 0x7f, 0x401, 0x2, 0xffff, 0x10000, 0x2f6, 0x100, 0x10001, 0x1, 0x2, 0x200, 0x80000001, 0x7, 0x6, 0x67a2e392, 0xd863, 0x6, 0x81, 0xfffffffffffffff7]}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000017c0)=0x4) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8805}, 0x54) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001940)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001980)={{0x1, 0x1, 0x18, r5, {0x200}}, './file0\x00'}) 12:59:33 executing program 4: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000000)={0x0, 0x10000, @status={[0x6, 0x0, 0x4, 0x6, 0x3f, 0x3]}, [0xfffffffffffffffe, 0x200, 0x0, 0x0, 0xd4, 0x1, 0x9, 0x4, 0x9, 0xd8, 0x80000000, 0xba4, 0x6, 0x4, 0x1, 0x0, 0x80000001, 0x7f, 0x5, 0x2a, 0x2ed6, 0xf85, 0x800, 0x125, 0x5ba, 0x31b, 0x2, 0x89e, 0x81, 0x2, 0x7, 0xffffffffffffff7f, 0x0, 0x7, 0x8001, 0x7, 0x9c, 0x5c, 0x2, 0x5, 0x3, 0xbd86, 0x94c, 0xfffffffffffff801, 0x8, 0x9, 0x5, 0x1, 0x87, 0x7fff, 0x81, 0x3, 0x7, 0xfffffffffffffff7, 0x4, 0x7f, 0x614, 0x45, 0xeef, 0x2, 0x7, 0x9155, 0xfffffffffffffffa, 0xad6]}) r0 = eventfd(0x2a) r1 = mq_open(&(0x7f0000000a40)='-})%+\\@\x00', 0x81, 0x81, &(0x7f0000000a80)={0x2d18318f, 0x400, 0x4, 0xbbb}) sendfile(r0, r1, 0x0, 0x6e) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r1, {0x1f}}, '\x00'}) clone3(&(0x7f0000000d00)={0x0, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)=0x0, {0x26}, &(0x7f0000000bc0)=""/165, 0xa5, &(0x7f0000000c80)=""/31, &(0x7f0000000cc0)=[0x0], 0x1, {r2}}, 0x58) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000d80)={0x0, 0x58000000000000, 0x5, 0x5, 0x2, [{0xfffffffffffffffc, 0xff, 0x2, '\x00', 0x80}, {0x4, 0x400, 0x2, '\x00', 0x100}]}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001040)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001080)=0x0) clone3(&(0x7f0000001100)={0x0, &(0x7f0000000e40), &(0x7f0000000e80), &(0x7f0000000ec0), {0x33}, &(0x7f0000000f00)=""/13, 0xd, &(0x7f0000000f40)=""/216, &(0x7f00000010c0)=[r4, r5, r3], 0x3, {r2}}, 0x58) mq_timedsend(r2, &(0x7f0000001180)="e5e8e0c946dc3399c15d8e57b50bf968647dc7ad9935b679c517ccad5ac540f05ba46b519d813afddcea4f0fdae433af7465c5a57cfc1ae85f54440d087044be17383409231cfd677e6f2d6fdcdca53ff1b50b38e67cfe2fcf1725a9d8bf89b43a9c9592fea86bf404fe2ba1c55019bc1e464d7add4850c0e558c234611d9f03f742d98d6912409bc39df0fd12f30bc2dd029908ff8b072d29fd7841fdf8485edb8827fbabab5fc6d1c114a112ea47c951ec90c2cf640887be45d138866ccb21fc", 0xc1, 0x80000001, &(0x7f0000001280)={0x0, 0x989680}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000012c0), 0x2) mq_timedsend(r1, &(0x7f0000001300)="bfe13562f0f497a1c75799ce3ca737844645510f08636f1de650319259b0e35469924afdb0df917b8b4b5b613c6d37493b599771a5d2d10cadbdf507a48486ba41c364d7ae3cf856efb796f4332e8cc73addd0a62dc74a24d073943131376bfa3782c4748f702597f4d2742655697b5d9783c1340386ec972d470d7b97fd1e179f6306c06bf148", 0x87, 0x6, &(0x7f00000013c0)={0x77359400}) clock_gettime(0x0, &(0x7f0000001400)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000001440)={r6, r7/1000+10000}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001480)={'veth1_to_team\x00', {0x2, 0x0, @multicast1}}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), r2) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x5c, r8, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x29, 0xa8, @random="9eadfc4cdafc44f897570bbcc510d73dac74ab38a3868a4080af508d35a885fd32a3f51995"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x8000) r9 = fcntl$dupfd(r1, 0x0, r2) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000001640)=""/82, &(0x7f00000016c0)=0x52) [ 63.885135] audit: type=1400 audit(1664801973.630:6): avc: denied { execmem } for pid=283 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 65.305134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.307483] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.309868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.311680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.313651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.315111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.316592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.321597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.323081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.325040] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.326505] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.328276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.329809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.331440] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.332805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.334273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.335733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.337322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.338800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.340563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.341753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.346958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.348060] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.350419] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.351426] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.352820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.353941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.355406] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.360406] Bluetooth: hci4: HCI_REQ-0x0c1a [ 65.362100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.363556] Bluetooth: hci0: HCI_REQ-0x0c1a [ 65.366709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.370013] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.371392] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.373438] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.390383] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.392564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.394005] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.398496] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.399939] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.400772] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.402894] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.405435] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.406756] Bluetooth: hci5: HCI_REQ-0x0c1a [ 65.408285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.410485] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.410749] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 65.415916] Bluetooth: hci2: HCI_REQ-0x0c1a [ 65.415981] Bluetooth: hci3: HCI_REQ-0x0c1a [ 65.417734] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.428281] Bluetooth: hci1: HCI_REQ-0x0c1a [ 65.447671] Bluetooth: hci6: HCI_REQ-0x0c1a [ 65.465291] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.467378] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 65.468920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.473814] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.405627] Bluetooth: hci0: command 0x0409 tx timeout [ 67.406258] Bluetooth: hci4: command 0x0409 tx timeout [ 67.469245] Bluetooth: hci6: command 0x0409 tx timeout [ 67.469979] Bluetooth: hci3: command 0x0409 tx timeout [ 67.470641] Bluetooth: hci1: command 0x0409 tx timeout [ 67.471271] Bluetooth: hci2: command 0x0409 tx timeout [ 67.471894] Bluetooth: hci5: command 0x0409 tx timeout [ 67.533511] Bluetooth: hci7: command 0x0409 tx timeout [ 69.453363] Bluetooth: hci4: command 0x041b tx timeout [ 69.453814] Bluetooth: hci0: command 0x041b tx timeout [ 69.517299] Bluetooth: hci5: command 0x041b tx timeout [ 69.517734] Bluetooth: hci2: command 0x041b tx timeout [ 69.518126] Bluetooth: hci1: command 0x041b tx timeout [ 69.518577] Bluetooth: hci3: command 0x041b tx timeout [ 69.518970] Bluetooth: hci6: command 0x041b tx timeout [ 69.581259] Bluetooth: hci7: command 0x041b tx timeout [ 71.501246] Bluetooth: hci0: command 0x040f tx timeout [ 71.501712] Bluetooth: hci4: command 0x040f tx timeout [ 71.565224] Bluetooth: hci6: command 0x040f tx timeout [ 71.565662] Bluetooth: hci3: command 0x040f tx timeout [ 71.566046] Bluetooth: hci1: command 0x040f tx timeout [ 71.566778] Bluetooth: hci2: command 0x040f tx timeout [ 71.567187] Bluetooth: hci5: command 0x040f tx timeout [ 71.629240] Bluetooth: hci7: command 0x040f tx timeout [ 73.549203] Bluetooth: hci4: command 0x0419 tx timeout [ 73.549680] Bluetooth: hci0: command 0x0419 tx timeout [ 73.613274] Bluetooth: hci5: command 0x0419 tx timeout [ 73.613702] Bluetooth: hci2: command 0x0419 tx timeout [ 73.614109] Bluetooth: hci1: command 0x0419 tx timeout [ 73.614556] Bluetooth: hci3: command 0x0419 tx timeout [ 73.614941] Bluetooth: hci6: command 0x0419 tx timeout [ 73.677235] Bluetooth: hci7: command 0x0419 tx timeout 13:00:28 executing program 3: io_setup(0x400, &(0x7f0000000040)=0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400000, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = fcntl$dupfd(r2, 0x0, r2) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) r5 = memfd_create(&(0x7f0000000240)=',{\x00', 0x4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder1\x00', 0x800, 0x0) io_submit(0x0, 0x1fffffffffffff49, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f0000000140)="8d9fabb6fa3c24ac9af29920be21a6fbf0afb4d69ed135c924ad9031513cadbc860276fd23a0761a49821462dee3dd93c8763162125ae14c29e51408c714bec6aae4a94911e81475d29c5bc86ee98c9bb5a74ea25484f6e7a4cfa1850d187639435118fe4a4190cda2af43a22faed33216b4c72efb0f015018f67faa9050114587c52aff2a072294ef5f51bb72e8fc72479d8da5827dfacad17ae74baf0d04ae5d6360ec4a4c3263660359ac765f674ee6bb6ede492dd0868628c779ee21821f4c1065f19aa14df5101e42b107de78c76b15395b550a90d87a", 0xd9, 0x1f, 0x0, 0x2, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x8, r5, &(0x7f0000000280)="86bf403e9f3c81bc2141c251fe7154621c06d1f93e846e993079f5a7badf0816ab8a829f0508f6f45075a5ecef2f459d2a0bb0fe961222f8515fb7d301a6a95aa2618103a3ec634c155933daef79243d5442b23c97eebbbd8c778bb75b97c8c34ead790096e81b8e5e8ef08750416022f220ed6b8bab1f61bb3d7f3d5a4f18773ea9bb2a14a503455919e796909959f48b452ee662af7ed6842eaf8728df86f74a27f542e6d2bc60106fd7f1078d61bc2ac82790759d2819650e195c17998c2dbb4029b1bc7b7d327fd59e6b3863504f525b24f1db4a", 0xd6, 0x0, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x1d49, r6, &(0x7f0000000400)="5f5e329916ae45f0fbbe9cee6ca3330ec0a3ab73ad8b0b35fc12e01e624da10e17084d56aefb7b7f24d8ff5b72212543086b44f5ba21abc85072", 0x3a, 0x0, 0x0, 0x3}]) io_pgetevents(r0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={[0xb9]}, 0x8}) r7 = syz_open_dev$mouse(&(0x7f00000015c0), 0x4, 0x80) getdents64(r4, &(0x7f00000004c0)=""/106, 0x6a) bind$packet(r7, &(0x7f0000001600)={0x11, 0x1c, r3, 0x1, 0x1, 0x6, @remote}, 0x14) 13:00:28 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 13:00:28 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 13:00:29 executing program 1: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x101000, 0xd0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) 13:00:29 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 13:00:29 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x3, 0x6, @link_local}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x3, 0x6, @link_local}, 0x10) [ 119.509084] device syz_tun entered promiscuous mode 13:00:29 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) [ 119.538310] device syz_tun left promiscuous mode [ 119.549346] device syz_tun entered promiscuous mode [ 119.557761] device syz_tun left promiscuous mode 13:00:29 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x3, 0x6, @link_local}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x3, 0x6, @link_local}, 0x10) [ 119.714849] device syz_tun entered promiscuous mode [ 119.740630] device syz_tun left promiscuous mode [ 119.934713] audit: type=1400 audit(1664802029.684:7): avc: denied { open } for pid=3933 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.937931] audit: type=1400 audit(1664802029.685:8): avc: denied { kernel } for pid=3933 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.293570] loop7: detected capacity change from 0 to 264192 [ 120.295016] ======================================================= [ 120.295016] WARNING: The mand mount option has been deprecated and [ 120.295016] and is ignored by this kernel. Remove the mand [ 120.295016] option from the mount to silence this warning. [ 120.295016] ======================================================= [ 120.318052] loop7: detected capacity change from 0 to 264192 13:00:46 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 13:00:46 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x63, 0x3, 0x0, 0x8, 0x0, 0x401, 0x8040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xe, @perf_config_ext={0x6, 0x8000}, 0x20, 0x6, 0x1426398e, 0x8, 0x9, 0xfff, 0x1, 0x0, 0x5, 0x0, 0xb5}, 0x0, 0x7, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "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", "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"}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000055040)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r0}], 0x3, "bc386eff17b8c9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055040)={0x6, [], 0x3, "bc386eff17b8c9"}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x1000}}, './file0\x00'}) 13:00:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x15, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b8200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37363838323433383400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000006e00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000005000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010400)="ff07ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d5f4655fd5f4655fd5f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4080}, {&(0x7f0000012600)="8081000000c04000d5f4655fd5f4655fd5f4655f000000000000010080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000100"/128, 0x80, 0x4300}, {&(0x7f0000012700)="c041000000400000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4500}, {&(0x7f0000012800)="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"/768, 0x300, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000000140)="0b000000cbe67925a142d6b5213201022e00040002000000f40f02023c2e00"/40, 0x28, 0x20000}, {&(0x7f0000012d00)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000012e00)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000000040)="000000000010000000000000000036e0e19c7d00db89000000000000000000001a968eb210b6b24a074381a23b74189d8a020bfcbdf85db384db928718738eda89b19ccb4f408b4f99d1f8e2ea1b5a38c6d441da114346476bbbfce20ec4c2dae45e8d93ff0f9bb9c5143c01a7c35e0f92da6b6f13062016fddc51563cb5c6a0e06ab6280d1b201dabcc32825cc5b53a0f73887a72531669cdf30e2f610d42ce5c7ddfef8e4703bd341856b3ff79faa0260f15c9bd1f2cde8539fee52f512fc6", 0xc0, 0x23000}, {&(0x7f0000013000)="504d4d00504d4dffd5f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x40000}, {&(0x7f0000013100)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000013200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000013700)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000013800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f80f0000000006000e00779b539778617474723100000601f00f00000000060000007498539778617474723200"/96, 0x60, 0x80000}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x80fe0}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xa0000}], 0x0, &(0x7f0000013b00)) 13:00:46 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b00), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x0, 0x0, 0x6, 0x4, 0x0, 0x7fffffff, 0x80400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x7}, 0x4003, 0xb7, 0x6, 0x3, 0xb06, 0xfffffffe, 0xfffe, 0x0, 0x46, 0x0, 0x2}, r1, 0xd, r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c6530008425db2c4533299109c57672c2db0005f27575807af71535e79d5517102a8640232a272019654a55cca9b9a33b9d813ea9ed21a56d4824589906b4ab2c824f2a6d5c4f20c70d0a4296a1b436a87d29ea101258be5845c588749110bbb129c24ccb2d3a09b6195dc93c7eb4af0e1296a8e6a85e6f94a5c000b8b06c5bd42816ec520b8fe8c02dcc5598038982483531b88254c2bdc724f7cd0e8705791225ded0ea3e2b2b9e0041cec7f3886ece9bbc1c50413798a4ee36902a6113f3d2cec73c36823d72c71de6451749cd140aa5b36ef8093b8f11dccc033e1c43119cf9fc478f02704bc92d40ca30185227b64de8bf51abea8e47689f27c5788c914ec20a6aca85ed6b3d7fd54648a18d55908eed43665e1da9e94ec2bb38716e8bb58e79104c773f5479404ad2ce106b8e972871f2e532c1f8101d0e717c8c6d05dfeabe125571eab8e5f879acb932cb28ed0706608738b1ca66551ceecffc75068ab5381d3aa8e97c5e317c928faffc9c89dfd3ba7497d86226c148d186009b5f826fec412461e1c5874117a76a39cf657fc3530a7a4cf50864edd0ae670815b03f3d841f2d8fb4af5116d320392c1bde6080d50f4d20919fda297626cfb4d7a3cab06fc7b8f7f6a977"]) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = dup3(r0, r2, 0x80000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, r5, 0x10000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$loop(r3, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r8, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 13:00:46 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x460c, &(0x7f0000000080)={0x0, 0x2, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0xc1, 0x0) 13:00:46 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x1}, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) r3 = epoll_create(0xffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002000028020000028400001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37313539353330323300"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006a641059655a4e10bf1130ee7fdbd1e0010000000c00000000000000d9f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003000000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d9f4655fd9f4655fd9f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f00000000000004000400000000000000050000000c00"/64, 0x40, 0x2200}, {&(0x7f0000011600)="200000007412ab417412ab4100000000d9f4655f00"/32, 0x20, 0x2280}, {&(0x7f0000000440)="c041000000380000d9f46d5fd9f4655bd9f4655f00000000000002001c00000000000000000000000d0000000e0000000f000000100000001120000012000000130000000000000000000000000000000000000000000000000000000020000000000000000000080000000000000000000000000000000000000000000000002000000000ad40ab05e548d21c851ff3e51e96c40000000000000000000000d9f4655f0000440d0000000000000000000002ea000000000000000000000000002d42b718014937e648d2afa333a33027a4b94b5d7da03cebf303812e620ed1edab1b6a1381b4834a3f790f0a147dc6a05b1a0006af44509f7292a4f9dc7b29e61bda132215415a5d3c971739280641b6a27141c7b9e3ee", 0x117, 0x3400}, {&(0x7f0000011800)="ed4100003c000000daf4655fdaf4655fdaf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000002010b1b000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x3600}, {&(0x7f0000011900)="ed8100001a040000daf4655fdaf4655fdaf4655f000000000000010004000000000000000100000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000039c34d38000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000", 0xa0, 0x2}, {&(0x7f0000011a00)="ffa1000026000000daf4655fdaf4655fdaf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3731353935333032332f66696c65302f66696c65300000000000000000000000000000000000000000000026908b44000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000", 0xa0, 0x3a00}, {&(0x7f0000011b00)="ed8100000a000000daf4655fdaf4655fdaf4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa02805e000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3c00}, {&(0x7f0000011c00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000daf4655fdaf4655fdaf4655f0000007fadd59c0000000200140000000000000001000000150000001600000017000000180000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000cb34f3d3000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab4100000000", 0xc0, 0x3de0}, {&(0x7f0000011d00)="ed81000064000000daf4655fdaf4655fdaf4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c91b90e27000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x41c0}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x5ffd}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x6800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x8010, &(0x7f0000000080)={[{@oldalloc}]}) [ 137.093838] hrtimer: interrupt took 33793 ns 13:00:46 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, &(0x7f0000000240), 0x8000, &(0x7f0000000280)={[{@fat=@nfs}], [{@smackfsdef}, {@hash}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = fcntl$dupfd(r2, 0x0, r2) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000500)='measure', &(0x7f0000000540)='./file0\x00', r4) renameat(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000400)='./file0\x00') renameat2(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@mmap}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, r1}}, {@privport}, {@loose}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8a5014, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0x7fffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, 'nfs'}}]}}) 13:00:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17, 0xb96e}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="39020a9f97df036424bd12631dcc0843a687ddcfecc31a11dde79999acfd00905d931956647bb50f84b50fee313184ab01a3eb598422559a5429fa296e2b8cc2a72a979939243d8493f555a266b9b4191d834a33c991f1362c592f09095f773884a40fd1dfa8521f252e8ac083f46801f780e618114fa8b454ae19b0a53f0371fc40d17c6f84ffe7922348d072e73482f34c674a8be6ae1aaee36caa215c3f96822c79c0a63c67b58df767e56818967b6de8987270be2937fec501efcbddaa8b537289ad7963fa30542ae9be663008e275bac0a0e518aafae7cd773298ee0873ab8773ceb66111", @ANYRESHEX, @ANYRES64=0x0, @ANYRESHEX, @ANYRES64]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xf1887000) chroot(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = fcntl$dupfd(r2, 0x0, r2) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYRES16, @ANYRESDEC=r3, @ANYRESHEX, @ANYRESOCT]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x15182, 0x7, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) [ 137.095522] ------------[ cut here ]------------ [ 137.095564] [ 137.095569] ====================================================== [ 137.095576] WARNING: possible circular locking dependency detected [ 137.095584] 6.0.0-rc7-next-20220930 #1 Not tainted [ 137.095598] ------------------------------------------------------ [ 137.095604] syz-executor.1/4004 is trying to acquire lock: [ 137.095617] ffffffff853faab8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0xe/0x70 [ 137.095693] [ 137.095693] but task is already holding lock: [ 137.095699] ffff88800d6d0820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.095753] [ 137.095753] which lock already depends on the new lock. [ 137.095753] [ 137.095759] [ 137.095759] the existing dependency chain (in reverse order) is: [ 137.095766] [ 137.095766] -> #3 (&ctx->lock){....}-{2:2}: [ 137.095795] _raw_spin_lock+0x2a/0x40 [ 137.095818] __perf_event_task_sched_out+0x53b/0x18d0 [ 137.095843] __schedule+0xedd/0x2470 [ 137.095872] preempt_schedule_common+0x45/0xc0 [ 137.095904] __cond_resched+0x17/0x30 [ 137.095934] __mutex_lock+0xa3/0x14d0 [ 137.095967] __do_sys_perf_event_open+0x1eec/0x32c0 [ 137.095991] do_syscall_64+0x3b/0x90 [ 137.096028] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.096055] [ 137.096055] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 137.096084] _raw_spin_lock_nested+0x30/0x40 [ 137.096107] raw_spin_rq_lock_nested+0x1e/0x30 [ 137.096135] task_fork_fair+0x63/0x4d0 [ 137.096170] sched_cgroup_fork+0x3d0/0x540 [ 137.096200] copy_process+0x4183/0x6e20 [ 137.096222] kernel_clone+0xe7/0x890 [ 137.096242] user_mode_thread+0xad/0xf0 [ 137.096265] rest_init+0x24/0x250 [ 137.096290] arch_call_rest_init+0xf/0x14 [ 137.096325] start_kernel+0x4c6/0x4eb [ 137.096358] secondary_startup_64_no_verify+0xe0/0xeb [ 137.096387] [ 137.096387] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 137.096416] _raw_spin_lock_irqsave+0x39/0x60 [ 137.096440] try_to_wake_up+0xab/0x1930 [ 137.096468] up+0x75/0xb0 [ 137.096498] __up_console_sem+0x6e/0x80 [ 137.096532] console_unlock+0x46a/0x590 [ 137.096566] vprintk_emit+0x1bd/0x560 [ 137.096600] vprintk+0x84/0xa0 [ 137.096635] _printk+0xba/0xf1 [ 137.096658] kauditd_hold_skb.cold+0x3f/0x4e [ 137.096694] kauditd_send_queue+0x233/0x290 [ 137.096726] kauditd_thread+0x5f9/0x9c0 [ 137.096756] kthread+0x2ed/0x3a0 [ 137.096786] ret_from_fork+0x22/0x30 [ 137.096812] [ 137.096812] -> #0 ((console_sem).lock){-...}-{2:2}: [ 137.096841] __lock_acquire+0x2a02/0x5e70 [ 137.096877] lock_acquire+0x1a2/0x530 [ 137.096911] _raw_spin_lock_irqsave+0x39/0x60 [ 137.096934] down_trylock+0xe/0x70 [ 137.096966] __down_trylock_console_sem+0x3b/0xd0 [ 137.097001] vprintk_emit+0x16b/0x560 [ 137.097036] vprintk+0x84/0xa0 [ 137.097070] _printk+0xba/0xf1 [ 137.097092] report_bug.cold+0x72/0xab [ 137.097127] handle_bug+0x3c/0x70 [ 137.097162] exc_invalid_op+0x14/0x50 [ 137.097199] asm_exc_invalid_op+0x16/0x20 [ 137.097225] group_sched_out.part.0+0x2c7/0x460 [ 137.097263] ctx_sched_out+0x8f1/0xc10 [ 137.097298] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.097322] __schedule+0xedd/0x2470 [ 137.097352] preempt_schedule_common+0x45/0xc0 [ 137.097384] __cond_resched+0x17/0x30 [ 137.097414] __mutex_lock+0xa3/0x14d0 [ 137.097446] __do_sys_perf_event_open+0x1eec/0x32c0 [ 137.097470] do_syscall_64+0x3b/0x90 [ 137.097507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.097534] [ 137.097534] other info that might help us debug this: [ 137.097534] [ 137.097539] Chain exists of: [ 137.097539] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 137.097539] [ 137.097571] Possible unsafe locking scenario: [ 137.097571] [ 137.097576] CPU0 CPU1 [ 137.097581] ---- ---- [ 137.097586] lock(&ctx->lock); [ 137.097626] lock(&rq->__lock); [ 137.097639] lock(&ctx->lock); [ 137.097653] lock((console_sem).lock); [ 137.097665] [ 137.097665] *** DEADLOCK *** [ 137.097665] [ 137.097669] 2 locks held by syz-executor.1/4004: [ 137.097684] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 137.097748] #1: ffff88800d6d0820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.097805] [ 137.097805] stack backtrace: [ 137.097810] CPU: 1 PID: 4004 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 137.097837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.097853] Call Trace: [ 137.097860] [ 137.097868] dump_stack_lvl+0x8b/0xb3 [ 137.097907] check_noncircular+0x263/0x2e0 [ 137.097943] ? format_decode+0x26c/0xb50 [ 137.097977] ? print_circular_bug+0x450/0x450 [ 137.098014] ? simple_strtoul+0x30/0x30 [ 137.098046] ? __lockdep_reset_lock+0x180/0x180 [ 137.098083] ? format_decode+0x26c/0xb50 [ 137.098121] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 137.098159] __lock_acquire+0x2a02/0x5e70 [ 137.098206] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 137.098255] lock_acquire+0x1a2/0x530 [ 137.098291] ? down_trylock+0xe/0x70 [ 137.098328] ? lock_release+0x750/0x750 [ 137.098368] ? find_held_lock+0x2c/0x110 [ 137.098404] ? vprintk+0x84/0xa0 [ 137.098443] _raw_spin_lock_irqsave+0x39/0x60 [ 137.098468] ? down_trylock+0xe/0x70 [ 137.098503] down_trylock+0xe/0x70 [ 137.098537] ? vprintk+0x84/0xa0 [ 137.098574] __down_trylock_console_sem+0x3b/0xd0 [ 137.098612] vprintk_emit+0x16b/0x560 [ 137.098653] vprintk+0x84/0xa0 [ 137.098690] _printk+0xba/0xf1 [ 137.098715] ? record_print_text.cold+0x16/0x16 [ 137.098746] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 137.098776] ? lock_downgrade+0x6d0/0x6d0 [ 137.098814] ? report_bug.cold+0x66/0xab [ 137.098853] ? group_sched_out.part.0+0x2c7/0x460 [ 137.098893] report_bug.cold+0x72/0xab [ 137.098934] handle_bug+0x3c/0x70 [ 137.098972] exc_invalid_op+0x14/0x50 [ 137.099011] asm_exc_invalid_op+0x16/0x20 [ 137.099039] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.099083] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.099107] RSP: 0018:ffff88801f0c7978 EFLAGS: 00010006 [ 137.099127] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.099143] RDX: ffff888015fe5040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 137.099159] RBP: ffff888040898000 R08: 0000000000000005 R09: 0000000000000001 [ 137.099175] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d6d0800 [ 137.099191] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 137.099214] ? group_sched_out.part.0+0x2c7/0x460 [ 137.099258] ? group_sched_out.part.0+0x2c7/0x460 [ 137.099301] ctx_sched_out+0x8f1/0xc10 [ 137.099344] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.099375] ? lock_is_held_type+0xd7/0x130 [ 137.099405] ? __perf_cgroup_move+0x160/0x160 [ 137.099428] ? set_next_entity+0x304/0x550 [ 137.099466] ? update_curr+0x267/0x740 [ 137.099506] ? lock_is_held_type+0xd7/0x130 [ 137.099536] __schedule+0xedd/0x2470 [ 137.099573] ? io_schedule_timeout+0x150/0x150 [ 137.099608] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 137.099638] ? __cond_resched+0x17/0x30 [ 137.099671] preempt_schedule_common+0x45/0xc0 [ 137.099707] __cond_resched+0x17/0x30 [ 137.099739] __mutex_lock+0xa3/0x14d0 [ 137.099777] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 137.099807] ? mutex_lock_io_nested+0x1310/0x1310 [ 137.099843] ? lock_release+0x3b2/0x750 [ 137.099880] ? __up_read+0x192/0x730 [ 137.099912] ? up_write+0x520/0x520 [ 137.099949] __do_sys_perf_event_open+0x1eec/0x32c0 [ 137.099983] ? perf_compat_ioctl+0x130/0x130 [ 137.100007] ? xfd_validate_state+0x59/0x180 [ 137.100055] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.100086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.100120] do_syscall_64+0x3b/0x90 [ 137.100159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.100188] RIP: 0033:0x7f0723919b19 [ 137.100206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.100229] RSP: 002b:00007f0720e8f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 137.100253] RAX: ffffffffffffffda RBX: 00007f0723a2cf60 RCX: 00007f0723919b19 [ 137.100270] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 137.100286] RBP: 00007f0723973f6d R08: 0000000000000000 R09: 0000000000000000 [ 137.100301] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 137.100317] R13: 00007ffcf0ab9d3f R14: 00007f0720e8f300 R15: 0000000000022000 [ 137.100345] [ 137.228083] WARNING: CPU: 1 PID: 4004 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 137.229642] Modules linked in: [ 137.230189] CPU: 1 PID: 4004 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 137.231498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.233339] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.234251] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.237249] RSP: 0018:ffff88801f0c7978 EFLAGS: 00010006 [ 137.238152] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.239202] RDX: ffff888015fe5040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 137.240235] RBP: ffff888040898000 R08: 0000000000000005 R09: 0000000000000001 [ 137.241284] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d6d0800 [ 137.242322] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 137.243351] FS: 00007f0720e8f700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 137.244513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.245353] CR2: 00007fde711cc000 CR3: 0000000009b74000 CR4: 0000000000350ee0 [ 137.246427] Call Trace: [ 137.246817] [ 137.247159] ctx_sched_out+0x8f1/0xc10 [ 137.247757] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.248524] ? lock_is_held_type+0xd7/0x130 [ 137.249168] ? __perf_cgroup_move+0x160/0x160 [ 137.249846] ? set_next_entity+0x304/0x550 [ 137.250482] ? update_curr+0x267/0x740 [ 137.251068] ? lock_is_held_type+0xd7/0x130 [ 137.251703] __schedule+0xedd/0x2470 [ 137.252262] ? io_schedule_timeout+0x150/0x150 [ 137.252963] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 137.253730] ? __cond_resched+0x17/0x30 [ 137.254332] preempt_schedule_common+0x45/0xc0 [ 137.255013] __cond_resched+0x17/0x30 [ 137.255586] __mutex_lock+0xa3/0x14d0 [ 137.256170] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 137.256922] ? mutex_lock_io_nested+0x1310/0x1310 [ 137.257661] ? lock_release+0x3b2/0x750 [ 137.258262] ? __up_read+0x192/0x730 [ 137.258819] ? up_write+0x520/0x520 [ 137.259380] __do_sys_perf_event_open+0x1eec/0x32c0 [ 137.260122] ? perf_compat_ioctl+0x130/0x130 [ 137.260780] ? xfd_validate_state+0x59/0x180 [ 137.261453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.262222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.262993] do_syscall_64+0x3b/0x90 [ 137.263566] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.264322] RIP: 0033:0x7f0723919b19 [ 137.264871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.267526] RSP: 002b:00007f0720e8f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 137.268635] RAX: ffffffffffffffda RBX: 00007f0723a2cf60 RCX: 00007f0723919b19 [ 137.269678] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 137.270720] RBP: 00007f0723973f6d R08: 0000000000000000 R09: 0000000000000000 [ 137.271763] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 137.272792] R13: 00007ffcf0ab9d3f R14: 00007f0720e8f300 R15: 0000000000022000 [ 137.273837] [ 137.274183] irq event stamp: 224 [ 137.274673] hardirqs last enabled at (223): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 137.276086] hardirqs last disabled at (224): [] __schedule+0x1225/0x2470 [ 137.277295] softirqs last enabled at (214): [] __irq_exit_rcu+0x11b/0x180 [ 137.278559] softirqs last disabled at (207): [] __irq_exit_rcu+0x11b/0x180 [ 137.279785] ---[ end trace 0000000000000000 ]--- [ 137.285032] loop2: detected capacity change from 0 to 2560 [ 137.303879] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.307229] loop0: detected capacity change from 0 to 128 [ 137.310289] ext4 filesystem being mounted at /syzkaller-testdir714455949/syzkaller.77oVLC/1/file0 supports timestamps until 2038 (0x7fffffff) [ 137.312491] mmap: syz-executor.7 (4019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.318440] loop4: detected capacity change from 0 to 185 [ 137.322690] loop6: detected capacity change from 0 to 512 [ 137.323741] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777ÿÿ000000000000000000000009 [ 137.323741] Ÿ—ßd$½cÌC¦‡ÝÏìÃÝç™™¬ý" or missing value [ 137.326594] EXT4-fs: Ignoring removed oldalloc option [ 137.332384] EXT4-fs (loop2): unmounting filesystem. 13:00:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = fcntl$dupfd(r0, 0x0, r0) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="693fac8f86a7"}, 0x14) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000000)={0x6, 0x81, 0xfffffffc, 0x200}) syz_mount_image$nfs(&(0x7f0000002100), &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x2090032, &(0x7f00000022c0)={[{'defcontext'}]}) [ 137.348856] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 137.476480] loop0: detected capacity change from 0 to 128 [ 137.504582] audit: type=1400 audit(1664802047.255:9): avc: denied { write } for pid=4001 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.784185] EXT4-fs (loop6): unmounting filesystem. [ 137.859191] loop4: detected capacity change from 0 to 185 [ 137.860499] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777ÿÿ000000000000000000000009 [ 137.860499] Ÿ—ßd$½cÌC¦‡ÝÏìÃÝç™™¬ý" or missing value VM DIAGNOSIS: 13:00:47 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84274587 RDX=ffffed100d9e6fd1 RSI=0000000000000004 RDI=ffff88806cf37e80 RBP=ffff88806cf37e80 RSP=ffff88804053f5a0 R8 =0000000000000000 R9 =ffff88806cf37e83 R10=ffffed100d9e6fd0 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9e6fd0 R14=0000000000000001 R15=1ffff110080a7eb5 RIP=ffffffff84274604 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fde739cc000 CR3=000000000e9c2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88801f0c7368 R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ecb584 R15=dffffc0000000000 RIP=ffffffff823bb0c1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0720e8f700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fde711cc000 CR3=0000000009b74000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007faa618ac7c0 00007faa618ac7c8 YMM02=0000000000000000 0000000000000000 00007faa618ac7e0 00007faa618ac7c0 YMM03=0000000000000000 0000000000000000 00007faa618ac7c8 00007faa618ac7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000